$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft File: a4738e65-dd12-4c12-b10b-7a16621165e0.mft (raw, json) Hash identifier: Z6SzR/wTl4bdiaPQIndXwWtU/78T/ghgvoZrbUYOnbw= Subject key identifier: 8E:55:8F:23:4C:CF:9B:48:C6:BD:43:92:72:3A:97:BD:04:D7:4E:2F Authority key identifier: DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 Certificate issuer: /CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Certificate serial: 010D0C9F4328584BBF2E29307D2413CA37112C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft Manifest number: 010D0C9F4328584B73E77F49CD7C7241AD6BC61B Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: 3760e09b-0566-3064-ac87-02a3ea1d74b8.roa (hash: C6QqyPr894qmE+5ecxIGMjX06J1l6++kDBzx+d+XD6U=) 2: a4738e65-dd12-4c12-b10b-7a16621165e0.crl (hash: XyHKjwhflnnA6awgVV4zuCxJZKjO9wBUYze25gl/RYU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:29:30:7d:24:13:ca:37:11:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4738e65-dd12-4c12-b10b-7a16621165e0 Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=02af2cf5-c2ab-4cab-ba3c-da8ca8578848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:03:a0:89:4f:8e:4e:1b:c7:96:96:17:ad: f8:aa:89:65:29:ef:f7:0a:be:a4:e4:0c:79:3a:16: 67:00:1a:99:da:c6:4e:58:a6:53:87:07:d2:e0:05: e8:b4:b5:e1:50:c0:56:04:59:a1:e7:90:2b:c7:d7: 06:26:13:ca:79:fe:10:93:92:d6:4b:97:81:16:9c: 43:0e:9c:bc:e5:be:c1:06:d4:ff:d6:25:cc:fd:ce: e2:a6:51:ab:7b:c7:eb:b1:3c:9b:a4:ec:bb:60:4e: 47:61:26:26:03:b6:35:3b:8e:9a:09:85:f0:cd:13: b7:29:18:e3:f5:03:b0:80:b7:d9:0c:aa:2a:cf:2e: f5:ab:58:d5:82:50:1b:12:dc:e7:4a:ab:f7:44:50: 6f:c4:0e:21:82:59:b4:f1:86:26:df:92:06:a9:d2: 0e:d3:12:af:8b:49:56:fc:d2:22:8b:bc:43:e2:a4: b1:f8:c7:05:2b:0d:a0:3b:82:3a:c7:37:fc:59:74: 87:f2:b5:18:10:67:5b:1e:15:6b:ba:dc:12:93:df: e9:1a:77:a1:35:9d:96:fb:5a:26:ab:05:df:b5:c0: 27:90:94:ce:7b:07:29:0e:e3:2e:6f:13:0a:b1:60: 57:4e:12:89:5b:3f:80:63:62:59:10:6a:a9:bf:01: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:8F:23:4C:CF:9B:48:C6:BD:43:92:72:3A:97:BD:04:D7:4E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl X509v3 Authority Key Identifier: keyid:DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c6:7b:0d:d4:02:0d:84:d7:83:73:f5:be:c9:4a:b9:2a:c6: 5f:70:9c:d3:a2:bd:5e:e4:18:38:cd:d3:fa:33:71:81:b7:8d: df:9e:85:78:4c:69:a2:c4:f8:4c:52:cd:19:f5:4a:6c:77:28: e6:95:7e:f3:34:3a:49:46:47:f5:75:83:e0:b4:e9:ae:93:da: 80:d7:26:2c:7e:42:3c:8a:75:0f:86:1c:b0:ed:51:13:ff:01: 15:dc:88:db:6e:68:a2:9b:03:5c:54:f4:0e:77:7c:3b:ed:fc: 92:a5:15:06:ca:e8:d9:0a:d0:f7:1d:44:06:44:30:31:14:7a: a1:eb:32:70:cc:f5:24:d6:1f:be:23:dd:d3:77:bb:76:e8:be: 71:bf:eb:61:9f:7c:b7:5d:24:24:8d:6c:6e:32:b0:30:a3:8f: a2:c8:73:30:d3:5b:5c:4a:03:7c:a3:5c:96:a4:e0:b2:2d:99: 61:df:e0:2e:2d:6f:5e:02:3a:17:eb:7c:e8:49:9c:56:be:85: 05:99:b4:eb:29:c1:d6:cd:30:6b:1e:9f:69:eb:c0:5d:64:11: 1a:e5:ef:6b:f8:bd:2a:6a:84:ce:97:01:12:0f:60:86:6a:4a: 11:13:46:f3:bf:2c:d5:13:ee:d6:3f:42:4b:3f:80:19:1a:99: 0e:53:b5:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/LikwfSQTyjcRLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ3MzhlNjUtZGQxMi00YzEyLWIxMGItN2ExNjYyMTE2 NWUwMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk MDJhZjJjZjUtYzJhYi00Y2FiLWJhM2MtZGE4Y2E4NTc4ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDgDoIlPjk4bx5aWF634qollKe/3Cr6k5Ax5 OhZnABqZ2sZOWKZThwfS4AXotLXhUMBWBFmh55Arx9cGJhPKef4Qk5LWS5eBFpxD Dpy85b7BBtT/1iXM/c7iplGre8frsTybpOy7YE5HYSYmA7Y1O46aCYXwzRO3KRjj 9QOwgLfZDKoqzy71q1jVglAbEtznSqv3RFBvxA4hglm08YYm35IGqdIO0xKvi0lW /NIii7xD4qSx+McFKw2gO4I6xzf8WXSH8rUYEGdbHhVrutwSk9/pGnehNZ2W+1om qwXftcAnkJTOewcpDuMubxMKsWBXThKJWz+AY2JZEGqpvwEgGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI5VjyNMz5tIxr1DknI6l70E104vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNDcz OGU2NS1kZDEyLTRjMTItYjEwYi03YTE2NjIxMTY1ZTAvYTQ3MzhlNjUtZGQxMi00 YzEyLWIxMGItN2ExNjYyMTE2NWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTQ3MzhlNjUtZGQxMi00YzEyLWIx MGItN2ExNjYyMTE2NWUwL2E0NzM4ZTY1LWRkMTItNGMxMi1iMTBiLTdhMTY2MjEx NjVlMC5jcmwwHwYDVR0jBBgwFoAU3dQwp3H8bdePg1+A4Q+UZ87xJocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNDczOGU2NS1kZDEyLTRjMTItYjEwYi03YTE2 NjIxMTY1ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANxnsN1AINhNeDc/W+yUq5 KsZfcJzTor1e5Bg4zdP6M3GBt43fnoV4TGmixPhMUs0Z9UpsdyjmlX7zNDpJRkf1 dYPgtOmuk9qA1yYsfkI8inUPhhyw7VET/wEV3IjbbmiimwNcVPQOd3w77fySpRUG yujZCtD3HUQGRDAxFHqh6zJwzPUk1h++I93Td7t26L5xv+thn3y3XSQkjWxuMrAw o4+iyHMw01tcSgN8o1yWpOCyLZlh3+AuLW9eAjoX63zoSZxWvoUFmbTrKcHWzTBr Hp9p68BdZBEa5e9r+L0qaoTOlwESD2CGakoRE0bzvyzVE+7WP0JLP4AZGpkOU7V9 -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:05 2025 by rpki-client