$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: 1zN+cN9M87TcaER23v6ADa2oPzEyLU8fr4KApOfjJ4w= Subject key identifier: 2C:F4:CF:34:34:A3:B4:DA:0B:A5:08:35:4E:D8:64:9A:56:E9:FF:14 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584BC01C629556CBC8992469B800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BF2C Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: xk+i1rfzOT2pF1Tqcv2mi7hZOrCZ4bMoxiJAPTg2UgE=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: hFfPoYhCJXqDPp6e7NItDcOmMQ+GZn7lcTUddxbvvJk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:95:56:cb:c8:99:24:69:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=b4dbd7f9-dddb-4b16-9cd1-b2d574e4162b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:7f:74:c3:79:c8:0a:06:38:87:66:27:01: b2:6b:1d:3a:8d:4f:e4:ec:2e:9d:aa:ec:08:e0:36: 4e:48:31:eb:84:8a:02:8a:e4:bb:33:96:3a:ca:57: 9a:d8:f7:09:0b:2a:f0:11:49:27:9c:4e:c8:f3:47: 82:c0:fe:f4:5f:54:5b:46:4b:86:3e:f7:14:47:52: d1:a4:6a:91:98:fb:0c:f6:da:2d:87:9c:da:0e:67: 8f:49:4e:c4:80:2e:11:57:a5:bb:8f:c2:b6:d8:9a: df:df:89:2e:f4:80:a5:c3:50:ed:85:8c:5e:90:68: 53:51:15:87:e0:4c:5f:cb:96:18:bc:c1:b7:6b:c0: 86:37:2b:04:66:04:a3:2f:3d:b4:c8:5d:47:fc:88: 18:b4:ab:74:25:e9:1e:ab:1a:e6:73:bd:f5:3f:a2: 39:21:55:8f:9a:f3:55:c0:1a:8c:8e:83:f2:e9:f9: 5b:64:38:fd:fc:c9:e1:ae:a1:02:79:c1:29:47:44: cd:2d:9e:f9:07:df:cc:3a:50:5f:ca:77:06:ca:f9: 78:8c:88:fb:e4:6d:21:bb:1b:ba:7f:a2:b0:67:77: c2:5a:56:a7:ee:89:15:b7:81:76:ff:d5:a0:f9:79: 44:aa:80:94:64:93:8b:1c:9e:de:4e:36:80:b6:ee: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:CF:34:34:A3:B4:DA:0B:A5:08:35:4E:D8:64:9A:56:E9:FF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:1f:68:29:7b:03:8b:09:95:39:ce:82:15:b6:47:0d:6b: a9:e8:1b:27:e3:bf:90:44:42:9b:6b:e4:95:44:98:77:81:3b: 0f:c4:5c:76:6f:96:71:a8:5f:f1:4a:1c:04:c1:3f:ff:c7:a9: bc:af:9f:ff:85:8a:10:b3:f1:f3:ae:84:64:9f:02:0d:09:0e: e5:65:15:a7:94:e9:f6:b6:ee:8f:29:21:20:18:9e:b7:7e:fc: 77:8d:db:82:d6:5f:1c:50:8b:26:8d:71:5d:d4:c5:bd:4d:5a: e2:91:11:a9:39:94:0a:54:f6:1b:27:48:a1:be:d4:16:15:2c: 16:eb:ec:2e:f9:0b:1a:13:c3:66:0a:7a:67:af:19:fc:74:e4: e1:ff:0b:f7:5d:10:76:4b:c9:62:79:c2:ea:fa:94:1d:00:55: 04:62:5e:35:c3:d1:3e:59:9b:0b:57:18:ec:23:25:3e:69:f5: c5:46:97:1f:b5:4a:95:e9:7a:2a:f8:1d:73:e8:33:00:56:75: 63:c5:15:d4:40:bd:63:d1:b8:42:e7:3e:9b:7f:b5:9c:ca:10: 41:b8:33:62:bc:11:75:00:0e:2a:76:cd:42:f1:90:b2:e5:79: 97:48:1b:4c:fb:94:9d:29:19:73:80:fc:c7:e3:5d:64:18:c4: 45:22:cd:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGKVVsvImSRpuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk YjRkYmQ3ZjktZGRkYi00YjE2LTljZDEtYjJkNTc0ZTQxNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOh/dMN5yAoGOIdmJwGyax06jU/k7C6dquwI 4DZOSDHrhIoCiuS7M5Y6ylea2PcJCyrwEUknnE7I80eCwP70X1RbRkuGPvcUR1LR pGqRmPsM9toth5zaDmePSU7EgC4RV6W7j8K22Jrf34ku9IClw1DthYxekGhTURWH 4Exfy5YYvMG3a8CGNysEZgSjLz20yF1H/IgYtKt0Jekeqxrmc731P6I5IVWPmvNV wBqMjoPy6flbZDj9/MnhrqECecEpR0TNLZ75B9/MOlBfyncGyvl4jIj75G0huxu6 f6KwZ3fCWlan7okVt4F2/9Wg+XlEqoCUZJOLHJ7eTjaAtu6bwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCz0zzQ0o7TaC6UINU7YZJpW6f8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALih9oKXsDiwmVOc6CFbZH DWup6Bsn47+QREKba+SVRJh3gTsPxFx2b5ZxqF/xShwEwT//x6m8r5//hYoQs/Hz roRknwINCQ7lZRWnlOn2tu6PKSEgGJ63fvx3jduC1l8cUIsmjXFd1MW9TVrikRGp OZQKVPYbJ0ihvtQWFSwW6+wu+QsaE8NmCnpnrxn8dOTh/wv3XRB2S8liecLq+pQd AFUEYl41w9E+WZsLVxjsIyU+afXFRpcftUqV6Xoq+B1z6DMAVnVjxRXUQL1j0bhC 5z6bf7WcyhBBuDNivBF1AA4qds1C8ZCy5XmXSBtM+5SdKRlzgPzH411kGMRFIs3l -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:30 2025 by rpki-client