$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: k/9E1if+TEZFSg6iQUdyIoSHSjlC3Iu0wc0pNWKcDLQ= Subject key identifier: 97:92:A7:AA:4A:EA:6F:71:F9:7D:5B:E7:CA:96:14:BB:32:DA:BD:EC Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584BC12873673FB7DD07CEE4EB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F5C7 Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: EiAChQazSTitYxLzSmzCVXKNHnLJhzBJczZXQdIacXM=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: ROExvCOzj5U5wS2dYDzcHcdl0P3aKs9xrzEkiMXUvl4=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: 3wlx2jyrQ5Eo6zYB236wmr68WQY2HQO276v+u49hzUs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:73:67:3f:b7:dd:07:ce:e4:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=01fa5705-51b9-418c-b908-4485c45c3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:0e:2c:47:cd:02:8b:56:1c:a2:9c:4d:ba: e6:56:8c:ce:f9:91:43:b9:6b:3d:63:d0:10:ab:d3: 16:d2:08:cd:e2:cb:2b:40:26:a0:96:eb:c6:37:c0: db:87:c0:6d:19:8a:da:2b:0a:eb:20:f9:9f:dc:7b: c4:81:e5:af:0c:6b:db:a3:ab:81:de:31:c0:69:7c: 9d:e1:29:10:0e:df:08:b4:fe:1e:2b:24:4f:db:c3: dc:b2:50:f1:16:a0:7e:a9:24:ae:4c:97:44:7c:51: d8:08:62:82:0c:4a:57:17:bc:3e:b0:66:3d:d5:b0: b8:5d:ba:d0:2d:d6:5a:b4:d1:e9:86:b1:0c:a9:bd: 58:22:44:ae:c5:88:4a:c9:17:67:8e:1d:0c:eb:7a: 32:b7:95:5c:d7:13:28:9d:be:25:b6:89:f5:bb:fa: 0c:b9:d0:7c:04:2a:61:f1:15:1f:d7:be:8b:9c:17: c5:2e:f3:22:af:fe:90:00:27:45:81:01:c0:64:c4: 6e:85:b2:62:5e:fb:f7:5b:8f:01:a6:94:e4:2b:25: d0:fd:8c:fc:57:0c:46:e8:24:12:dd:18:9a:bd:29: 0f:81:da:da:66:fe:dc:b6:5e:c0:aa:f6:24:cd:e5: 26:81:7f:b2:61:36:51:f4:e7:f8:2e:32:71:8e:f3: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:92:A7:AA:4A:EA:6F:71:F9:7D:5B:E7:CA:96:14:BB:32:DA:BD:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:03:7b:cb:0f:9c:89:62:bc:b6:1a:f7:54:67:ee:a1:44:cf: 41:e9:a6:a0:03:7b:af:5e:7b:4a:b7:b3:28:e8:b7:64:66:29: e1:a8:fd:c1:66:86:e2:46:d9:68:5f:b7:61:2d:2f:dd:9b:33: f4:90:78:dd:23:0d:5d:86:ca:e8:55:be:fc:7a:79:3e:94:3a: 72:5f:90:61:bc:a5:8e:65:1c:a9:fd:84:b9:a0:9f:af:4a:bd: 2f:36:c3:fd:3d:ad:7f:48:d8:12:99:b5:a5:9e:a5:71:13:76: f2:fd:fe:5c:de:64:b1:5e:8f:6c:04:41:01:cb:6c:d1:de:b1: 44:06:a9:eb:dd:e9:c5:f3:ba:77:96:c8:26:28:54:c1:87:39: 84:50:ef:71:c5:62:c1:ae:d1:98:31:07:10:de:9f:8c:e2:fe: 9e:dd:2c:0c:cb:7d:1b:03:6a:7a:81:d9:87:fc:68:5d:f6:03: 2b:5e:7b:9f:6f:f8:90:7f:8c:29:66:3f:6d:f9:1a:69:a3:31: 41:c3:40:b7:f1:b1:7a:33:e5:98:0b:f1:90:88:3a:50:60:bf: a2:61:83:ee:7e:b7:94:6f:44:4b:60:fb:5a:3d:77:fd:d8:cc: 31:cb:ee:6b:4b:75:8e:5d:68:aa:6f:c3:71:9a:8d:83:87:e4: de:b6:3a:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHNnP7fdB87k60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk MDFmYTU3MDUtNTFiOS00MThjLWI5MDgtNDQ4NWM0NWMzNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIwOLEfNAotWHKKcTbrmVozO+ZFDuWs9Y9AQ q9MW0gjN4ssrQCagluvGN8Dbh8BtGYraKwrrIPmf3HvEgeWvDGvbo6uB3jHAaXyd 4SkQDt8ItP4eKyRP28PcslDxFqB+qSSuTJdEfFHYCGKCDEpXF7w+sGY91bC4XbrQ LdZatNHphrEMqb1YIkSuxYhKyRdnjh0M63oyt5Vc1xMonb4lton1u/oMudB8BCph 8RUf176LnBfFLvMir/6QACdFgQHAZMRuhbJiXvv3W48BppTkKyXQ/Yz8VwxG6CQS 3RiavSkPgdraZv7ctl7AqvYkzeUmgX+yYTZR9Of4LjJxjvPPGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJeSp6pK6m9x+X1b58qWFLsy2r3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRA3vLD5yJYry2GvdUZ+6h RM9B6aagA3uvXntKt7Mo6LdkZinhqP3BZobiRtloX7dhLS/dmzP0kHjdIw1dhsro Vb78enk+lDpyX5BhvKWOZRyp/YS5oJ+vSr0vNsP9Pa1/SNgSmbWlnqVxE3by/f5c 3mSxXo9sBEEBy2zR3rFEBqnr3enF87p3lsgmKFTBhzmEUO9xxWLBrtGYMQcQ3p+M 4v6e3SwMy30bA2p6gdmH/Ghd9gMrXnufb/iQf4wpZj9t+RppozFBw0C38bF6M+WY C/GQiDpQYL+iYYPufreUb0RLYPtaPXf92Mwxy+5rS3WOXWiqb8Nxmo2Dh+TetjrT -----END CERTIFICATE-----Generated at Wed Nov 5 11:54:44 2025 by rpki-client