$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json) Hash identifier: cQjw5BChBRsXiH48BF8HX1yozYn2x1zXuPNTLmclqiU= Subject key identifier: BE:1B:0F:D4:A1:C1:F1:B7:D9:5B:64:F4:23:AE:30:D5:84:00:81:CB Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F4328584BC35E33B7EAFDD68FD24F1180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft Manifest number: 010D0C9F4328584073A82B47310678490807DAA6 Signing time: Wed 05 Nov 2025 22:00:03 +0000 Manifest this update: Wed 05 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: xBdlh0mH8ICYvy7hzPGxfetYSrPqmQXLtI3KOhrwZOY=) 2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: bYzXSRaUp88uqPb6jOrF1S0bLlPBUrrWucuqxTTYnPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:5e:33:b7:ea:fd:d6:8f:d2:4f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Nov 5 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=bf9aa755-e4c2-482f-becc-6c686cfa084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:46:be:c1:55:78:6b:07:d9:eb:24:52:13: ad:1c:e4:3d:c3:08:38:2e:83:78:42:78:cc:b6:a4: 60:68:b4:84:67:b2:8e:b2:26:10:da:f3:b3:7a:88: 07:1a:51:53:01:24:4e:f0:5d:50:de:90:82:a7:5a: 61:bd:91:c9:12:8f:a6:9d:50:9d:94:ca:4e:15:d4: cf:6f:19:e4:7c:7d:08:a6:b9:e8:29:fb:09:e0:8c: 0a:a5:d1:96:73:72:de:32:f8:d9:67:1d:4a:7f:55: 5b:14:ab:85:46:d9:08:69:70:60:23:88:70:69:05: dd:a2:a4:a7:04:77:a5:a2:14:d1:85:52:77:f2:bb: 03:c9:3c:2a:20:7d:d4:d8:3c:11:37:74:0f:2b:ee: 3e:f7:b2:70:29:f6:34:70:62:e9:ae:fe:8e:eb:7c: a7:44:ac:4a:cd:be:a4:9f:65:da:6d:b8:d1:ab:60: a7:88:ff:aa:1f:8d:24:b6:17:3f:40:e1:3a:96:bd: 34:17:59:b3:ef:8b:fc:22:a2:ad:67:bb:75:da:15: 6e:8a:1b:63:e0:70:9e:59:d2:6a:81:28:a4:cf:ca: ef:a0:8a:97:8d:07:ff:ea:b7:01:09:6d:01:77:53: df:47:a7:c4:f7:1e:a6:4e:1b:f5:ae:63:87:25:25: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1B:0F:D4:A1:C1:F1:B7:D9:5B:64:F4:23:AE:30:D5:84:00:81:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ca:97:8a:65:79:9f:ee:31:76:f4:54:ac:bb:30:fd:98:9c: d9:d8:80:17:5f:1e:1f:f1:5b:07:96:d0:2b:fc:38:51:ef:67: 63:4e:4d:83:d8:75:8a:b1:72:4f:61:d3:9e:eb:bb:64:e5:fc: fa:15:2c:bb:e4:cf:37:23:e6:d3:11:ce:af:1a:78:35:83:e0: 83:0b:f8:05:08:82:43:23:8f:40:9c:ac:e1:33:56:e6:23:c1: fe:b9:63:e5:43:a8:f3:27:04:b7:57:f0:fc:45:8e:9a:20:14: e0:be:c5:a1:f6:2f:a2:bf:dd:c1:55:4d:e9:d4:05:f7:a2:a3: f1:ce:a9:b0:c5:16:87:ed:b8:d2:16:86:27:8c:70:d7:95:5f: 44:b7:46:ed:9a:61:9f:96:d8:1e:48:89:05:b2:9c:b5:e0:cd: 0c:fe:10:76:9d:80:0c:b3:53:af:7d:ad:00:14:e3:64:71:c1: e4:48:20:93:e0:e7:6a:6f:8d:1b:1f:65:bb:02:fb:87:30:67: 1e:72:1d:37:e6:5a:fa:e2:91:bb:06:48:db:ca:5c:44:dc:15: d6:2e:1b:93:fa:79:c7:c7:95:d7:4b:d2:39:7f:fd:b7:7d:17: c4:f2:2a:a7:dd:95:c7:3d:bc:8b:5d:d1:22:af:4c:d1:f6:95: 43:bb:8c:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvDXjO36v3Wj9JPEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MTEwNTIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk YmY5YWE3NTUtZTRjMi00ODJmLWJlY2MtNmM2ODZjZmEwODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmddGvsFVeGsH2eskUhOtHOQ9wwg4LoN4QnjM tqRgaLSEZ7KOsiYQ2vOzeogHGlFTASRO8F1Q3pCCp1phvZHJEo+mnVCdlMpOFdTP bxnkfH0IprnoKfsJ4IwKpdGWc3LeMvjZZx1Kf1VbFKuFRtkIaXBgI4hwaQXdoqSn BHelohTRhVJ38rsDyTwqIH3U2DwRN3QPK+4+97JwKfY0cGLprv6O63ynRKxKzb6k n2XabbjRq2CniP+qH40kthc/QOE6lr00F1mz74v8IqKtZ7t12hVuihtj4HCeWdJq gSikz8rvoIqXjQf/6rcBCW0Bd1PfR6fE9x6mThv1rmOHJSV74wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL4bD9ShwfG32Vtk9COuMNWEAIHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvM2ExMWE4NWYtOGYzNy00 YjU0LThmYTItZDZiYzA5NjczNzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQypeKZXmf7jF29FSsuzD9 mJzZ2IAXXx4f8VsHltAr/DhR72djTk2D2HWKsXJPYdOe67tk5fz6FSy75M83I+bT Ec6vGng1g+CDC/gFCIJDI49AnKzhM1bmI8H+uWPlQ6jzJwS3V/D8RY6aIBTgvsWh 9i+iv93BVU3p1AX3oqPxzqmwxRaH7bjSFoYnjHDXlV9Et0btmmGfltgeSIkFspy1 4M0M/hB2nYAMs1Ovfa0AFONkccHkSCCT4Odqb40bH2W7AvuHMGcech035lr64pG7 BkjbylxE3BXWLhuT+nnHx5XXS9I5f/23fRfE8iqn3ZXHPbyLXdEir0zR9pVDu4yJ -----END CERTIFICATE-----Generated at Thu Nov 6 01:50:14 2025 by rpki-client