$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft File: 3cc63d59-ee3c-4449-a0af-cbde753e4560.mft (raw, json) Hash identifier: fJRG10NxkDfAqHBIVIDaRw9Fp0xNS3hmm4H15ECfTm0= Subject key identifier: 08:31:76:09:FB:60:3F:0B:0B:BF:FA:AD:BA:00:D3:45:17:C5:45:69 Authority key identifier: 33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 Certificate issuer: /CN=3cc63d59-ee3c-4449-a0af-cbde753e4560 Certificate serial: 010D0C9F4328584BBEF29A1D17A3CB17DAA61180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft Manifest number: 010D0C9F4328584ACEEF9FC3A2EF53C83E797079 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: 3cc63d59-ee3c-4449-a0af-cbde753e4560.crl (hash: DgfEK6YC4ie8wDLh7Dm6Lfnes84jiDKGxgUTwupLves=) 2: b29d2ae3-1ffe-3e6d-82cf-02071b12fb97.roa (hash: 9m0EaQ2vMGPUKdAlXTNX8IcR7Y0oOSfznp2T6lwKS+M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:1d:17:a3:cb:17:da:a6:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc63d59-ee3c-4449-a0af-cbde753e4560 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=9aceb3fd-8bef-475a-a14d-a92d6f70e600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:ae:80:ca:28:9e:1d:7d:b1:e3:f3:d1:49: 18:8f:ac:4d:3b:8b:ce:a0:85:98:67:79:35:e7:1b: 91:b4:d8:5a:f0:3f:9d:a1:a9:5e:89:53:cc:f6:88: 28:49:66:fd:c9:3a:17:f1:58:17:9d:86:d8:a2:d9: cc:73:38:83:ab:d3:4a:80:ef:c3:c7:ff:09:a0:ac: 4c:27:ca:cb:0a:64:45:f2:a5:fc:98:64:26:c5:74: c1:31:90:06:9a:cd:e2:3d:92:ac:b1:30:c1:c8:f0: 5a:fe:c4:72:29:37:cb:7f:19:1b:5f:73:11:d5:17: 4f:c2:14:4c:bc:b6:07:89:98:1e:60:d0:b4:3f:13: af:60:97:ae:d8:c3:76:1e:ca:ec:0e:6e:d5:33:d7: cb:c9:02:1c:2e:31:52:b9:3d:07:63:5d:a2:fc:f2: cd:c3:0e:42:2b:6f:2b:73:92:a3:ee:d7:11:ca:bd: 2d:d9:11:2d:29:de:28:6d:7d:cf:a2:ab:b8:a6:b4: f1:ab:82:89:22:6c:26:14:78:be:b6:17:9f:5f:f5: 36:23:d5:e0:23:e6:8f:1d:f4:56:31:59:79:92:ca: c2:41:ac:f4:66:de:a1:00:8f:cd:f4:42:a1:40:2c: a0:c5:ad:e1:f5:0e:b1:0e:f9:3b:33:b3:89:34:3a: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:31:76:09:FB:60:3F:0B:0B:BF:FA:AD:BA:00:D3:45:17:C5:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.crl X509v3 Authority Key Identifier: keyid:33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:58:cf:c0:9f:59:b9:3d:34:76:c1:1c:b6:6b:9a:94:10: 91:9f:f5:64:61:0f:1a:af:a5:b6:84:6d:01:07:a0:65:02:23: c0:19:e1:fd:ce:ae:e1:d3:bf:e6:b2:f0:b8:8c:7c:cc:80:e3: 72:16:6b:ce:3e:7b:c5:ec:ba:68:01:c7:04:81:0d:10:d8:9b: f9:22:35:e5:d8:a1:72:82:30:06:a6:11:aa:f0:3f:97:2c:fa: e2:ff:ec:86:32:93:5c:05:42:7f:a4:3b:d8:0d:9e:99:3a:38: 20:b9:51:97:23:d3:df:31:49:80:d7:3d:d5:85:8f:f2:96:ac: f0:e4:01:6d:35:77:db:74:59:92:9e:f3:19:af:15:b8:9e:42: f9:7e:c3:85:54:84:36:38:ea:0c:90:54:40:6f:11:d0:10:cc: 30:ce:25:91:c6:65:3f:75:f6:49:2b:0d:4f:b2:9e:c4:c5:6c: 97:10:95:80:c5:b3:12:16:a0:c3:64:91:df:fc:85:04:4e:92: 7e:02:7c:81:83:3e:c3:bd:44:af:a7:29:dc:90:bb:3e:11:9e: 98:1a:55:b3:ba:63:be:c4:e3:76:f2:21:e9:7e:1b:ae:10:05: ff:bb:96:a1:73:de:39:9f:15:35:9e:a1:56:8b:81:0e:9c:db: d4:e2:15:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8podF6PLF9qmEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjNjNkNTktZWUzYy00NDQ5LWEwYWYtY2JkZTc1M2U0 NTYwMB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk OWFjZWIzZmQtOGJlZi00NzVhLWExNGQtYTkyZDZmNzBlNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43mugMoonh19sePz0UkYj6xNO4vOoIWYZ3k1 5xuRtNha8D+doaleiVPM9ogoSWb9yToX8VgXnYbYotnMcziDq9NKgO/Dx/8JoKxM J8rLCmRF8qX8mGQmxXTBMZAGms3iPZKssTDByPBa/sRyKTfLfxkbX3MR1RdPwhRM vLYHiZgeYNC0PxOvYJeu2MN2HsrsDm7VM9fLyQIcLjFSuT0HY12i/PLNww5CK28r c5Kj7tcRyr0t2REtKd4obX3Poqu4prTxq4KJImwmFHi+thefX/U2I9XgI+aPHfRW MVl5ksrCQaz0Zt6hAI/N9EKhQCygxa3h9Q6xDvk7M7OJNDrm3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgxdgn7YD8LC7/6rboA00UXxUVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zY2M2 M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRlNzUzZTQ1NjAvM2NjNjNkNTktZWUzYy00 NDQ5LWEwYWYtY2JkZTc1M2U0NTYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2NjNjNkNTktZWUzYy00NDQ5LWEw YWYtY2JkZTc1M2U0NTYwLzNjYzYzZDU5LWVlM2MtNDQ0OS1hMGFmLWNiZGU3NTNl NDU2MC5jcmwwHwYDVR0jBBgwFoAUM60qUrs7C0AE3IAe3c9u67qtiRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zY2M2M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRl NzUzZTQ1NjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqeVjPwJ9ZuT00dsEctmua lBCRn/VkYQ8ar6W2hG0BB6BlAiPAGeH9zq7h07/msvC4jHzMgONyFmvOPnvF7Lpo AccEgQ0Q2Jv5IjXl2KFygjAGphGq8D+XLPri/+yGMpNcBUJ/pDvYDZ6ZOjgguVGX I9PfMUmA1z3VhY/ylqzw5AFtNXfbdFmSnvMZrxW4nkL5fsOFVIQ2OOoMkFRAbxHQ EMwwziWRxmU/dfZJKw1Psp7ExWyXEJWAxbMSFqDDZJHf/IUETpJ+AnyBgz7DvUSv pynckLs+EZ6YGlWzumO+xON28iHpfhuuEAX/u5ahc945nxU1nqFWi4EOnNvU4hVG -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:13 2025 by rpki-client