$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: 3Q87ptzWaRVNkJhs4qLTHG7PYPmiH0mCOXEKULPwKMg= Subject key identifier: 64:55:DB:61:64:27:84:86:AE:D3:C4:77:4A:99:06:C8:5A:DD:CE:95 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584BB9B6933CCFA4147D089E6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F8D7 Signing time: Sun 02 Nov 2025 11:00:04 +0000 Manifest this update: Sun 02 Nov 2025 11:00:04 +0000 Manifest next update: Tue 04 Nov 2025 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: 5uukCi8sOa2n/xF5dD+JPmM4z585ysLqhu5MpOXfUMw=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: qjh9z7nihxTGQunpie1DR2F+5Uucaak6qD73F2knumI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:b6:93:3c:cf:a4:14:7d:08:9e:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Nov 2 11:00:04 2025 GMT Not After : Nov 4 11:00:00 2025 GMT Subject: CN=59c4a377-c31e-42c5-829b-59db3f762574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:7b:39:da:76:f6:a8:a2:76:4b:f2:01:1e: 0a:22:1d:08:c3:18:45:2e:87:71:53:4e:55:5e:98: a7:54:e3:e2:4b:b0:cc:44:e4:86:0c:19:46:bc:e5: bc:b1:d4:b4:5b:fe:70:d6:2c:60:05:b8:a4:d0:40: 03:ed:8a:35:24:8f:2a:d8:37:22:d0:6c:e7:59:15: 35:56:7a:73:b1:5a:8d:c3:a5:4f:fe:1d:b2:96:51: 22:08:29:d3:97:fc:ce:65:bb:9b:74:3b:95:ea:4f: 33:db:2d:89:7d:ea:3e:cb:71:1b:bd:84:0e:38:86: d0:50:b9:38:cb:66:0e:bc:b0:16:30:2e:39:c6:47: ec:29:6e:d0:05:68:33:6f:c0:1f:7f:55:9d:30:d4: 41:cf:b1:b4:42:72:c7:be:5d:88:91:ad:15:b7:68: 17:0f:67:75:ef:bc:22:ba:aa:7c:0e:14:dc:10:6b: 73:78:8b:e4:02:fe:01:c2:73:89:3f:0e:e6:fe:31: 39:b0:18:3f:79:e7:35:71:06:d2:14:84:08:64:a8: 07:10:07:e2:a0:4b:a7:6a:fd:ad:e2:32:b5:c8:b0: a1:92:c8:19:a1:36:e9:21:8b:56:70:2f:ed:f9:e0: b9:d3:ea:a6:4c:70:27:de:8e:f5:2d:18:ef:33:f7: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:DB:61:64:27:84:86:AE:D3:C4:77:4A:99:06:C8:5A:DD:CE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:21:de:b2:0a:4e:0e:9f:ea:83:37:61:65:79:fd:70:bf:8d: d4:19:2e:d9:41:38:ec:f2:83:00:4f:48:8e:b7:8d:95:c5:70: 3e:a1:ee:57:a7:4c:ad:74:7c:b1:11:2f:23:dc:2d:6a:b7:86: d5:1b:8c:c1:61:cc:8d:b4:ca:15:ab:6c:50:dc:3b:6a:1e:2c: 7c:5e:18:a7:c6:d8:2d:f7:a7:6a:70:30:0f:23:d6:e6:31:fa: 2f:95:2a:54:c2:ce:a1:ce:6b:25:fe:00:f4:f4:99:d5:33:e7: 2c:b0:ad:1e:4a:95:7b:4c:46:c1:ce:d1:69:48:8c:5a:fe:c9: d3:05:01:e8:d7:56:e2:14:07:1a:12:cb:0b:a1:e0:ad:66:3f: 9d:c3:9b:d0:14:68:6e:1b:76:46:88:15:90:bc:3d:b0:c4:2f: 10:eb:6a:12:7f:f2:ab:76:25:55:09:50:a7:e0:36:d8:8e:ca: fc:3c:25:ef:6c:e7:f2:8d:31:c5:fb:61:0e:4b:d4:bc:6c:65: e1:e7:7e:f8:3c:c6:ec:2e:37:4a:4f:16:bc:1e:e9:2a:2e:86: 4a:6f:e9:8c:37:bc:5c:8f:42:0f:ac:bd:27:b7:ce:3c:79:77: e1:02:e4:83:fe:44:18:30:5f:52:b0:98:be:8e:5a:a0:4d:e6: 67:12:93:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5tpM8z6QUfQieYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MTEwMjExMDAwNFoXDTI1MTEwNDExMDAwMFowLzEtMCsGA1UEAxMk NTljNGEzNzctYzMxZS00MmM1LTgyOWItNTlkYjNmNzYyNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOR7Odp29qiidkvyAR4KIh0IwxhFLodxU05V XpinVOPiS7DMROSGDBlGvOW8sdS0W/5w1ixgBbik0EAD7Yo1JI8q2Dci0GznWRU1 VnpzsVqNw6VP/h2yllEiCCnTl/zOZbubdDuV6k8z2y2Jfeo+y3EbvYQOOIbQULk4 y2YOvLAWMC45xkfsKW7QBWgzb8Aff1WdMNRBz7G0QnLHvl2Ika0Vt2gXD2d177wi uqp8DhTcEGtzeIvkAv4BwnOJPw7m/jE5sBg/eec1cQbSFIQIZKgHEAfioEunav2t 4jK1yLChksgZoTbpIYtWcC/t+eC50+qmTHAn3o71LRjvM/cOewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGRV22FkJ4SGrtPEd0qZBsha3c6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6Id6yCk4On+qDN2Flef1w v43UGS7ZQTjs8oMAT0iOt42VxXA+oe5Xp0ytdHyxES8j3C1qt4bVG4zBYcyNtMoV q2xQ3DtqHix8Xhinxtgt96dqcDAPI9bmMfovlSpUws6hzmsl/gD09JnVM+cssK0e SpV7TEbBztFpSIxa/snTBQHo11biFAcaEssLoeCtZj+dw5vQFGhuG3ZGiBWQvD2w xC8Q62oSf/KrdiVVCVCn4DbYjsr8PCXvbOfyjTHF+2EOS9S8bGXh5374PMbsLjdK Txa8HukqLoZKb+mMN7xcj0IPrL0nt848eXfhAuSD/kQYMF9SsJi+jlqgTeZnEpPD -----END CERTIFICATE-----Generated at Mon Nov 3 01:54:56 2025 by rpki-client