$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft File: 4047a12d-1fef-4e6b-b868-76444464eabf.mft (raw, json) Hash identifier: 9kVK/67z9cF3w3QfPVCqdunpFVM56dp+LS0k1DWXAY0= Subject key identifier: 0B:BF:E0:25:FF:B7:C4:F5:24:E9:9D:5B:AA:8F:7A:CB:D4:37:CF:CB Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF Certificate issuer: /CN=4047a12d-1fef-4e6b-b868-76444464eabf Certificate serial: 010D0C9F4328584BBFFEA662085DDF8E5C48FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft Manifest number: 010D0C9F432858445B37C81B884CF0C25FEBD6B7 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 4047a12d-1fef-4e6b-b868-76444464eabf.crl (hash: W186hLFyGsEQ2HEmZ4o+ANt2o7W8C7Q2xZx5ZB88Jsc=) 2: 5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (hash: MbXc9QgY1dX16cKQgsHJx/T4nphA7o5Y85yW/Bni3xM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:62:08:5d:df:8e:5c:48:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=1fd40964-1d0d-478d-8bcf-04a4be45f297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8d:c8:a5:89:1c:52:e0:fb:78:ec:64:5f:e6: 66:66:7d:68:26:40:48:40:63:6e:f5:7b:95:2b:d5: f2:9f:7e:56:40:5f:05:ad:76:8a:b5:41:d9:19:d8: 77:05:14:dc:d0:ea:b8:b3:0e:c5:32:eb:42:a7:96: da:ff:78:50:b8:a7:8f:d0:b4:ad:92:37:51:79:79: 1d:12:92:24:a3:c1:12:b0:42:52:65:76:fb:6f:e9: 3a:17:d1:92:74:60:fc:91:15:c9:f3:62:0e:61:7a: 16:38:fc:1d:f1:18:74:0d:55:27:e3:b3:99:18:9e: ac:16:6c:51:da:44:87:f0:02:fb:86:7c:ae:62:38: 6e:f5:e8:ce:72:78:9b:b9:b9:fd:01:ae:09:45:68: 2d:48:9c:56:48:00:74:cb:4c:9d:e7:ca:54:60:2c: 2f:ed:bf:66:43:ff:34:18:65:8f:3d:42:7c:cc:65: 4f:ee:2f:46:a9:61:1d:92:f3:5d:76:8c:8b:bc:10: 67:54:0e:26:fc:fe:8f:7f:94:d2:0a:34:8c:a3:58: 4f:18:78:a7:8e:ee:7a:f8:3c:16:2c:4f:67:cd:fe: e5:da:d5:be:a4:5f:70:e0:a6:ef:98:02:75:5f:b6: 84:75:db:48:0a:b2:9e:af:bb:c0:b3:59:53:23:41: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BF:E0:25:FF:B7:C4:F5:24:E9:9D:5B:AA:8F:7A:CB:D4:37:CF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl X509v3 Authority Key Identifier: keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:51:be:51:27:ed:7a:85:11:39:20:dd:a0:6b:2c:e9:e2:cc: 7a:c1:d7:5f:06:ef:a9:4e:c4:87:f4:00:67:74:ad:8b:05:0b: 41:49:e8:63:b6:10:32:1a:56:02:38:47:ac:81:ab:8e:ea:0d: 64:ab:5a:87:2c:43:f7:26:71:4d:33:3b:b5:2b:75:d0:5f:4a: c8:a1:73:be:38:40:d8:50:1b:38:00:1b:ef:a8:02:1a:00:48: fd:1c:41:f9:1c:66:17:a7:8d:06:9d:48:ce:0e:32:25:ad:b5: 23:57:99:36:56:32:d0:1e:42:ee:b3:b3:dc:31:eb:39:cd:8c: f7:2c:2b:09:f0:35:7e:5b:b4:8b:10:14:cb:c1:63:46:83:f7: ae:15:86:89:a2:05:5e:33:e5:61:99:eb:8c:e0:2d:40:62:09: 77:e3:4c:41:90:12:02:89:c2:e3:cf:67:9a:dd:2a:03:69:41: f3:58:c4:4b:67:65:10:7d:20:55:83:20:3c:d2:ed:03:ae:71: 9d:1e:16:2e:9a:cd:03:67:20:6e:5f:ac:c5:1b:9e:2c:dc:ca: fd:4a:59:93:9e:d3:3d:ec:1b:c7:7f:1d:6f:4b:e6:66:0f:ed: e0:f4:a8:e2:62:6e:5e:0b:a6:04:22:7c:0e:2a:7b:b4:67:30: f8:69:5f:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qZiCF3fjlxI/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA0N2ExMmQtMWZlZi00ZTZiLWI4NjgtNzY0NDQ0NjRl YWJmMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MWZkNDA5NjQtMWQwZC00NzhkLThiY2YtMDRhNGJlNDVmMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y3IpYkcUuD7eOxkX+ZmZn1oJkBIQGNu9XuV K9Xyn35WQF8FrXaKtUHZGdh3BRTc0Oq4sw7FMutCp5ba/3hQuKeP0LStkjdReXkd EpIko8ESsEJSZXb7b+k6F9GSdGD8kRXJ82IOYXoWOPwd8Rh0DVUn47OZGJ6sFmxR 2kSH8AL7hnyuYjhu9ejOcnibubn9Aa4JRWgtSJxWSAB0y0yd58pUYCwv7b9mQ/80 GGWPPUJ8zGVP7i9GqWEdkvNddoyLvBBnVA4m/P6Pf5TSCjSMo1hPGHinju56+DwW LE9nzf7l2tW+pF9w4KbvmAJ1X7aEddtICrKer7vAs1lTI0EEowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAu/4CX/t8T1JOmdW6qPesvUN8/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDQ3 YTEyZC0xZmVmLTRlNmItYjg2OC03NjQ0NDQ2NGVhYmYvNDA0N2ExMmQtMWZlZi00 ZTZiLWI4NjgtNzY0NDQ0NjRlYWJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDA0N2ExMmQtMWZlZi00ZTZiLWI4 NjgtNzY0NDQ0NjRlYWJmLzQwNDdhMTJkLTFmZWYtNGU2Yi1iODY4LTc2NDQ0NDY0 ZWFiZi5jcmwwHwYDVR0jBBgwFoAU7nVf5mnrq2hAs5wNUZW5cP/lMc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDQ3YTEyZC0xZmVmLTRlNmItYjg2OC03NjQ0 NDQ2NGVhYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2Ub5RJ+16hRE5IN2gayzp 4sx6wddfBu+pTsSH9ABndK2LBQtBSehjthAyGlYCOEesgauO6g1kq1qHLEP3JnFN Mzu1K3XQX0rIoXO+OEDYUBs4ABvvqAIaAEj9HEH5HGYXp40GnUjODjIlrbUjV5k2 VjLQHkLus7PcMes5zYz3LCsJ8DV+W7SLEBTLwWNGg/euFYaJogVeM+VhmeuM4C1A Ygl340xBkBICicLjz2ea3SoDaUHzWMRLZ2UQfSBVgyA80u0DrnGdHhYums0DZyBu X6zFG54s3Mr9SlmTntM97BvHfx1vS+ZmD+3g9KjiYm5eC6YEInwOKnu0ZzD4aV/j -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:21 2025 by rpki-client