$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft File: a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft (raw, json) Hash identifier: j3Tw5STtVJlsYHmHJbu0YMQOs9IFgYoTl2fFyoTpL9Y= Subject key identifier: 3E:57:31:38:63:5B:97:9D:15:7D:25:4E:A2:C5:15:AD:A3:4A:9C:9F Authority key identifier: BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 Certificate issuer: /CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Certificate serial: 010D0C9F4328584BBFE0D67FE91DBA70AABF0A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft Manifest number: 010D0C9F43285845F8473EC48CF2A2F0FF6DE19F Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 31044689-5617-3cd5-a65d-c714e253e409.roa (hash: 5CTfTrw+HhjYcDWX/ETb1AiBbOyREOT5TJBud0W4gWI=) 2: a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl (hash: nSZxW+yk4V2CeFEyhmA5xhWM0Hg97FhgvxdGnrNfvg8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d6:7f:e9:1d:ba:70:aa:bf:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=e4296ddc-2dbd-4e9a-9ab6-fd162a8e412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:9a:c6:04:24:73:75:61:89:f2:d9:17:bd: 61:d4:3a:d3:c7:f8:47:7e:09:5e:63:bc:c9:db:31: ea:23:04:0d:f5:e8:74:3c:c4:dc:f7:21:18:99:73: 0d:15:19:f3:15:ac:2e:22:25:c6:91:cf:32:05:e5: 35:cd:7e:dc:02:79:aa:05:a0:17:57:23:94:13:6e: 5f:a5:91:d9:3c:bd:05:57:56:cd:55:05:3c:28:d5: 1c:4e:5d:84:b5:61:1c:44:6a:05:d5:e9:40:ff:bf: 60:7e:61:54:b9:70:4b:c2:be:c2:9f:5e:ef:21:93: 0f:f2:d5:67:18:92:d1:d4:ea:89:41:e4:4e:8d:1d: ef:e5:f2:d2:e1:c5:34:21:98:b7:4f:8d:24:70:cf: 9c:b0:02:0a:97:b5:71:94:f9:ec:ac:a1:ec:02:58: a9:35:0c:d9:59:17:7e:8a:ae:08:0e:91:39:ce:7f: 79:02:45:02:29:df:75:31:f9:d0:8d:2d:64:a9:4d: 1a:0f:d6:b4:fb:29:94:9f:d9:8b:4a:20:e3:68:71: 14:e6:9f:22:11:0d:b3:04:d2:31:e4:eb:04:32:13: 91:7c:56:34:0c:2c:55:61:a4:e1:6e:50:48:17:2f: 4e:21:87:b0:71:34:53:c6:1f:3b:25:5f:b3:c0:fb: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:31:38:63:5B:97:9D:15:7D:25:4E:A2:C5:15:AD:A3:4A:9C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl X509v3 Authority Key Identifier: keyid:BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:7b:5d:ca:a8:1e:c7:72:c0:b8:01:e9:25:c3:b8:a8:18:34: 2b:81:1b:e0:99:46:fe:1a:6e:52:b7:cf:39:f8:de:6f:55:35: 9b:ee:bb:f9:c7:91:04:2a:55:a6:21:96:b6:d2:f8:31:c3:59: 93:17:b6:16:9a:7d:be:fe:76:a0:30:42:b4:3f:64:9c:2b:17: a7:07:7f:fa:bb:f4:86:66:b3:50:b1:00:e2:2b:40:b0:d7:91: 9c:1d:2f:5d:ff:16:cf:8c:d2:13:e2:7c:49:fc:1c:27:1d:1b: 5c:13:34:b5:72:8e:4e:8b:06:c5:e5:22:2b:e0:06:ce:bd:26: 11:c5:d9:e2:92:88:72:3d:16:80:6d:1d:d5:8a:11:90:8d:df: 6e:e1:2b:95:b3:37:8a:21:cb:c4:fc:72:a1:b4:e8:ed:82:9a: bb:fc:96:e5:19:45:e7:6d:d0:e8:d4:c4:71:c2:2c:cb:57:7f: 98:6c:5a:80:33:62:ca:e5:86:61:c6:0b:bc:28:1c:0f:89:bf: 60:2c:77:13:83:40:05:3d:11:79:6c:3e:02:d5:c2:30:8d:05: f5:6d:ad:ed:77:cb:3c:40:49:81:a6:4b:c4:de:27:26:b8:0a: 82:e7:ea:52:02:d2:93:91:ea:52:73:05:4c:b9:34:94:a1:7b: 1d:05:a1:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NZ/6R26cKq/CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmYzk3NmItNjI5NC00YzdmLWFkZjktMGExMjRjMzhm OWE3MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZTQyOTZkZGMtMmRiZC00ZTlhLTlhYjYtZmQxNjJhOGU0MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpWaxgQkc3VhifLZF71h1DrTx/hHfgleY7zJ 2zHqIwQN9eh0PMTc9yEYmXMNFRnzFawuIiXGkc8yBeU1zX7cAnmqBaAXVyOUE25f pZHZPL0FV1bNVQU8KNUcTl2EtWEcRGoF1elA/79gfmFUuXBLwr7Cn17vIZMP8tVn GJLR1OqJQeROjR3v5fLS4cU0IZi3T40kcM+csAIKl7VxlPnsrKHsAlipNQzZWRd+ iq4IDpE5zn95AkUCKd91MfnQjS1kqU0aD9a0+ymUn9mLSiDjaHEU5p8iEQ2zBNIx 5OsEMhORfFY0DCxVYaThblBIFy9OIYewcTRTxh87JV+zwPsJVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD5XMThjW5edFX0lTqLFFa2jSpyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2Zj OTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEyNGMzOGY5YTcvYTNmYzk3NmItNjI5NC00 YzdmLWFkZjktMGExMjRjMzhmOWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTNmYzk3NmItNjI5NC00YzdmLWFk ZjktMGExMjRjMzhmOWE3L2EzZmM5NzZiLTYyOTQtNGM3Zi1hZGY5LTBhMTI0YzM4 ZjlhNy5jcmwwHwYDVR0jBBgwFoAUvEj0F4l7oUc6MZd1zaZNuACo7RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2ZjOTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEy NGMzOGY5YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPe13KqB7HcsC4Aeklw7io GDQrgRvgmUb+Gm5St885+N5vVTWb7rv5x5EEKlWmIZa20vgxw1mTF7YWmn2+/nag MEK0P2ScKxenB3/6u/SGZrNQsQDiK0Cw15GcHS9d/xbPjNIT4nxJ/BwnHRtcEzS1 co5OiwbF5SIr4AbOvSYRxdnikohyPRaAbR3VihGQjd9u4SuVszeKIcvE/HKhtOjt gpq7/JblGUXnbdDo1MRxwizLV3+YbFqAM2LK5YZhxgu8KBwPib9gLHcTg0AFPRF5 bD4C1cIwjQX1ba3td8s8QEmBpkvE3icmuAqC5+pSAtKTkepScwVMuTSUoXsdBaHl -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:57 2025 by rpki-client