$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: 01GhGZVmNtalmGIM8i3ZYdYRJf8IbZ02kL9CvI6SECs= Subject key identifier: 40:CC:99:42:68:02:EC:6D:11:FC:98:7B:A8:0B:D3:B8:5A:49:5C:6A Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584BBAA4D043DC2A6FDE2E4F1000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FA8A Signing time: Sun 02 Nov 2025 19:00:03 +0000 Manifest this update: Sun 02 Nov 2025 19:00:03 +0000 Manifest next update: Wed 05 Nov 2025 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: joNvyxDkFtDz8OnDEeTKp/RPb6nn802nKwPEm/ujkHc=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: HJhzQHcV4PoaB9rqL2cSXVZxk+peubAM6O7TcfoGOKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:a4:d0:43:dc:2a:6f:de:2e:4f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Nov 2 19:00:03 2025 GMT Not After : Nov 5 19:00:00 2025 GMT Subject: CN=ef243abb-e965-441c-8075-b62823a4955d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:60:ae:95:3d:24:1c:24:c9:9f:f4:cb:08: 65:1f:d8:a7:93:1f:9f:16:21:02:ec:5b:04:0e:bb: 18:99:a5:08:df:e7:b3:d6:69:13:7c:26:5b:58:7d: 10:5a:30:9c:ff:07:69:16:ad:98:e2:1e:b4:43:69: 47:a4:21:e4:70:0f:34:13:f9:e8:22:66:49:93:d1: 8c:53:f8:da:da:86:5e:af:86:ba:79:a3:b1:f6:53: fc:0c:53:2f:d0:ea:99:92:02:0a:b5:99:7e:fa:15: e4:82:fb:37:5e:79:09:b1:b9:ae:af:b4:24:f9:cd: d7:50:54:b4:3c:76:42:a7:f2:94:de:9b:be:52:b5: e2:08:a6:10:ae:9c:0d:f7:83:88:1a:72:a8:cf:4b: 74:85:43:e4:62:bf:74:92:a3:50:83:a0:63:0d:f3: e9:41:d0:60:cf:33:55:5b:88:dd:5d:29:11:66:6f: 9a:0c:b2:b5:1f:b7:1b:03:b6:0d:38:ce:d0:c7:e3: 05:69:17:ab:11:d0:d3:55:8e:d6:ed:70:2d:d9:00: 70:f2:5c:a1:81:54:1e:84:05:63:07:09:85:cc:ef: fd:f4:e6:bb:3a:77:f9:32:73:4a:e2:2b:96:8d:e1: 08:ee:ed:53:ee:57:80:db:91:c2:5d:12:fc:78:56: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:99:42:68:02:EC:6D:11:FC:98:7B:A8:0B:D3:B8:5A:49:5C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b8:01:03:12:c4:e8:b1:17:2b:ea:6a:6a:b8:6a:1e:2b:a9: d1:cc:b1:db:1e:b5:0f:6d:33:85:3b:96:1d:6b:21:f2:3d:0c: 89:d9:fb:68:ad:c6:30:33:8c:38:9c:1d:3f:0c:ad:da:ed:bd: fb:48:db:5d:a4:df:ee:c5:ba:4b:8f:cb:f3:cb:b6:47:aa:25: ff:79:27:7a:23:0e:03:05:c7:a4:ab:5c:fe:3d:be:2a:3a:1e: 4b:96:11:e7:93:f7:34:e1:d4:06:0c:6a:b4:67:b6:e0:91:ea: 67:12:be:0e:25:cd:d8:66:4f:dd:14:f8:38:42:6f:7e:61:61: 0f:9b:62:7e:86:fb:fc:82:21:e1:68:09:b5:50:7a:92:a2:09: ad:51:ad:d8:0a:34:cd:45:e4:76:09:8c:d1:c0:82:1d:c8:ee: cd:eb:f1:81:93:8e:03:e0:8e:27:46:bc:30:5a:67:7a:63:1e: 20:1a:67:79:0a:b3:c9:33:17:86:2d:d3:6f:3a:a5:73:85:b0: f9:4a:58:e1:8b:ea:4b:3c:87:09:f7:93:85:61:89:d7:75:ea: 3c:cb:db:5d:48:cf:a4:3f:ce:18:a9:55:be:d7:4b:d0:a6:c2: 68:a4:20:b7:10:17:47:80:fb:59:ff:fa:bd:73:6c:ae:4c:97: 8a:fc:32:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6pNBD3Cpv3i5PEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MTEwMjE5MDAwM1oXDTI1MTEwNTE5MDAwMFowLzEtMCsGA1UEAxMk ZWYyNDNhYmItZTk2NS00NDFjLTgwNzUtYjYyODIzYTQ5NTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDtgrpU9JBwkyZ/0ywhlH9inkx+fFiEC7FsE DrsYmaUI3+ez1mkTfCZbWH0QWjCc/wdpFq2Y4h60Q2lHpCHkcA80E/noImZJk9GM U/ja2oZer4a6eaOx9lP8DFMv0OqZkgIKtZl++hXkgvs3XnkJsbmur7Qk+c3XUFS0 PHZCp/KU3pu+UrXiCKYQrpwN94OIGnKoz0t0hUPkYr90kqNQg6BjDfPpQdBgzzNV W4jdXSkRZm+aDLK1H7cbA7YNOM7Qx+MFaRerEdDTVY7W7XAt2QBw8lyhgVQehAVj BwmFzO/99Oa7Onf5MnNK4iuWjeEI7u1T7leA25HCXRL8eFb3BQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEDMmUJoAuxtEfyYe6gL07haSVxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtuAEDEsTosRcr6mpquGoe K6nRzLHbHrUPbTOFO5YdayHyPQyJ2ftorcYwM4w4nB0/DK3a7b37SNtdpN/uxbpL j8vzy7ZHqiX/eSd6Iw4DBcekq1z+Pb4qOh5LlhHnk/c04dQGDGq0Z7bgkepnEr4O Jc3YZk/dFPg4Qm9+YWEPm2J+hvv8giHhaAm1UHqSogmtUa3YCjTNReR2CYzRwIId yO7N6/GBk44D4I4nRrwwWmd6Yx4gGmd5CrPJMxeGLdNvOqVzhbD5Sljhi+pLPIcJ 95OFYYnXdeo8y9tdSM+kP84YqVW+10vQpsJopCC3EBdHgPtZ//q9c2yuTJeK/DIa -----END CERTIFICATE-----Generated at Mon Nov 3 02:01:25 2025 by rpki-client