$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: Bwa0MqUgTjUR0LXPb7PZdnbBUNSsybybGUNSPebn3zE= Subject key identifier: 0E:3C:6D:B2:84:EA:0A:6B:CF:EC:EE:AD:43:D5:0F:C5:8C:65:F3:5A Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584BC34077A525CD671C73988080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6D01A Signing time: Wed 05 Nov 2025 21:00:08 +0000 Manifest this update: Wed 05 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: 7HQvh6xfNsupRNw8kkEbZeEBQvXAR6cPOVM6Vu233e4=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: HN7y+agHpSanDkpOu86eA0B60NqgDDSjxTkxKbrUaJ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:40:77:a5:25:cd:67:1c:73:98:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Nov 5 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=ede07011-4e0f-43ec-9b8d-134aa8b3fcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:48:71:54:52:85:5b:80:c9:27:4a:10:f3: 70:8a:2d:9f:ec:e1:8c:5d:6c:fd:99:96:c9:09:4f: 46:49:1e:d1:ef:9d:00:2c:d3:da:43:f0:a4:f1:16: f0:d8:ea:91:90:69:05:2b:1d:47:9d:6e:a9:af:f8: 95:31:39:fa:47:ad:1d:ca:d2:87:4e:2b:1e:88:10: 2c:a6:1e:a1:d7:ef:81:07:d5:34:18:fa:f9:67:e3: e4:bf:ee:93:30:b9:7c:16:29:0a:f9:f8:0d:13:c2: fc:88:ef:55:33:f5:a0:30:17:c6:f0:ef:96:26:45: 36:aa:3d:c9:38:17:68:18:8a:54:69:de:2c:d3:cd: 5f:d3:21:a0:f7:c5:53:32:58:65:3b:2b:94:0b:b3: 5e:c0:f7:06:0b:bb:f3:74:38:00:10:a0:85:59:dc: 1a:cd:dc:05:74:a1:83:eb:53:cf:84:6a:27:f6:f7: 74:93:8d:5c:a8:33:c8:2e:ab:8f:ae:f9:bd:f9:5f: 8d:59:96:39:3f:fc:9b:ed:36:b4:cc:d8:fe:05:7a: f7:dd:33:63:fa:cc:1c:1a:45:79:1d:9f:9a:52:8c: 27:35:c6:3e:bf:a8:82:b9:ea:e7:cc:ef:c8:a2:b5: 7f:18:b9:8e:4a:3e:98:4c:ce:c0:ad:41:aa:77:3d: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:6D:B2:84:EA:0A:6B:CF:EC:EE:AD:43:D5:0F:C5:8C:65:F3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:35:cd:5e:1f:af:79:8d:c4:75:34:53:b5:68:99:72:a4:ae: 3a:cb:c0:4c:4c:66:04:45:47:d6:a6:85:48:2b:d1:34:b5:93: 37:a9:91:e9:5f:ad:fb:82:a3:83:3d:d6:9d:2f:b8:7c:0b:01: 25:30:88:25:00:95:f3:83:3b:b4:cc:a6:57:d3:a4:54:99:e5: ee:e9:e7:19:54:16:6e:c2:ec:43:cd:ad:bf:cf:d1:e4:c8:69: 07:e0:85:fb:28:ed:4f:ed:46:28:55:75:8e:3f:e4:4f:cf:01: 62:20:f8:87:d6:c3:1c:46:b4:b5:53:71:9f:3f:98:14:7c:d7: 9d:c6:15:f6:b7:4e:09:1c:ac:b3:cc:3a:15:9d:f4:74:b9:c0: dc:7a:ff:38:d6:0f:93:d3:64:43:c3:e9:7d:21:33:24:a9:e5: a3:72:5d:bf:86:46:2c:49:cb:7d:98:ca:70:28:40:16:ce:a0: 09:27:fa:b2:0f:e8:d7:86:63:2f:74:ca:10:c1:ca:d5:02:80: 6d:1e:ce:28:c5:05:31:c6:34:c0:17:fc:3f:e7:14:44:89:3e: d9:82:13:db:a1:4c:c6:2a:06:68:65:9a:99:ec:f6:b6:b3:68: 00:97:25:15:28:86:76:7a:8b:c7:c3:b8:75:f4:b4:9e:8f:23: fb:d7:ae:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvDQHelJc1nHHOYgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI1MTEwNTIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk ZWRlMDcwMTEtNGUwZi00M2VjLTliOGQtMTM0YWE4YjNmY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+dIcVRShVuAySdKEPNwii2f7OGMXWz9mZbJ CU9GSR7R750ALNPaQ/Ck8Rbw2OqRkGkFKx1HnW6pr/iVMTn6R60dytKHTiseiBAs ph6h1++BB9U0GPr5Z+Pkv+6TMLl8FikK+fgNE8L8iO9VM/WgMBfG8O+WJkU2qj3J OBdoGIpUad4s081f0yGg98VTMlhlOyuUC7NewPcGC7vzdDgAEKCFWdwazdwFdKGD 61PPhGon9vd0k41cqDPILquPrvm9+V+NWZY5P/yb7Ta0zNj+BXr33TNj+swcGkV5 HZ+aUownNcY+v6iCuernzO/IorV/GLmOSj6YTM7ArUGqdz1uHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA48bbKE6gprz+zurUPVD8WMZfNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBNc1eH695jcR1NFO1aJly pK46y8BMTGYERUfWpoVIK9E0tZM3qZHpX637gqODPdadL7h8CwElMIglAJXzgzu0 zKZX06RUmeXu6ecZVBZuwuxDza2/z9HkyGkH4IX7KO1P7UYoVXWOP+RPzwFiIPiH 1sMcRrS1U3GfP5gUfNedxhX2t04JHKyzzDoVnfR0ucDcev841g+T02RDw+l9ITMk qeWjcl2/hkYsSct9mMpwKEAWzqAJJ/qyD+jXhmMvdMoQwcrVAoBtHs4oxQUxxjTA F/w/5xREiT7ZghPboUzGKgZoZZqZ7Pa2s2gAlyUVKIZ2eovHw7h19LSejyP7166W -----END CERTIFICATE-----Generated at Wed Nov 5 23:59:25 2025 by rpki-client