$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft File: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft (raw, json) Hash identifier: Jt46NXZnBM4jDDaigV8bzzB9KEtVJ3ejY1k3/dFMM94= Subject key identifier: 5D:42:69:3E:78:ED:15:29:A2:E6:E9:7D:92:47:E5:18:AD:87:6F:A9 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584BBE7B805EE7C6E91A9A9C3180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft Manifest number: 010D0C9F43285843DEDD8F5A3F647017C5C8D268 Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl (hash: 8Sqpqa8d3EI6nwob8I76i+Z/jH72qpfDMYEesFavuTs=) 2: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (hash: cvqtR6NAjmQ8gFsgWBEH3j+doaWZRTPakQKNm8hev8U=) 3: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (hash: gNISTgeXr/i/0LqodtWx1ZDzShEL8Opl13bq5mCM5go=) 4: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (hash: 0Q1ZXi9mEXR+yyDv9B2bJUpzZUsbLgkJuDNEeRRzNuk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:80:5e:e7:c6:e9:1a:9a:9c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=fb85db75-45da-45b3-bdd4-a5f128e25ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:ff:ae:72:f2:7e:9a:a1:fa:3c:1b:e0:98: e9:65:09:da:96:b1:b9:e6:15:b3:aa:7d:b2:dc:e0: 7a:bb:75:78:ff:aa:7f:c6:5b:5f:27:f8:04:c6:74: 95:12:91:74:d2:fa:d6:a2:89:95:5e:8a:b8:28:15: ce:2b:70:df:64:c5:e4:e7:3e:e6:a0:94:75:6f:67: 4e:c7:58:75:e2:52:05:06:89:95:19:e4:c1:56:d7: 36:36:04:33:ac:23:c6:0c:14:1a:d2:67:98:f8:0b: ef:cf:65:64:8b:df:28:07:6b:62:c0:25:60:21:58: 04:48:40:34:3d:f3:e3:39:4c:8e:c4:ee:b6:b6:15: a6:7b:68:ae:37:e3:d0:31:ef:71:fb:62:11:e2:a7: 92:a3:19:6a:a1:35:ff:3d:93:2f:e9:29:c3:ff:75: c3:11:e7:8c:55:c4:6e:26:7b:f2:3d:7e:c5:61:17: 68:24:ce:a6:b1:c0:0b:96:dc:e8:5e:11:39:dc:8e: 87:ff:25:01:ea:53:12:3b:ac:ca:12:a8:bb:d7:93: 85:e2:fc:6c:14:44:e5:08:f0:c3:c2:1d:92:e8:c1: e3:dc:46:7e:bd:ed:aa:01:ee:a5:d5:34:00:e7:12: 6a:8f:30:15:cc:49:2b:56:43:65:00:f2:60:9f:c1: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:69:3E:78:ED:15:29:A2:E6:E9:7D:92:47:E5:18:AD:87:6F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:54:c1:12:ac:38:19:ac:28:e0:82:bd:ca:77:9c:0e:2a:6f: e6:29:28:11:1f:38:16:14:aa:af:ab:cc:3a:15:26:86:84:54: 16:94:e7:b8:af:cb:c4:40:4e:e5:3b:87:46:85:0a:52:c2:af: 9a:02:38:1f:ca:f6:95:60:0f:6b:cc:b6:9a:2a:5b:25:81:bc: 24:77:68:57:6b:cc:ea:9e:ed:6b:68:fa:cd:40:89:39:b6:0d: c4:36:59:e5:fa:95:f7:a0:a3:66:5a:ec:65:2c:d3:9f:77:f6: 9f:1e:f6:c5:92:c6:f1:65:3e:85:d8:36:d7:b2:2a:68:cc:13: b3:66:f9:56:7a:84:9f:33:ea:a7:f9:ca:8e:39:ab:12:39:3e: fe:9e:30:8e:2e:9b:26:da:80:d3:a5:59:88:cc:3b:72:ca:61: 76:ea:96:6a:d2:c6:c1:da:e7:d4:af:0f:9b:ae:4f:ef:8d:74: 64:a2:c4:f6:ef:83:0d:c7:f1:b6:77:d5:56:68:ce:50:36:b2: 57:07:19:a3:25:30:83:e8:f6:e7:31:ae:3a:66:fd:d2:17:52: 1f:a1:70:27:51:c3:fa:32:6f:49:a3:b5:96:75:66:ae:89:ea: 77:df:54:80:f1:3e:2e:46:61:08:14:ce:d4:a2:83:6e:ee:8c: 56:d4:42:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e4Be58bpGpqcMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk ZmI4NWRiNzUtNDVkYS00NWIzLWJkZDQtYTVmMTI4ZTI1ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFj/rnLyfpqh+jwb4JjpZQnalrG55hWzqn2y 3OB6u3V4/6p/xltfJ/gExnSVEpF00vrWoomVXoq4KBXOK3DfZMXk5z7moJR1b2dO x1h14lIFBomVGeTBVtc2NgQzrCPGDBQa0meY+Avvz2Vki98oB2tiwCVgIVgESEA0 PfPjOUyOxO62thWme2iuN+PQMe9x+2IR4qeSoxlqoTX/PZMv6SnD/3XDEeeMVcRu JnvyPX7FYRdoJM6mscALltzoXhE53I6H/yUB6lMSO6zKEqi715OF4vxsFETlCPDD wh2S6MHj3EZ+ve2qAe6l1TQA5xJqjzAVzEkrVkNlAPJgn8HuXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF1CaT547RUpoubpfZJH5Rith2+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvM2M2NTVhYWYtNzZmNC00 YmFiLWI0ZjctOGZiMjNjM2Q0MDExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOVMESrDgZrCjggr3Kd5wO Km/mKSgRHzgWFKqvq8w6FSaGhFQWlOe4r8vEQE7lO4dGhQpSwq+aAjgfyvaVYA9r zLaaKlslgbwkd2hXa8zqnu1raPrNQIk5tg3ENlnl+pX3oKNmWuxlLNOfd/afHvbF ksbxZT6F2DbXsipozBOzZvlWeoSfM+qn+cqOOasSOT7+njCOLpsm2oDTpVmIzDty ymF26pZq0sbB2ufUrw+brk/vjXRkosT274MNx/G2d9VWaM5QNrJXBxmjJTCD6Pbn Ma46Zv3SF1IfoXAnUcP6Mm9Jo7WWdWauiep331SA8T4uRmEIFM7UooNu7oxW1EJg -----END CERTIFICATE-----Generated at Wed Nov 5 01:12:41 2025 by rpki-client