$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft File: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft (raw, json) Hash identifier: Aa/UA23M9eukpntTrvTHXYjQL88VQX2MDO8Myyea05I= Subject key identifier: 4B:33:69:C6:DB:EB:53:79:F4:97:09:53:C3:85:23:76:57:5D:F2:1B Authority key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Certificate issuer: /CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Certificate serial: 010D0C9F4328584BBFC30FA66045DAAF738FF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft Manifest number: 010D0C9F432858449B3EDD7ED311E5791936D620 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl (hash: nNTYtkweFyYQeLARRlZesDyOLSpVw2hgYRHrUEbsz2Y=) 2: 9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa (hash: jb4N4Pkhb4oruSIqoUWmeNGXbfb7DQzPDSq14ESsw7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0f:a6:60:45:da:af:73:8f:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=e5cc6bc4-8579-4cd9-af9f-689a84fa50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:ab:b4:6a:9f:18:c3:a5:2e:7e:62:07:3e: 3e:4c:b6:2a:62:d1:45:f6:90:a3:02:53:ae:63:7a: 3b:7d:e2:3d:2a:66:a4:04:1d:18:31:82:9e:41:7b: 19:3f:14:a1:00:33:50:fe:71:cb:6b:e2:7f:d1:d6: a3:a2:58:ad:f9:30:21:f4:1b:19:cb:1a:9e:51:61: c0:bd:02:f7:b0:59:28:49:9f:36:7d:2b:58:21:6e: da:73:b9:68:5b:df:2a:33:15:4b:74:3c:b2:d4:37: 65:86:3c:cd:cf:28:00:db:ba:cb:80:1c:d9:f3:0b: b2:84:08:54:a6:91:8f:76:be:33:fe:27:18:40:4f: e2:91:ea:47:72:21:d7:f3:fa:a8:fa:61:22:9c:46: 5d:fb:92:11:b1:15:31:74:60:94:8f:0f:d6:b0:8e: a1:b8:2e:67:35:28:d5:f2:49:53:ec:25:c7:76:7c: 8d:c4:9d:a4:65:a2:33:c6:ee:dc:ef:76:a4:a9:76: 5c:0e:9e:ed:c5:68:76:86:68:1d:be:b4:56:90:97: 84:38:89:78:ef:31:39:ee:9c:35:ad:d8:25:2c:44: 5b:52:f7:de:ed:da:27:43:8c:b8:ec:2f:11:ac:e7: 7e:42:44:4c:f3:22:b6:f9:bb:98:c1:70:25:9f:9b: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:69:C6:DB:EB:53:79:F4:97:09:53:C3:85:23:76:57:5D:F2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl X509v3 Authority Key Identifier: keyid:D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6a:31:ad:53:10:55:65:86:91:96:93:bc:b8:ae:e6:9f:9f: 77:e1:7b:b6:54:51:00:0f:9b:ff:2e:fb:f1:87:c9:0c:53:1e: 71:24:24:f8:bb:52:5d:a2:ef:0c:88:54:d5:e0:9b:f9:7e:b8: c1:21:5f:da:de:dc:81:46:09:54:e4:18:fb:60:18:90:2e:21: 46:ce:c4:0f:3a:e7:95:d5:38:2d:cc:5b:0f:10:66:42:9d:63: d7:fc:ae:f7:74:ab:ae:37:86:1c:f6:ef:21:3d:f8:44:d4:71: 0a:8e:aa:f8:6b:47:20:bc:45:89:a7:f6:31:11:ae:44:9b:ab: 0e:06:b4:91:87:0f:6a:4f:4b:8c:38:9f:85:b1:2c:08:d6:fb: 87:07:b3:04:3c:04:2b:89:15:01:0d:bb:5f:9b:5b:39:fe:53: 1d:91:72:75:d4:92:2c:57:82:1e:6d:1c:d4:2f:a0:a2:09:2a: f7:57:7e:4f:f4:45:61:22:63:ff:14:db:f8:e1:d1:ee:e0:52: 1a:05:32:29:f7:be:5b:d2:fc:76:01:d6:1d:1d:36:f4:95:52: f5:bd:19:3f:c7:0c:69:6a:72:5e:cc:60:42:24:3a:a4:f1:b1: ea:b6:42:b3:dc:a4:2d:22:2d:42:91:c5:d6:62:ec:21:c1:00: 0b:67:02:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww+mYEXar3OP8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2 ZmUxMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk ZTVjYzZiYzQtODU3OS00Y2Q5LWFmOWYtNjg5YTg0ZmE1MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsKrtGqfGMOlLn5iBz4+TLYqYtFF9pCjAlOu Y3o7feI9KmakBB0YMYKeQXsZPxShADNQ/nHLa+J/0dajolit+TAh9BsZyxqeUWHA vQL3sFkoSZ82fStYIW7ac7loW98qMxVLdDyy1DdlhjzNzygA27rLgBzZ8wuyhAhU ppGPdr4z/icYQE/ikepHciHX8/qo+mEinEZd+5IRsRUxdGCUjw/WsI6huC5nNSjV 8klT7CXHdnyNxJ2kZaIzxu7c73akqXZcDp7txWh2hmgdvrRWkJeEOIl47zE57pw1 rdglLERbUvfe7donQ4y47C8RrOd+QkRM8yK2+buYwXAln5uKmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEszacbb61N59JcJU8OFI3ZXXfIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTUy Y2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvNjk1MmNjMGItYTM2NS00 MGI4LWE4YjMtNDM0MDhjNGM2ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjk1MmNjMGItYTM2NS00MGI4LWE4 YjMtNDM0MDhjNGM2ZmUxLzY5NTJjYzBiLWEzNjUtNDBiOC1hOGIzLTQzNDA4YzRj NmZlMS5jcmwwHwYDVR0jBBgwFoAU1AlbTrX+Ny7zhHYXBh4i9RecCoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQw OGM0YzZmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwajGtUxBVZYaRlpO8uK7m n5934Xu2VFEAD5v/Lvvxh8kMUx5xJCT4u1Jdou8MiFTV4Jv5frjBIV/a3tyBRglU 5Bj7YBiQLiFGzsQPOueV1TgtzFsPEGZCnWPX/K73dKuuN4Yc9u8hPfhE1HEKjqr4 a0cgvEWJp/YxEa5Em6sOBrSRhw9qT0uMOJ+FsSwI1vuHB7MEPAQriRUBDbtfm1s5 /lMdkXJ11JIsV4IebRzUL6CiCSr3V35P9EVhImP/FNv44dHu4FIaBTIp975b0vx2 AdYdHTb0lVL1vRk/xwxpanJezGBCJDqk8bHqtkKz3KQtIi1CkcXWYuwhwQALZwLF -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:42 2025 by rpki-client