$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft File: 3e752e0d-0e22-47d1-a147-151d170def2d.mft (raw, json) Hash identifier: 4xhSDZnfLeft39KXC5RMd4uUDw3ghw5DQCWkvbsx4Zc= Subject key identifier: FA:85:F6:77:C0:9C:49:11:17:99:10:1A:3C:72:D1:B0:CE:24:24:0C Authority key identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Certificate issuer: /CN=3e752e0d-0e22-47d1-a147-151d170def2d Certificate serial: 010D0C9F4328584BE17EE87DF3FF057A76B00100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft Manifest number: 010D0C9F4328584338DCA9666A635BF04CCCE81A Signing time: Sun 16 Nov 2025 17:00:10 +0000 Manifest this update: Sun 16 Nov 2025 17:00:10 +0000 Manifest next update: Wed 19 Nov 2025 17:00:00 +0000 Files and hashes: 1: 3e752e0d-0e22-47d1-a147-151d170def2d.crl (hash: znVI7YKE/0nEqdKbSj3Eqq50sgML1zsYb49CfPtZSIU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:7e:e8:7d:f3:ff:05:7a:76:b0:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e752e0d-0e22-47d1-a147-151d170def2d Validity Not Before: Nov 16 17:00:10 2025 GMT Not After : Nov 19 17:00:00 2025 GMT Subject: CN=13e75d61-4bf7-45e6-b841-dfa16f8c91ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2d:0a:20:39:0e:44:98:25:1e:46:b9:42:c2: 44:19:b8:54:3b:62:0c:6f:1e:c2:a6:57:7b:84:73: d2:79:e9:8b:4b:e0:60:71:1d:c2:e6:e8:46:85:82: 14:47:89:a1:0b:93:6e:47:e0:bb:f3:c5:41:5d:5f: 2f:a9:1f:5d:5a:ae:b0:27:7e:7c:a5:c4:99:21:4e: cc:17:eb:2f:c0:44:68:e1:d3:a3:a0:f2:aa:ce:21: 4d:a8:ab:49:df:a7:8b:b9:cf:8a:24:6c:54:eb:53: 9d:16:e8:98:96:58:53:44:3c:96:42:2d:6d:08:70: 48:42:b9:99:f4:44:d7:14:86:1e:d0:24:c9:d2:b0: 23:b1:4f:70:8d:f5:10:0c:ce:20:c1:fb:92:60:66: 2a:1d:f8:4d:6c:bb:40:48:fa:0c:1f:7c:f2:69:32: 1d:78:e3:69:d0:9b:bf:7d:27:10:c8:bc:b6:30:79: 71:86:9a:f4:7a:8a:7f:00:2b:5d:9b:e7:8e:c5:62: 96:50:54:1d:f9:be:7c:2e:7b:3d:94:24:e3:01:8e: 1f:ac:0d:5d:44:3c:93:b1:11:f7:ff:52:6a:03:96: f8:ed:e5:68:68:c4:c8:02:13:f1:3b:c7:9f:90:04: 4f:bf:ee:85:e1:81:55:33:24:0b:13:6b:7a:88:30: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:F6:77:C0:9C:49:11:17:99:10:1A:3C:72:D1:B0:CE:24:24:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl X509v3 Authority Key Identifier: keyid:8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b7:1c:18:7b:b9:51:4b:dd:f1:7b:7b:a2:f9:53:7e:25:f1: 95:eb:b6:17:df:b1:d6:b1:85:36:72:0e:19:5b:d2:57:71:6c: