$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft File: 943895ce-649a-4937-9d38-a57b20ee748f.mft (raw, json) Hash identifier: fO1nGFGT2oPXywnJG5j1itR1oliRda0B4spEFdgg4V8= Subject key identifier: 36:F4:F3:A1:C5:89:97:8B:3B:BC:10:51:B4:07:6C:EC:26:70:50:30 Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f Certificate serial: 010D0C9F4328584BBFA550C5549F77145B68DC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft Manifest number: 010D0C9F4328584409FC745ADDA95964181E41D4 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (hash: RJeDOgE7j+lzfFskePoLTj+Ee0tR5NVjWD0ZKwG1OFE=) 2: 943895ce-649a-4937-9d38-a57b20ee748f.crl (hash: uW8By2OHBnZXczOVV2b1LdXak7XeYAusAiSNwKSWi9w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:c5:54:9f:77:14:5b:68:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=35fbffb8-410a-4d99-8359-b49e0ede6cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:70:7c:4c:68:58:d9:ee:ce:42:46:5c:0c:14: 2c:35:91:c0:95:e6:8d:e7:16:3d:e5:57:34:ea:f2: 51:4c:9c:c3:36:ac:94:26:38:fa:0b:bb:10:30:f8: 93:ef:45:96:ac:13:1f:9b:de:35:ae:27:27:4e:96: e9:6a:cd:ac:3d:eb:7a:fe:42:76:4b:a8:3c:79:4e: 0e:64:27:be:df:60:a6:90:4c:96:28:3f:56:ca:25: dc:c0:ad:c6:d7:d0:3f:a1:09:21:21:db:9b:71:b6: 2f:d2:59:a8:39:40:4e:50:e4:55:ae:4a:b0:d1:e6: 28:a4:ca:4e:79:10:18:64:5e:94:03:2a:94:5f:bf: b1:6f:b3:14:d6:67:b1:55:a0:6d:b8:1b:d1:f8:26: 6f:52:f4:52:33:5e:16:7e:78:37:75:ce:ea:79:e2: d9:da:5c:da:97:2a:03:b2:c8:80:a9:58:de:b3:43: 7e:ec:04:28:4b:44:e4:b0:c1:dc:86:bc:8a:5c:9d: 92:3b:38:23:18:d9:d3:a3:8e:64:ee:dc:bc:8d:52: f4:e6:58:c1:d7:c4:6b:91:4a:f8:85:33:9b:21:90: 1f:60:db:46:ef:a2:14:b7:4c:1a:c0:db:74:55:bd: 5b:40:89:c1:c8:c1:87:9a:22:e0:65:5f:25:30:cb: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F4:F3:A1:C5:89:97:8B:3B:BC:10:51:B4:07:6C:EC:26:70:50:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl X509v3 Authority Key Identifier: keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a3:93:64:ee:e3:ca:b8:77:4a:63:fa:92:ad:84:76:0c:01: b8:00:72:ab:32:48:78:fa:94:52:f6:bd:11:2e:b9:fd:b9:ae: c9:f8:be:c7:9e:52:53:14:8c:a2:a4:e0:98:1c:3a:db:29:25: e7:58:06:99:69:29:43:bf:1b:41:79:48:e6:50:94:72:ea:af: dd:09:09:43:9c:a6:41:55:30:b0:64:92:d6:cd:16:e7:cc:64: 32:c1:45:5c:fe:2d:65:ed:ee:3f:b6:9f:f5:21:c4:52:ef:ae: a9:1c:52:e6:65:d0:53:64:f6:ed:ca:17:a7:44:9c:11:ab:d0: 36:11:74:c9:c8:28:33:40:f9:db:83:66:3c:5f:37:a0:91:31: 71:29:f2:1a:0c:05:44:a9:3f:5b:fe:4a:fd:de:c3:e8:0c:33: 3d:41:cd:b3:b8:0e:00:81:3e:06:2c:a2:a1:74:c1:4f:20:c2: e8:8a:59:89:a4:91:81:db:3d:06:4e:9a:18:39:a0:21:4d:02: 87:94:33:67:2b:23:17:ab:34:8f:92:3b:f6:81:30:cf:a4:3b: 02:b7:17:b7:65:2a:c2:e4:f1:3d:8d:79:39:69:49:1d:42:7a: e2:73:f9:96:aa:df:4c:0e:60:9b:9c:4e:69:35:83:0d:11:a6: 03:2c:32:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVDFVJ93FFto3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQzODk1Y2UtNjQ5YS00OTM3LTlkMzgtYTU3YjIwZWU3 NDhmMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MzVmYmZmYjgtNDEwYS00ZDk5LTgzNTktYjQ5ZTBlZGU2Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHB8TGhY2e7OQkZcDBQsNZHAleaN5xY95Vc0 6vJRTJzDNqyUJjj6C7sQMPiT70WWrBMfm941ricnTpbpas2sPet6/kJ2S6g8eU4O ZCe+32CmkEyWKD9WyiXcwK3G19A/oQkhIdubcbYv0lmoOUBOUORVrkqw0eYopMpO eRAYZF6UAyqUX7+xb7MU1mexVaBtuBvR+CZvUvRSM14Wfng3dc7qeeLZ2lzalyoD ssiAqVjes0N+7AQoS0TksMHchryKXJ2SOzgjGNnTo45k7ty8jVL05ljB18RrkUr4 hTObIZAfYNtG76IUt0wawNt0Vb1bQInByMGHmiLgZV8lMMsN9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDb086HFiZeLO7wQUbQHbOwmcFAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4 OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdiMjBlZTc0OGYvOTQzODk1Y2UtNjQ5YS00 OTM3LTlkMzgtYTU3YjIwZWU3NDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQzODk1Y2UtNjQ5YS00OTM3LTlk MzgtYTU3YjIwZWU3NDhmLzk0Mzg5NWNlLTY0OWEtNDkzNy05ZDM4LWE1N2IyMGVl NzQ4Zi5jcmwwHwYDVR0jBBgwFoAU6SQM4RQvHB0Xd/sQjKTKGzJNiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdi MjBlZTc0OGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZo5Nk7uPKuHdKY/qSrYR2 DAG4AHKrMkh4+pRS9r0RLrn9ua7J+L7HnlJTFIyipOCYHDrbKSXnWAaZaSlDvxtB eUjmUJRy6q/dCQlDnKZBVTCwZJLWzRbnzGQywUVc/i1l7e4/tp/1IcRS766pHFLm ZdBTZPbtyhenRJwRq9A2EXTJyCgzQPnbg2Y8XzegkTFxKfIaDAVEqT9b/kr93sPo DDM9Qc2zuA4AgT4GLKKhdMFPIMLoilmJpJGB2z0GTpoYOaAhTQKHlDNnKyMXqzSP kjv2gTDPpDsCtxe3ZSrC5PE9jXk5aUkdQnric/mWqt9MDmCbnE5pNYMNEaYDLDJm -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:49 2025 by rpki-client