$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft File: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft (raw, json) Hash identifier: ndxB24hSVoJcZIyRWBoqQgw6PnzW/H2xRoOaR7UJXBw= Subject key identifier: 33:9F:87:06:78:DA:AE:6F:03:1D:73:09:87:EF:52:43:B4:69:89:24 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584BD3311037D0C7450DF0A46D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft Manifest number: 010D0C9F432858480A52F9CC8E966E7AFF5A7AAE Signing time: Tue 11 Nov 2025 14:02:03 +0000 Manifest this update: Tue 11 Nov 2025 14:02:03 +0000 Manifest next update: Thu 13 Nov 2025 12:00:00 +0000 Files and hashes: 1: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (hash: Au8ruKhVSo5dOGYyVzsRVSgv1PzqT3pdYNfK4dkA9kM=) 2: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl (hash: xUhkF4IVN50gdShuE23BmAL4AlpyD64jbWRgwvFhing=) 3: 481ae520-6967-3ac1-8b79-c8677bf7adfa.roa (hash: 3QMN6AODvkRURWAhy5UpJV8PkIi0YuXK5KpADW2UkdA=) 4: 7ca41dda-e456-3247-b2ab-cfdb860809e0.roa (hash: FJcMniyx5rhZuvLM5ZxfEY5Jc7wTaZtlFWQovOM5HAs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:31:10:37:d0:c7:45:0d:f0:a4:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Nov 11 14:02:03 2025 GMT Not After : Nov 13 12:00:00 2025 GMT Subject: CN=9f22f4a1-bbc2-45b1-abcd-7e63c7f2abb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:8e:00:8f:41:a9:f0:f3:b1:b9:11:d1:86: d7:69:15:bf:b2:e1:5e:cd:7c:08:c5:30:70:1f:5f: bc:89:41:41:a5:0a:f5:29:38:d0:3b:9c:47:ce:59: e6:ff:47:76:a1:05:ee:db:ec:31:fd:5f:11:41:36: 5b:eb:fd:0d:f4:eb:3a:69:b1:ff:29:6d:e6:18:2e: 32:8c:ba:dc:6a:0c:3e:d8:4e:77:3f:0e:73:24:d0: 7e:f9:08:93:8d:2f:7a:59:a6:60:ab:f3:fd:39:34: 83:b3:2b:ec:52:24:90:7e:ec:11:6f:a0:45:af:09: 2a:c3:74:22:db:ee:fb:42:48:fc:1e:f7:92:6b:b8: f6:ea:c1:c4:a8:19:6c:c1:fd:f1:e9:68:1c:b2:d3: 33:70:27:d6:b6:66:c9:9e:1e:9e:da:42:62:b3:13: 65:2c:2c:65:5b:ba:e8:b9:f5:74:eb:d3:e9:7a:7f: 38:48:82:0b:b3:71:76:f7:78:ac:50:a2:10:d9:0c: 33:2d:6f:ab:7f:7c:19:52:07:99:48:f8:92:a7:c9: 81:0d:fe:1c:25:a8:7d:27:97:cd:dc:55:38:72:6e: 24:5b:5d:fa:41:1e:b2:c6:ad:13:e7:08:0a:55:9d: 52:e8:08:ee:fc:ff:59:fb:17:ae:ea:42:7c:7c:84: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:87:06:78:DA:AE:6F:03:1D:73:09:87:EF:52:43:B4:69:89:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:17:bd:a7:f3:8f:d4:92:3b:7f:28:ef:93:95:5d:3a:4e:46: da:2d:cf:b3:dd:63:26:c6:44:f7:33:47:b8:93:ce:62:f6:12: 6d:7a:25:0e:8c:0a:c2:8b:65:e5:75:b9:6a:58:9d:ea:51:fd: fa:c3:f8:f4:4b:be:13:68:47:1c:45:07:77:61:5d:2a:d4:9b: 23:49:fe:85:1d:35:6d:50:f4:52:f3:8d:29:fe:e5:b1:f2:a5: 7a:ef:8a:a8:c5:62:c8:07:92:2a:5a:9d:43:b7:dd:35:df:18: 05:50:ab:08:47:ff:b1:b6:2d:f3:5b:6c:78:11:51:a4:43:ef: 07:3d:2c:24:09:6c:9d:97:dd:78:b4:6c:6d:75:c8:b5:bf:65: 7f:03:ea:cb:e6:38:c6:03:e5:d9:0d:61:ca:6f:79:88:ed:b5: 03:45:64:8e:aa:f9:05:29:80:5b:f2:e8:ed:8e:bc:44:a4:04: 44:a0:6a:a5:df:8d:83:3c:71:e4:58:1a:aa:3f:d3:7c:54:ce: 36:78:a3:10:34:b4:22:6a:85:a7:48:06:27:13:22:c8:de:8b: 50:88:0f:ac:bc:57:52:f4:d5:2a:1c:8b:17:b8:ee:01:e7:dd: a9:bb:9c:6e:44:73:dd:7e:8a:ad:84:bf:32:29:12:87:32:d7: 52:d2:7c:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvTMRA30MdFDfCkbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MTExMTE0MDIwM1oXDTI1MTExMzEyMDAwMFowLzEtMCsGA1UEAxMk OWYyMmY0YTEtYmJjMi00NWIxLWFiY2QtN2U2M2M3ZjJhYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+KOAI9BqfDzsbkR0YbXaRW/suFezXwIxTBw H1+8iUFBpQr1KTjQO5xHzlnm/0d2oQXu2+wx/V8RQTZb6/0N9Os6abH/KW3mGC4y jLrcagw+2E53Pw5zJNB++QiTjS96WaZgq/P9OTSDsyvsUiSQfuwRb6BFrwkqw3Qi 2+77Qkj8HveSa7j26sHEqBlswf3x6WgcstMzcCfWtmbJnh6e2kJisxNlLCxlW7ro ufV069Ppen84SIILs3F293isUKIQ2QwzLW+rf3wZUgeZSPiSp8mBDf4cJah9J5fN 3FU4cm4kW136QR6yxq0T5wgKVZ1S6Aju/P9Z+xeu6kJ8fITxGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDOfhwZ42q5vAx1zCYfvUkO0aYkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvM2E5NTlhYmEtZWY2OS00 YTU2LWFhNmItMWNhMWZhNWFmM2EwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoF72n84/Ukjt/KO+TlV06 TkbaLc+z3WMmxkT3M0e4k85i9hJteiUOjArCi2XldblqWJ3qUf36w/j0S74TaEcc RQd3YV0q1JsjSf6FHTVtUPRS840p/uWx8qV674qoxWLIB5IqWp1Dt9013xgFUKsI R/+xti3zW2x4EVGkQ+8HPSwkCWydl914tGxtdci1v2V/A+rL5jjGA+XZDWHKb3mI 7bUDRWSOqvkFKYBb8ujtjrxEpAREoGql342DPHHkWBqqP9N8VM42eKMQNLQiaoWn SAYnEyLI3otQiA+svFdS9NUqHIsXuO4B592pu5xuRHPdfoqthL8yKRKHMtdS0nwi -----END CERTIFICATE-----Generated at Tue Nov 11 22:43:19 2025 by rpki-client