$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: UfIDsCyqq8w4ByGDw5l4ZULRX3i9/sCg+qNez6lUzus= Subject key identifier: CC:11:9F:E3:77:70:D9:2E:67:3C:A9:CC:B3:66:DA:A1:32:5D:29:3B Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584BBF69B826A0186CF13D918C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B6079 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: Iu8XRtpaAl//AObQVujvD/08gTvsJDmcv2eeE1iwfuo=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: 2nc3bnJyIqSNV4G+VAaLEqyutIbytMfdU5Lg+PVfeV0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b8:26:a0:18:6c:f1:3d:91:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=568da1aa-e061-4329-aca7-6e1a1179b1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:a7:05:9d:f6:d4:5d:de:aa:1f:7f:06:9c: 20:5f:07:7c:c2:f5:ff:1e:79:bf:bb:1c:99:94:65: f1:0a:15:5a:8a:0d:0f:2b:9a:83:51:cd:d2:98:bc: ed:f5:a4:bc:b1:10:1d:35:1f:82:c0:9c:c8:38:9e: 25:4e:49:46:52:ef:ec:e6:26:13:96:af:5d:e5:28: 58:fb:46:0a:7d:d4:ac:59:2e:2b:c4:6e:52:8f:9a: 34:72:5a:74:df:f8:08:3a:5e:43:39:7d:77:db:13: 48:aa:28:4e:f6:46:75:09:92:6a:90:37:f9:4d:29: 1e:fa:42:6e:67:20:a9:52:ff:07:61:9a:70:98:41: bb:56:c4:71:18:61:33:bb:8a:a4:6f:ee:b2:bb:19: a0:96:e6:8c:60:f9:30:db:09:68:40:c8:cd:dd:53: 71:f2:bc:ed:1a:91:42:57:45:09:78:79:de:4c:ed: 0c:b1:ec:ee:c5:f9:66:7f:bc:63:a2:c8:a2:e0:de: 00:be:7d:89:d1:d3:55:f5:a6:c5:11:88:09:62:86: 73:01:01:9b:66:d0:f2:2c:22:79:d1:36:ec:81:12: ac:a2:20:f7:6f:f1:47:75:f3:89:e1:02:64:75:bb: ec:e4:3d:13:be:06:92:8d:75:d5:c7:79:5b:59:84: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:11:9F:E3:77:70:D9:2E:67:3C:A9:CC:B3:66:DA:A1:32:5D:29:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:62:00:f0:5c:2e:36:38:84:1b:05:c1:74:05:e9:e9:94:f4: 14:55:3c:08:49:05:22:a0:de:70:15:66:65:bc:4b:5c:e3:80: b7:41:a3:fe:21:86:51:8e:29:eb:96:77:e8:b3:af:37:37:52: ee:20:31:a5:84:0f:e1:0b:be:31:3d:63:a5:cd:84:9c:ea:84: c3:c1:4f:01:a2:b5:22:6d:5d:79:6b:50:ee:9c:01:9b:63:8e: d9:93:f4:b8:ee:fd:f5:de:5e:62:86:e9:91:0e:7f:1d:80:47: 12:a3:3c:c9:f0:9b:dd:14:20:6f:b7:ef:bc:61:0c:d1:c9:09: d8:e0:4f:6b:c1:01:2a:7c:a1:ae:27:e7:52:08:6b:63:67:a6: e3:2f:ac:a5:b1:c0:b5:29:ef:a7:0f:0d:86:6c:83:fa:47:7b: 73:22:8f:cf:9f:ab:ed:8a:dc:2d:e6:c0:3e:f2:6b:86:12:67: 91:f0:55:f8:10:d9:f9:c6:61:4e:09:48:0f:a5:1c:aa:9f:b6: c6:1a:4e:f2:67:20:5a:73:0a:4b:f7:ee:c9:f4:9d:62:7a:f4: 49:03:ad:1b:e7:c8:a3:46:04:ec:59:6f:d5:ac:38:da:e2:9c: 50:c2:df:67:0d:1c:ac:ec:a5:0e:4e:9c:5c:5c:8c:91:ac:0b: 8f:03:d8:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abgmoBhs8T2RjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk NTY4ZGExYWEtZTA2MS00MzI5LWFjYTctNmUxYTExNzliMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ASnBZ321F3eqh9/BpwgXwd8wvX/Hnm/uxyZ lGXxChVaig0PK5qDUc3SmLzt9aS8sRAdNR+CwJzIOJ4lTklGUu/s5iYTlq9d5ShY +0YKfdSsWS4rxG5Sj5o0clp03/gIOl5DOX132xNIqihO9kZ1CZJqkDf5TSke+kJu ZyCpUv8HYZpwmEG7VsRxGGEzu4qkb+6yuxmgluaMYPkw2wloQMjN3VNx8rztGpFC V0UJeHneTO0Msezuxflmf7xjosii4N4Avn2J0dNV9abFEYgJYoZzAQGbZtDyLCJ5 0TbsgRKsoiD3b/FHdfOJ4QJkdbvs5D0TvgaSjXXVx3lbWYSTLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMwRn+N3cNkuZzypzLNm2qEyXSk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCYgDwXC42OIQbBcF0Benp lPQUVTwISQUioN5wFWZlvEtc44C3QaP+IYZRjinrlnfos683N1LuIDGlhA/hC74x PWOlzYSc6oTDwU8BorUibV15a1DunAGbY47Zk/S47v313l5ihumRDn8dgEcSozzJ 8JvdFCBvt++8YQzRyQnY4E9rwQEqfKGuJ+dSCGtjZ6bjL6ylscC1Ke+nDw2GbIP6 R3tzIo/Pn6vtitwt5sA+8muGEmeR8FX4ENn5xmFOCUgPpRyqn7bGGk7yZyBacwpL 9+7J9J1ievRJA60b58ijRgTsWW/VrDja4pxQwt9nDRys7KUOTpxcXIyRrAuPA9hj -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:46 2025 by rpki-client