$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: oXVNwWlWfuXCJTVyXndm6AMinxTDJQ7S6ZQN/RwAxoQ= Subject key identifier: 79:F0:0D:D4:75:76:BC:29:63:CD:91:2A:30:EC:A4:90:FC:81:7C:36 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584BC03A29D806DB2C77965BF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F70CD Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: D+VBy9QXup8i48HVHwJXJjUxSgNI8ClI2yEIe22JaW4=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: NRpR6geFCHR+7fALoEntSewh6MfUBWUeanuDia0/Ocs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:29:d8:06:db:2c:77:96:5b:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=e613ebf7-70d5-4eb4-8e9b-4dde0eff360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:0d:b9:f2:d5:51:b0:60:a9:dd:b2:6b:8c: 67:ee:e4:a6:70:e5:ed:6f:41:c7:f2:5b:da:1e:95: bb:82:60:c7:0a:e2:7b:b0:24:6c:a7:9b:89:e0:8a: ab:41:d3:31:2a:21:e5:a8:c6:1c:f6:aa:5f:06:c8: a6:10:10:d6:86:62:79:c7:d6:e3:30:f3:a6:67:ac: 1c:b3:b5:63:5a:7e:f6:72:6d:6f:56:f2:c3:54:49: 91:a7:ee:45:a1:68:52:6e:d6:2c:d2:cb:02:45:5a: 3e:87:d2:ab:4b:a6:7b:fc:b2:1e:9b:0e:03:e5:e7: ac:8a:d8:a2:f9:fc:82:54:db:9f:b8:2c:89:ce:c3: 58:23:a6:70:68:09:6f:e2:0c:0d:97:4e:3d:54:98: d5:ae:24:f0:ab:02:74:51:d3:6d:f9:82:f2:d2:f4: 8f:f1:eb:7c:8d:96:15:61:f2:67:36:55:ed:4e:d6: d8:d1:d7:d4:a2:5e:70:70:77:10:49:26:a8:51:4b: 4b:4d:07:02:99:80:b3:ed:56:79:e8:98:39:47:24: ba:d5:4e:29:13:8c:e4:40:c7:a2:74:81:bd:94:d4: ca:21:64:56:3a:35:52:24:4a:c4:22:df:b3:cb:cd: bd:69:cf:f3:07:eb:98:3e:10:64:ef:af:f2:3e:d9: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F0:0D:D4:75:76:BC:29:63:CD:91:2A:30:EC:A4:90:FC:81:7C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ac:2b:6d:34:e8:fb:aa:88:18:9f:72:48:36:a1:17:6a:1f: d8:48:1c:cf:ce:60:08:83:e6:2f:06:9d:26:26:62:8f:fd:b1: ee:a3:1d:63:5c:01:1d:3c:69:b7:4a:1e:79:b3:93:16:63:b6: 5f:b5:d1:2d:f4:31:5d:3b:2d:60:68:92:2c:dd:2a:e9:2f:97: f9:22:34:4b:f3:fc:d5:91:26:94:6b:7b:24:a5:f8:79:e7:74: db:3b:3c:a8:6d:d2:b5:92:6b:11:dd:89:f5:da:9c:bf:e9:61: c5:c4:db:c9:7a:a1:26:05:43:88:ba:c9:88:de:f5:8a:ce:24: 25:84:75:b2:2d:16:7c:ce:86:ce:f8:23:2a:72:6d:ca:b0:a9: 4b:8a:f7:52:52:d6:65:75:bb:4c:10:f6:3f:a2:63:06:d4:d7: 33:28:17:6d:3e:9a:ab:e3:2f:e6:b2:6f:68:b4:d3:6f:25:47: f3:67:4e:f3:73:7f:16:a6:09:74:22:01:f8:d2:4d:5c:cf:a9: d6:16:38:c3:45:7c:19:e1:d3:5c:27:77:d8:1c:af:69:26:ac: e3:fb:82:74:b9:9a:af:1e:d8:50:4a:8c:5d:8d:28:af:d4:f8: 15:76:ee:e2:ce:61:e1:60:36:0f:4a:30:d7:e5:32:60:cb:32: 75:89:1d:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOinYBtssd5Zb9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZTYxM2ViZjctNzBkNS00ZWI0LThlOWItNGRkZTBlZmYzNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJUNufLVUbBgqd2ya4xn7uSmcOXtb0HH8lva HpW7gmDHCuJ7sCRsp5uJ4IqrQdMxKiHlqMYc9qpfBsimEBDWhmJ5x9bjMPOmZ6wc s7VjWn72cm1vVvLDVEmRp+5FoWhSbtYs0ssCRVo+h9KrS6Z7/LIemw4D5eesitii +fyCVNufuCyJzsNYI6ZwaAlv4gwNl049VJjVriTwqwJ0UdNt+YLy0vSP8et8jZYV YfJnNlXtTtbY0dfUol5wcHcQSSaoUUtLTQcCmYCz7VZ56Jg5RyS61U4pE4zkQMei dIG9lNTKIWRWOjVSJErEIt+zy829ac/zB+uYPhBk76/yPtnqnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHnwDdR1drwpY82RKjDspJD8gXw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTrCttNOj7qogYn3JINqEX ah/YSBzPzmAIg+YvBp0mJmKP/bHuox1jXAEdPGm3Sh55s5MWY7ZftdEt9DFdOy1g aJIs3SrpL5f5IjRL8/zVkSaUa3skpfh553TbOzyobdK1kmsR3Yn12py/6WHFxNvJ eqEmBUOIusmI3vWKziQlhHWyLRZ8zobO+CMqcm3KsKlLivdSUtZldbtMEPY/omMG 1NczKBdtPpqr4y/msm9otNNvJUfzZ07zc38Wpgl0IgH40k1cz6nWFjjDRXwZ4dNc J3fYHK9pJqzj+4J0uZqvHthQSoxdjSiv1PgVdu7izmHhYDYPSjDX5TJgyzJ1iR2G -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:48 2025 by rpki-client