$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft File: 3416eb84-d1fa-4d16-850d-b6024c13b511.mft (raw, json) Hash identifier: hR/uc10/vWm2qdjX18xaUD/ZXDI5wshcvUMrSfuoA9A= Subject key identifier: C7:C4:0F:47:3D:FA:7C:76:36:7C:68:57:2F:83:06:32:44:39:03:2E Authority key identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 Certificate issuer: /CN=3416eb84-d1fa-4d16-850d-b6024c13b511 Certificate serial: 010D0C9F4328584BBF888025A92D97A2A55DF920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft Manifest number: 010D0C9F432858467B3AE7F5C97C6574413E068F Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 3416eb84-d1fa-4d16-850d-b6024c13b511.crl (hash: z+bLLDkbWp9OZ7qhQ4FyC/+jJ034mwx6FM9nmo3z5GY=) 2: e9618a84-cd25-3185-ba38-a4cc840a603b.roa (hash: Tn0BzNnGd9ADSGvlOiz84TLm8SihrVCFG151UHi7H3Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:80:25:a9:2d:97:a2:a5:5d:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3416eb84-d1fa-4d16-850d-b6024c13b511 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=887a0538-ce82-4ae4-9269-11cedb01aab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:9d:a4:1f:1c:80:93:2d:81:12:59:07:a3: 26:13:1e:4a:5c:0b:07:7f:b2:7f:84:5f:c4:83:24: 56:88:6e:e1:c4:ac:f7:0f:72:6a:07:da:f7:3e:09: 92:66:f5:7c:e4:70:43:d7:4f:4c:8b:ae:c2:72:ab: 01:96:11:08:1c:a5:27:da:16:dc:2f:f6:18:7c:8c: fc:be:02:ad:70:ea:2c:16:a4:e3:e5:df:a5:c3:08: b8:c9:ae:e6:d7:bf:1f:b7:a5:00:4c:e9:65:1c:ef: 30:b8:6a:1c:1e:00:7b:ec:f0:ac:20:17:6c:90:18: 8a:9d:01:23:8a:da:9d:05:b8:ed:8e:e6:d8:b5:7f: f0:09:86:cd:87:96:bf:94:f4:18:79:61:65:c0:bc: 37:e0:a6:44:98:e2:a0:45:68:60:8f:91:05:fc:fb: b2:1c:00:af:98:de:18:35:cc:c4:c9:13:8c:d9:97: e6:f3:68:97:86:50:7f:4b:79:a8:f3:40:8e:25:92: 5e:d5:8c:2a:b8:f3:c7:c0:88:16:1c:b4:a0:78:db: 67:09:58:da:df:2b:17:01:81:c0:db:30:27:4f:32: 75:b6:26:a0:61:ee:83:be:8f:e7:5e:4b:b1:56:0d: 49:d3:2a:85:da:78:90:d4:f2:ee:73:0c:56:2a:36: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C4:0F:47:3D:FA:7C:76:36:7C:68:57:2F:83:06:32:44:39:03:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl X509v3 Authority Key Identifier: keyid:C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:88:03:50:93:5b:ea:97:95:87:e2:48:5c:ff:63:d3:74:eb: c3:a0:94:8c:76:8f:07:7c:f3:53:90:5f:be:6e:a9:a8:d1:17: 36:50:0c:db:06:03:d0:db:72:48:6a:b8:63:58:59:c6:30:f8: 02:ad:fc:4f:48:79:15:e3:f4:d5:19:be:08:4f:5d:1e:5a:aa: 68:89:ec:21:90:26:ad:96:80:0c:5a:c0:00:1f:c0:16:d2:60: 69:f3:ef:20:2d:17:18:89:a5:35:9a:be:45:cb:18:a4:1d:7a: 53:15:ac:d1:06:f8:02:67:79:61:d0:35:db:88:91:98:75:73: c5:86:1d:b1:69:27:ad:61:54:d7:97:38:f6:81:92:ab:1d:de: f3:df:60:56:22:8c:b8:00:92:0e:34:3e:63:d8:82:04:89:9c: 05:06:b0:ea:97:4b:81:06:de:f5:46:00:62:9a:41:c5:cf:c7: b3:bb:f5:65:f0:4a:ef:42:01:4d:59:5e:1b:00:06:1d:22:b3: a6:bb:01:f6:ee:96:ef:30:6c:80:0a:d0:9e:b1:ac:db:c7:2a: 14:2e:67:45:59:ad:95:ca:69:df:fa:b3:28:8f:8e:07:18:69: 8e:6b:21:87:4e:86:a5:03:04:eb:73:53:f2:e5:ff:f7:8e:56: 82:76:ad:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iIAlqS2XoqVd+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxNmViODQtZDFmYS00ZDE2LTg1MGQtYjYwMjRjMTNi NTExMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk ODg3YTA1MzgtY2U4Mi00YWU0LTkyNjktMTFjZWRiMDFhYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz6dpB8cgJMtgRJZB6MmEx5KXAsHf7J/hF/E gyRWiG7hxKz3D3JqB9r3PgmSZvV85HBD109Mi67CcqsBlhEIHKUn2hbcL/YYfIz8 vgKtcOosFqTj5d+lwwi4ya7m178ft6UATOllHO8wuGocHgB77PCsIBdskBiKnQEj itqdBbjtjubYtX/wCYbNh5a/lPQYeWFlwLw34KZEmOKgRWhgj5EF/PuyHACvmN4Y NczEyROM2Zfm82iXhlB/S3mo80COJZJe1YwquPPHwIgWHLSgeNtnCVja3ysXAYHA 2zAnTzJ1tiagYe6Dvo/nXkuxVg1J0yqF2niQ1PLucwxWKjagMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMfED0c9+nx2NnxoVy+DBjJEOQMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNDE2 ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAyNGMxM2I1MTEvMzQxNmViODQtZDFmYS00 ZDE2LTg1MGQtYjYwMjRjMTNiNTExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzQxNmViODQtZDFmYS00ZDE2LTg1 MGQtYjYwMjRjMTNiNTExLzM0MTZlYjg0LWQxZmEtNGQxNi04NTBkLWI2MDI0YzEz YjUxMS5jcmwwHwYDVR0jBBgwFoAUx8XVuAOj4rQ0sv5EJrU6ylPSTBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNDE2ZWI4NC1kMWZhLTRkMTYtODUwZC1iNjAy NGMxM2I1MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHiANQk1vql5WH4khc/2PT dOvDoJSMdo8HfPNTkF++bqmo0Rc2UAzbBgPQ23JIarhjWFnGMPgCrfxPSHkV4/TV Gb4IT10eWqpoiewhkCatloAMWsAAH8AW0mBp8+8gLRcYiaU1mr5FyxikHXpTFazR BvgCZ3lh0DXbiJGYdXPFhh2xaSetYVTXlzj2gZKrHd7z32BWIoy4AJIOND5j2IIE iZwFBrDql0uBBt71RgBimkHFz8ezu/Vl8ErvQgFNWV4bAAYdIrOmuwH27pbvMGyA CtCesazbxyoULmdFWa2Vymnf+rMoj44HGGmOayGHToalAwTrc1Py5f/3jlaCdq2X -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:29 2025 by rpki-client