$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: LhyCRAeJUAhYpfcWakygRzGZ2cC5t7qHgE+GBA11Txo= Subject key identifier: 2A:CD:34:4F:34:89:75:EF:CE:29:63:92:84:2C:1A:C8:4A:48:A6:2D Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584BBF887C49F5D5D8E132C06180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060C8F Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: rAy8BZxVRCNTGAOOCp4dnIIFsXiCua3utzF/dSbSLXM=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: RmRJbyfcRPrm0ZfHAXGhOHCh6rMJz2lwpKEwp2JnRBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7c:49:f5:d5:d8:e1:32:c0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=ac59dd7f-6a89-4643-99ef-abb6ded1b624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:a5:a2:c9:9c:78:71:bf:e9:80:26:92:6b: a3:36:03:09:fb:6b:e5:cf:fb:4c:bd:ee:67:b0:44: a5:a9:62:fb:11:da:11:90:ed:bf:8b:0d:d5:99:de: d1:aa:40:5c:04:37:42:a6:a7:cd:ab:59:4a:03:16: 57:ad:b2:ad:69:45:c0:b1:65:50:49:38:03:a0:84: 79:e3:bf:19:3d:8c:fc:cb:18:82:f7:37:f4:d5:54: 6e:26:1a:6d:c8:ae:8c:53:a6:d1:32:09:5b:50:8b: 33:84:b2:78:e9:bf:e3:aa:a9:e4:f1:7f:49:59:28: 6b:9c:9c:ab:87:28:e0:af:d4:d9:93:93:a1:04:8c: e6:42:6d:1e:e3:7f:9d:e2:26:0c:5d:1f:b9:b6:df: e0:38:a2:a7:cd:62:00:df:1f:20:db:8a:04:7a:f1: b7:6a:2d:38:91:4b:3a:e0:fa:95:e0:a8:ec:04:d8: 4f:63:8c:62:8d:a3:15:0f:dc:a1:51:b0:b6:15:dc: a0:62:d9:d2:eb:15:7e:7f:08:99:5d:76:f7:d0:4a: 73:51:94:b4:7d:76:40:ae:ae:fe:c6:08:db:04:ad: c2:b3:8c:20:b4:f0:d3:48:9a:1f:31:5f:9d:fb:5a: 6c:bd:0a:67:fd:6c:1b:38:78:45:d2:cc:39:e6:ae: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:34:4F:34:89:75:EF:CE:29:63:92:84:2C:1A:C8:4A:48:A6:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:41:b6:bd:3f:9a:aa:cf:62:e2:29:63:2f:13:0a:41:bf:a1: 53:6c:22:36:f3:0c:44:27:88:06:7e:1b:01:ba:c3:ee:26:a3: ca:4a:89:0d:eb:4f:12:18:88:3c:37:bc:33:2e:55:9f:78:87: 43:b0:36:2e:85:62:41:6a:b4:82:cf:31:e5:a0:78:b3:77:78: 90:3f:9a:50:ac:1e:06:1a:43:5e:9a:e0:ef:7f:aa:04:38:81: a6:63:16:e3:4b:e0:0e:e6:a6:f0:59:47:f3:f5:46:39:15:4c: 02:0c:bd:16:7a:c6:11:4a:e4:f1:e3:04:83:8a:08:6d:e3:f4: d7:e3:f6:d5:15:79:6c:2a:cd:2a:2b:60:a3:0c:e5:ea:fd:d9: 3b:c0:7b:73:32:1b:de:d3:a3:4d:09:ed:f8:bf:cf:62:43:95: 39:94:27:3a:b4:74:17:3d:29:c5:f4:17:34:e9:2c:00:b4:94: 92:0c:14:4a:85:5c:9c:8b:a1:c9:0d:fd:c6:3b:1d:aa:1a:9f: 7d:68:a1:8b:d6:e6:ed:6f:8b:24:5e:74:9a:e9:18:45:07:e2: d5:2d:52:c4:7f:ae:98:5a:bf:22:25:a9:aa:4e:59:71:ee:a1: 47:e0:fe:ea:53:b3:92:1f:50:c7:5e:f8:44:2a:56:56:22:24: 0e:7f:44:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iHxJ9dXY4TLAYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk YWM1OWRkN2YtNmE4OS00NjQzLTk5ZWYtYWJiNmRlZDFiNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGqlosmceHG/6YAmkmujNgMJ+2vlz/tMve5n sESlqWL7EdoRkO2/iw3Vmd7RqkBcBDdCpqfNq1lKAxZXrbKtaUXAsWVQSTgDoIR5 478ZPYz8yxiC9zf01VRuJhptyK6MU6bRMglbUIszhLJ46b/jqqnk8X9JWShrnJyr hyjgr9TZk5OhBIzmQm0e43+d4iYMXR+5tt/gOKKnzWIA3x8g24oEevG3ai04kUs6 4PqV4KjsBNhPY4xijaMVD9yhUbC2FdygYtnS6xV+fwiZXXb30EpzUZS0fXZArq7+ xgjbBK3Cs4wgtPDTSJofMV+d+1psvQpn/WwbOHhF0sw55q4TUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCrNNE80iXXvziljkoQsGshKSKYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTQba9P5qqz2LiKWMvEwpB v6FTbCI28wxEJ4gGfhsBusPuJqPKSokN608SGIg8N7wzLlWfeIdDsDYuhWJBarSC zzHloHizd3iQP5pQrB4GGkNemuDvf6oEOIGmYxbjS+AO5qbwWUfz9UY5FUwCDL0W esYRSuTx4wSDight4/TX4/bVFXlsKs0qK2CjDOXq/dk7wHtzMhve06NNCe34v89i Q5U5lCc6tHQXPSnF9Bc06SwAtJSSDBRKhVyci6HJDf3GOx2qGp99aKGL1ubtb4sk XnSa6RhFB+LVLVLEf66YWr8iJamqTllx7qFH4P7qU7OSH1DHXvhEKlZWIiQOf0Q1 -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:31 2025 by rpki-client