$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft File: 3bb72fa3-359e-464d-be35-978a12d62998.mft (raw, json) Hash identifier: G8wZkIfPmjPJqEGiBrTZX4afCE9Hv5rwqWALZwnaH/w= Subject key identifier: 42:34:D7:7F:14:CC:05:98:B8:F4:36:29:66:5A:1B:CB:54:F9:20:53 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584BBFFEAA7965117EF9088B6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft Manifest number: 010D0C9F432858478216621AE1CF34A01FCA039B Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 3bb72fa3-359e-464d-be35-978a12d62998.crl (hash: KzvokIDxqcl6LENYmPEnkYlh6ThUUZiiAd/MKO6tjfo=) 2: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (hash: RBxTKfYswAOyqHZX+uiPgG2VMhxWYVf/vzb/4h1jb4o=) 3: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (hash: AiEDXxN5pPLbEt+lkBKS9mQAsqU352f7SxmFd035uN4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:aa:79:65:11:7e:f9:08:8b:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=60ca25ef-208e-4f90-a2f3-20eef66e6404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:e3:4a:a2:78:27:69:fe:11:12:53:92:25: a8:c0:6d:93:72:09:ec:68:20:25:15:2d:ce:5c:f0: 62:a4:ce:ee:6a:af:8d:4d:ae:b7:11:91:d6:15:20: 35:8a:75:ff:f8:42:c7:2e:32:91:9f:3f:c3:e3:a6: c3:f6:50:a1:9e:ef:cc:67:59:c4:90:1b:cf:67:83: e5:ae:1a:81:ac:db:58:13:c7:71:89:4f:69:85:03: 01:39:9b:b3:d6:f2:cb:68:bf:e6:c4:4b:c5:65:aa: 46:60:2b:09:b9:92:2a:62:fd:93:03:38:d5:a6:a2: d5:65:ab:ed:19:8f:25:9f:54:6f:9a:10:ca:fe:9e: 0b:bd:66:a4:ed:d4:2b:66:7a:a3:87:26:4b:a1:cd: e4:b0:df:11:e8:0b:17:f0:b0:c6:62:a5:24:e9:ae: b6:1b:c0:aa:3e:73:a9:ad:ab:0d:c0:6f:d2:43:08: b3:c6:ca:5c:72:22:1b:68:ef:2d:92:0d:9a:91:10: 5c:3e:83:2f:d0:06:50:96:fb:62:0d:4d:19:d6:56: 55:a4:28:83:86:ef:55:a0:41:98:13:d4:ce:43:92: 92:05:4d:d4:0d:fd:5b:e3:e2:1c:0e:ca:62:7c:42: ec:4d:2e:dc:2e:9e:cb:a2:54:c5:e6:f2:4e:af:7b: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:34:D7:7F:14:CC:05:98:B8:F4:36:29:66:5A:1B:CB:54:F9:20:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:19:a1:95:56:b6:b8:76:a7:f4:b4:7c:85:39:2c:5f:36:4d: 25:d2:46:f0:18:a6:0f:0e:bf:85:8f:f1:d0:06:35:66:e1:1e: 3b:6a:59:c4:49:d1:b6:ad:a3:fe:5b:a4:65:ea:cc:67:89:8f: 0a:11:ac:af:0e:8f:99:7c:0f:8a:33:43:a0:92:a9:3c:7f:21: f8:3f:81:26:12:b8:30:c4:4c:41:cc:b7:cb:bb:9d:76:21:b5: 0b:51:bf:80:7f:a9:a4:1e:60:a7:b6:0c:f2:90:f6:44:da:b8: ba:c1:09:13:57:45:0a:f6:c0:23:50:6a:18:2a:96:18:86:13: b6:36:b1:73:55:6d:c2:d3:e3:1b:28:9e:cc:40:85:55:87:50: 86:84:88:69:d9:32:52:22:47:ae:a7:19:3c:f8:c7:b7:68:31: 43:af:94:bb:0f:52:a9:a3:d2:a7:b5:3f:e2:fb:5a:43:60:37: 84:50:2b:a4:ad:b5:78:76:2c:d8:3d:f1:f7:a0:a6:77:d3:c1: c3:04:83:2c:3f:de:85:94:98:2c:8a:72:e9:7d:a8:e3:d4:a9: 8b:2c:15:65:2a:ed:8d:2f:01:a3:59:06:3f:cc:43:b8:34:db: 27:ee:24:c1:fc:4d:eb:43:15:c6:0e:b0:93:26:1c:ad:32:46: a6:57:9d:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qp5ZRF++QiLZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk NjBjYTI1ZWYtMjA4ZS00ZjkwLWEyZjMtMjBlZWY2NmU2NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4DjSqJ4J2n+ERJTkiWowG2TcgnsaCAlFS3O XPBipM7uaq+NTa63EZHWFSA1inX/+ELHLjKRnz/D46bD9lChnu/MZ1nEkBvPZ4Pl rhqBrNtYE8dxiU9phQMBOZuz1vLLaL/mxEvFZapGYCsJuZIqYv2TAzjVpqLVZavt GY8ln1RvmhDK/p4LvWak7dQrZnqjhyZLoc3ksN8R6AsX8LDGYqUk6a62G8CqPnOp rasNwG/SQwizxspcciIbaO8tkg2akRBcPoMv0AZQlvtiDU0Z1lZVpCiDhu9VoEGY E9TOQ5KSBU3UDf1b4+IcDspifELsTS7cLp7LolTF5vJOr3sfvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEI0138UzAWYuPQ2KWZaG8tU+SBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvM2JiNzJmYTMtMzU5ZS00 NjRkLWJlMzUtOTc4YTEyZDYyOTk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9GaGVVra4dqf0tHyFOSxf Nk0l0kbwGKYPDr+Fj/HQBjVm4R47alnESdG2raP+W6Rl6sxniY8KEayvDo+ZfA+K M0Ogkqk8fyH4P4EmErgwxExBzLfLu512IbULUb+Af6mkHmCntgzykPZE2ri6wQkT V0UK9sAjUGoYKpYYhhO2NrFzVW3C0+MbKJ7MQIVVh1CGhIhp2TJSIkeupxk8+Me3 aDFDr5S7D1Kpo9KntT/i+1pDYDeEUCukrbV4dizYPfH3oKZ308HDBIMsP96FlJgs inLpfajj1KmLLBVlKu2NLwGjWQY/zEO4NNsn7iTB/E3rQxXGDrCTJhytMkamV53c -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:14 2025 by rpki-client