$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft File: 1040c089-26bf-4af5-9c25-bcef963829d2.mft (raw, json) Hash identifier: JAiBaATbn96bNTuQqbq+kmZQTLePwR3W3G50F1zPkxM= Subject key identifier: 2C:AA:63:D7:E6:55:BE:00:08:B8:9C:21:A1:7C:A9:15:AB:EB:85:B7 Authority key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E Certificate issuer: /CN=1040c089-26bf-4af5-9c25-bcef963829d2 Certificate serial: 010D0C9F4328584BC216B2022EDCB6F504688BB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft Manifest number: 010D0C9F4328584073A8504BAD90050B31E55126 Signing time: Wed 05 Nov 2025 11:00:09 +0000 Manifest this update: Wed 05 Nov 2025 11:00:09 +0000 Manifest next update: Sat 08 Nov 2025 11:00:00 +0000 Files and hashes: 1: 1040c089-26bf-4af5-9c25-bcef963829d2.crl (hash: uNT5prwnONWxyFQ+eoHkRYnOkmi8F7xTJNtsVIiqzBU=) 2: b60f6871-bf1e-313d-a518-8618b46d517a.roa (hash: fk5hAI6QDI1+5yXb2geBJ7o5Y1zvna2TeEzCytK7mGE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:16:b2:02:2e:dc:b6:f5:04:68:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1040c089-26bf-4af5-9c25-bcef963829d2 Validity Not Before: Nov 5 11:00:09 2025 GMT Not After : Nov 8 11:00:00 2025 GMT Subject: CN=acd3896d-a18d-4fb6-8e47-3ba8ab827afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:56:63:b3:c3:fd:2b:3f:07:f8:12:dc:a7: e7:f4:19:35:ad:1f:1f:95:f4:c5:cd:d1:01:99:de: b0:c1:e2:e5:e5:da:9e:81:94:9a:02:b1:b8:4c:e1: 09:d6:6a:6c:a1:65:be:3f:17:9d:6d:c3:da:5c:7a: 13:ce:7d:6d:ac:bb:ed:40:db:76:e8:57:7d:e8:db: 20:96:43:2a:10:6e:5c:41:e4:6b:2f:84:d3:89:22: 64:d2:6a:15:f4:a7:25:58:46:9b:c8:89:73:e0:bb: b2:bf:9e:5b:61:85:a8:6a:ea:46:2f:00:fb:78:cd: 11:0d:c1:60:62:9c:62:79:25:58:c4:5c:03:91:86: 7b:ed:8d:21:6a:a8:41:20:2a:68:ea:6f:d1:05:23: da:31:1b:09:e2:f6:a0:11:b1:5e:4e:13:ba:13:3a: 4d:ae:08:39:d9:dd:59:f7:fa:98:a1:a7:76:33:95: c2:12:d4:df:b4:5e:68:1f:fd:ed:ba:a8:4d:67:3f: 12:52:0e:ed:1c:36:7d:fb:d5:4f:c6:f7:ed:96:e5: 57:a8:f7:56:4d:d9:7e:ab:ba:f6:32:3b:a2:36:55: f0:32:eb:83:75:e0:f0:a9:ad:96:c2:fb:28:78:a6: 94:69:db:5a:cf:e9:c6:a4:7d:75:a6:ac:c2:3d:3a: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:63:D7:E6:55:BE:00:08:B8:9C:21:A1:7C:A9:15:AB:EB:85:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl X509v3 Authority Key Identifier: keyid:20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:db:5d:a7:a4:da:81:75:93:ef:db:6c:78:c9:5e:52:19:26: 