$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft File: 4f9daf15-de63-453b-a389-ff5afab0a952.mft (raw, json) Hash identifier: tlXvkZ+niCodHDvYNTK+gX9AbPrLnC7N+xApuKmO8WI= Subject key identifier: B9:88:9C:F2:D3:C0:50:AF:3E:B5:D5:C1:01:3D:94:F8:83:28:A6:A8 Authority key identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A Certificate issuer: /CN=4f9daf15-de63-453b-a389-ff5afab0a952 Certificate serial: 010D0C9F4328584BC05800639DEFEDA406DFC180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft Manifest number: 010D0C9F432858459444AEA5DEC4A61CB84DB27D Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 01073802-359f-3fcc-8cd9-7191adb0b622.roa (hash: YqkX9bmGSUmKdBfJa2r0RtLBlX7FYT4F+ETvDlxP/ng=) 2: 4f9daf15-de63-453b-a389-ff5afab0a952.crl (hash: O2tBlgyXYkhhJYUPC9RMCzpiS6WqDGeff9W6TlMAVAk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:63:9d:ef:ed:a4:06:df:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9daf15-de63-453b-a389-ff5afab0a952 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=2a4b31db-bc10-4cdf-b061-008040909db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:8b:71:ce:57:82:87:6f:85:db:45:4e:c1: 8d:e0:91:36:a4:53:1b:d6:5e:59:95:65:ca:13:17: be:43:32:1e:9e:34:cb:fd:6b:0c:6a:f4:f6:eb:42: 9d:80:9a:6b:23:04:68:31:c7:c7:3c:3c:89:d2:18: f1:c1:65:63:48:cb:9c:53:4c:4b:39:c3:d7:27:0e: 5b:72:06:b4:d7:8f:9f:2f:25:52:9c:07:01:97:10: d8:9e:8b:d9:de:b5:74:05:b5:f2:f1:47:35:fe:51: 29:b7:ed:e9:b6:74:0f:d2:5e:a8:b5:c3:cc:52:9f: 83:6f:3c:23:99:dc:50:2c:96:6b:5a:12:19:73:70: 68:93:90:42:7c:7b:2c:c3:9a:46:2e:1b:97:ce:6f: fb:e5:e6:0a:d5:7f:41:4c:db:af:e9:09:0c:85:9a: 01:13:4c:6a:57:08:f0:c0:87:fd:1f:de:66:69:b0: 31:ff:a4:29:5b:d6:2b:2b:0e:df:6e:7e:0c:70:6c: 8b:60:f8:51:5b:eb:e9:9b:a5:42:10:c3:fa:0f:83: 67:bd:6d:59:7d:23:ce:ba:00:bc:be:d0:91:2c:03: 5e:00:5d:9c:1b:05:c3:19:81:83:5e:fe:83:bb:95: 00:13:92:92:59:5e:33:1e:7a:49:c5:41:48:12:b8: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:88:9C:F2:D3:C0:50:AF:3E:B5:D5:C1:01:3D:94:F8:83:28:A6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl X509v3 Authority Key Identifier: keyid:C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8f:bb:4b:54:15:4a:7a:d8:ed:4a:b3:35:55:cb:12:c1:c1: ce:81:28:6b:89:c8:73:5f:0b:c4:28:af:34:ee:38:3b:75:4a: bd:e5:eb:7f:09:05:94:a2:d4:7c:dd:86:ec:fb:98:39:14:83: 3e:a0:b7:46:7f:05:ff:ff:da:f8:32:ee:f1:c9:9e:cf:c7:e1: 1f:24:80:9f:28:21:a7:e7:ee:c2:1c:09:90:9d:f6:b5:86:d8: 8d:29:d9:0a:02:04:90:f1:aa:91:24:de:d2:4d:b9:48:53:9f: a7:40:c4:c4:0b:9c:96:b0:e7:9d:e1:40:15:8b:7a:d3:af:71: 03:e6:10:3a:46:ac:81:1c:eb:61:2a:db:df:3d:7c:d2:a3:4a: b1:b0:e3:c2:45:62:aa:33:72:7f:0d:81:77:da:12:0a:5a:1e: cc:18:ed:13:c5:c1:99:0a:50:12:41:64:53:96:13:74:09:ee: fc:ce:12:ad:af:2a:b6:1f:a0:ec:ca:42:a1:9c:1a:74:db:84: db:fb:85:e9:df:20:c4:5d:4b:5b:5d:77:13:7c:f1:22:75:3f: 4e:ec:e2:90:6e:5f:1a:43:55:53:1e:9f:af:78:66:a7:d8:b6: bf:35:c0:bd:48:cb:cd:78:2f:45:be:90:c9:fb:70:b7:6a:05: b5:85:d6:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWABjne/tpAbfwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5ZGFmMTUtZGU2My00NTNiLWEzODktZmY1YWZhYjBh OTUyMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk MmE0YjMxZGItYmMxMC00Y2RmLWIwNjEtMDA4MDQwOTA5ZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjumLcc5XgodvhdtFTsGN4JE2pFMb1l5ZlWXK Exe+QzIenjTL/WsMavT260KdgJprIwRoMcfHPDyJ0hjxwWVjSMucU0xLOcPXJw5b cga014+fLyVSnAcBlxDYnovZ3rV0BbXy8Uc1/lEpt+3ptnQP0l6otcPMUp+Dbzwj mdxQLJZrWhIZc3Bok5BCfHssw5pGLhuXzm/75eYK1X9BTNuv6QkMhZoBE0xqVwjw wIf9H95mabAx/6QpW9YrKw7fbn4McGyLYPhRW+vpm6VCEMP6D4NnvW1ZfSPOugC8 vtCRLANeAF2cGwXDGYGDXv6Du5UAE5KSWV4zHnpJxUFIEriAFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLmInPLTwFCvPrXVwQE9lPiDKKaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Zjlk YWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVhZmFiMGE5NTIvNGY5ZGFmMTUtZGU2My00 NTNiLWEzODktZmY1YWZhYjBhOTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGY5ZGFmMTUtZGU2My00NTNiLWEz ODktZmY1YWZhYjBhOTUyLzRmOWRhZjE1LWRlNjMtNDUzYi1hMzg5LWZmNWFmYWIw YTk1Mi5jcmwwHwYDVR0jBBgwFoAUxxsF6dyEJ6J1vPl0EsgGa1i7showDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZjlkYWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVh ZmFiMGE5NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfj7tLVBVKetjtSrM1VcsS wcHOgShrichzXwvEKK807jg7dUq95et/CQWUotR83Ybs+5g5FIM+oLdGfwX//9r4 Mu7xyZ7Px+EfJICfKCGn5+7CHAmQnfa1htiNKdkKAgSQ8aqRJN7STblIU5+nQMTE C5yWsOed4UAVi3rTr3ED5hA6RqyBHOthKtvfPXzSo0qxsOPCRWKqM3J/DYF32hIK Wh7MGO0TxcGZClASQWRTlhN0Ce78zhKtryq2H6DsykKhnBp024Tb+4Xp3yDEXUtb XXcTfPEidT9O7OKQbl8aQ1VTHp+veGan2La/NcC9SMvNeC9FvpDJ+3C3agW1hdYv -----END CERTIFICATE-----Generated at Wed Nov 5 03:30:37 2025 by rpki-client