$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: FZ39vNyRcG9YC0MliG2FI7RxJAtHW0BzJXroL0YUexU= Subject key identifier: D0:8E:76:3A:3F:44:73:64:68:08:6D:77:BD:48:C1:4D:E6:39:98:17 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584BC1F8DB1D2D287CFA8C3CE140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBB25 Signing time: Wed 05 Nov 2025 10:00:03 +0000 Manifest this update: Wed 05 Nov 2025 10:00:03 +0000 Manifest next update: Sat 08 Nov 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: KDHAH9jtntav1/4bPO1VI60agot71Jw1qehH+YLo3Eg=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: H06UmjlWIabt2OGqnnY+gtdAB6k8ET6VYOJWn69U9x8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:f8:db:1d:2d:28:7c:fa:8c:3c:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Nov 5 10:00:03 2025 GMT Not After : Nov 8 10:00:00 2025 GMT Subject: CN=82a0b650-386b-4c62-9103-91b6b0b9cad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:21:37:5d:97:54:01:d8:56:b7:2b:77:8b: 56:58:d1:10:8b:85:3a:b2:46:35:b6:e9:4f:4f:5a: fd:31:06:1d:6a:da:48:a0:5e:0a:bc:1b:72:5e:30: a7:6e:8f:ad:2d:47:e4:a5:56:a0:b1:6c:34:5f:c0: da:7e:22:b0:ad:04:c0:c5:4c:4c:1d:7f:75:3b:35: 89:c5:4e:67:bf:b4:7c:d3:4f:bd:ed:ca:bb:bf:a8: 67:1c:76:e7:d8:34:cd:6d:18:ef:38:a0:5a:db:d2: ba:38:68:8f:51:b0:6c:9d:b8:15:44:77:63:8a:99: af:22:96:ee:cf:53:dc:b8:56:88:44:0a:fe:46:0e: a9:6d:a9:61:65:64:67:db:fc:93:76:3f:ac:c2:24: 78:ba:de:e2:b1:f8:c6:f3:76:10:56:7c:46:ee:d7: 65:a0:31:2f:65:ef:30:81:6b:c3:d9:4c:65:f5:75: 10:69:eb:c9:45:dd:2a:99:b5:42:c5:bd:67:a4:ad: 09:03:25:26:2f:7f:85:bc:7a:e1:78:1a:6e:47:3a: 24:e5:2b:44:ea:54:a2:fb:99:20:03:eb:7d:d7:10: 8a:3d:a9:21:17:df:03:e6:94:6a:98:2f:8d:3a:0d: 3a:ee:ff:42:5e:22:15:8a:09:1a:bc:9f:ef:aa:5b: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8E:76:3A:3F:44:73:64:68:08:6D:77:BD:48:C1:4D:E6:39:98:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bb:3e:6f:4d:8f:4d:d6:32:ae:5b:fa:96:b0:b7:3f:8d:b1: c8:f1:39:03:d0:20:2c:38:29:cb:cc:4b:86:0a:60:e5:41:a5: fb:44:7b:ce:3a:66:11:18:73:97:c2:6b:d1:b0:24:f7:b6:f5: e8:15:74:e2:08:03:e6:c3:ec:d4:5c:a4:ee:44:fe:bd:91:e6: 6d:3f:24:b9:bc:84:db:5a:31:8d:3b:9a:8a:2c:a1:15:f6:d6: e5:c4:6e:06:e2:72:b8:e4:26:48:fd:02:87:ef:c8:91:80:94: 93:c2:f5:4d:66:da:c0:f9:97:5a:47:6e:83:9c:a1:a9:7e:f3: 45:e2:26:77:1b:ad:99:55:45:ff:74:d4:d8:50:84:b1:af:5e: fd:3a:21:93:f0:66:94:69:e4:80:8e:95:82:77:1a:95:5e:19: c2:42:10:1b:19:90:c6:5e:21:7b:8d:b4:ea:43:52:2f:0e:31: 03:b6:f7:09:f3:f5:ca:36:ee:3d:f2:ce:17:39:64:fb:f8:c8: db:15:89:9f:73:3d:f2:85:ce:be:bb:ea:a4:b9:eb:fb:6e:e1: 1a:6f:26:06:9b:89:4d:6c:be:78:51:dc:c1:9a:d7:9a:1b:20: 3e:51:2d:eb:80:a2:8b:33:b8:cf:9a:5d:0f:6b:8e:3d:5f:19: b8:65:31:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB+NsdLSh8+ow84UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MTEwNTEwMDAwM1oXDTI1MTEwODEwMDAwMFowLzEtMCsGA1UEAxMk ODJhMGI2NTAtMzg2Yi00YzYyLTkxMDMtOTFiNmIwYjljYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGchN12XVAHYVrcrd4tWWNEQi4U6skY1tulP T1r9MQYdatpIoF4KvBtyXjCnbo+tLUfkpVagsWw0X8DafiKwrQTAxUxMHX91OzWJ xU5nv7R800+97cq7v6hnHHbn2DTNbRjvOKBa29K6OGiPUbBsnbgVRHdjipmvIpbu z1PcuFaIRAr+Rg6pbalhZWRn2/yTdj+swiR4ut7isfjG83YQVnxG7tdloDEvZe8w gWvD2Uxl9XUQaevJRd0qmbVCxb1npK0JAyUmL3+FvHrheBpuRzok5StE6lSi+5kg A+t91xCKPakhF98D5pRqmC+NOg067v9CXiIVigkavJ/vqlskhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNCOdjo/RHNkaAhtd71IwU3mOZgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEuz5vTY9N1jKuW/qWsLc/ jbHI8TkD0CAsOCnLzEuGCmDlQaX7RHvOOmYRGHOXwmvRsCT3tvXoFXTiCAPmw+zU XKTuRP69keZtPyS5vITbWjGNO5qKLKEV9tblxG4G4nK45CZI/QKH78iRgJSTwvVN ZtrA+ZdaR26DnKGpfvNF4iZ3G62ZVUX/dNTYUISxr179OiGT8GaUaeSAjpWCdxqV XhnCQhAbGZDGXiF7jbTqQ1IvDjEDtvcJ8/XKNu498s4XOWT7+MjbFYmfcz3yhc6+ u+qkuev7buEabyYGm4lNbL54UdzBmteaGyA+US3rgKKLM7jPml0Pa449Xxm4ZTGQ -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:53 2025 by rpki-client