$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft File: 3e43e154-e174-4a6b-a09a-e289bd92a034.mft (raw, json) Hash identifier: oF2oNOMXg+hV+0kuIBQAoO5Vw2jlje1oc3rOE3ND2EQ= Subject key identifier: 86:86:D4:4B:74:9F:71:0A:B3:49:19:D5:8D:51:B3:4E:3C:CD:5E:48 Authority key identifier: 97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 Certificate issuer: /CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Certificate serial: 010D0C9F4328584BC8F39CFC846894AA17164B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft Manifest number: 010D0C9F4328584944138B300DF9C4D02E8D3BAE Signing time: Fri 07 Nov 2025 22:00:08 +0000 Manifest this update: Fri 07 Nov 2025 22:00:08 +0000 Manifest next update: Sun 09 Nov 2025 22:00:00 +0000 Files and hashes: 1: 3e43e154-e174-4a6b-a09a-e289bd92a034.crl (hash: wJuWzLYVk7CcyaAyXEbwJaNJ1dGdqRCAMK6yaGyhDxc=) 2: bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa (hash: XSOW+diyOS9qcfBIaWgnZk4BCGbCLkSgIok1UtCvrEg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:f3:9c:fc:84:68:94:aa:17:16:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Validity Not Before: Nov 7 22:00:08 2025 GMT Not After : Nov 9 22:00:00 2025 GMT Subject: CN=5c66313e-7eda-4fea-a5d8-a2a42f44d60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:81:c1:82:bb:a8:69:09:6f:f3:0b:eb:98: c5:82:e6:6e:b2:5a:16:65:6c:56:98:08:9c:e3:cc: 7a:55:1c:41:7a:2b:b8:db:f7:8b:92:50:e7:94:86: d3:a2:43:7d:d6:a8:b2:e3:fb:a0:35:38:e9:01:a9: b3:da:57:98:ba:fc:a9:37:8b:6b:37:e3:a4:db:16: 30:f7:95:2d:37:81:96:02:87:8a:99:bd:da:f8:f9: 04:ba:d8:eb:f6:31:0f:9a:97:9e:eb:71:5a:ed:d9: 3a:e4:e1:64:84:72:f7:c1:bd:9b:d3:6b:43:4c:eb: 2a:c1:24:7a:b8:cc:ca:b4:b8:ad:3a:41:c0:4b:1f: d6:98:00:36:0d:42:80:0f:09:b6:9e:a3:aa:05:4c: 9a:ea:37:bc:a0:b7:a1:3b:8c:78:c8:a0:82:d2:b9: 63:0c:c5:9f:37:45:0e:fe:0f:3f:ea:38:ef:79:bc: f4:04:78:d2:7c:b8:54:2a:df:fb:df:86:f6:24:e9: b2:6a:45:c0:4e:d9:7f:f7:d8:5d:ee:d4:8f:db:09: 61:d6:22:d4:56:2d:23:a0:9c:76:20:c0:67:fa:48: e4:60:22:4b:b6:4e:66:90:5a:1d:c2:b3:b7:0a:c8: ee:1a:e1:6e:a2:9a:1e:73:5a:76:ff:67:75:c0:a9: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:D4:4B:74:9F:71:0A:B3:49:19:D5:8D:51:B3:4E:3C:CD:5E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl X509v3 Authority Key Identifier: keyid:97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:91:7a:b3:21:8c:3e:72:b1:2a:65:13:cb:76:5b:14:c4:c8: 3c:0b:91:d8:63:fd:12:5c:d6:a0:c8:41:24:62:a6:51:7c:5b: 