$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft File: 3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft (raw, json) Hash identifier: hloYK87KnhqrIS6EDCdaMea5VFGyY2W1jwmr5PigioA= Subject key identifier: E4:34:AE:DF:C3:79:E4:4C:1C:E1:EB:21:36:0E:AD:7E:EE:A6:0E:8F Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 Certificate issuer: /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Certificate serial: 010D0C9F4328584BC093815C121D58486F6D7EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft Manifest number: 010D0C9F43285840D356E771FDB2BBB6071590C3 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl (hash: I73L2xUDAdmgnWv6I3YVnzZjodbvgpkLZaYpjJYDt0Y=) 2: 9b2a0da3-5551-3cef-ab65-d40999076b92.roa (hash: BOU84gThKkRGdHtWlKjRmsy8zLx3slaynI4RPVd3dto=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:81:5c:12:1d:58:48:6f:6d:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=0ab85f76-85ff-4269-a5c1-c10b7beeb21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:90:d2:c0:2c:f6:19:71:09:89:e7:85:16: 96:ad:17:da:4b:c5:7c:a7:3f:9e:56:9b:24:c1:4b: 39:95:4e:9c:c2:47:82:c3:1e:d0:e0:4d:0d:69:d0: 94:73:db:9f:23:58:a8:b2:80:b0:62:54:b9:26:ba: d7:20:b9:e6:87:7d:ee:66:86:01:c4:71:0f:3d:fb: 93:70:53:a7:17:3d:0d:55:16:e4:70:94:5d:80:da: 04:8a:09:42:1a:0d:1c:57:db:b7:dd:86:42:4f:d7: 33:ea:a0:f1:a4:04:d0:12:dd:21:66:70:da:af:00: af:a1:62:f1:9d:c3:47:2f:92:d9:61:fc:75:c7:50: 63:5a:96:c1:93:7c:e7:a1:d1:cd:8e:03:72:a9:60: 00:82:58:d8:0a:17:e0:58:43:fb:c3:f1:4c:34:1e: 90:c3:19:24:44:45:17:e5:dc:66:66:4d:9a:aa:2f: 4f:a2:3f:bd:6c:c6:53:f2:f6:de:9c:c6:b6:66:58: f2:a9:c9:6b:44:75:c8:46:cb:8b:ae:10:34:c7:c6: a4:07:60:88:66:fb:16:90:aa:ed:b5:fe:0c:59:6f: 7c:d5:5f:b1:03:91:28:dc:13:fc:1a:ad:41:90:bb: 3d:d4:c8:71:e6:3a:60:e0:99:3e:55:dd:1f:7a:72: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:34:AE:DF:C3:79:E4:4C:1C:E1:EB:21:36:0E:AD:7E:EE:A6:0E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl X509v3 Authority Key Identifier: keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a5:5e:6f:f2:53:56:e0:d2:cb:19:1e:14:9f:2a:35:8d:7c: e4:a1:57:56:04:3e:b1:bd:5a:c9:d6:23:48:a7:87:44:ff:92: 96:66:15:6f:f2:03:08:b9:11:0c:82:7f:94:d4:bb:e6:7a:8e: f9:ec:6e:01:6d:74:d3:c0:db:a7:9a:40:05:cb:34:1f:6c:a9: d7:e0:6b:de:fc:1b:f0:9a:47:c9:65:f7:c9:f5:0a:26:e8:83: 4b:f2:bd:7d:2d:9d:b7:9b:ff:24:c6:c1:3b:fd:cf:71:1f:56: 07:fb:96:b8:41:a2:e6:be:01:50:7a:ce:f6:38:3f:21:d9:c1: 1c:aa:20:a5:b8:c5:89:37:88:50:fe:7a:5b:d4:72:97:b7:66: 38:3e:b6:f4:32:73:3f:7a:86:b8:c8:e0:af:ee:16:09:f8:f9: 93:c3:2d:84:10:77:78:3b:e7:f1:a2:86:20:66:5d:86:4a:1c: 2d:f5:5e:a7:df:af:80:c2:21:7b:38:2a:f4:49:ef:17:66:3f: 8f:54:33:dd:c6:41:4f:97:12:ba:1d:f9:31:2f:aa:4f:85:a4: 1d:d2:b9:f7:08:df:f0:aa:4e:38:cd:d3:e4:25:a8:ea:14:f6: d4:fa:8a:a5:44:2b:16:b7:d2:9d:38:af:47:c9:a6:13:2c:bd: 36:c6:6d:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4FcEh1YSG9tfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZDgzNDYtNWYzMi00OTczLWIwMGYtNmFhOTRjOGNh NzIwMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk MGFiODVmNzYtODVmZi00MjY5LWE1YzEtYzEwYjdiZWViMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjyQ0sAs9hlxCYnnhRaWrRfaS8V8pz+eVpsk wUs5lU6cwkeCwx7Q4E0NadCUc9ufI1iosoCwYlS5JrrXILnmh33uZoYBxHEPPfuT cFOnFz0NVRbkcJRdgNoEiglCGg0cV9u33YZCT9cz6qDxpATQEt0hZnDarwCvoWLx ncNHL5LZYfx1x1BjWpbBk3znodHNjgNyqWAAgljYChfgWEP7w/FMNB6QwxkkREUX 5dxmZk2aqi9Poj+9bMZT8vbenMa2ZljyqclrRHXIRsuLrhA0x8akB2CIZvsWkKrt tf4MWW981V+xA5Eo3BP8Gq1BkLs91Mhx5jpg4Jk+Vd0fenKS0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOQ0rt/DeeRMHOHrITYOrX7upg6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYmZk ODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5NGM4Y2E3MjAvM2JmZDgzNDYtNWYzMi00 OTczLWIwMGYtNmFhOTRjOGNhNzIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2JmZDgzNDYtNWYzMi00OTczLWIw MGYtNmFhOTRjOGNhNzIwLzNiZmQ4MzQ2LTVmMzItNDk3My1iMDBmLTZhYTk0Yzhj YTcyMC5jcmwwHwYDVR0jBBgwFoAUYZk5Z3aiCqJqr+bN3xUcOqnk+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYmZkODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5 NGM4Y2E3MjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMpV5v8lNW4NLLGR4Unyo1 jXzkoVdWBD6xvVrJ1iNIp4dE/5KWZhVv8gMIuREMgn+U1Lvmeo757G4BbXTTwNun mkAFyzQfbKnX4Gve/BvwmkfJZffJ9Qom6INL8r19LZ23m/8kxsE7/c9xH1YH+5a4 QaLmvgFQes72OD8h2cEcqiCluMWJN4hQ/npb1HKXt2Y4Prb0MnM/eoa4yOCv7hYJ +PmTwy2EEHd4O+fxooYgZl2GShwt9V6n36+AwiF7OCr0Se8XZj+PVDPdxkFPlxK6 HfkxL6pPhaQd0rn3CN/wqk44zdPkJajqFPbU+oqlRCsWt9KdOK9HyaYTLL02xm0d -----END CERTIFICATE-----Generated at Wed Nov 5 09:54:52 2025 by rpki-client