$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft File: 3e43e154-e174-4a6b-a09a-e289bd92a034.mft (raw, json) Hash identifier: S3LudbmQTK2ZhR+sEA69Isi91qEAd+q0Ic2ucX2hcL8= Subject key identifier: 13:E3:38:17:9B:D0:6A:12:A6:88:44:1E:88:FD:2D:0E:21:04:FE:C1 Authority key identifier: 97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 Certificate issuer: /CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Certificate serial: 010D0C9F4328584BC093834CAEC3E8CC53713F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft Manifest number: 010D0C9F4328584944138B300DF9C4D02E8D3BAB Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 3e43e154-e174-4a6b-a09a-e289bd92a034.crl (hash: z6Jl49ctKQpj93eE1EeCPpCNMa7Yby/Q5Ajq4cB3fEM=) 2: bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa (hash: XSOW+diyOS9qcfBIaWgnZk4BCGbCLkSgIok1UtCvrEg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:83:4c:ae:c3:e8:cc:53:71:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=40de007f-b072-4ca1-b2f5-35ba7005f1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:0f:1a:af:77:f6:68:4f:9c:47:e7:07:04: ec:53:85:18:5a:aa:53:31:bb:ce:2e:92:b2:ae:32: 9b:85:b6:92:77:68:a7:2f:84:ef:06:ad:f0:ec:25: b3:0c:ac:97:23:60:84:6b:f7:15:dd:fd:c9:e7:59: 0b:a1:5a:12:01:f8:c8:5a:2e:23:95:52:55:fb:34: 6e:f7:55:2c:23:d3:cb:32:20:82:3a:57:af:ae:0c: 98:79:ab:f5:60:b2:b6:e8:d8:ab:43:b7:eb:04:59: b6:ea:2a:62:50:56:e7:fc:b9:60:d8:35:02:3b:d5: 4f:ed:15:dd:16:0d:2e:41:2f:36:f6:59:1c:f8:0c: dc:a5:cd:39:31:96:ff:5c:32:77:7c:da:fd:de:63: ee:e6:e4:3c:2e:51:94:5e:07:e3:0b:4f:6c:f5:5a: a5:b1:fe:53:1c:fb:d0:7c:96:30:3c:06:9f:33:bb: 4d:e1:68:d2:ee:5e:12:fc:1c:fd:bc:92:96:d9:5f: 55:a2:e6:dd:d1:da:8a:27:ad:4a:6f:a4:88:00:6b: 13:1d:25:6b:4a:10:19:24:90:4a:85:39:cc:4b:db: b5:f4:33:6a:5b:06:81:40:57:1c:b5:21:4b:12:68: ed:9f:e9:b3:b8:6b:84:a0:49:0c:e4:df:1e:00:3e: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E3:38:17:9B:D0:6A:12:A6:88:44:1E:88:FD:2D:0E:21:04:FE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl X509v3 Authority Key Identifier: keyid:97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f8:44:c7:4b:e4:bb:fe:80:1a:04:49:8e:76:e1:57:eb:72: d7:f0:af:b1:36:5a:d3:c9:03:61:24:52:bb:18:34:d0:c6:38: a1:ea:ae:0c:2d:06:7e:5d:0f:06:56:80:28:28:7d:35:a4:99: e4:d8:20:c8:f8:46:6a:0f:c1:8e:25:5c:58:42:15:e5:8e:53: 92:0d:75:60:ac:75:1b:77:a2:a6:a8:ee:31:a6:d1:2e:2a:5d: b6:5b:bb:bd:ca:b0:e3:ab:3c:8e:de:38:ed:9a:ec:82:dd:c0: 42:01:75:d1:66:f3:53:ca:26:ee:8a:de:3f:dc:6a:40:81:57: 31:f4:de:85:cb:10:e7:8f:42:e6:2e:ec:a1:eb:d9:cd:79:ef: 90:17:11:cf:68:e8:14:26:95:11:a6:fb:fa:e7:24:35:2d:ca: d6:29:55:4d:88:66:8a:a0:3f:25:ff:11:e7:14:ae:1a:dd:b0: 2d:71:e6:b9:dc:02:ef:36:a1:0f:b2:8b:f6:b2:ac:0b:2d:e7: 4f:81:ee:08:30:b9:bb:b1:ee:4f:9f:d8:00:29:f3:83:cf:bd: 68:c4:b7:d6:5d:2b:bf:76:78:d8:eb:f0:55:8f:3c:70:a0:a5: 03:9a:43:a7:bd:3a:be:7f:92:dd:c4:7c:4a:9c:9a:42:c3:56: d6:53:d9:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4NMrsPozFNxP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U0M2UxNTQtZTE3NC00YTZiLWEwOWEtZTI4OWJkOTJh MDM0MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk NDBkZTAwN2YtYjA3Mi00Y2ExLWIyZjUtMzViYTcwMDVmMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvsPGq939mhPnEfnBwTsU4UYWqpTMbvOLpKy rjKbhbaSd2inL4TvBq3w7CWzDKyXI2CEa/cV3f3J51kLoVoSAfjIWi4jlVJV+zRu 91UsI9PLMiCCOlevrgyYeav1YLK26NirQ7frBFm26ipiUFbn/Llg2DUCO9VP7RXd Fg0uQS829lkc+Azcpc05MZb/XDJ3fNr93mPu5uQ8LlGUXgfjC09s9Vqlsf5THPvQ fJYwPAafM7tN4WjS7l4S/Bz9vJKW2V9Voubd0dqKJ61Kb6SIAGsTHSVrShAZJJBK hTnMS9u19DNqWwaBQFcctSFLEmjtn+mzuGuEoEkM5N8eAD7J7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBPjOBeb0GoSpohEHoj9LQ4hBP7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQz ZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5YmQ5MmEwMzQvM2U0M2UxNTQtZTE3NC00 YTZiLWEwOWEtZTI4OWJkOTJhMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2U0M2UxNTQtZTE3NC00YTZiLWEw OWEtZTI4OWJkOTJhMDM0LzNlNDNlMTU0LWUxNzQtNGE2Yi1hMDlhLWUyODliZDky YTAzNC5jcmwwHwYDVR0jBBgwFoAUl5YC2dswnhnP056lQoCu/o/5m8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQzZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5 YmQ5MmEwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk+ETHS+S7/oAaBEmOduFX 63LX8K+xNlrTyQNhJFK7GDTQxjih6q4MLQZ+XQ8GVoAoKH01pJnk2CDI+EZqD8GO JVxYQhXljlOSDXVgrHUbd6KmqO4xptEuKl22W7u9yrDjqzyO3jjtmuyC3cBCAXXR ZvNTyibuit4/3GpAgVcx9N6FyxDnj0LmLuyh69nNee+QFxHPaOgUJpURpvv65yQ1 LcrWKVVNiGaKoD8l/xHnFK4a3bAtcea53ALvNqEPsov2sqwLLedPge4IMLm7se5P n9gAKfODz71oxLfWXSu/dnjY6/BVjzxwoKUDmkOnvTq+f5LdxHxKnJpCw1bWU9nD -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:27 2025 by rpki-client