bf:b0:c0:6c:51:e6:4e:cf:5f:2b:d3:50:26:2b:1c:d4:e3:f4: 25:80:8e:eb:ec:3a:43:a8:3c:d3:1a:32:5c:f8:20:ed:90:22: 6f:d2:7c:8c:49:4a:37:24:ca:ff:3a:23:f5:fe:a3:38:ba:a1: d4:43:1b:f9:76:96:b6:7b:93:30:c4:31:10:cd:83:33:2a:3d: 23:c0:12:02:24:bf:f0:7e:6c:51:39:54:2a:54:70:14:b3:6f: 76:04:de:14:a1:01:b8:7d:fb:b4:1f:eb:f4:8a:73:d4:dc:c2: 6e:0b:27:a9:cf:d6:15:22:3e:5d:4f:9c:57:8b:75:79:35:cc: d0:46:9a:7a:28:f1:2d:4d:7a:17:cf:a2:44:c8:ab:ec:db:d2: 94:59:a4:7d:81:26:c5:d7:9c:41:3d:0b:39:96:d8:d9:11:08: 07:c8:18:9e:40:c6:4c:bf:a6:67:b5:b6:4e:b2:e1:85:1f:de: 2f:a3:04:ad:38:3b:74:eb:17:4c:6c:3f:10:a5:25:8b:b1:2d: 4b:9c:4e:ae:a3:e4:43:fc:04:5b:5e:4f:e7:7b:49:03:ac:b2: b3:f2:5a:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvhfuh98/8FenawAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U3NTJlMGQtMGUyMi00N2QxLWExNDctMTUxZDE3MGRl ZjJkMB4XDTI1MTExNjE3MDAxMFoXDTI1MTExOTE3MDAwMFowLzEtMCsGA1UEAxMk MTNlNzVkNjEtNGJmNy00NWU2LWI4NDEtZGZhMTZmOGM5MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+S0KIDkORJglHka5QsJEGbhUO2IMbx7Cpld7 hHPSeemLS+BgcR3C5uhGhYIUR4mhC5NuR+C788VBXV8vqR9dWq6wJ358pcSZIU7M F+svwERo4dOjoPKqziFNqKtJ36eLuc+KJGxU61OdFuiYllhTRDyWQi1tCHBIQrmZ 9ETXFIYe0CTJ0rAjsU9wjfUQDM4gwfuSYGYqHfhNbLtASPoMH3zyaTIdeONp0Ju/ fScQyLy2MHlxhpr0eop/ACtdm+eOxWKWUFQd+b58Lns9lCTjAY4frA1dRDyTsRH3 /1JqA5b47eVoaMTIAhPxO8efkARPv+6F4YFVMyQLE2t6iDAJaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPqF9nfAnEkRF5kQGjxy0bDOJCQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1 MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcwZGVmMmQvM2U3NTJlMGQtMGUyMi00 N2QxLWExNDctMTUxZDE3MGRlZjJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2U3NTJlMGQtMGUyMi00N2QxLWEx NDctMTUxZDE3MGRlZjJkLzNlNzUyZTBkLTBlMjItNDdkMS1hMTQ3LTE1MWQxNzBk ZWYyZC5jcmwwHwYDVR0jBBgwFoAUi7RTNvc3QthQ8iPcH0cb2YnNmqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFk MTcwZGVmMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBtxwYe7lRS93xe3ui+VN+ JfGV67YX37HWsYU2cg4ZW9JXcWy/sMBsUeZOz18r01AmKxzU4/QlgI7r7DpDqDzT GjJc+CDtkCJv0nyMSUo3JMr/OiP1/qM4uqHUQxv5dpa2e5MwxDEQzYMzKj0jwBIC JL/wfmxROVQqVHAUs292BN4UoQG4ffu0H+v0inPU3MJuCyepz9YVIj5dT5xXi3V5 NczQRpp6KPEtTXoXz6JEyKvs29KUWaR9gSbF15xBPQs5ltjZEQgHyBieQMZMv6Zn tbZOsuGFH94vowStODt06xdMbD8QpSWLsS1LnE6uo+RD/ARbXk/ne0kDrLKz8lr7 -----END CERTIFICATE-----Generated at Sun Nov 16 19:46:32 2025 by rpki-client