$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft File: 3228caa5-d014-404b-9e3d-61cdea1ff493.mft (raw, json) Hash identifier: 4uVPYpl8SQFDaT4cvmX0y7ASusno6YDMqdgfzbny70o= Subject key identifier: 34:09:38:84:AC:68:78:8C:DE:13:6A:9C:21:8E:AB:4E:49:BE:96:84 Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584BBFE0DB2DEF7C1A98139DE840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft Manifest number: 010D0C9F43285847A625B9018F5C2B74B33CB041 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 3228caa5-d014-404b-9e3d-61cdea1ff493.crl (hash: xfLzrVwT/S3gOIIsV1QxpOk9UXCLhugUEPyMfDi9uMQ=) 2: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (hash: edFcqWa4Fg1AQoUNoXixFt4FCgBLomZRXgwysdp+j8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:db:2d:ef:7c:1a:98:13:9d:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=a3d9004c-0a2e-4d23-8774-9e3190bd71eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:1c:ca:dc:4f:2b:72:b2:e2:87:26:49:8f: 17:83:89:ea:f7:eb:15:5c:b0:bb:2a:8c:1a:b2:bd: 70:d7:61:35:e5:f8:86:0f:c5:01:72:d4:a5:22:fc: 5a:73:d1:6d:0b:24:59:d7:03:6f:e3:81:67:be:16: 77:58:e2:e8:56:fe:42:9d:d9:3c:6b:9f:43:ea:32: 53:4e:61:8a:4a:52:63:6a:f8:70:4a:a0:2f:88:bd: ba:30:49:e0:fb:43:fd:f1:20:b0:90:11:1f:06:d9: e5:2b:86:78:01:cd:6f:0d:da:cd:44:b3:49:f4:e5: 26:33:0e:d8:82:17:75:81:cb:b5:43:61:13:f4:28: cb:0e:a2:62:3d:b6:6c:61:1e:d7:f7:13:3f:0a:de: de:55:2e:f8:4a:13:59:d6:9b:7d:0e:ce:77:33:80: f3:b9:ce:2f:a8:f6:6b:6c:55:8a:29:02:b7:0a:3b: 27:e7:dd:30:cb:15:f9:a6:8d:8a:37:12:71:87:ee: 2a:e1:a2:3c:97:cc:6f:8b:c4:22:8d:0f:16:b7:c5: 26:6f:98:2c:b1:df:9f:61:64:88:b1:af:d6:79:3e: a9:b4:9d:b8:07:c7:ca:bc:ab:63:1e:7d:4d:f2:03: 20:50:7f:cc:36:ae:e3:24:97:51:f5:3f:10:28:df: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:38:84:AC:68:78:8C:DE:13:6A:9C:21:8E:AB:4E:49:BE:96:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:33:ee:fa:c6:98:00:f8:7b:c0:a4:5b:89:53:c8:ed:42:ab: 67:09:9a:24:9d:54:94:1e:c0:c9:59:d1:10:cf:ec:98:84:5e: 99:88:10:9a:1e:e4:db:78:5d:f0:e5:34:2f:a0:08:c2:54:ca: df:f0:32:78:a2:47:cf:83:c0:34:3e:5d:e9:0f:02:8f:2d:4a: 9f:93:8f:08:17:04:67:73:51:64:f3:7b:e6:82:c0:ce:5c:33: ff:0e:fa:06:c0:32:72:ef:d7:5a:bb:3d:7f:e6:87:96:31:f9: 9e:3e:b1:f9:bf:c9:85:6a:44:a4:85:14:7c:df:a7:a7:32:32: 71:5c:bc:5f:ae:2d:97:07:a3:c2:f6:7f:99:dc:6f:b2:cf:04: 09:4b:10:31:d4:71:26:fe:8e:66:bf:6d:9c:b6:a5:0a:24:87: 44:1c:a7:1a:e7:fb:9f:23:f8:93:59:c2:51:44:9b:f1:99:90: 60:61:19:50:32:b2:79:1a:a2:d3:e4:92:a3:be:8d:cf:4a:ee: ff:68:e2:9e:ea:86:36:20:55:6b:fd:49:0c:89:de:6d:5e:70: c2:68:5f:dd:63:a4:72:fc:60:be:70:b5:12:5c:b5:45:c0:3b: d3:b1:90:6e:74:ce:4d:60:50:e7:ca:61:56:5f:44:ba:60:45: c6:1c:3c:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nst73wamBOd6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk YTNkOTAwNGMtMGEyZS00ZDIzLTg3NzQtOWUzMTkwYmQ3MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruscytxPK3Ky4ocmSY8Xg4nq9+sVXLC7Kowa sr1w12E15fiGD8UBctSlIvxac9FtCyRZ1wNv44FnvhZ3WOLoVv5Cndk8a59D6jJT TmGKSlJjavhwSqAviL26MEng+0P98SCwkBEfBtnlK4Z4Ac1vDdrNRLNJ9OUmMw7Y ghd1gcu1Q2ET9CjLDqJiPbZsYR7X9xM/Ct7eVS74ShNZ1pt9Ds53M4Dzuc4vqPZr bFWKKQK3Cjsn590wyxX5po2KNxJxh+4q4aI8l8xvi8QijQ8Wt8Umb5gssd+fYWSI sa/WeT6ptJ24B8fKvKtjHn1N8gMgUH/MNq7jJJdR9T8QKN8owQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQJOISsaHiM3hNqnCGOq05JvpaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvMzIyOGNhYTUtZDAxNC00 MDRiLTllM2QtNjFjZGVhMWZmNDkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEM+76xpgA+HvApFuJU8jt QqtnCZoknVSUHsDJWdEQz+yYhF6ZiBCaHuTbeF3w5TQvoAjCVMrf8DJ4okfPg8A0 Pl3pDwKPLUqfk48IFwRnc1Fk83vmgsDOXDP/DvoGwDJy79dauz1/5oeWMfmePrH5 v8mFakSkhRR836enMjJxXLxfri2XB6PC9n+Z3G+yzwQJSxAx1HEm/o5mv22ctqUK JIdEHKca5/ufI/iTWcJRRJvxmZBgYRlQMrJ5GqLT5JKjvo3PSu7/aOKe6oY2IFVr /UkMid5tXnDCaF/dY6Ry/GC+cLUSXLVFwDvTsZBudM5NYFDnymFWX0S6YEXGHDz0 -----END CERTIFICATE-----Generated at Wed Nov 5 02:50:32 2025 by rpki-client