$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft File: 3c372d7c-197a-4caa-82d9-dc676d91ea22.mft (raw, json) Hash identifier: qk/C7RAy7l1pNZYZkGNEZdezKFnwk8OCRLDl3oOdG00= Subject key identifier: 8D:F6:B6:80:84:D9:99:05:4C:61:AE:F0:C9:B3:41:12:32:B8:3B:94 Authority key identifier: 28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23 Certificate issuer: /CN=3c372d7c-197a-4caa-82d9-dc676d91ea22 Certificate serial: 010D0C9F4328584BBFFEA7111C29ADF47FF01780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft Manifest number: 010D0C9F4328584A604D569E8D9BF389939301C1 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 3c372d7c-197a-4caa-82d9-dc676d91ea22.crl (hash: hAv8PINN+SFn6pI89ubn73JFwoc0w6mgk0hxRPlXIFE=) 2: e2b3aed4-c831-3bd9-836f-207af6434ee3.roa (hash: hM31alXK2N0jDEtqLakg9TBmYLCrNMESof8njirKpgU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a7:11:1c:29:ad:f4:7f:f0:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c372d7c-197a-4caa-82d9-dc676d91ea22 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=131c627d-c2ad-41b9-b6ef-3ec989cf114b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:00:cd:21:d6:ac:f3:a5:58:bd:48:6e:61: c8:a3:ff:73:3b:3a:a5:08:b0:db:2e:80:aa:5b:4c: 60:a1:c9:cf:38:87:23:e6:ce:8b:63:28:fa:3d:08: 5d:f7:bc:a5:26:5f:a3:12:59:ad:6d:fe:6b:b3:3f: 32:4d:71:b1:0b:dc:00:28:a5:8b:a6:4a:79:02:7c: 24:64:45:fe:40:34:96:46:56:33:a5:01:44:99:f7: c9:a0:66:27:fe:38:be:63:68:2f:0f:15:1f:5c:bb: 12:ce:aa:e7:d4:11:5a:06:63:22:24:66:cb:0b:0c: 10:ab:9a:c4:68:d3:d5:54:4e:9b:fc:c7:54:f5:62: f8:92:a9:b3:26:f0:05:c5:00:35:a4:7d:27:44:79: 0d:0d:ee:c3:80:18:84:bb:d6:c3:c9:60:9d:4c:15: 0f:39:f8:60:7d:3d:52:e3:04:a9:97:cb:0e:3d:6f: fd:20:c9:dd:67:d5:78:7a:7d:7c:8d:98:6e:9a:06: f0:e4:0f:30:73:1f:51:cc:65:f5:13:84:d0:cd:cd: 0c:a8:44:61:d0:be:cb:c5:5e:6d:5f:b5:f8:ca:21: 0f:60:31:fc:f7:90:c6:af:20:ec:5b:ca:a9:d4:80: 0f:db:c8:8b:c7:b7:38:c3:dd:e1:44:d2:31:6c:2a: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F6:B6:80:84:D9:99:05:4C:61:AE:F0:C9:B3:41:12:32:B8:3B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl X509v3 Authority Key Identifier: keyid:28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e0:d8:eb:fa:15:24:ad:0d:22:d1:7a:dd:ab:e4:ec:08:9a: ab:15:7e:a7:ee:e5:aa:64:ae:45:b2:35:6d:7f:1d:63:33:04: 9d:b0:ad:45:32:e4:56:95:49:06:c9:56:6d:39:14:37:65:0f: bd:a9:0b:37:62:bf:60:dd:c5:bb:19:35:9a:1a:84:61:c8:db: 0b:de:f3:86:9e:2e:8c:17:da:75:d8:8a:13:7c:57:17:ea:db: 50:c7:84:54:f1:13:f5:23:a4:e3:12:b9:db:33:a8:70:08:5a: ae:dd:db:38:c7:f0:1f:5c:c0:75:52:2c:6f:2f:7e:94:25:fe: 09:b2:04:5b:24:ca:bb:f4:ec:fe:d3:cc:72:18:08:dd:ba:08: 46:7c:6d:0e:5e:4e:c7:5d:d5:fe:f0:45:27:98:2c:10:45:f4: 56:ce:24:b6:be:e8:71:b3:00:ac:a7:09:0c:d6:00:a5:28:35: ef:8a:54:e9:6d:ed:dd:c5:a5:92:be:a7:18:06:71:12:b8:fb: f5:fd:80:28:34:a4:d0:ad:4f:de:f1:01:f2:13:ca:03:04:7d: 84:0e:11:18:86:26:20:9b:c8:40:40:42:aa:b6:4d:88:83:83: 7a:58:07:2d:90:e5:62:2d:87:ef:40:b1:c4:77:38:ca:6f:ae: cf:eb:75:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qcRHCmt9H/wF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MzNzJkN2MtMTk3YS00Y2FhLTgyZDktZGM2NzZkOTFl YTIyMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MTMxYzYyN2QtYzJhZC00MWI5LWI2ZWYtM2VjOTg5Y2YxMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFkAzSHWrPOlWL1IbmHIo/9zOzqlCLDbLoCq W0xgocnPOIcj5s6LYyj6PQhd97ylJl+jElmtbf5rsz8yTXGxC9wAKKWLpkp5Anwk ZEX+QDSWRlYzpQFEmffJoGYn/ji+Y2gvDxUfXLsSzqrn1BFaBmMiJGbLCwwQq5rE aNPVVE6b/MdU9WL4kqmzJvAFxQA1pH0nRHkNDe7DgBiEu9bDyWCdTBUPOfhgfT1S 4wSpl8sOPW/9IMndZ9V4en18jZhumgbw5A8wcx9RzGX1E4TQzc0MqERh0L7LxV5t X7X4yiEPYDH895DGryDsW8qp1IAP28iLx7c4w93hRNIxbCpyTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI32toCE2ZkFTGGu8MmzQRIyuDuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzM3 MmQ3Yy0xOTdhLTRjYWEtODJkOS1kYzY3NmQ5MWVhMjIvM2MzNzJkN2MtMTk3YS00 Y2FhLTgyZDktZGM2NzZkOTFlYTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2MzNzJkN2MtMTk3YS00Y2FhLTgy ZDktZGM2NzZkOTFlYTIyLzNjMzcyZDdjLTE5N2EtNGNhYS04MmQ5LWRjNjc2ZDkx ZWEyMi5jcmwwHwYDVR0jBBgwFoAUKGN/m/wLrqmupNY68P6Ij8rGBiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzM3MmQ3Yy0xOTdhLTRjYWEtODJkOS1kYzY3 NmQ5MWVhMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB54Njr+hUkrQ0i0Xrdq+Ts CJqrFX6n7uWqZK5FsjVtfx1jMwSdsK1FMuRWlUkGyVZtORQ3ZQ+9qQs3Yr9g3cW7 GTWaGoRhyNsL3vOGni6MF9p12IoTfFcX6ttQx4RU8RP1I6TjErnbM6hwCFqu3ds4 x/AfXMB1UixvL36UJf4JsgRbJMq79Oz+08xyGAjdughGfG0OXk7HXdX+8EUnmCwQ RfRWziS2vuhxswCspwkM1gClKDXvilTpbe3dxaWSvqcYBnESuPv1/YAoNKTQrU/e 8QHyE8oDBH2EDhEYhiYgm8hAQEKqtk2Ig4N6WActkOViLYfvQLHEdzjKb67P63W2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:10 2025 by rpki-client