$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft File: e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft (raw, json) Hash identifier: I8Vr4oGnig3he6huSuTcTr8e4wqk7HwppWy+OrkFI+g= Subject key identifier: 04:AD:86:93:99:51:5E:D9:FA:E4:CC:08:93:3F:D4:7C:63:78:6E:99 Authority key identifier: FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A Certificate issuer: /CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48 Certificate serial: 010D0C9F4328584BC23469750CA0418B14F93980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft Manifest number: 010D0C9F4328584AFC03CA6ABD8AA12499A0E0C8 Signing time: Wed 05 Nov 2025 12:00:03 +0000 Manifest this update: Wed 05 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa (hash: TkgZpNcR2UzlZoe8ppwLOJLDuGdFXjcZPFz6LMbmKp4=) 2: e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl (hash: 9/5Myfi+4BVJtSx0GLN9QBoP5CcvGeVBzimmGjzIKI0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:34:69:75:0c:a0:41:8b:14:f9:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48 Validity Not Before: Nov 5 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=3665a8ba-6193-4288-8e38-8801f516adab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:14:01:83:df:1f:0f:16:0c:9a:6e:b5:50: bf:ff:51:d1:79:b2:12:af:29:75:0c:fe:58:54:2e: 69:11:53:12:b4:5f:27:ad:5c:97:c7:d7:9c:0b:17: ac:4c:bb:08:0a:f6:51:53:d0:66:b7:8e:b7:64:37: cf:85:c5:ad:fa:9e:8a:cd:62:07:da:40:0c:93:0e: a7:1d:be:13:ea:74:c5:7f:d6:bf:24:32:db:bc:fc: fb:f6:41:cc:2b:91:e8:f2:79:37:d2:6a:64:4c:80: 49:62:5f:4a:c9:1d:5c:83:a4:25:dc:2a:fb:8b:ce: 56:89:11:a5:a7:ca:c6:55:53:4c:37:2f:96:18:a1: 89:96:5b:04:aa:31:e3:90:0d:9b:e7:18:a5:76:8e: ea:7f:04:24:67:7b:f3:9a:82:00:ce:e3:a4:84:17: fa:3d:37:a0:39:e6:10:96:29:41:14:24:6d:a1:53: 70:d4:e9:ca:b5:4b:19:ad:91:90:fd:25:84:22:9f: 48:fa:84:46:e5:c6:76:0a:05:3d:5d:16:12:1e:20: 67:bd:5e:c3:23:d4:3c:90:1c:6c:ef:75:ac:b4:ef: b8:73:52:69:40:79:86:84:82:c1:6e:13:d2:73:5a: d4:69:e3:82:26:d0:53:9e:5b:29:d9:54:ac:52:e3: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:86:93:99:51:5E:D9:FA:E4:CC:08:93:3F:D4:7C:63:78:6E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl X509v3 Authority Key Identifier: keyid:FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:90:f5:65:30:a4:4e:f8:2d:7a:83:13:82:c3:5d:20:63:a7: a4:83:5d:b0:a5:6a:f0:7a:d2:b7:1c:66:1d:be:57:9f:71:29: f6:91:12:77:2c:64:87:34:25:35:29:36:ec:4a:89:30:98:01: b8:76:11:68:59:f6:27:a3:de:15:97:65:45:d2:05:62:27:be: 53:02:ad:4d:09:0c:38:ba:f1:1e:5d:18:78:1d:d6:37:3a:44: cc:8a:ea:3c:d7:42:4b:df:b2:01:e1:d7:02:8e:12:a6:20:23: 92:67:f5:3f:1d:28:1b:2b:24:f5:a3:1b:e8:7f:cd:51:fd:b9: 93:7c:6d:00:9c:84:1f:11:2f:35:00:0e:5a:20:3a:54:6b:8f: 2f:c8:24:4e:a5:ed:44:91:9f:ab:a7:36:98:03:51:24:07:b2: 57:14:1b:64:a2:d0:99:f3:5b:55:a1:34:72:7c:ba:f8:b3:26: 3a:03:51:c0:90:cc:f4:f6:d0:7f:9a:f8:40:47:70:bb:34:98: 60:b5:5f:9f:93:f9:9c:a7:15:af:6e:2e:3c:db:7f:69:ac:1d: 92:ac:5d:54:88:78:8a:18:38:51:9b:68:e4:2a:42:da:4b:85: f5:73:74:26:82:36:d1:9b:47:29:86:cf:79:3e:2c:9b:41:d3: eb:df:c2:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCNGl1DKBBixT5OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODM1ZDQtNGQ2Yi00MTk2LWI1NzctM2UxMWJlM2Qw ZjQ4MB4XDTI1MTEwNTEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk MzY2NWE4YmEtNjE5My00Mjg4LThlMzgtODgwMWY1MTZhZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknUUAYPfHw8WDJputVC//1HRebISryl1DP5Y VC5pEVMStF8nrVyXx9ecCxesTLsICvZRU9Bmt463ZDfPhcWt+p6KzWIH2kAMkw6n Hb4T6nTFf9a/JDLbvPz79kHMK5Ho8nk30mpkTIBJYl9KyR1cg6Ql3Cr7i85WiRGl p8rGVVNMNy+WGKGJllsEqjHjkA2b5xildo7qfwQkZ3vzmoIAzuOkhBf6PTegOeYQ lilBFCRtoVNw1OnKtUsZrZGQ/SWEIp9I+oRG5cZ2CgU9XRYSHiBnvV7DI9Q8kBxs 73WstO+4c1JpQHmGhILBbhPSc1rUaeOCJtBTnlsp2VSsUuO1/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFASthpOZUV7Z+uTMCJM/1HxjeG6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTExYmUzZDBmNDgvZTNmODM1ZDQtNGQ2Yi00 MTk2LWI1NzctM2UxMWJlM2QwZjQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODM1ZDQtNGQ2Yi00MTk2LWI1 NzctM2UxMWJlM2QwZjQ4L2UzZjgzNWQ0LTRkNmItNDE5Ni1iNTc3LTNlMTFiZTNk MGY0OC5jcmwwHwYDVR0jBBgwFoAU/TVEqMA65blUyDpqFZPEmnhZUkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTEx YmUzZDBmNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhkPVlMKRO+C16gxOCw10g Y6ekg12wpWrwetK3HGYdvlefcSn2kRJ3LGSHNCU1KTbsSokwmAG4dhFoWfYno94V l2VF0gViJ75TAq1NCQw4uvEeXRh4HdY3OkTMiuo810JL37IB4dcCjhKmICOSZ/U/ HSgbKyT1oxvof81R/bmTfG0AnIQfES81AA5aIDpUa48vyCROpe1EkZ+rpzaYA1Ek B7JXFBtkotCZ81tVoTRyfLr4syY6A1HAkMz09tB/mvhAR3C7NJhgtV+fk/mcpxWv bi48239prB2SrF1UiHiKGDhRm2jkKkLaS4X1c3QmgjbRm0cphs95PiybQdPr38LE -----END CERTIFICATE-----Generated at Wed Nov 5 18:53:57 2025 by rpki-client