$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft File: 093dd42f-849c-49fe-b795-49e66b3b3b7a.mft (raw, json) Hash identifier: dD9mOrAwAg21BQ/FqZWpVfeDFLlIHP37DTqaBvjkrHY= Subject key identifier: E5:E8:A8:C5:78:A8:FB:56:8C:C4:2E:F3:72:08:31:9D:A6:66:8B:49 Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 Certificate issuer: /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Certificate serial: 010D0C9F4328584BBFA550818E91E6F326A093C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft Manifest number: 010D0C9F43285847DB12F1F07E6AEBE8DBDB176E Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 093dd42f-849c-49fe-b795-49e66b3b3b7a.crl (hash: TCCBctpAn6LuFQJlS6bszVgwloZYKNgj2uVSpICRv9s=) 2: 34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (hash: hULJaqORBZx9rnLzF6gGaVFW+5jbsjfXVIEDzn4Dv0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:81:8e:91:e6:f3:26:a0:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=38ae5d5c-25c1-4003-a14f-2a157af1bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:20:09:00:1a:9d:4f:4c:e7:ba:05:77:5d: 7a:64:ed:5d:95:84:17:cc:bc:4e:7b:02:d4:44:c7: 12:fe:f4:e3:56:b7:22:d1:99:a8:8c:0b:cb:28:4e: 87:ee:14:84:83:87:3b:81:b6:a1:49:87:51:19:dd: a4:9a:ea:68:a0:35:22:b5:8a:a3:df:be:a0:d0:5d: 41:8f:78:dc:31:95:35:52:26:99:7c:c9:01:1d:a7: 31:c4:ba:63:83:3b:d2:d2:7d:da:11:3a:07:f4:48: 54:41:2f:ab:32:28:63:a6:d9:4d:38:21:98:11:b0: d5:20:d6:a9:cd:d4:48:57:bb:9a:d5:2c:10:85:c3: b4:d9:b8:7f:1d:f8:d6:ab:9a:cd:87:f7:d7:38:d0: 50:9c:cf:53:e4:9e:a2:77:97:7d:1d:7a:6b:83:79: cf:9d:80:99:41:e2:59:77:80:d0:a5:e6:ce:ab:0a: 0c:37:6f:8e:43:c2:79:9f:f3:59:af:71:f2:0b:55: 50:86:65:ed:dd:cb:4a:1b:5f:6f:12:4c:f0:de:a5: dc:63:4d:6e:80:8d:16:5f:41:ca:c0:05:a6:00:1b: da:47:26:09:40:56:15:0b:51:5f:66:30:da:2a:06: 1f:ff:6d:13:12:41:e6:99:98:4c:a5:f4:ec:9e:4d: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:A8:C5:78:A8:FB:56:8C:C4:2E:F3:72:08:31:9D:A6:66:8B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl X509v3 Authority Key Identifier: keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:45:70:29:ab:98:f1:92:ba:d2:a6:76:26:04:69:85:42:c1: f1:ec:fa:f2:8e:1f:d1:c6:8d:9a:6c:9e:32:26:3c:83:69:c9: 4b:98:a4:84:1f:9f:e7:5c:d8:65:9d:c5:09:f1:80:09:67:06: 25:83:05:df:80:58:aa:ba:ad:ff:0f:f1:f7:95:70:85:5f:5d: 74:27:0c:c2:bd:7b:8e:96:da:ef:d3:3c:32:8c:5a:e8:10:59: e1:85:6e:5d:af:33:9d:47:4e:5b:c6:df:38:24:76:b3:3a:56: b4:17:72:95:cd:b4:cf:b6:e2:b5:f6:82:86:d9:98:d6:ad:c9: 82:7e:22:96:dc:c5:b4:dd:49:6a:db:8c:19:85:9c:e4:a4:82: ef:40:7b:d4:f4:08:7e:2c:77:43:a9:88:72:76:cf:59:91:82: f4:72:34:e5:ae:05:d1:b6:6b:7b:17:c1:cf:a0:68:30:77:cc: ee:00:44:20:eb:56:ae:27:6d:9c:e1:44:b6:e4:06:63:02:14: 21:11:f3:c8:e3:ca:f0:bb:62:3b:62:ba:17:ba:e7:24:bd:88: 41:03:8d:a9:4b:39:18:25:cd:2c:11:7a:c1:04:d1:ef:fc:5f: ac:76:73:d3:fc:97:62:87:6d:c5:0f:dd:e0:8b:f0:d4:be:c8: c2:68:54:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVCBjpHm8yagk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDkzZGQ0MmYtODQ5Yy00OWZlLWI3OTUtNDllNjZiM2Iz YjdhMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MzhhZTVkNWMtMjVjMS00MDAzLWExNGYtMmExNTdhZjFiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCIgCQAanU9M57oFd116ZO1dlYQXzLxOewLU RMcS/vTjVrci0ZmojAvLKE6H7hSEg4c7gbahSYdRGd2kmupooDUitYqj376g0F1B j3jcMZU1UiaZfMkBHacxxLpjgzvS0n3aEToH9EhUQS+rMihjptlNOCGYEbDVINap zdRIV7ua1SwQhcO02bh/HfjWq5rNh/fXONBQnM9T5J6id5d9HXprg3nPnYCZQeJZ d4DQpebOqwoMN2+OQ8J5n/NZr3HyC1VQhmXt3ctKG19vEkzw3qXcY01ugI0WX0HK wAWmABvaRyYJQFYVC1FfZjDaKgYf/20TEkHmmZhMpfTsnk0L5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOXoqMV4qPtWjMQu83IIMZ2mZotJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNk ZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2NmIzYjNiN2EvMDkzZGQ0MmYtODQ5Yy00 OWZlLWI3OTUtNDllNjZiM2IzYjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDkzZGQ0MmYtODQ5Yy00OWZlLWI3 OTUtNDllNjZiM2IzYjdhLzA5M2RkNDJmLTg0OWMtNDlmZS1iNzk1LTQ5ZTY2YjNi M2I3YS5jcmwwHwYDVR0jBBgwFoAUcEAvE95Lzx82DCLXbM/ZWUuMriEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNkZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2 NmIzYjNiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCERXApq5jxkrrSpnYmBGmF QsHx7Pryjh/Rxo2abJ4yJjyDaclLmKSEH5/nXNhlncUJ8YAJZwYlgwXfgFiquq3/ D/H3lXCFX110JwzCvXuOltrv0zwyjFroEFnhhW5drzOdR05bxt84JHazOla0F3KV zbTPtuK19oKG2ZjWrcmCfiKW3MW03Ulq24wZhZzkpILvQHvU9Ah+LHdDqYhyds9Z kYL0cjTlrgXRtmt7F8HPoGgwd8zuAEQg61auJ22c4US25AZjAhQhEfPI48rwu2I7 YroXuuckvYhBA42pSzkYJc0sEXrBBNHv/F+sdnPT/Jdih23FD93gi/DUvsjCaFRR -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:56 2025 by rpki-client