$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft File: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft (raw, json) Hash identifier: boVtqPiGSUDegW24URKjzO+AXJMm/Y2lC+TF9jfqRFE= Subject key identifier: CA:08:79:1A:3A:40:E2:8B:3E:51:4D:B2:F1:08:8C:EA:D7:0D:46:69 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584BC2AB92773CFC7E2760E25E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft Manifest number: 010D0C9F43285848DEA6AA7962B2F4D6BC028C1D Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (hash: 2bkaMIz0iHCyqQ49dapf4ECGRdA0xu49vBysckehI9g=) 2: 3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl (hash: 4hhUIEnmkMV5sPwkqt4o60qmB/eUDhIMUT3gEB1n5i8=) 3: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (hash: kV89u/LaPGGqCUTeFbFALwmTOvoWezbCPJTHJCUAUo0=) 4: 904b080a-8e57-3918-95ab-750f6766dc80.roa (hash: 5ltuFAE8IsxCAfwCtG3FIGr1xcKoXdV/kj9GJ/Wj7UE=) 5: a98d5494-4572-385b-afc9-1ffafc221b11.roa (hash: XJ/UpDe6ETSaMzlYin8OvBmVHPl7nR2iLneskhEiDwE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:92:77:3c:fc:7e:27:60:e2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=94313feb-1a32-4cc2-9543-64dc01444b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:8b:41:ee:1f:c0:20:3e:b2:34:a9:bd:6a: 4f:4c:be:f0:36:2d:f1:86:09:f8:bb:ff:1a:d7:e9: 3a:66:7a:62:ad:43:fe:40:81:f2:50:a8:21:59:29: 31:ef:0f:d0:7d:ac:76:92:2e:d3:8a:a1:fd:ae:27: 75:b5:97:d4:9e:eb:dc:51:d5:d8:62:83:fe:aa:7c: c1:d0:99:83:48:f0:ef:d6:63:8d:74:0e:a9:51:4d: 9b:eb:3e:5f:fc:10:d9:b4:5a:aa:20:7f:1b:25:bd: 17:0e:f7:60:a1:d4:9f:40:f1:64:78:6f:f6:84:55: 19:58:62:de:1c:31:9c:a5:59:62:c0:bc:e2:21:ce: 96:37:cc:ec:5d:30:23:69:d1:3f:d7:91:fb:1d:cf: ac:0b:19:24:a6:58:2b:5e:71:77:5d:3f:11:50:0f: f6:41:b0:fb:39:c0:cd:7a:93:f8:f2:7d:a8:09:84: f0:43:97:67:d4:bd:94:d7:cf:2a:3b:c4:f1:e9:0a: fc:af:b5:2d:de:68:26:48:99:b7:f5:a0:50:33:36: 56:13:1d:d2:0f:54:1d:04:ff:32:87:29:58:9e:cc: 28:80:e2:86:bc:5e:d6:d9:d2:2d:86:53:85:ad:61: e1:23:0e:18:ae:e6:bc:87:25:35:32:33:b6:46:c6: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:79:1A:3A:40:E2:8B:3E:51:4D:B2:F1:08:8C:EA:D7:0D:46:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b2:80:f4:1e:5d:03:14:e3:9d:27:de:24:e0:3b:86:0b:f3: eb:44:9f:97:10:54:1c:c8:63:da:20:01:f4:1f:e3:c4:82:95: 45:5a:57:de:d6:f0:7c:17:43:d6:8a:2c:12:72:0e:f7:38:28: c7:97:5b:18:48:15:01:b9:4f:d5:3a:7d:c3:8d:44:8d:b7:c6: 70:a6:47:58:1f:a2:37:a9:0e:d0:63:dd:fa:4d:10:c8:ea:ec: 1f:80:46:6e:af:c0:62:4b:8a:42:d6:9e:93:fc:0a:ac:8e:de: 70:87:d3:08:0d:c1:30:22:fb:01:4a:a6:59:e9:c1:ec:24:0b: 0e:a8:c9:76:6d:d1:6e:ae:96:bb:44:68:58:45:b1:11:08:48: dc:b4:1b:a8:53:87:74:33:a3:5d:d8:14:44:39:af:17:38:07: 92:d1:34:b6:08:dd:fe:be:7d:a4:be:6f:92:e3:d1:73:14:e7: 64:51:82:1d:73:71:38:8f:61:1c:16:95:83:a9:c1:2c:09:08: 84:8f:bb:95:05:ed:38:77:dc:c4:8c:d0:50:59:7e:a5:05:45: 37:e9:6e:be:bc:2f:43:7b:cd:ef:6b:0c:5b:5c:88:46:25:57: 0a:ea:cd:f9:83:01:aa:9d:3e:4d:3b:fa:76:b2:3e:79:26:a1: c2:3a:c0:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq5J3PPx+J2DiXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk OTQzMTNmZWItMWEzMi00Y2MyLTk1NDMtNjRkYzAxNDQ0YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkuLQe4fwCA+sjSpvWpPTL7wNi3xhgn4u/8a 1+k6ZnpirUP+QIHyUKghWSkx7w/Qfax2ki7TiqH9rid1tZfUnuvcUdXYYoP+qnzB 0JmDSPDv1mONdA6pUU2b6z5f/BDZtFqqIH8bJb0XDvdgodSfQPFkeG/2hFUZWGLe HDGcpVliwLziIc6WN8zsXTAjadE/15H7Hc+sCxkkplgrXnF3XT8RUA/2QbD7OcDN epP48n2oCYTwQ5dn1L2U188qO8Tx6Qr8r7Ut3mgmSJm39aBQMzZWEx3SD1QdBP8y hylYnswogOKGvF7W2dIthlOFrWHhIw4Yrua8hyU1MjO2RsY2QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMoIeRo6QOKLPlFNsvEIjOrXDUZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMzY4OWI5Y2UtMDg5ZC00 MTM3LWIxNGQtN2U0Y2QxNWU1M2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3soD0Hl0DFOOdJ94k4DuG C/PrRJ+XEFQcyGPaIAH0H+PEgpVFWlfe1vB8F0PWiiwScg73OCjHl1sYSBUBuU/V On3DjUSNt8ZwpkdYH6I3qQ7QY936TRDI6uwfgEZur8BiS4pC1p6T/Aqsjt5wh9MI DcEwIvsBSqZZ6cHsJAsOqMl2bdFurpa7RGhYRbERCEjctBuoU4d0M6Nd2BREOa8X OAeS0TS2CN3+vn2kvm+S49FzFOdkUYIdc3E4j2EcFpWDqcEsCQiEj7uVBe04d9zE jNBQWX6lBUU36W6+vC9De83vawxbXIhGJVcK6s35gwGqnT5NO/p2sj55JqHCOsCY -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:48 2025 by rpki-client