$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json) Hash identifier: AWA1bM/f41CUq5Y1kSYj7n6dzn7125fhy/4uYJQIv9w= Subject key identifier: 9F:25:0F:88:EB:A0:58:21:DA:66:E8:E9:87:9B:D5:30:FE:96:BF:8F Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F4328584BC09383BDFAA67010E9ADF280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft Manifest number: 010D0C9F4328584073A82B47310678490807DAA5 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: Ylb5DkPZS7931VEl1OplyUaM40NpCRNcGEpxBvNnZhM=) 2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: bYzXSRaUp88uqPb6jOrF1S0bLlPBUrrWucuqxTTYnPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:83:bd:fa:a6:70:10:e9:ad:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=d1b1bd88-aed5-4322-bd1a-4cf450144f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:31:92:44:c7:ce:de:65:78:42:67:e8:80: 21:70:e4:17:f2:d8:58:aa:f1:f1:d1:c2:c9:f5:3b: 4e:8d:ab:fc:3f:98:65:12:32:d7:dd:18:26:b8:59: 6a:62:e0:16:4a:a6:bd:59:c9:dc:6d:63:ec:05:41: 46:aa:2f:72:41:7e:11:fe:ff:5b:fa:06:0c:67:2b: 98:8a:1d:43:37:90:f0:73:61:68:db:56:fa:6a:4a: 3f:92:39:16:92:76:bc:50:6e:e2:4e:50:77:57:d3: 4f:4f:25:32:f5:59:66:e0:e8:1b:d2:22:d1:eb:e4: 64:28:58:e5:ce:65:0d:ae:b1:c1:98:b0:a8:0e:86: 25:85:2d:00:99:c9:95:e9:ce:91:bf:03:7a:0c:68: 00:22:dd:5d:2b:95:48:df:9c:ad:b0:5c:11:b1:6e: b8:d6:78:06:06:72:ca:1e:22:05:9c:ba:6b:a6:24: e4:07:b6:84:84:43:18:86:15:be:ee:86:3d:25:40: e0:e8:5c:02:83:3f:33:91:c1:5e:ca:19:a7:57:00: 33:ba:7d:e3:c6:5a:24:02:22:91:ae:f7:a7:7a:c8: 95:61:fd:e8:82:13:c0:ce:a3:b8:a4:41:62:30:32: 6d:9c:62:c6:f5:ec:a8:04:d5:3a:fd:cc:0d:6f:32: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:25:0F:88:EB:A0:58:21:DA:66:E8:E9:87:9B:D5:30:FE:96:BF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e2:87:0b:a0:97:ef:40:db:66:79:68:cd:2f:1b:7b:a6:53: 4e:2e:68:53:7c:47:44:41:0e:7b:ce:3b:55:00:6c:6d:ca:61: dc:22:a6:a8:9b:91:02:57:ce:42:2e:f6:a4:93:e2:44:17:7a: c1:b3:a7:a2:c5:cd:3a:a7:73:a5:80:84:c3:d7:67:31:68:33: 59:97:df:05:96:59:8b:6a:1e:be:f8:7f:eb:1d:dc:c1:62:aa: 1b:fd:96:24:f7:f5:44:7d:1a:b5:f9:43:2c:68:fe:38:da:5e: b4:ac:a7:08:03:01:d5:ae:2b:7b:7d:79:50:47:9d:c4:38:e1: 16:a1:6c:84:5a:35:ee:73:a1:fb:1a:aa:5d:01:e2:cd:46:df: 76:80:c2:18:ca:5e:91:e5:7b:04:71:c0:51:4b:46:30:0b:71: 22:67:5a:67:4a:74:c4:19:20:49:5f:0a:d9:cc:52:c1:d3:5f: 81:10:90:ae:99:25:f5:ce:27:ad:89:4a:83:a5:aa:14:bb:77: 6f:33:f7:b7:9c:2c:f1:15:57:7e:00:0f:11:8b:84:b5:6e:bf: 02:69:19:11:f0:d4:06:ec:04:ce:3f:3a:64:c6:ed:51:3d:86: 9e:98:3a:8c:04:93:a3:2c:77:af:f6:95:d7:87:cb:b6:32:c7: 60:6b:6e:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4O9+qZwEOmt8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk ZDFiMWJkODgtYWVkNS00MzIyLWJkMWEtNGNmNDUwMTQ0ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljcxkkTHzt5leEJn6IAhcOQX8thYqvHx0cLJ 9TtOjav8P5hlEjLX3RgmuFlqYuAWSqa9WcncbWPsBUFGqi9yQX4R/v9b+gYMZyuY ih1DN5Dwc2Fo21b6ako/kjkWkna8UG7iTlB3V9NPTyUy9Vlm4Ogb0iLR6+RkKFjl zmUNrrHBmLCoDoYlhS0AmcmV6c6RvwN6DGgAIt1dK5VI35ytsFwRsW641ngGBnLK HiIFnLprpiTkB7aEhEMYhhW+7oY9JUDg6FwCgz8zkcFeyhmnVwAzun3jxlokAiKR rvenesiVYf3oghPAzqO4pEFiMDJtnGLG9eyoBNU6/cwNbzL6nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ8lD4jroFgh2mbo6Yeb1TD+lr+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvM2ExMWE4NWYtOGYzNy00 YjU0LThmYTItZDZiYzA5NjczNzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/4ocLoJfvQNtmeWjNLxt7 plNOLmhTfEdEQQ57zjtVAGxtymHcIqaom5ECV85CLvakk+JEF3rBs6eixc06p3Ol gITD12cxaDNZl98FllmLah6++H/rHdzBYqob/ZYk9/VEfRq1+UMsaP442l60rKcI AwHVrit7fXlQR53EOOEWoWyEWjXuc6H7GqpdAeLNRt92gMIYyl6R5XsEccBRS0Yw C3EiZ1pnSnTEGSBJXwrZzFLB01+BEJCumSX1zietiUqDpaoUu3dvM/e3nCzxFVd+ AA8Ri4S1br8CaRkR8NQG7ATOPzpkxu1RPYaemDqMBJOjLHev9pXXh8u2Msdga26l -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:14 2025 by rpki-client