$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: v/p+2Ud7bTYRNoTfIMaq9NcIYUbNbnO1GqwWU/06LLk= Subject key identifier: 63:02:4E:92:6B:8C:B7:F4:81:73:54:C3:1E:32:17:7C:C8:AE:58:DC Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584BBA4B7D568EC571F774F19800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E4080065 Signing time: Sun 02 Nov 2025 16:00:03 +0000 Manifest this update: Sun 02 Nov 2025 16:00:03 +0000 Manifest next update: Wed 05 Nov 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: YMVwbX8R+t6CUMBu/teuc2GC23zW9of6XNnXqEc4Jho=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: gQKCGZ/pNsXZnwYUmMTge96h/Si/OUH0oJALLKKSlGQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:4b:7d:56:8e:c5:71:f7:74:f1:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Nov 2 16:00:03 2025 GMT Not After : Nov 5 16:00:00 2025 GMT Subject: CN=459d5d5a-9d46-4063-b932-b2c1e8e81382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:8d:4b:c9:2b:f7:63:8d:0c:6a:19:84:f4: c2:4a:c1:c0:9e:f5:13:a6:92:f8:93:19:58:2a:ae: 26:20:a4:0e:ea:d6:3f:25:80:cb:f0:29:d7:c7:c8: 84:37:9e:f2:c0:6a:2c:66:cf:06:ec:7e:cc:a6:f0: db:22:26:12:cf:e8:ea:10:6d:5a:bb:ea:1f:6c:f7: b3:3b:01:49:e7:2f:7a:44:2c:cf:8d:81:11:ec:0b: 39:0d:4e:90:54:7a:f2:84:5b:39:33:c0:1d:69:1a: 6e:c0:93:53:e8:78:22:1a:15:ad:0f:a8:a8:68:6b: bd:d3:42:83:08:e1:7e:d8:36:e5:cd:d9:bd:ae:45: dd:86:b6:c4:71:55:f3:e0:9c:c0:b4:09:c0:d7:fa: a1:36:23:e6:98:bc:f6:6e:95:f0:4d:d0:45:aa:f4: 94:81:e2:95:c0:44:c7:25:48:d1:73:8c:ca:da:47: 81:49:2d:37:df:9c:45:48:f4:f0:46:88:c8:c3:ea: 2a:1f:70:db:f5:ce:b9:f0:c8:83:0a:11:37:f0:f0: 00:54:8e:83:c2:28:fb:30:a9:62:c3:ca:2b:53:9e: fb:43:96:48:1b:d4:39:8c:1b:82:9a:f7:6e:4e:ad: e3:3c:75:8e:e2:5d:ec:d8:c7:92:b7:12:3a:75:98: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:02:4E:92:6B:8C:B7:F4:81:73:54:C3:1E:32:17:7C:C8:AE:58:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:24:a6:95:29:8c:bc:19:02:c4:75:5e:e2:d8:8f:ae:ad:43: a7:d6:4f:f9:3d:bd:a6:34:53:e0:f7:9a:6e:b4:f3:82:4e:cc: c2:5c:a1:77:b7:bf:4b:10:86:67:18:0d:bc:ce:83:5c:a4:63: aa:ac:55:0c:92:b7:78:24:fe:6c:7a:17:de:42:3c:aa:83:a2: bf:4e:63:93:f8:dc:3a:aa:ef:b5:58:d0:98:05:b7:e0:ba:74: 90:66:fe:fc:11:6d:42:15:29:99:6f:33:a6:e3:5c:d5:46:51: be:26:8e:73:fe:d2:4b:9a:05:9d:83:a9:0c:fa:0e:37:55:0f: 32:39:d8:f3:ca:f7:5e:d1:70:51:ff:40:78:b0:dc:af:0b:3e: 1f:ae:1d:ed:90:10:cc:55:63:48:12:d1:b0:ff:c5:65:25:64: bf:e6:28:db:6b:d0:9d:8e:4d:60:42:de:f6:e2:b8:c7:1a:24: 99:5d:c9:e1:1e:03:42:00:13:16:eb:85:7b:46:a9:e6:a4:58: b0:ed:fb:f1:33:ab:19:76:0f:79:58:21:1a:51:4a:6c:55:2d: 8d:9e:4e:51:8d:a4:9e:f4:fe:a1:54:82:c6:f5:15:24:08:3b: 30:20:e0:d6:c5:0e:3a:33:8c:6a:71:17:df:49:9c:dc:a0:a4: c1:86:52:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6S31WjsVx93TxmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MTEwMjE2MDAwM1oXDTI1MTEwNTE2MDAwMFowLzEtMCsGA1UEAxMk NDU5ZDVkNWEtOWQ0Ni00MDYzLWI5MzItYjJjMWU4ZTgxMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d6NS8kr92ONDGoZhPTCSsHAnvUTppL4kxlY Kq4mIKQO6tY/JYDL8CnXx8iEN57ywGosZs8G7H7MpvDbIiYSz+jqEG1au+ofbPez OwFJ5y96RCzPjYER7As5DU6QVHryhFs5M8AdaRpuwJNT6HgiGhWtD6ioaGu900KD COF+2Dblzdm9rkXdhrbEcVXz4JzAtAnA1/qhNiPmmLz2bpXwTdBFqvSUgeKVwETH JUjRc4zK2keBSS0335xFSPTwRojIw+oqH3Db9c658MiDChE38PAAVI6Dwij7MKli w8orU577Q5ZIG9Q5jBuCmvduTq3jPHWO4l3s2MeStxI6dZhlEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGMCTpJrjLf0gXNUwx4yF3zIrljcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDJKaVKYy8GQLEdV7i2I+u rUOn1k/5Pb2mNFPg95putPOCTszCXKF3t79LEIZnGA28zoNcpGOqrFUMkrd4JP5s ehfeQjyqg6K/TmOT+Nw6qu+1WNCYBbfgunSQZv78EW1CFSmZbzOm41zVRlG+Jo5z /tJLmgWdg6kM+g43VQ8yOdjzyvde0XBR/0B4sNyvCz4frh3tkBDMVWNIEtGw/8Vl JWS/5ijba9Cdjk1gQt724rjHGiSZXcnhHgNCABMW64V7RqnmpFiw7fvxM6sZdg95 WCEaUUpsVS2Nnk5RjaSe9P6hVILG9RUkCDswIODWxQ46M4xqcRffSZzcoKTBhlLt -----END CERTIFICATE-----Generated at Mon Nov 3 01:54:15 2025 by rpki-client