$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: IHIToyynReE5pUfnYxviTMvR7qtOnxI5vdyqZt8W390= Subject key identifier: AB:E9:01:2A:A6:41:D4:50:0B:52:75:28:5C:60:09:1F:BB:96:A1:81 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584BBF4BF3102A44AC8320CFE800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCA96 Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: jTF7+MKUrslJRIixL4m1XqApVfqQYZH2adUey4gInEE=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: FIZ3xJMvnPKUekYvK3IflROLqHYHvYvdFrSm+5fWMLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f3:10:2a:44:ac:83:20:cf:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=dde29659-0410-4926-83bf-c0fcf56ed7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:1b:a0:38:b1:38:3d:d6:ea:b2:9b:39:ac: 74:e8:d8:96:34:f5:ad:06:a7:c6:4c:65:24:93:e5: 74:52:a5:ee:18:c4:f9:4e:92:94:31:8e:54:45:78: c7:f1:26:43:e3:09:d5:62:91:65:6d:42:46:cd:ee: 9f:8a:d6:f1:8f:95:1d:38:df:9c:fe:7b:f9:31:83: b0:98:de:b7:8e:6c:09:b8:be:05:82:88:f9:f2:67: 89:34:dc:7e:74:df:2d:93:33:2c:0e:5b:aa:a8:d5: ea:c5:aa:5f:00:24:eb:5f:7a:bf:f1:44:9d:f7:8f: 9c:5d:e8:48:aa:96:b7:3b:27:3a:03:c7:aa:da:48: 26:4a:e0:12:fe:f5:1e:de:93:f1:d6:f1:24:93:ec: 3e:53:cd:9f:40:c4:41:d3:8b:e4:38:41:a5:57:de: 8b:f6:4e:95:4f:58:18:86:d9:c7:cf:31:21:50:ca: 55:2d:16:e4:f3:6b:c9:aa:a6:dc:c1:9f:86:54:90: 90:78:97:e9:0a:63:14:18:f6:f4:d5:8a:a7:b5:d0: cb:58:c6:2c:1b:b2:bc:3e:20:7d:78:32:9a:5a:d9: 14:2b:17:f6:48:1b:47:f3:7d:7e:e8:e2:b4:da:bb: 61:29:a8:90:c9:31:23:ae:de:32:c9:e9:89:09:fb: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:01:2A:A6:41:D4:50:0B:52:75:28:5C:60:09:1F:BB:96:A1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:39:54:09:45:e2:c2:3d:02:c4:63:c9:2d:e0:ad:f6:0a:12: d2:ab:e9:0e:26:93:68:40:0a:95:66:47:9d:4c:aa:4f:ea:16: 1b:85:a0:cc:60:a7:aa:46:9f:78:da:0a:68:49:7d:7a:70:7a: 46:ae:f8:a4:8b:f5:f2:7c:09:ab:37:c0:ac:2b:a0:a6:3a:93: 0d:1a:3d:4e:a0:7c:a2:4e:dd:3c:ce:81:c7:b9:f3:83:35:d9: 0c:39:06:bb:61:ab:86:91:a0:7b:10:dd:ea:15:a2:14:3b:1d: af:5d:9c:26:4c:3a:3e:2a:6f:aa:9f:66:be:bc:ee:af:ce:ac: f1:ae:02:a1:49:9f:35:2e:83:ff:e3:fa:35:5e:67:10:89:28: 18:16:da:00:70:05:7e:35:cc:56:3b:47:39:a7:1a:93:23:fa: ef:b8:fb:5d:1e:26:28:04:5b:48:2e:6c:c8:77:1c:70:80:d9: e1:f1:c0:09:e4:44:56:89:d9:f3:0c:9c:b0:87:57:20:2a:0e: fb:d8:f9:bf:03:c8:5d:bc:59:83:74:f4:b8:e6:5a:3a:00:a7: 46:f5:ff:4d:e6:84:3d:23:90:26:12:1e:f5:91:89:b8:98:c6: c3:86:20:26:e0:f0:59:65:c8:61:07:12:66:0a:d9:5f:bb:21: 14:32:37:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/MQKkSsgyDP6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk ZGRlMjk2NTktMDQxMC00OTI2LTgzYmYtYzBmY2Y1NmVkN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFUboDixOD3W6rKbOax06NiWNPWtBqfGTGUk k+V0UqXuGMT5TpKUMY5URXjH8SZD4wnVYpFlbUJGze6fitbxj5UdON+c/nv5MYOw mN63jmwJuL4Fgoj58meJNNx+dN8tkzMsDluqqNXqxapfACTrX3q/8USd94+cXehI qpa3Oyc6A8eq2kgmSuAS/vUe3pPx1vEkk+w+U82fQMRB04vkOEGlV96L9k6VT1gY htnHzzEhUMpVLRbk82vJqqbcwZ+GVJCQeJfpCmMUGPb01YqntdDLWMYsG7K8PiB9 eDKaWtkUKxf2SBtH831+6OK02rthKaiQyTEjrt4yyemJCftHgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKvpASqmQdRQC1J1KFxgCR+7lqGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoOVQJReLCPQLEY8kt4K32 ChLSq+kOJpNoQAqVZkedTKpP6hYbhaDMYKeqRp942gpoSX16cHpGrviki/XyfAmr N8CsK6CmOpMNGj1OoHyiTt08zoHHufODNdkMOQa7YauGkaB7EN3qFaIUOx2vXZwm TDo+Km+qn2a+vO6vzqzxrgKhSZ81LoP/4/o1XmcQiSgYFtoAcAV+NcxWO0c5pxqT I/rvuPtdHiYoBFtILmzIdxxwgNnh8cAJ5ERWidnzDJywh1cgKg772Pm/A8hdvFmD dPS45lo6AKdG9f9N5oQ9I5AmEh71kYm4mMbDhiAm4PBZZchhBxJmCtlfuyEUMjfT -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:36 2025 by rpki-client