48:b7:e4:d7:07:44:46:61:03:6f:a4:75:5a:54:51:5c:46:dc: ef:58:99:31:33:3a:c9:91:80:64:4a:a8:28:1c:45:24:03:09: 7f:fd:3e:ee:28:89:17:2a:15:b5:d7:ad:9f:88:5c:fb:38:96: 8a:6c:ff:a0:a4:19:f2:13:95:7e:9d:2f:19:4f:36:de:91:0c: 80:39:b9:0c:b0:85:eb:4f:bb:96:b5:3a:4a:d3:92:9b:b5:bc: b7:ea:83:d6:80:99:ef:50:0f:80:3f:c7:fd:3d:81:f9:4e:7b: 08:0c:c0:db:bd:58:40:7a:e2:8d:06:70:11:91:81:d2:4d:ff: 1d:ac:89:46:ab:35:27:e8:09:80:e0:b3:45:0d:46:ec:47:dd: 00:cb:3c:89:68:59:02:1d:09:d7:e2:02:d4:d4:ab:46:da:7e: 4d:c5:78:d2:b9:50:f4:4b:98:6e:b8:eb:5d:1b:dd:bf:1d:d2: c1:3c:9d:f7:7e:95:8c:fe:77:f6:a7:76:c8:1b:bb:a1:45:fe: 4a:3c:ac:1f:4e:ec:c6:09:8e:52:de:e9:c4:8d:16:5a:f6:d7: 39:0b:32:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvI85z8hGiUqhcWS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U0M2UxNTQtZTE3NC00YTZiLWEwOWEtZTI4OWJkOTJh MDM0MB4XDTI1MTEwNzIyMDAwOFoXDTI1MTEwOTIyMDAwMFowLzEtMCsGA1UEAxMk NWM2NjMxM2UtN2VkYS00ZmVhLWE1ZDgtYTJhNDJmNDRkNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmOBwYK7qGkJb/ML65jFguZusloWZWxWmAic 48x6VRxBeiu42/eLklDnlIbTokN91qiy4/ugNTjpAamz2leYuvypN4trN+Ok2xYw 95UtN4GWAoeKmb3a+PkEutjr9jEPmpee63Fa7dk65OFkhHL3wb2b02tDTOsqwSR6 uMzKtLitOkHASx/WmAA2DUKADwm2nqOqBUya6je8oLehO4x4yKCC0rljDMWfN0UO /g8/6jjvebz0BHjSfLhUKt/734b2JOmyakXATtl/99hd7tSP2wlh1iLUVi0joJx2 IMBn+kjkYCJLtk5mkFodwrO3CsjuGuFuopoec1p2/2d1wKkP8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIaG1Et0n3EKs0kZ1Y1Rs048zV5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQz ZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5YmQ5MmEwMzQvM2U0M2UxNTQtZTE3NC00 YTZiLWEwOWEtZTI4OWJkOTJhMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2U0M2UxNTQtZTE3NC00YTZiLWEw OWEtZTI4OWJkOTJhMDM0LzNlNDNlMTU0LWUxNzQtNGE2Yi1hMDlhLWUyODliZDky YTAzNC5jcmwwHwYDVR0jBBgwFoAUl5YC2dswnhnP056lQoCu/o/5m8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQzZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5 YmQ5MmEwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvkXqzIYw+crEqZRPLdlsU xMg8C5HYY/0SXNagyEEkYqZRfFtIt+TXB0RGYQNvpHVaVFFcRtzvWJkxMzrJkYBk SqgoHEUkAwl//T7uKIkXKhW1162fiFz7OJaKbP+gpBnyE5V+nS8ZTzbekQyAObkM sIXrT7uWtTpK05Kbtby36oPWgJnvUA+AP8f9PYH5TnsIDMDbvVhAeuKNBnARkYHS Tf8drIlGqzUn6AmA4LNFDUbsR90AyzyJaFkCHQnX4gLU1KtG2n5NxXjSuVD0S5hu uOtdG92/HdLBPJ33fpWM/nf2p3bIG7uhRf5KPKwfTuzGCY5S3unEjRZa9tc5CzIl -----END CERTIFICATE-----Generated at Sat Nov 8 18:56:15 2025 by rpki-client