$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: Tezz1Y3WW8O1xmJCoo99ZrYFyBglg29dqY1oMfRwboc= Subject key identifier: 77:E9:39:6A:60:8A:B9:B3:FB:CE:59:EE:48:E7:9F:94:EA:05:53:4D Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584BC576343524647F79FEC12210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A5603AE Signing time: Thu 06 Nov 2025 16:00:03 +0000 Manifest this update: Thu 06 Nov 2025 16:00:03 +0000 Manifest next update: Sat 08 Nov 2025 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: 1JAqN1cHwsodRNVElE3PxlMEA3q8IoOcmIqjfRE1rmM=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: ebVzusDdgZ3HT2WFvlhyzYjPIiaEcKOiCHY1tsGwhEE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:76:34:35:24:64:7f:79:fe:c1:22:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Nov 6 16:00:03 2025 GMT Not After : Nov 8 16:00:00 2025 GMT Subject: CN=363d63ab-8529-4b86-870c-4eda2094a38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:24:43:4d:29:7e:24:a1:ee:c5:01:24:40: 9b:2b:7a:19:aa:70:82:3d:6e:93:8e:a0:ad:2c:f0: 96:74:8a:e8:89:71:82:cb:10:f2:46:98:22:25:fe: a7:f6:e5:15:13:74:0c:b7:8b:c9:5b:0b:97:01:12: 5a:20:19:77:c1:3f:de:d3:76:8f:26:d9:a0:2f:d6: 18:58:ad:71:58:12:e5:00:a3:72:78:ca:4d:f9:a6: 61:f1:ad:e9:72:1f:f8:d8:a9:65:0b:81:d5:01:35: ad:ad:f2:2c:df:54:43:c8:cb:60:b7:eb:d6:3a:e9: 9a:24:3f:aa:e1:d3:3e:a1:77:bd:bc:15:cd:83:6d: 2e:e5:e1:be:88:f2:95:4d:9f:13:db:e6:8b:fa:11: 2d:8b:78:58:0e:25:71:56:b5:21:b3:cb:58:06:80: 43:00:32:8e:3f:eb:64:ab:a9:9d:f4:30:fe:ce:64: 3e:d7:a2:93:ee:72:72:f4:85:e0:01:19:ca:4a:0f: 5d:90:f5:6d:56:90:12:9a:1f:b9:d7:a5:11:96:3d: 9e:3b:7a:39:88:a7:f1:a4:42:0a:01:c7:f2:10:33: 25:d6:b3:e8:d4:ad:9e:c6:31:bf:a6:59:d9:b1:d9: 0f:af:be:59:b0:45:04:e9:e1:da:c7:9e:e6:d9:c1: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E9:39:6A:60:8A:B9:B3:FB:CE:59:EE:48:E7:9F:94:EA:05:53:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f3:29:fb:0f:69:38:ef:10:cd:a6:c8:0b:70:e1:2e:e0:06: c3:0e:aa:11:be:d8:73:30:77:11:ed:db:53:36:e9:1c:b4:ea: ea:73:bd:1e:f7:d5:61:0e:14:f9:4b:7a:20:13:33:c6:77:61: 98:ba:1b:53:47:66:20:83:e5:4b:97:4a:29:29:a6:74:d1:13: 17:71:9c:dd:df:59:f7:2d:51:15:95:6d:69:0b:b3:31:a4:a5: 62:d0:be:3f:75:74:da:69:2f:18:5d:f5:ab:d9:2d:4d:71:32: 89:ad:f1:2c:e5:96:92:69:a8:7f:af:dd:2a:f4:97:6a:69:2f: 22:88:1d:10:97:ea:04:3a:a1:4a:49:19:d6:7b:88:ed:1b:77: b2:bd:39:be:38:5c:4c:f4:28:bf:0e:49:de:06:36:fd:45:0d: 4a:26:96:27:37:90:33:88:3e:6e:6c:3c:b7:87:c7:49:9f:b7: 31:72:6f:7b:d0:d2:65:0e:5f:ca:f5:93:60:54:65:08:e0:67: c3:3a:94:10:7f:b5:01:f6:a1:24:b6:8e:b7:2e:09:89:7d:eb: de:fb:66:fa:32:4b:53:b1:83:58:30:e3:35:e2:ea:fb:2d:ba: f0:bf:30:ff:0d:8d:8e:21:6d:6c:4f:e4:6c:f0:5d:68:02:4b: 54:43:98:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvFdjQ1JGR/ef7BIhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MTEwNjE2MDAwM1oXDTI1MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk MzYzZDYzYWItODUyOS00Yjg2LTg3MGMtNGVkYTIwOTRhMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv4kQ00pfiSh7sUBJECbK3oZqnCCPW6TjqCt LPCWdIroiXGCyxDyRpgiJf6n9uUVE3QMt4vJWwuXARJaIBl3wT/e03aPJtmgL9YY WK1xWBLlAKNyeMpN+aZh8a3pch/42KllC4HVATWtrfIs31RDyMtgt+vWOumaJD+q 4dM+oXe9vBXNg20u5eG+iPKVTZ8T2+aL+hEti3hYDiVxVrUhs8tYBoBDADKOP+tk q6md9DD+zmQ+16KT7nJy9IXgARnKSg9dkPVtVpASmh+516URlj2eO3o5iKfxpEIK AcfyEDMl1rPo1K2exjG/plnZsdkPr75ZsEUE6eHax57m2cH/nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHfpOWpgirmz+85Z7kjnn5TqBVNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk8yn7D2k47xDNpsgLcOEu 4AbDDqoRvthzMHcR7dtTNukctOrqc70e99VhDhT5S3ogEzPGd2GYuhtTR2Ygg+VL l0opKaZ00RMXcZzd31n3LVEVlW1pC7MxpKVi0L4/dXTaaS8YXfWr2S1NcTKJrfEs 5ZaSaah/r90q9JdqaS8iiB0Ql+oEOqFKSRnWe4jtG3eyvTm+OFxM9Ci/DkneBjb9 RQ1KJpYnN5AziD5ubDy3h8dJn7cxcm970NJlDl/K9ZNgVGUI4GfDOpQQf7UB9qEk to63LgmJfeve+2b6MktTsYNYMOM14ur7LbrwvzD/DY2OIW1sT+Rs8F1oAktUQ5hj -----END CERTIFICATE-----Generated at Thu Nov 6 17:18:17 2025 by rpki-client