$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.mft (raw, json) Hash identifier: QhGG5xt78BMyrfvFCl1NR/QCTyP0geyS3/tgTRdOF/4= Subject key identifier: EC:82:AE:40:BD:73:03:6F:74:9F:9A:39:08:D9:B0:44:1A:A3:27:1D Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Certificate issuer: /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Certificate serial: 010D0C9F4328584BC03A2D5E10FD91CBBE865AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft Manifest number: 010D0C9F432858488B7B09E7C4EF76CBED14D28D Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 3e9fb25a-438f-4e1d-a136-5c878d065c24.crl (hash: fqHFeKxv9JRv9xEh9Dyssq2N4uBWto4oYwhO38KUot0=) 2: 58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (hash: w4SttZsrIkeCFD7LRbAak4q2LplR07oBBPtLYZwa/n8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:5e:10:fd:91:cb:be:86:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=e98f1c1f-379d-44d5-9499-0600f537b1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:90:9b:18:38:38:38:11:31:0f:1c:ea:a7: 74:96:bf:1f:f6:dd:4a:73:1d:10:b7:48:82:cd:aa: c9:d6:19:97:c3:dd:a7:b6:97:d2:76:19:ae:cc:5c: 39:42:23:82:92:94:e9:73:2e:1c:a4:5b:69:6a:be: bf:ff:a7:0a:e3:f3:7f:f8:c7:51:d9:a2:88:a0:f1: 59:00:48:64:3f:f9:19:df:bb:84:7c:6d:11:5f:0c: 3a:0a:e2:29:74:e7:58:b8:42:d1:59:7b:65:31:5d: dc:a2:d8:12:ee:b8:bf:2c:9d:e9:4b:ff:8d:a1:1a: 0d:55:83:6a:c7:27:0c:ef:87:5d:e9:4c:42:0e:1a: ea:f7:fd:3f:77:a8:c6:c5:15:0f:38:a3:d2:f0:27: c5:a1:5c:7d:4d:3e:1d:10:54:4b:3b:94:58:6b:33: b8:7d:38:3f:1d:84:c7:eb:51:fb:d6:63:3f:31:64: 65:08:91:c9:0b:e0:c8:33:7a:77:a2:23:3a:36:44: 40:b1:f0:21:77:3d:5c:b6:cc:42:1b:19:b3:40:34: 4a:1e:da:d7:8d:57:96:2d:4f:c9:ca:03:89:5f:d5: e6:90:06:68:be:cc:db:04:0d:dc:26:b5:78:ed:59: c9:14:a7:f9:58:69:d5:f2:3f:70:06:47:65:6e:23: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:AE:40:BD:73:03:6F:74:9F:9A:39:08:D9:B0:44:1A:A3:27:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl X509v3 Authority Key Identifier: keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b4:f4:84:79:7d:ca:cc:71:02:5e:a4:de:05:40:a0:e2:46: 20:22:66:62:a7:8e:43:63:0e:c2:22:b4:00:64:3c:85:4c:e2: ca:85:11:37:08:66:24:3e:bc:a0:ae:74:cb:ef:b6:d4:e8:9e: d6:d5:c2:72:3c:99:55:5d:fc:c1:ac:14:22:13:bb:ab:61:ee: b7:c4:46:8d:cc:d3:14:dd:01:40:0c:92:7a:0b:19:59:6a:3e: 31:29:8c:ed:9d:ef:0d:89:9e:16:8a:81:5a:a8:bf:77:b6:87: ea:07:6b:ca:0a:06:b5:21:fc:c9:8a:8c:0a:c5:1e:e8:99:16: 19:30:3d:92:66:13:43:0b:54:68:1d:51:63:2c:d7:d3:d1:a4: 87:26:65:23:82:5a:b9:5b:43:b7:f1:d3:2a:ec:ca:ee:e5:fb: 1e:b5:5d:97:03:5c:ba:30:5d:30:54:7d:b5:07:70:73:ba:4e: be:ce:81:ee:d9:c0:e5:f1:c8:00:17:56:0c:fd:34:a4:ca:0d: 79:2e:6e:e6:9c:ba:d3:71:5a:53:91:5e:19:a6:6a:fd:7d:43: ce:54:5a:df:a4:56:2f:05:e3:37:28:02:af:74:22:63:5e:ab: 0b:e6:0b:f4:34:34:f5:dd:48:14:a4:b9:ec:59:71:75:33:2a: 0f:27:61:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi1eEP2Ry76GWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1 YzI0MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZTk4ZjFjMWYtMzc5ZC00NGQ1LTk0OTktMDYwMGY1MzdiMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP6Qmxg4ODgRMQ8c6qd0lr8f9t1Kcx0Qt0iC zarJ1hmXw92ntpfSdhmuzFw5QiOCkpTpcy4cpFtpar6//6cK4/N/+MdR2aKIoPFZ AEhkP/kZ37uEfG0RXww6CuIpdOdYuELRWXtlMV3cotgS7ri/LJ3pS/+NoRoNVYNq xycM74dd6UxCDhrq9/0/d6jGxRUPOKPS8CfFoVx9TT4dEFRLO5RYazO4fTg/HYTH 61H71mM/MWRlCJHJC+DIM3p3oiM6NkRAsfAhdz1ctsxCGxmzQDRKHtrXjVeWLU/J ygOJX9XmkAZovszbBA3cJrV47VnJFKf5WGnV8j9wBkdlbiMq1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOyCrkC9cwNvdJ+aOQjZsEQaoycdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvM2U5ZmIyNWEtNDM4Zi00 ZTFkLWExMzYtNWM4NzhkMDY1YzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2 NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3 OGQwNjVjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5tPSEeX3KzHECXqTeBUCg 4kYgImZip45DYw7CIrQAZDyFTOLKhRE3CGYkPrygrnTL77bU6J7W1cJyPJlVXfzB rBQiE7urYe63xEaNzNMU3QFADJJ6CxlZaj4xKYztne8NiZ4WioFaqL93tofqB2vK Cga1IfzJiowKxR7omRYZMD2SZhNDC1RoHVFjLNfT0aSHJmUjglq5W0O38dMq7Mru 5fsetV2XA1y6MF0wVH21B3Bzuk6+zoHu2cDl8cgAF1YM/TSkyg15Lm7mnLrTcVpT kV4Zpmr9fUPOVFrfpFYvBeM3KAKvdCJjXqsL5gv0NDT13UgUpLnsWXF1MyoPJ2F3 -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:40 2025 by rpki-client