$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft File: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft (raw, json) Hash identifier: hJ4JZdi/Pxc6EdVbfj3DAJAC/eqEvu3dJEJ/yrijlpo= Subject key identifier: 4A:62:53:27:A2:6E:1D:BF:A8:D8:1B:83:46:92:E6:99:DE:96:67:F1 Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Certificate issuer: /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Certificate serial: 010D0C9F4328584BC2AB8EB13493DA9D55B35700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft Manifest number: 010D0C9F43285846A2A5DF805C012DA5D578D161 Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Sat 08 Nov 2025 16:00:00 +0000 Files and hashes: 1: a082d65c-6976-35d6-be33-792a4918c345.roa (hash: 1y0Y1zQLMv4Qum79YgiwLeDGJl+vfe4nnwIQVEpseIE=) 2: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl (hash: NNwniPbk2PUYSTHyEWoLrIWu/fcPVL/cLKDqbQn5PKc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:8e:b1:34:93:da:9d:55:b3:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 8 16:00:00 2025 GMT Subject: CN=0f876491-390a-4f2f-b108-fc1229792513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:94:6f:9d:60:6d:9d:be:65:27:49:c5:c1: 3f:08:57:f8:e4:a2:d0:a7:79:7c:4a:34:d7:41:40: 02:27:51:d1:8f:55:9f:07:b2:68:f4:1c:60:a7:65: d1:db:93:16:ed:82:cb:7c:59:47:0c:84:05:3e:14: ba:35:77:d6:7f:d2:56:46:9a:cd:bc:51:96:13:92: ae:d1:e2:9b:43:0d:a9:c9:f6:89:a0:ed:53:d0:8d: 63:20:5a:1a:a2:97:b9:05:ab:c5:8b:de:35:09:92: 82:5f:98:f9:5d:fd:06:d3:67:9a:96:62:30:19:92: c7:0e:d0:6a:23:f5:d0:ac:7c:d1:7e:37:3f:81:d1: 56:90:8e:22:c3:b7:9e:16:a6:fe:8b:15:d8:5f:76: 57:9a:9a:9a:63:a9:39:1c:76:38:c9:93:7c:40:63: d8:28:3d:57:9b:24:18:56:b4:88:86:2c:12:0a:61: c5:63:ef:47:a4:f7:8d:c3:95:e6:0c:2f:48:62:74: 6e:64:57:97:fe:c3:11:c5:e1:95:1d:eb:9d:78:6f: 45:ae:45:69:9e:60:4c:9b:ca:bf:62:7a:ce:a8:6c: 1f:2e:4a:5a:af:12:d1:fb:61:45:dd:23:1e:43:01: 2d:e2:f8:45:3d:4e:63:6c:48:f7:01:0b:b4:da:fc: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:62:53:27:A2:6E:1D:BF:A8:D8:1B:83:46:92:E6:99:DE:96:67:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl X509v3 Authority Key Identifier: keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:75:c2:e3:24:27:eb:8b:6f:9c:0a:6a:e2:2b:25:0a:d3:0c: 80:7a:45:37:7b:86:0e:e7:04:1d:b5:fd:de:c9:37:47:81:0d: 6f:d7:d3:c5:69:08:ae:9a:5f:85:27:14:b9:ba:d9:4f:a6:56: 19:db:f0:7a:5e:8c:5f:1a:af:c1:5e:0a:f5:c4:e6:a2:95:c8: 2a:1b:65:d9:27:d9:a5:6f:be:99:94:6d:80:b1:1c:f6:0b:3a: 7a:54:99:01:c5:03:8a:0f:53:b1:03:c6:49:15:7b:36:4d:1e: e2:df:8b:a8:1a:f8:9f:e9:46:1f:75:38:8f:70:34:d3:21:25: 77:89:d8:d9:16:8d:89:a5:14:f8:50:1a:af:19:e9:14:0a:99: 07:93:e8:e8:41:a6:bb:46:e5:07:e4:3c:c4:f9:d3:3a:61:33: 31:1e:84:58:4c:d9:82:5f:e9:b9:d6:21:8d:c4:df:25:73:0c: b5:ec:47:e8:78:45:ca:c9:3d:54:a0:d2:a3:89:e3:c2:4a:5e: 35:bb:4a:eb:7a:1a:f2:06:56:ec:76:fe:f5:c1:25:8b:0c:9c: be:56:b5:e5:bb:81:fc:89:f3:5f:7a:76:2a:a8:39:e1:a4:47: 9d:29:4c:01:c8:48:4d:16:c1:b4:e0:58:fb:cb:17:8a:e6:63: 1b:b6:7e:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq46xNJPanVWzVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM5ODdhMDItOWViMy00Zjg4LThlOWEtMmJhNTUwYzM0 NDNiMB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk MGY4NzY0OTEtMzkwYS00ZjJmLWIxMDgtZmMxMjI5NzkyNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uOUb51gbZ2+ZSdJxcE/CFf45KLQp3l8SjTX QUACJ1HRj1WfB7Jo9Bxgp2XR25MW7YLLfFlHDIQFPhS6NXfWf9JWRprNvFGWE5Ku 0eKbQw2pyfaJoO1T0I1jIFoaope5BavFi941CZKCX5j5Xf0G02ealmIwGZLHDtBq I/XQrHzRfjc/gdFWkI4iw7eeFqb+ixXYX3ZXmpqaY6k5HHY4yZN8QGPYKD1XmyQY VrSIhiwSCmHFY+9HpPeNw5XmDC9IYnRuZFeX/sMRxeGVHeudeG9FrkVpnmBMm8q/ YnrOqGwfLkparxLR+2FF3SMeQwEt4vhFPU5jbEj3AQu02vzoIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEpiUyeibh2/qNgbg0aS5pnelmfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMzk4 N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBjMzQ0M2IvYjM5ODdhMDItOWViMy00 Zjg4LThlOWEtMmJhNTUwYzM0NDNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjM5ODdhMDItOWViMy00Zjg4LThl OWEtMmJhNTUwYzM0NDNiL2IzOTg3YTAyLTllYjMtNGY4OC04ZTlhLTJiYTU1MGMz NDQzYi5jcmwwHwYDVR0jBBgwFoAUQFs2D+DwLAsH4BdLT6Rmei8vxBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1 NTBjMzQ0M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAndcLjJCfri2+cCmriKyUK 0wyAekU3e4YO5wQdtf3eyTdHgQ1v19PFaQiuml+FJxS5utlPplYZ2/B6XoxfGq/B Xgr1xOailcgqG2XZJ9mlb76ZlG2AsRz2Czp6VJkBxQOKD1OxA8ZJFXs2TR7i34uo Gvif6UYfdTiPcDTTISV3idjZFo2JpRT4UBqvGekUCpkHk+joQaa7RuUH5DzE+dM6 YTMxHoRYTNmCX+m51iGNxN8lcwy17EfoeEXKyT1UoNKjiePCSl41u0rrehryBlbs dv71wSWLDJy+VrXlu4H8ifNfenYqqDnhpEedKUwByEhNFsG04Fj7yxeK5mMbtn4i -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:01 2025 by rpki-client