$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft File: 3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft (raw, json) Hash identifier: CsQ7jE9+MKmuaNReCLfYeRKYTPNaiOsCqbXXnoK8N1k= Subject key identifier: 12:41:5A:FE:89:7A:50:78:07:25:A0:B9:2A:E2:E2:A3:0E:D3:C8:84 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584BBFC312E4E1D601367A7A6980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft Manifest number: 010D0C9F43285840D8030218D81B64E5E4C52522 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 05fd079c-ab7a-3b06-96d9-0546148ecf20.roa (hash: tMlcnTGOaSIkhb6MnO5ictD5JGYcML0uzSNBSzax3ts=) 2: 3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl (hash: eHYgzyYF7NaG07kyuM/kf6kSY7o6sIDO59E5hq8GQQU=) 3: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (hash: VPvL83yLP8laVfX13UCSqPYTUB/lvbsljFjAcQ8uTMs=) 4: be756b92-6acc-3494-9eeb-3de9866cb967.roa (hash: LyeCc7Jso1kROBEd4iukMujyGXkpiCn+SKDRGG970mY=) 5: e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa (hash: Rns2ZH+jrpyG1StbLf4pEXxkaZIHpSH7Kn2TCcv+tJY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:12:e4:e1:d6:01:36:7a:7a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=01e077c8-d9c1-463e-b1aa-5fe8d06dd1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:ee:53:f2:76:36:c6:1e:f1:7d:02:f2:b6: 86:2e:e6:b4:70:73:1a:90:b3:1e:88:10:9f:fc:54: db:7a:ef:66:6e:2b:9b:74:91:0b:9a:01:17:8b:29: ab:37:c9:3e:79:33:d5:71:ac:72:85:9e:95:b7:e3: 1d:75:47:f0:b2:37:0d:dc:30:cf:c6:82:28:9c:b3: 17:c7:24:63:50:25:c7:21:1b:65:ca:eb:e2:ce:d7: 65:78:bb:8e:e6:89:cf:fb:7c:f3:13:e6:75:19:e0: bc:e3:aa:32:8e:55:79:2d:3f:fd:fc:92:29:32:a9: 1b:ae:27:14:ce:06:ba:47:b4:6f:0b:cf:f3:8b:d8: 49:85:e1:aa:fe:a2:6d:63:e5:24:27:e4:2f:90:5b: fe:7f:8f:1a:a1:1f:82:ec:0d:81:9e:94:cb:d9:c2: b2:50:4c:02:cf:cb:b2:9f:4d:06:7c:a0:83:bc:1d: b8:92:00:dd:31:a6:da:45:b5:06:6d:ad:52:0b:05: 38:18:68:9a:f4:ec:1c:86:93:99:6d:13:d3:0a:53: 1d:00:b6:fd:59:ec:c4:14:05:2a:5f:98:f3:c5:cb: 4a:ad:91:21:c7:46:6a:74:6b:57:db:de:d1:6f:6f: 36:7e:43:5e:b6:82:b2:75:24:43:75:c4:1b:e0:60: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:5A:FE:89:7A:50:78:07:25:A0:B9:2A:E2:E2:A3:0E:D3:C8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:3f:0b:b9:52:b7:03:db:54:90:38:8c:9e:39:a1:9b:2e: a1:a3:83:9b:97:c4:41:1a:c2:c2:a3:1d:75:b5:31:e7:81:16: 3c:c5:e9:39:f8:41:80:2d:74:9d:04:82:5a:40:26:ba:af:92: 88:2e:a7:1e:04:9e:b7:11:4d:f5:7a:bd:5a:a5:0a:99:67:05: 53:7d:11:55:2a:07:23:9a:ee:0e:f0:3e:ff:b7:1b:99:9a:99: 21:e9:2e:8c:f4:67:b5:9d:4e:bf:04:fe:2b:2c:fa:cc:75:24: 02:b8:83:a1:50:16:ee:ad:4c:20:c5:7f:e0:65:5e:f3:0a:96: 1d:43:f0:f1:fb:30:b2:60:41:63:42:95:0c:5a:83:69:d6:ac: 9d:7b:3f:0e:6b:64:db:fa:c9:69:96:bf:8e:f7:ca:d8:a8:3a: b5:e7:c5:dc:5d:76:c6:47:ba:44:50:77:1c:ee:73:37:0a:25: c1:aa:88:7f:4c:4f:cc:ac:36:df:12:7e:29:11:25:10:6f:a8: c3:c9:d6:41:b4:8a:3f:1c:16:9f:3e:ab:67:b6:8c:9a:0b:30: 7f:47:f5:8e:1e:74:41:b1:da:f4:79:8a:41:4f:ec:26:e1:7c: 44:e0:53:81:c4:18:93:27:8b:72:3b:e7:a8:a4:13:b6:d4:2b: 89:a4:46:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxLk4dYBNnp6aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk MDFlMDc3YzgtZDljMS00NjNlLWIxYWEtNWZlOGQwNmRkMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejuU/J2NsYe8X0C8raGLua0cHMakLMeiBCf /FTbeu9mbiubdJELmgEXiymrN8k+eTPVcaxyhZ6Vt+MddUfwsjcN3DDPxoIonLMX xyRjUCXHIRtlyuviztdleLuO5onP+3zzE+Z1GeC846oyjlV5LT/9/JIpMqkbricU zga6R7RvC8/zi9hJheGq/qJtY+UkJ+QvkFv+f48aoR+C7A2BnpTL2cKyUEwCz8uy n00GfKCDvB24kgDdMabaRbUGba1SCwU4GGia9OwchpOZbRPTClMdALb9WezEFAUq X5jzxctKrZEhx0ZqdGtX297Rb282fkNetoKydSRDdcQb4GDT4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBJBWv6JelB4ByWguSri4qMO08iEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvM2M5ZGQ4OGMtNmNkYy00 ODc1LThjZGQtYTNjNjUzZTJmZDdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa6D8LuVK3A9tUkDiMnjmh my6ho4Obl8RBGsLCox11tTHngRY8xek5+EGALXSdBIJaQCa6r5KILqceBJ63EU31 er1apQqZZwVTfRFVKgcjmu4O8D7/txuZmpkh6S6M9Ge1nU6/BP4rLPrMdSQCuIOh UBburUwgxX/gZV7zCpYdQ/Dx+zCyYEFjQpUMWoNp1qydez8Oa2Tb+slplr+O98rY qDq158XcXXbGR7pEUHcc7nM3CiXBqoh/TE/MrDbfEn4pESUQb6jDydZBtIo/HBaf PqtntoyaCzB/R/WOHnRBsdr0eYpBT+wm4XxE4FOBxBiTJ4tyO+eopBO21CuJpEbF -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:05 2025 by rpki-client