$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft File: 8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft (raw, json) Hash identifier: hWQ33zpNo+ahlVGl0i5Y3f8Ya4XG8DT2AOveycnPv4I= Subject key identifier: 40:41:3A:55:44:2D:01:3D:A5:AE:31:24:36:89:B7:67:71:CB:6F:BA Authority key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 Certificate issuer: /CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Certificate serial: 010D0C9F4328584BBFFEA6E6D9497C622A432D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft Manifest number: 010D0C9F432858436B28E34299E53F4201C5980F Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 63d52020-fd63-3e4c-b974-456f989ef686.roa (hash: HRAlXPGn5gTqHTZHf9QVXogIVhSjiwpsB8YJAgjwfxc=) 2: 8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl (hash: wbqt4LNDciJHwuG63bYmxuITN4LzDUO2rES+lpHLcM0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:e6:d9:49:7c:62:2a:43:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=48227a5c-e18e-49fa-9b85-88ebc0e0b1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1a:91:f8:1d:18:12:01:53:00:80:29:db:39: 6b:66:32:84:c3:f9:79:2b:82:91:c1:69:f9:a8:e6: 8c:ca:37:fe:b7:7b:07:74:09:68:d9:05:ae:45:80: 35:80:e1:3c:69:20:7c:a8:14:c3:86:db:3d:28:7f: c8:05:ae:c5:c6:15:c5:b7:37:36:7a:63:cc:97:dd: 3d:64:d3:1c:fe:2f:74:00:5c:b9:26:5f:5d:62:f1: 09:9e:27:04:ed:d1:a1:e0:6c:93:5d:d5:d9:c6:09: 03:ef:ec:c5:58:cf:c6:03:a8:25:fd:29:65:75:8c: ed:18:e0:ff:3e:00:04:77:98:21:2d:4f:67:1a:bf: 9b:98:7f:44:ac:42:90:1b:ee:88:04:da:cb:a9:43: ca:f1:00:65:34:1c:12:99:21:62:0c:0a:01:fc:aa: c5:01:0b:69:96:89:11:a5:df:0f:61:43:3c:f0:10: 6a:0d:11:82:10:e3:77:41:b7:3c:28:b5:40:85:ee: a7:16:bd:18:7b:ac:e8:cc:24:fc:87:e2:e5:ae:50: b3:40:45:66:f9:e2:94:d4:4f:06:30:a6:0e:b2:b7: 41:3c:a3:ab:b6:98:c6:af:7c:17:bd:3e:98:14:b4: 9c:0e:ea:80:92:2f:d1:68:e4:05:90:44:25:f3:c5: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:41:3A:55:44:2D:01:3D:A5:AE:31:24:36:89:B7:67:71:CB:6F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl X509v3 Authority Key Identifier: keyid:5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:98:25:e0:02:fd:f6:b8:e5:88:53:7f:f2:d9:c8:cb:52:b6: e8:63:16:f9:69:7f:cb:6c:68:3c:c7:9e:ec:44:e7:72:3d:9e: 38:27:d0:3b:7c:c9:7d:0e:a6:85:bf:90:a6:4b:31:8e:bb:26: e7:34:cd:f9:16:0f:e8:8a:5c:7d:39:f0:25:80:31:a5:f5:35: f4:02:ff:e0:12:53:4a:14:7c:05:68:55:a2:43:af:a7:90:75: bb:78:f7:56:d8:22:5a:a4:71:f9:57:cf:c2:e2:fb:76:d3:5b: 1e:a9:9e:40:9b:03:ca:a5:9a:e6:fa:f6:6c:bb:f1:c5:41:26: cf:e4:5e:06:11:6b:c4:ff:59:0e:92:13:88:5e:2e:a5:aa:07: bc:1e:83:d4:5d:5a:43:17:5b:1c:e0:d3:35:e8:92:3e:ec:ce: 78:db:94:25:bf:94:43:94:a9:3e:98:1d:76:6d:40:4b:cb:af: 22:d9:f2:13:04:45:80:5c:d8:77:29:01:31:31:4e:32:dc:01: d5:90:0c:0b:a8:7e:5a:c7:fc:d6:c9:a5:59:bb:ad:6d:9b:0c: 68:e2:4b:7b:39:ae:9f:e6:68:31:d4:a7:52:71:73:3a:51:f1: d0:00:c2:e8:9d:dc:7b:8d:0d:82:4e:e7:22:14:3e:a1:7b:54: e2:8a:5d:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qbm2Ul8YipDLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY0NWI2ZTctYWMwYi00NzBlLWI1NGUtZTM4ZWQ3Zjhj NWE4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk NDgyMjdhNWMtZTE4ZS00OWZhLTliODUtODhlYmMwZTBiMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BqR+B0YEgFTAIAp2zlrZjKEw/l5K4KRwWn5 qOaMyjf+t3sHdAlo2QWuRYA1gOE8aSB8qBTDhts9KH/IBa7FxhXFtzc2emPMl909 ZNMc/i90AFy5Jl9dYvEJnicE7dGh4GyTXdXZxgkD7+zFWM/GA6gl/SlldYztGOD/ PgAEd5ghLU9nGr+bmH9ErEKQG+6IBNrLqUPK8QBlNBwSmSFiDAoB/KrFAQtplokR pd8PYUM88BBqDRGCEON3Qbc8KLVAhe6nFr0Ye6zozCT8h+LlrlCzQEVm+eKU1E8G MKYOsrdBPKOrtpjGr3wXvT6YFLScDuqAki/RaOQFkEQl88UsPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEBBOlVELQE9pa4xJDaJt2dxy2+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1 YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhlZDdmOGM1YTgvODY0NWI2ZTctYWMwYi00 NzBlLWI1NGUtZTM4ZWQ3ZjhjNWE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODY0NWI2ZTctYWMwYi00NzBlLWI1 NGUtZTM4ZWQ3ZjhjNWE4Lzg2NDViNmU3LWFjMGItNDcwZS1iNTRlLWUzOGVkN2Y4 YzVhOC5jcmwwHwYDVR0jBBgwFoAUXiwHeEe+zg/Ta0VKz5YCZrhp5rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhl ZDdmOGM1YTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBmCXgAv32uOWIU3/y2cjL UrboYxb5aX/LbGg8x57sROdyPZ44J9A7fMl9DqaFv5CmSzGOuybnNM35Fg/oilx9 OfAlgDGl9TX0Av/gElNKFHwFaFWiQ6+nkHW7ePdW2CJapHH5V8/C4vt201seqZ5A mwPKpZrm+vZsu/HFQSbP5F4GEWvE/1kOkhOIXi6lqge8HoPUXVpDF1sc4NM16JI+ 7M5425Qlv5RDlKk+mB12bUBLy68i2fITBEWAXNh3KQExMU4y3AHVkAwLqH5ax/zW yaVZu61tmwxo4kt7Oa6f5mgx1KdScXM6UfHQAMLondx7jQ2CTuciFD6he1Tiil0e -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:15 2025 by rpki-client