$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft (raw, json) Hash identifier: ikXY97Q27qBUdAwWXVarUQXDFh5TO71Pjeb6srnE9C0= Subject key identifier: 5D:91:03:AA:56:9A:22:68:8B:BD:30:E0:5F:0E:34:76:E1:9B:38:76 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584BC12872054487112A6C864880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft Manifest number: 010D0C9F432858487BBB0833A7DA59D64374D4F2 Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl (hash: EBW2FVY1/jsxJH1FUlozqF+RH+9vKmX/scrvLW//ljI=) 2: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (hash: G42ei1h1NPV1iLNaQZKWGRJfKbJJLGkLF0lSr/s7oWU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:72:05:44:87:11:2a:6c:86:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=b5909cdc-ebab-4247-afa1-071e6340b680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:7a:14:f0:8c:c6:21:35:80:30:e6:c7:3d: 49:2d:2e:ef:2f:10:b4:9f:99:9a:ec:26:0f:86:01: 69:d9:04:2c:f4:1b:58:39:3a:51:e5:e6:d6:0a:88: 80:2c:fe:e7:d6:c5:dd:17:55:ba:59:17:57:99:52: 8c:dc:4c:4a:83:9a:c4:35:a8:97:d3:0a:c0:bd:12: 04:da:26:21:24:11:ba:3a:e3:d3:f9:af:51:a0:7e: 55:84:b0:98:a0:73:b0:70:85:08:04:28:c5:d2:3f: 0a:b5:f8:5e:a0:14:90:be:fb:ef:9e:0f:11:4a:99: 5d:75:c7:c1:ac:66:74:a1:84:41:b3:01:e4:d3:ae: bf:13:72:9b:47:56:6e:94:1e:e2:7c:a2:d5:62:42: 5b:e3:8a:f1:61:af:b6:f4:e0:cf:0c:08:e0:9e:4e: 7c:85:1e:e9:da:59:e3:92:38:d9:81:57:5f:aa:71: 21:51:2a:4a:7b:50:fa:bb:57:ed:28:b2:90:07:2c: 7a:f7:23:2a:9f:a9:0f:31:1a:37:b0:1a:6a:3a:92: 1e:dc:8c:04:2a:93:a9:01:d5:b2:90:fc:82:65:8b: e1:fb:0a:02:27:f0:00:84:ce:5f:0f:e9:de:79:e9: d5:c3:61:2e:a4:6e:af:67:67:26:2d:30:c0:1a:37: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:91:03:AA:56:9A:22:68:8B:BD:30:E0:5F:0E:34:76:E1:9B:38:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7d:a0:50:87:1b:b9:7b:a8:00:41:4e:c3:aa:7e:0c:05:e3: 84:d7:e2:c2:27:7a:ff:86:2b:52:6c:bb:62:bc:15:53:5b:a9: fd:01:6c:13:a2:63:fb:e1:48:9c:e9:d1:ca:89:7c:52:4b:c3: c1:e7:2c:6d:89:5e:83:db:cf:24:c2:93:ec:a7:a0:f2:27:2a: 0f:e1:68:7e:2c:b2:b0:af:62:8a:2b:b4:48:00:c3:9e:d7:77: d9:ab:78:aa:94:26:cf:47:74:90:18:73:18:15:bf:07:79:cc: 9e:62:b1:f8:e2:fa:0a:0e:6d:14:1a:72:93:42:d1:59:37:ad: b7:62:2f:3e:e5:84:24:39:89:b3:45:81:a4:c1:76:d7:69:b9: d2:55:c1:57:21:3c:be:65:da:3e:c0:1e:13:da:d6:2c:2d:54: 56:e5:b9:f4:ab:4e:45:33:1d:93:8d:9d:9f:12:57:ab:e4:1a: f2:37:c1:be:e5:1a:7a:bd:7c:79:75:42:5b:a8:ca:c9:59:c3: 27:79:41:76:a7:17:74:e0:2f:5a:9f:84:8d:68:3c:1c:4b:ad: 24:03:bf:3a:9e:16:75:4a:43:00:7a:f8:a8:eb:a3:1b:3f:39: 9b:77:9d:dd:55:0e:be:9a:1f:2c:3f:02:f9:01:44:34:3c:cf: 25:5c:a9:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHIFRIcRKmyGSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk YjU5MDljZGMtZWJhYi00MjQ3LWFmYTEtMDcxZTYzNDBiNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjN6FPCMxiE1gDDmxz1JLS7vLxC0n5ma7CYP hgFp2QQs9BtYOTpR5ebWCoiALP7n1sXdF1W6WRdXmVKM3ExKg5rENaiX0wrAvRIE 2iYhJBG6OuPT+a9RoH5VhLCYoHOwcIUIBCjF0j8KtfheoBSQvvvvng8RSplddcfB rGZ0oYRBswHk066/E3KbR1ZulB7ifKLVYkJb44rxYa+29ODPDAjgnk58hR7p2lnj kjjZgVdfqnEhUSpKe1D6u1ftKLKQByx69yMqn6kPMRo3sBpqOpIe3IwEKpOpAdWy kPyCZYvh+woCJ/AAhM5fD+neeenVw2EupG6vZ2cmLTDAGjcmJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2RA6pWmiJoi70w4F8ONHbhmzh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvM2I0YTQ0MWYtNWQwYi00 ODEzLTgzNmUtMmFlZmQ1NGIwY2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSfaBQhxu5e6gAQU7Dqn4M BeOE1+LCJ3r/hitSbLtivBVTW6n9AWwTomP74Uic6dHKiXxSS8PB5yxtiV6D288k wpPsp6DyJyoP4Wh+LLKwr2KKK7RIAMOe13fZq3iqlCbPR3SQGHMYFb8HecyeYrH4 4voKDm0UGnKTQtFZN623Yi8+5YQkOYmzRYGkwXbXabnSVcFXITy+Zdo+wB4T2tYs LVRW5bn0q05FMx2TjZ2fEler5BryN8G+5Rp6vXx5dUJbqMrJWcMneUF2pxd04C9a n4SNaDwcS60kA786nhZ1SkMAevio66MbPzmbd53dVQ6+mh8sPwL5AUQ0PM8lXKlU -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:13 2025 by rpki-client