$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft File: a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft (raw, json) Hash identifier: TypVxzHwxost18SUMeRi/7AEGa77YZQKhNtqppCublU= Subject key identifier: 3A:96:AB:89:19:15:62:C9:3E:26:75:61:E4:1C:B3:62:F4:B1:6F:D3 Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Certificate serial: 010D0C9F4328584BBA0FF867C40F6854AEB2E840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft Manifest number: 010D0C9F4328584073A858ACC317BAD36CAA37AF Signing time: Sun 02 Nov 2025 14:00:09 +0000 Manifest this update: Sun 02 Nov 2025 14:00:09 +0000 Manifest next update: Tue 04 Nov 2025 14:00:00 +0000 Files and hashes: 1: 1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa (hash: JMtSRoMi0cKKV7jDDNMLHxW2aV9ueGnFD4HLLnI5DXs=) 2: a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl (hash: Ja266UjZObT9yT1+YL/FNZeGvkvA05+adMtKqT0PilE=) 3: d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa (hash: lHLBj4jBS4vRtiBqyAFQ6dota9A6qKCceIIamkZ/Xss=) 4: ef189ea0-e8cd-3c0b-adc8-1c5bbdf0c5bd.roa (hash: Wgv84G4aXQ5rP7P4tmRg3ExOo1HTCsf1+IKyqT9hy5I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:0f:f8:67:c4:0f:68:54:ae:b2:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Validity Not Before: Nov 2 14:00:09 2025 GMT Not After : Nov 4 14:00:00 2025 GMT Subject: CN=35d45471-1692-4348-991f-05f361b62c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:1d:33:31:54:36:98:b9:86:5c:17:c1:76: 73:2b:b5:51:e2:40:56:a5:c7:a9:c7:a0:e5:f7:60: d3:28:12:37:28:a3:b4:57:c8:4d:61:a4:6d:c5:4e: 10:6b:d4:db:ff:19:ff:4d:55:6c:ac:f9:db:fa:56: fc:99:25:26:47:00:12:fb:f4:85:95:c6:78:56:87: 81:88:6e:8b:ab:fc:12:74:a0:c3:23:8f:07:76:2f: db:6c:4d:c2:e4:d9:91:9a:e4:ec:86:ea:0b:e6:f5: da:45:b0:c2:93:58:20:0f:7b:c3:82:9b:38:9e:5c: 18:a0:68:22:90:5b:3d:96:49:88:c6:85:5b:8f:47: 79:42:6d:4b:fe:78:c2:f8:45:5a:76:6f:68:94:c6: 19:42:61:8e:bc:90:b8:48:9c:63:ba:3d:99:5f:1f: e9:69:ca:cb:a5:c8:e2:27:31:2d:7c:e4:ec:2d:5a: d1:c3:f5:e8:fc:fd:bb:8c:22:d8:45:bc:ba:2a:1d: d5:27:65:fc:0e:91:bf:0f:e2:4d:0b:cb:5c:be:a6: 2d:1e:55:c1:0c:ea:cb:b9:df:0c:ae:47:8d:19:7f: e3:29:42:47:99:5e:5b:5a:83:86:2f:52:d6:1b:02: bc:53:37:1f:68:41:40:2f:e9:52:d4:72:99:b5:6e: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:AB:89:19:15:62:C9:3E:26:75:61:E4:1C:B3:62:F4:B1:6F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl X509v3 Authority Key Identifier: keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a2:03:02:86:78:17:f6:b5:63:61:ae:67:d6:5b:aa:a1:56: b0:bd:d7:71:d6:25:bc:4a:1b:42:9a:1f:69:84:56:c8:a8:9f: d8:cb:1e:59:7a:54:3b:79:12:99:8b:d5:6b:ca:3d:90:70:d1: 62:16:f9:6a:a1:11:66:97:3b:8e:dc:04:e1:20:98:99:22:a6: 2c:79:b8:31:b9:95:96:0d:ab:75:83:68:7e:90:5f:81:6e:d6: d6:bd:d1:52:97:ff:9e:0e:9c:1f:37:f0:16:ee:5f:24:1e:1a: 73:5d:11:b5:a4:6b:60:15:73:ad:8e:6c:0e:95:d8:75:be:a7: a0:46:00:62:0a:0b:e6:0a:77:77:b4:c0:89:d5:13:c6:4e:19: 5d:d6:67:29:cd:63:b6:16:d7:e2:10:1c:87:4a:f9:f8:85:66: bc:8b:af:02:46:29:d2:32:5e:66:93:e6:8e:6b:b5:e8:64:cf: ff:2d:ae:d4:2f:fd:92:66:9b:68:de:6f:0e:98:27:19:60:15: ae:c9:0f:22:0c:17:ea:5c:30:e0:1b:cb:b9:11:21:00:23:f6: 9f:d8:f3:0c:a2:50:96:1e:d1:80:22:3f:31:5b:87:b3:5c:27: a4:69:53:51:cc:39:f8:8a:25:a2:7a:93:72:b7:a3:8d:68:fd: 50:a4:4f:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6D/hnxA9oVK6y6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5 YjJiMB4XDTI1MTEwMjE0MDAwOVoXDTI1MTEwNDE0MDAwMFowLzEtMCsGA1UEAxMk MzVkNDU0NzEtMTY5Mi00MzQ4LTk5MWYtMDVmMzYxYjYyYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tQdMzFUNpi5hlwXwXZzK7VR4kBWpcepx6Dl 92DTKBI3KKO0V8hNYaRtxU4Qa9Tb/xn/TVVsrPnb+lb8mSUmRwAS+/SFlcZ4VoeB iG6Lq/wSdKDDI48Hdi/bbE3C5NmRmuTshuoL5vXaRbDCk1ggD3vDgps4nlwYoGgi kFs9lkmIxoVbj0d5Qm1L/njC+EVadm9olMYZQmGOvJC4SJxjuj2ZXx/pacrLpcji JzEtfOTsLVrRw/Xo/P27jCLYRby6Kh3VJ2X8DpG/D+JNC8tcvqYtHlXBDOrLud8M rkeNGX/jKUJHmV5bWoOGL1LWGwK8UzcfaEFAL+lS1HKZtW5JrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDqWq4kZFWLJPiZ1YeQcs2L0sW/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3 NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvYTNlNzU5NDAtOGZmNy00 MTI4LWFjMTMtNmZhMjgzNmE5YjJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy ODM2YTliMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxogMChngX9rVjYa5n1luq oVawvddx1iW8ShtCmh9phFbIqJ/Yyx5ZelQ7eRKZi9Vryj2QcNFiFvlqoRFmlzuO 3AThIJiZIqYsebgxuZWWDat1g2h+kF+BbtbWvdFSl/+eDpwfN/AW7l8kHhpzXRG1 pGtgFXOtjmwOldh1vqegRgBiCgvmCnd3tMCJ1RPGThld1mcpzWO2FtfiEByHSvn4 hWa8i68CRinSMl5mk+aOa7XoZM//La7UL/2SZpto3m8OmCcZYBWuyQ8iDBfqXDDg G8u5ESEAI/af2PMMolCWHtGAIj8xW4ezXCekaVNRzDn4iiWiepNyt6ONaP1QpE+W -----END CERTIFICATE-----Generated at Sun Nov 2 16:35:42 2025 by rpki-client