$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: KhFmJfAhrTLCNe/6IqoU+03Rx+iKCIQTWTvNQzFBt5w= Subject key identifier: 58:15:2F:63:FD:72:A1:A0:CF:B8:79:1C:23:21:99:D4:C1:4D:AF:47 Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F4328584BBFFEA7ECB15CE14240752580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F5618 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: yf34a9hS8dTFkOUk5iwVLraZTf2wnYw7We4vPu6cGSM=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: xYgucBm7SwVMLR4xasd9joHhxgyQzWhandh0icNj1ac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a7:ec:b1:5c:e1:42:40:75:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=73a01dc2-c4ad-49ce-b1eb-2cf5ebba56df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:c0:99:c3:ef:fb:04:ce:62:d3:c2:9f:71: d3:f8:8f:c2:43:4f:76:e3:3a:a3:a7:4e:dc:de:3a: ed:a4:d4:3a:22:da:48:5a:11:0e:30:0c:ff:b0:d7: c6:d6:28:92:d0:81:b5:f1:a0:53:44:17:8e:00:a6: f4:f3:45:d4:51:8f:f2:14:24:70:b5:a9:04:99:e2: 89:c9:0e:ca:7b:5a:34:31:4b:be:3f:40:a7:5a:9e: 18:c7:9e:4d:83:d6:2a:24:51:81:de:02:03:71:e1: 82:d9:36:54:cf:cb:f6:9d:95:00:da:e5:c9:cb:7b: e0:33:3e:36:26:79:a9:7e:f1:43:c3:e1:58:83:b2: ef:ca:36:4c:7b:74:84:59:f9:83:db:b2:e3:b1:05: 8d:5c:63:c3:b1:19:02:5a:f5:4f:f5:a2:34:72:ba: f4:d0:f2:44:e7:b1:13:fa:e7:31:4a:ae:7d:1c:07: c7:f1:a4:a9:b3:b4:80:12:e4:ea:33:b8:4a:43:a1: 4e:64:19:c0:43:42:59:38:2c:20:4f:83:38:8a:0e: cb:bf:3d:fe:6a:31:d6:5d:fb:72:02:61:88:8b:50: fa:9d:39:fc:34:65:29:03:e2:d5:96:70:c1:8a:b2: 62:c2:25:33:98:df:58:09:32:b3:0f:d8:e7:b2:48: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:2F:63:FD:72:A1:A0:CF:B8:79:1C:23:21:99:D4:C1:4D:AF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ef:40:c6:ff:46:e3:89:bc:dc:ec:47:0d:b1:56:71:29:d0: ad:b6:d0:9e:94:df:bb:27:90:3c:d4:e6:81:69:59:77:06:73: 43:36:66:05:a0:87:f7:01:f0:d8:dd:30:07:e2:0c:9d:41:7a: e4:72:2f:f8:a4:72:1f:10:1f:01:1a:49:f1:45:a1:31:46:8f: 57:55:59:f8:2e:55:56:b7:29:03:c0:aa:05:5d:30:3c:3d:f2: 56:b2:ed:55:41:1e:f1:bb:c6:3e:84:4f:46:d4:96:f7:61:a7: 25:28:90:1b:53:4c:82:bd:07:43:53:4d:76:13:10:93:b7:58: 7d:61:3d:ab:e8:7c:d4:96:e3:e1:6e:c6:91:81:5d:cd:b9:99: d0:ff:7c:5d:61:08:53:e8:6b:0f:fe:9f:ce:22:1c:dd:0a:a2: 85:b2:59:20:6b:a8:bf:7e:a7:a8:18:d4:58:95:89:ce:29:4e: 4a:7f:0f:ff:bc:8f:3e:64:a2:9d:08:79:b6:0e:9b:29:be:78: a4:53:62:00:b3:47:a3:0c:dc:2f:a6:1e:78:6f:57:8c:99:34: 36:4e:0b:5a:a7:6d:16:ea:7f:8c:46:60:a6:a2:72:da:5f:69: 82:e2:8e:39:07:a2:77:8e:2a:98:a8:cd:78:46:8d:37:91:53: d8:ac:2b:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qfssVzhQkB1JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk NzNhMDFkYzItYzRhZC00OWNlLWIxZWItMmNmNWViYmE1NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNLAmcPv+wTOYtPCn3HT+I/CQ0924zqjp07c 3jrtpNQ6ItpIWhEOMAz/sNfG1iiS0IG18aBTRBeOAKb080XUUY/yFCRwtakEmeKJ yQ7Ke1o0MUu+P0CnWp4Yx55Ng9YqJFGB3gIDceGC2TZUz8v2nZUA2uXJy3vgMz42 JnmpfvFDw+FYg7LvyjZMe3SEWfmD27LjsQWNXGPDsRkCWvVP9aI0crr00PJE57ET +ucxSq59HAfH8aSps7SAEuTqM7hKQ6FOZBnAQ0JZOCwgT4M4ig7Lvz3+ajHWXfty AmGIi1D6nTn8NGUpA+LVlnDBirJiwiUzmN9YCTKzD9jnskhDGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFgVL2P9cqGgz7h5HCMhmdTBTa9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk70DG/0bjibzc7EcNsVZx KdCtttCelN+7J5A81OaBaVl3BnNDNmYFoIf3AfDY3TAH4gydQXrkci/4pHIfEB8B GknxRaExRo9XVVn4LlVWtykDwKoFXTA8PfJWsu1VQR7xu8Y+hE9G1Jb3YaclKJAb U0yCvQdDU012ExCTt1h9YT2r6HzUluPhbsaRgV3NuZnQ/3xdYQhT6GsP/p/OIhzd CqKFslkga6i/fqeoGNRYlYnOKU5Kfw//vI8+ZKKdCHm2DpspvnikU2IAs0ejDNwv ph54b1eMmTQ2Tgtap20W6n+MRmCmonLaX2mC4o45B6J3jiqYqM14Ro03kVPYrCuW -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:06 2025 by rpki-client