$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft File: 3990f0e4-fc13-467e-a765-98d98d252d56.mft (raw, json) Hash identifier: hiMEtnbeh0zoRiPLIeUqk2NNyKXvYcOAkye8w3T+OgU= Subject key identifier: 89:81:85:2D:36:7A:1C:85:53:20:ED:0A:8B:78:2E:86:A1:EB:48:14 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584BC01C68C21AEA518344DFDA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft Manifest number: 010D0C9F43285849ADAE6A28B57A43A6EC954F63 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 3990f0e4-fc13-467e-a765-98d98d252d56.crl (hash: cKol/qE/S3DeKrgBJ3H48bMFlBcyR7HOQmbxJnohUOI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:68:c2:1a:ea:51:83:44:df:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=51cb8ae1-1d1f-4fff-9b18-b30fe1e73766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:11:6a:39:95:28:cf:46:bb:32:fb:24:aa: 71:35:15:33:d2:48:38:64:a3:be:bd:af:c2:ec:21: 4b:c4:4f:c0:85:21:9f:64:06:f1:f4:38:5e:36:cb: 85:37:41:60:13:71:19:f3:53:6b:4a:3b:0c:83:2b: ed:cc:c5:cf:e6:28:47:34:d7:50:2b:00:c8:92:a0: 24:b0:52:1d:f7:c8:4e:42:bb:29:a4:4a:c3:ee:28: 0e:71:83:fd:aa:8c:ae:d2:d6:86:b1:39:37:9b:e3: 16:78:87:a9:ea:e4:02:b0:66:90:58:8c:66:b7:40: 34:b5:71:92:d4:f8:77:b9:d8:22:dc:04:8c:ee:ad: 97:a5:a1:f3:35:9a:69:8f:01:3c:63:fc:b0:1b:44: 25:d1:60:9a:5c:a4:a9:29:2c:4d:ea:24:ef:27:b0: 65:e2:eb:cb:46:03:56:82:9e:6f:ed:82:c7:f3:bf: 68:87:26:f0:fb:63:26:51:bf:3b:23:2a:9f:9a:27: b0:9e:5e:dc:ff:1a:d8:3d:f4:60:2a:bd:f5:85:28: 30:70:06:5f:ce:2b:59:e3:85:a8:e2:a7:7f:13:54: 78:fb:35:07:2f:34:37:9a:8a:d3:79:3b:6b:12:16: 88:6b:51:fb:16:7e:e5:5a:a7:22:8b:c9:ee:7c:e1: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:85:2D:36:7A:1C:85:53:20:ED:0A:8B:78:2E:86:A1:EB:48:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:55:4f:f0:40:8c:72:ff:62:89:8e:51:79:fd:f4:ec:02:4d: a9:00:93:a9:04:08:ee:b9:1b:e1:66:bb:8a:1a:c8:bc:97:03: 02:25:00:62:d8:ac:31:22:8f:f5:6e:65:45:b8:1c:c2:47:13: d8:a7:c7:a7:9d:53:a5:8e:41:ac:7c:54:18:c3:7a:b9:19:9a: db:eb:33:ea:b8:9d:69:e6:1d:c4:3a:9a:0d:85:a2:2c:d7:ca: 92:e7:9d:5a:9b:6f:35:55:f8:b7:29:76:62:29:bd:e6:a2:d7: 39:fd:e2:04:a9:b3:f6:16:5b:d8:a4:d8:72:f5:3b:00:f2:e6: 1e:c6:7b:d3:1b:4e:47:49:22:25:ba:be:10:b4:7b:f1:35:70: 90:fa:34:bd:79:85:10:df:ee:5b:b0:68:71:f3:cb:7f:02:c4: 95:33:cf:d5:a9:0f:51:35:cf:f7:8c:44:83:e6:dc:11:5b:6c: bc:c8:c5:36:2d:b1:7f:48:a2:69:46:2f:85:7a:b0:e5:e8:e7: 03:fe:1f:3a:02:ae:04:8f:e2:24:2b:b8:d0:01:b6:fe:56:b1: 2c:a9:1e:00:c1:3a:a2:dc:e6:f9:05:85:c7:7c:f7:2a:55:c8: e2:83:ff:59:eb:d9:e4:26:02:96:1c:6b:0c:b7:e0:5c:84:1f: 24:43:1b:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGjCGupRg0Tf2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk NTFjYjhhZTEtMWQxZi00ZmZmLTliMTgtYjMwZmUxZTczNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOgRajmVKM9GuzL7JKpxNRUz0kg4ZKO+va/C 7CFLxE/AhSGfZAbx9DheNsuFN0FgE3EZ81NrSjsMgyvtzMXP5ihHNNdQKwDIkqAk sFId98hOQrsppErD7igOcYP9qoyu0taGsTk3m+MWeIep6uQCsGaQWIxmt0A0tXGS 1Ph3udgi3ASM7q2XpaHzNZppjwE8Y/ywG0Ql0WCaXKSpKSxN6iTvJ7Bl4uvLRgNW gp5v7YLH879ohybw+2MmUb87Iyqfmiewnl7c/xrYPfRgKr31hSgwcAZfzitZ44Wo 4qd/E1R4+zUHLzQ3morTeTtrEhaIa1H7Fn7lWqcii8nufOGtIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFImBhS02ehyFUyDtCot4Loah60gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMzk5MGYwZTQtZmMxMy00 NjdlLWE3NjUtOThkOThkMjUyZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFVU/wQIxy/2KJjlF5/fTs Ak2pAJOpBAjuuRvhZruKGsi8lwMCJQBi2KwxIo/1bmVFuBzCRxPYp8ennVOljkGs fFQYw3q5GZrb6zPquJ1p5h3EOpoNhaIs18qS551am281Vfi3KXZiKb3motc5/eIE qbP2FlvYpNhy9TsA8uYexnvTG05HSSIlur4QtHvxNXCQ+jS9eYUQ3+5bsGhx88t/ AsSVM8/VqQ9RNc/3jESD5twRW2y8yMU2LbF/SKJpRi+FerDl6OcD/h86Aq4Ej+Ik K7jQAbb+VrEsqR4AwTqi3Ob5BYXHfPcqVcjig/9Z69nkJgKWHGsMt+BchB8kQxtn -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:24 2025 by rpki-client