$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: aBiT3uIlaoNI6VT2/PK2XX8xq63AQoE2OXOKlbtOgHA= Subject key identifier: 19:F5:C4:30:00:2F:76:2D:A2:88:D8:E6:E9:2C:A3:C4:89:4C:7F:FD Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584BBFFEA8DA19B2367A2FADDDD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D185 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: trIcwoS1kEuMsQVn07Xmi5wlT3pdFIQ+WI8GTBinqV4=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: xa0ElEHH4iM4OTAiHXd1SqEeS2SGiJju5LC2iHCmnac=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: btmZZC0kajTpoNVgWMJRbfCd1Vx4c6v+VsMD5wUNqCc=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: NiKR63g68A46kkCZ5a8H6gX37ZXVGuED9dWT2qTDAis=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a8:da:19:b2:36:7a:2f:ad:dd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=04c2e176-0a57-485a-8a6b-5e59d2deb9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:24:b4:c3:86:4b:6d:14:9a:1c:1c:37:c6: c2:7a:d2:8a:37:89:3a:f2:5a:77:09:89:15:29:51: 8f:ac:8b:7a:58:5a:fb:ba:6c:07:1a:bc:8e:d7:2a: af:d9:50:de:92:ac:d6:36:ee:61:09:f8:7c:6d:3a: d1:73:61:a3:8f:e7:bd:90:8d:21:7f:65:5d:c0:67: fd:a1:df:69:a2:8b:96:d9:ba:74:fc:6b:cc:72:7b: da:ac:17:23:04:c2:e8:b7:56:19:ea:31:d2:9f:40: 96:f8:c8:13:e3:36:2d:80:70:18:93:04:50:0e:bb: 43:55:bf:37:f3:90:2a:6e:e8:73:77:55:d4:89:fe: 79:85:65:cc:87:97:96:d9:4d:e1:58:3f:76:13:8b: b5:09:4c:75:22:8c:44:d5:6b:97:e0:b7:26:56:49: 29:ce:c9:7d:90:69:b4:9d:22:8f:2f:fe:68:1f:f9: b3:c3:16:18:a1:1c:db:81:2c:d1:34:b2:9d:57:29: 3d:7f:06:aa:91:f8:7d:64:41:28:be:d6:a5:46:97: 8c:9a:69:c5:e5:d3:7f:99:68:3b:60:dc:32:32:bd: 71:21:96:21:f1:82:12:21:e2:7d:04:80:34:48:9c: ba:d7:f9:46:62:1c:c6:c4:46:24:91:ab:f1:6b:20: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F5:C4:30:00:2F:76:2D:A2:88:D8:E6:E9:2C:A3:C4:89:4C:7F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5b:12:1e:95:be:97:1d:7e:a6:08:b0:4b:63:32:16:0e:77: 0d:ff:b1:b3:7a:0d:c8:fe:73:ad:70:96:bc:2e:ce:ab:44:5c: cd:f8:46:88:84:e4:12:db:04:fd:61:b1:0c:e0:cf:71:30:99: df:28:e5:b9:b9:e4:44:b5:ad:6f:f5:2f:87:23:1d:ed:3d:61: c1:3f:39:ab:fe:bc:4f:97:cc:84:23:31:e3:fe:cd:f3:dd:0f: 9f:12:7c:67:58:ba:b0:32:6e:cf:6e:11:58:33:54:ca:16:fe: 35:c8:fb:0c:b1:ef:cf:bd:2d:47:de:cd:cb:f3:60:b6:49:1f: 4b:75:ba:48:cf:9f:53:10:46:da:02:5f:32:e3:f1:78:6b:e2: 73:f8:37:1b:5b:c7:ba:e9:f6:10:99:2f:a9:37:16:06:d2:77: 58:6a:37:eb:4d:ec:75:48:86:10:ff:58:f3:af:86:a3:a4:fa: b6:b9:f0:eb:90:5b:ba:68:1a:28:89:4f:9a:47:82:8f:2c:b9: d1:56:8f:bb:ec:85:07:08:98:8e:bd:e3:0e:85:9e:c1:a0:28: 33:6d:ff:36:c9:b5:24:d9:7f:d0:d0:1f:24:10:94:be:97:2e: dd:4f:c8:bb:99:52:25:e5:a2:9d:ef:0e:07:e9:16:2e:fc:8c: cb:fe:f5:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qjaGbI2ei+t3dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk MDRjMmUxNzYtMGE1Ny00ODVhLThhNmItNWU1OWQyZGViOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8ktMOGS20UmhwcN8bCetKKN4k68lp3CYkV KVGPrIt6WFr7umwHGryO1yqv2VDekqzWNu5hCfh8bTrRc2Gjj+e9kI0hf2VdwGf9 od9poouW2bp0/GvMcnvarBcjBMLot1YZ6jHSn0CW+MgT4zYtgHAYkwRQDrtDVb83 85Aqbuhzd1XUif55hWXMh5eW2U3hWD92E4u1CUx1IoxE1WuX4LcmVkkpzsl9kGm0 nSKPL/5oH/mzwxYYoRzbgSzRNLKdVyk9fwaqkfh9ZEEovtalRpeMmmnF5dN/mWg7 YNwyMr1xIZYh8YISIeJ9BIA0SJy61/lGYhzGxEYkkavxayCeCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBn1xDAAL3YtoojY5ukso8SJTH/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALWxIelb6XHX6mCLBLYzIW DncN/7Gzeg3I/nOtcJa8Ls6rRFzN+EaIhOQS2wT9YbEM4M9xMJnfKOW5ueREta1v 9S+HIx3tPWHBPzmr/rxPl8yEIzHj/s3z3Q+fEnxnWLqwMm7PbhFYM1TKFv41yPsM se/PvS1H3s3L82C2SR9LdbpIz59TEEbaAl8y4/F4a+Jz+DcbW8e66fYQmS+pNxYG 0ndYajfrTex1SIYQ/1jzr4ajpPq2ufDrkFu6aBooiU+aR4KPLLnRVo+77IUHCJiO veMOhZ7BoCgzbf82ybUk2X/Q0B8kEJS+ly7dT8i7mVIl5aKd7w4H6RYu/IzL/vUD -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:07 2025 by rpki-client