$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft File: 414cb704-0d20-4248-bc5a-2b33ce66329d.mft (raw, json) Hash identifier: txXzOQeslaaMFYcN2tvVBx1AEqW2RS7wRuSHmvsq/Pg= Subject key identifier: FA:D2:2D:9E:4D:F2:DC:68:9B:D3:32:09:0C:CE:40:6A:38:EC:79:FC Authority key identifier: 05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 Certificate issuer: /CN=414cb704-0d20-4248-bc5a-2b33ce66329d Certificate serial: 010D0C9F4328584BBFA5538B7ABC2DA1CE299600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft Manifest number: 010D0C9F4328584073A858B5FDBBEC399870AA0E Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 36f08754-6d7e-3d01-9dbb-aa438925ebae.roa (hash: Q8eTVjVVh9bmZQV8Tamj7uRdJX6PV+tl1OLDqLIFqyg=) 2: 414cb704-0d20-4248-bc5a-2b33ce66329d.crl (hash: bPrxrZnSeyJjht9kgiOAZtehXaMa52xSJfQhDxYohoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:8b:7a:bc:2d:a1:ce:29:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414cb704-0d20-4248-bc5a-2b33ce66329d Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=a4f6dbad-ab26-4b39-9ef3-43b8df0a665e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bb:df:63:d6:b9:5c:7e:9f:fe:08:34:84:28: 71:27:a3:40:a6:62:0c:6f:70:c0:cf:56:62:26:8f: 2d:91:29:3c:dc:4d:19:b4:25:5a:95:55:c9:25:f7: 42:38:5d:44:d4:72:ad:5c:b9:0d:2a:b2:12:37:f0: cd:91:92:77:25:63:f2:e4:2b:f5:29:bd:65:66:db: b6:b2:51:28:ad:b4:6e:54:9a:67:38:de:4b:25:9b: 3d:ba:51:1d:65:46:2f:b4:44:65:11:dd:84:50:f2: ee:65:d2:01:1e:75:f1:80:e3:73:ec:b2:09:18:79: 80:63:2d:45:3a:e3:2a:67:2a:89:36:5b:45:4d:72: cf:27:0f:b3:fa:40:42:e3:0e:de:59:e0:5c:a5:38: a7:ac:1f:87:75:66:6d:e9:d5:63:6b:bb:d8:37:98: 27:e9:e6:41:6c:18:cb:ee:21:ef:e4:77:89:3d:45: 54:0c:34:3e:0b:45:67:37:75:9a:a4:61:38:b3:a1: ba:3b:9f:e6:71:e2:35:be:9c:83:5e:4e:70:fa:f6: 78:2d:51:2c:55:7c:e6:56:52:f8:cd:01:76:f8:24: 9c:ee:9a:a0:40:80:81:66:a4:af:62:bf:f7:86:fd: 84:bb:06:a2:04:aa:d6:d2:ea:b3:9a:d2:97:a7:4a: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D2:2D:9E:4D:F2:DC:68:9B:D3:32:09:0C:CE:40:6A:38:EC:79:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl X509v3 Authority Key Identifier: keyid:05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6b:d6:48:45:01:2a:38:85:f1:b4:40:39:3a:70:61:53:01: a5:3d:50:e2:7d:e5:ae:6d:05:be:5c:72:c7:cc:06:94:4f:16: 59:4c:31:5e:f8:0b:f5:2a:0a:8f:23:10:35:5e:d7:f2:8a:03: 72:c9:ba:68:b6:09:62:cb:04:27:5a:40:bd:b6:91:6c:84:51: 76:d1:d8:ad:8f:4d:9c:e2:62:b1:97:76:7a:1b:10:e7:82:0c: cc:12:05:77:c4:6d:ad:e8:f7:0d:ae:95:33:bb:fe:88:e4:9a: 42:4b:a6:a6:b1:4b:71:47:06:e6:c2:a4:00:24:93:3b:63:0d: 63:7f:0e:bd:45:6e:c6:2e:93:12:fa:2e:52:04:78:7e:01:8f: 82:ae:06:aa:49:d6:6c:b5:f5:80:35:b3:c5:37:be:20:07:22: d7:4d:36:70:e8:ce:ec:5d:c8:eb:81:ec:69:ef:00:ed:db:ca: 18:1d:8e:bb:21:39:61:aa:d9:c9:1c:b1:63:5b:08:26:00:4a: a9:ef:ac:88:28:55:5d:bf:78:c1:68:12:a6:3d:55:f1:79:e6: 2b:07:8c:11:c8:6e:b4:94:ba:0c:03:69:8a:8f:c6:78:c1:ba: 49:b2:e2:ce:c0:d4:f7:47:75:47:cd:b0:f9:9f:a1:06:03:4c: 4c:fb:94:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVOLerwtoc4plgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0Y2I3MDQtMGQyMC00MjQ4LWJjNWEtMmIzM2NlNjYz MjlkMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk YTRmNmRiYWQtYWIyNi00YjM5LTllZjMtNDNiOGRmMGE2NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLvfY9a5XH6f/gg0hChxJ6NApmIMb3DAz1Zi Jo8tkSk83E0ZtCValVXJJfdCOF1E1HKtXLkNKrISN/DNkZJ3JWPy5Cv1Kb1lZtu2 slEorbRuVJpnON5LJZs9ulEdZUYvtERlEd2EUPLuZdIBHnXxgONz7LIJGHmAYy1F OuMqZyqJNltFTXLPJw+z+kBC4w7eWeBcpTinrB+HdWZt6dVja7vYN5gn6eZBbBjL 7iHv5HeJPUVUDDQ+C0VnN3WapGE4s6G6O5/mceI1vpyDXk5w+vZ4LVEsVXzmVlL4 zQF2+CSc7pqgQICBZqSvYr/3hv2EuwaiBKrW0uqzmtKXp0pv3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPrSLZ5N8txom9MyCQzOQGo47Hn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRj YjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMzY2U2NjMyOWQvNDE0Y2I3MDQtMGQyMC00 MjQ4LWJjNWEtMmIzM2NlNjYzMjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDE0Y2I3MDQtMGQyMC00MjQ4LWJj NWEtMmIzM2NlNjYzMjlkLzQxNGNiNzA0LTBkMjAtNDI0OC1iYzVhLTJiMzNjZTY2 MzI5ZC5jcmwwHwYDVR0jBBgwFoAUBdOyDgF3s/B2D2BTpVVwfmhwL0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRjYjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMz Y2U2NjMyOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZa9ZIRQEqOIXxtEA5OnBh UwGlPVDifeWubQW+XHLHzAaUTxZZTDFe+Av1KgqPIxA1XtfyigNyybpotgliywQn WkC9tpFshFF20ditj02c4mKxl3Z6GxDnggzMEgV3xG2t6PcNrpUzu/6I5JpCS6am sUtxRwbmwqQAJJM7Yw1jfw69RW7GLpMS+i5SBHh+AY+CrgaqSdZstfWANbPFN74g ByLXTTZw6M7sXcjrgexp7wDt28oYHY67ITlhqtnJHLFjWwgmAEqp76yIKFVdv3jB aBKmPVXxeeYrB4wRyG60lLoMA2mKj8Z4wbpJsuLOwNT3R3VHzbD5n6EGA0xM+5SX -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:14 2025 by rpki-client