7c:a4:12:02:30:3d:d6:b1:ae:e7:d3:ba:65:7a:4d:31:95:4b: c0:0b:01:d0:e4:43:b3:be:2a:6a:c2:53:e2:66:c3:c6:cf:b9: 2f:bd:db:26:ed:47:27:d4:59:49:c8:b5:2f:69:09:df:1c:1e: b0:53:07:0f:61:8c:a1:67:2d:7d:27:56:bc:9f:6e:8d:8f:14: 7d:75:a2:33:f8:e4:d7:cc:4d:08:bb:63:58:fe:db:55:7e:42: a4:0d:3d:2d:d0:e5:5b:b8:8b:1d:4c:53:13:e9:2d:9a:1c:b6: 10:b3:71:46:46:c9:2a:a0:bf:3d:93:04:36:6b:01:cf:86:f6: 69:2c:1b:ea:14:e0:2c:80:f2:f8:c1:bf:c4:df:1c:7f:03:d0: db:c5:52:63:b4:03:84:1d:4b:0a:f0:0e:b0:b3:c2:a1:16:3a: 8c:e3:68:ef:71:90:0a:37:7a:f9:b0:b2:72:34:d9:ef:e9:5c: 00:f9:d9:bc:c1:2e:41:df:0a:8c:20:a8:3e:8a:59:b1:1f:20: d9:62:f2:79:56:ea:c6:53:85:be:5a:63:f4:80:65:52:29:ed: ca:23:e4:fa:85:7b:51:ae:71:05:8b:f9:8c:22:51:a0:c2:d3: 3a:8d:43:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCFrICLty29QRoi7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA0MGMwODktMjZiZi00YWY1LTljMjUtYmNlZjk2Mzgy OWQyMB4XDTI1MTEwNTExMDAwOVoXDTI1MTEwODExMDAwMFowLzEtMCsGA1UEAxMk YWNkMzg5NmQtYTE4ZC00ZmI2LThlNDctM2JhOGFiODI3YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqRWY7PD/Ss/B/gS3Kfn9Bk1rR8flfTFzdEB md6wweLl5dqegZSaArG4TOEJ1mpsoWW+PxedbcPaXHoTzn1trLvtQNt26Fd96Nsg lkMqEG5cQeRrL4TTiSJk0moV9KclWEabyIlz4Luyv55bYYWoaupGLwD7eM0RDcFg YpxieSVYxFwDkYZ77Y0haqhBICpo6m/RBSPaMRsJ4vagEbFeThO6EzpNrgg52d1Z 9/qYoad2M5XCEtTftF5oH/3tuqhNZz8SUg7tHDZ9+9VPxvftluVXqPdWTdl+q7r2 MjuiNlXwMuuDdeDwqa2WwvsoeKaUadtaz+nGpH11pqzCPTqaNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCyqY9fmVb4ACLicIaF8qRWr64W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQw YzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYzODI5ZDIvMTA0MGMwODktMjZiZi00 YWY1LTljMjUtYmNlZjk2MzgyOWQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTA0MGMwODktMjZiZi00YWY1LTlj MjUtYmNlZjk2MzgyOWQyLzEwNDBjMDg5LTI2YmYtNGFmNS05YzI1LWJjZWY5NjM4 MjlkMi5jcmwwHwYDVR0jBBgwFoAUIN3sSrYIJApT8gfHR2LwMsyPjG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2Vm OTYzODI5ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY212npNqBdZPv22x4yV5S GSZ8pBICMD3Wsa7n07plek0xlUvACwHQ5EOzvipqwlPiZsPGz7kvvdsm7Ucn1FlJ yLUvaQnfHB6wUwcPYYyhZy19J1a8n26NjxR9daIz+OTXzE0Iu2NY/ttVfkKkDT0t 0OVbuIsdTFMT6S2aHLYQs3FGRskqoL89kwQ2awHPhvZpLBvqFOAsgPL4wb/E3xx/ A9DbxVJjtAOEHUsK8A6ws8KhFjqM42jvcZAKN3r5sLJyNNnv6VwA+dm8wS5B3wqM IKg+ilmxHyDZYvJ5VurGU4W+WmP0gGVSKe3KI+T6hXtRrnEFi/mMIlGgwtM6jUNR -----END CERTIFICATE-----Generated at Wed Nov 5 14:45:00 2025 by rpki-client