$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft File: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft (raw, json) Hash identifier: GeQMY7PPXwarKaaTNMghXGl6sQj2r73p4Xa2YjMRoDI= Subject key identifier: EB:43:9A:3F:28:3A:B2:D8:B1:C1:4C:FE:9C:AC:BF:9C:8C:26:04:36 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F4328584BC09384E4523DFADEF4004E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft Manifest number: 010D0C9F4328584426C89F1535D6ABD56DB6EA35 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Thu 06 Nov 2025 22:00:00 +0000 Files and hashes: 1: 039bc77e-6087-3093-9191-6772277f3e24.roa (hash: w2TP6awPNYKvqAKChEvo4Law/ANswyBGVu3O3Kbpid8=) 2: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl (hash: GKFKhdayTYynhgC9QSWIcJbpliWeK9oKUJ3IG7twKvY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:84:e4:52:3d:fa:de:f4:00:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 6 22:00:00 2025 GMT Subject: CN=4ab6ef78-f76c-40a6-bd35-2fbe7e45d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:e1:1b:c4:81:da:8c:d7:a3:42:22:2e:1a: 8a:dc:29:a6:f0:32:3a:d6:9a:6a:ef:69:44:53:b0: f8:6d:fc:6b:c9:e8:ac:85:3d:6f:a1:51:d4:49:1a: aa:bd:d5:a1:f2:6e:32:b3:3a:5c:86:a0:3b:e7:98: 47:04:53:e1:16:fa:d7:fd:38:5a:c0:47:07:7f:07: f6:3b:df:5e:1c:c8:55:d2:79:66:cc:ef:c0:2b:21: 37:7c:be:17:98:7e:5e:a3:67:48:79:5b:a1:53:51: 0f:f7:00:f6:57:86:5a:b0:d2:a5:59:89:ef:b2:52: 73:51:c2:bf:3d:bf:44:48:33:ad:2e:6e:85:55:61: 69:e3:ad:82:43:1d:bf:ce:45:3d:a2:bf:5e:a0:3d: 32:ca:57:92:ae:e8:e4:4f:7b:e6:46:40:34:19:7d: 16:8c:a9:c5:8e:2b:ba:5c:9a:a8:20:cc:dd:51:d9: a0:55:ac:86:02:ab:99:4b:c3:17:f6:9e:bd:86:6e: d9:5b:d0:4f:ee:6a:1e:b7:6b:69:40:8b:99:a0:52: f5:2d:ba:7f:51:16:8e:ad:74:22:7f:c9:f1:82:ce: 85:58:93:9e:9d:03:fe:ef:53:e8:8a:72:ee:03:90: 08:f6:88:6e:b1:b0:64:3d:77:1c:e4:e4:f0:47:26: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:9A:3F:28:3A:B2:D8:B1:C1:4C:FE:9C:AC:BF:9C:8C:26:04:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:e3:55:f0:13:fd:8a:56:40:9a:22:96:a1:03:d4:67:11: ab:1e:42:92:55:0f:7f:95:2d:ae:c7:fb:6c:38:ce:d7:3c:1a: cc:0f:80:40:fa:73:65:3a:bb:c3:ed:46:32:bc:97:3c:0e:2e: c7:6d:c9:75:e8:83:a8:db:22:bd:f5:b3:ca:1b:87:5e:07:52: 82:ce:3d:78:d2:43:a4:fe:6b:3b:01:ae:bd:fc:57:d7:1c:eb: ea:50:7d:82:a7:53:5f:a7:df:c1:f1:73:b3:cc:6d:bf:df:0b: 92:23:e7:8e:4f:6a:ea:89:df:1c:2a:6f:fd:ba:b9:11:75:b7: 90:43:4a:e1:5b:e2:0f:39:e1:2f:c9:50:fb:39:33:4f:f8:07: 13:3d:cf:63:f0:ed:6c:59:5e:30:df:6a:7a:ac:f9:82:ce:e5: aa:11:5e:64:ec:8a:50:21:21:79:75:57:21:8b:91:80:e4:9f: 04:d4:51:05:fe:f5:85:c6:ef:8b:b6:16:53:30:1e:46:bb:7d: 32:79:a8:92:76:b9:a2:36:d1:95:44:21:7f:ae:dd:81:8a:a6: 83:41:45:aa:f7:e7:98:cb:07:fd:03:d1:6b:d5:9b:99:ce:2e: 9f:f7:d9:6f:f9:a0:d9:ea:e4:df:0a:b2:c2:e5:98:5b:c2:67: 11:40:31:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4TkUj363vQATgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNjIyMDAwMFowLzEtMCsGA1UEAxMk NGFiNmVmNzgtZjc2Yy00MGE2LWJkMzUtMmZiZTdlNDVkMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaPhG8SB2ozXo0IiLhqK3Cmm8DI61ppq72lE U7D4bfxryeishT1voVHUSRqqvdWh8m4yszpchqA755hHBFPhFvrX/ThawEcHfwf2 O99eHMhV0nlmzO/AKyE3fL4XmH5eo2dIeVuhU1EP9wD2V4ZasNKlWYnvslJzUcK/ Pb9ESDOtLm6FVWFp462CQx2/zkU9or9eoD0yyleSrujkT3vmRkA0GX0WjKnFjiu6 XJqoIMzdUdmgVayGAquZS8MX9p69hm7ZW9BP7moet2tpQIuZoFL1Lbp/URaOrXQi f8nxgs6FWJOenQP+71PoinLuA5AI9ohusbBkPXcc5OTwRyZ3ywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOtDmj8oOrLYscFM/pysv5yMJgQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMTA5YmU3M2ItZTU2OC00 NGI3LWJkNjMtZWJjNGU4ZmU2ZjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBT+NV8BP9ilZAmiKWoQPU ZxGrHkKSVQ9/lS2ux/tsOM7XPBrMD4BA+nNlOrvD7UYyvJc8Di7Hbcl16IOo2yK9 9bPKG4deB1KCzj140kOk/ms7Aa69/FfXHOvqUH2Cp1Nfp9/B8XOzzG2/3wuSI+eO T2rqid8cKm/9urkRdbeQQ0rhW+IPOeEvyVD7OTNP+AcTPc9j8O1sWV4w32p6rPmC zuWqEV5k7IpQISF5dVchi5GA5J8E1FEF/vWFxu+LthZTMB5Gu30yeaiSdrmiNtGV RCF/rt2BiqaDQUWq9+eYywf9A9Fr1ZuZzi6f99lv+aDZ6uTfCrLC5ZhbwmcRQDHn -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:10 2025 by rpki-client