$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft File: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft (raw, json) Hash identifier: 8dBneN4HP0Drj7wg8ma5gmwtTV5yIS+sQ2ppmmsmQbA= Subject key identifier: BE:B4:43:7E:61:71:F5:B0:71:30:97:96:2A:89:0B:80:A2:73:08:C7 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F4328584BC0ECE52854AA22AF0DB2D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft Manifest number: 010D0C9F4328584073A83347C9F5954AECED65E5 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl (hash: sS85vV2zVPvpQMtSj6kBMKn+xBauZdeKb98xoqIsz6g=) 2: 870b3555-4770-357a-83a4-150807097e93.roa (hash: udobQbE2hoffqWGG+FnCgsMsayjF7xfHpwUqcfhSKh0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e5:28:54:aa:22:af:0d:b2:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=79787d5f-5a20-4534-98eb-42c5b3283ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:3d:0c:95:dd:e9:52:07:50:bf:ec:08:11: ba:18:15:b8:6f:88:2c:c7:88:66:23:e7:b9:4f:48: 92:d4:2e:a6:cd:24:dd:de:f4:e8:96:fe:8d:b2:7a: df:f7:e4:c3:c9:c5:ae:56:df:55:30:2a:e4:53:54: 5d:a1:09:d1:17:7c:0a:7e:b4:90:62:2e:73:5b:5f: 9c:0c:b6:a9:e2:cf:ad:e5:b0:85:55:ab:c1:ed:a4: 02:55:c2:55:41:27:14:f4:96:9d:6c:30:b3:e9:fd: d7:6b:ca:24:a7:c0:52:fb:b9:82:50:b6:32:79:26: db:15:4a:75:89:27:1e:8d:bc:c5:a6:8c:8c:1c:18: 1a:0a:be:0c:47:b6:db:32:b7:44:4e:29:5c:44:9c: 12:e9:73:96:08:13:ff:52:b6:53:21:d4:1e:f1:ec: e7:d2:1e:9c:9e:4f:1a:00:1c:88:fd:99:1b:85:b0: 6a:f5:c9:f9:59:c1:55:45:92:f2:76:f1:2d:1b:f6: 8f:2a:20:a5:d7:87:01:c1:8e:60:98:7a:a4:82:1f: e7:11:80:b6:a5:60:a7:7b:41:27:4f:cf:a8:50:44: 09:3b:99:fd:f1:10:8b:6d:6d:ec:5e:86:80:0f:a1: 9d:e3:c7:68:3b:e4:20:b8:db:35:35:3b:66:1b:a0: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:43:7E:61:71:F5:B0:71:30:97:96:2A:89:0B:80:A2:73:08:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6d:2e:6e:10:93:66:27:ae:72:e6:fc:a1:be:b2:f0:7f:4a: c2:12:b2:a6:5c:bd:7d:1c:06:70:9e:b3:58:7e:5e:e3:23:e2: 14:46:6e:a4:8d:de:04:9e:85:35:e7:bc:11:ab:2c:d0:ac:cd: 82:9c:3d:43:04:c7:e1:5f:27:51:c1:f0:34:bb:7d:0b:34:43: 9f:a6:9c:96:f4:4f:f1:5a:56:cd:ef:d8:28:cc:56:64:50:3d: ea:e1:86:30:22:97:61:78:e1:fc:b2:70:f5:74:37:b4:6d:11: 26:97:66:4e:81:a4:14:36:1a:d3:ad:04:28:e4:c6:a5:46:7d: 78:9f:f4:83:61:30:e2:2a:68:79:30:50:f1:e4:bb:cf:6e:a4: 57:d5:f9:51:d1:77:3b:fd:cb:d8:d6:b0:0f:bb:62:80:73:05: 75:17:37:51:e3:6b:62:4d:69:9a:0c:50:04:c6:77:94:61:b2: d7:ab:38:24:d1:0f:20:6f:c6:cb:1a:ab:d5:9e:8c:ec:b6:30: 5e:5c:42:63:a1:df:8a:fd:e2:1e:7b:32:6d:52:dc:f2:57:4b: d6:6b:16:40:fd:6a:f7:6b:6f:9a:ec:80:44:d4:e7:03:05:00: d2:30:ff:f6:ed:d6:d3:24:80:d2:72:4e:b8:b8:13:c7:5a:79: e6:a4:df:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OUoVKoirw2y1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk Nzk3ODdkNWYtNWEyMC00NTM0LTk4ZWItNDJjNWIzMjgzZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI09DJXd6VIHUL/sCBG6GBW4b4gsx4hmI+e5 T0iS1C6mzSTd3vTolv6Nsnrf9+TDycWuVt9VMCrkU1RdoQnRF3wKfrSQYi5zW1+c DLap4s+t5bCFVavB7aQCVcJVQScU9JadbDCz6f3Xa8okp8BS+7mCULYyeSbbFUp1 iScejbzFpoyMHBgaCr4MR7bbMrdETilcRJwS6XOWCBP/UrZTIdQe8ezn0h6cnk8a AByI/ZkbhbBq9cn5WcFVRZLydvEtG/aPKiCl14cBwY5gmHqkgh/nEYC2pWCne0En T8+oUEQJO5n98RCLbW3sXoaAD6Gd48doO+QguNs1NTtmG6Bp+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL60Q35hcfWwcTCXliqJC4CicwjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvM2JiZGQ3MWMtYzMwZS00 NGFjLTkwZjgtYmE0NDMxMzRkOGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCbS5uEJNmJ65y5vyhvrLw f0rCErKmXL19HAZwnrNYfl7jI+IURm6kjd4EnoU157wRqyzQrM2CnD1DBMfhXydR wfA0u30LNEOfppyW9E/xWlbN79gozFZkUD3q4YYwIpdheOH8snD1dDe0bREml2ZO gaQUNhrTrQQo5MalRn14n/SDYTDiKmh5MFDx5LvPbqRX1flR0Xc7/cvY1rAPu2KA cwV1FzdR42tiTWmaDFAExneUYbLXqzgk0Q8gb8bLGqvVnozstjBeXEJjod+K/eIe ezJtUtzyV0vWaxZA/Wr3a2+a7IBE1OcDBQDSMP/27dbTJIDSck64uBPHWnnmpN+6 -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:29 2025 by rpki-client