$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft File: fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft (raw, json) Hash identifier: F1s+K+uJTqHEMWPLfSEljqP+y09C1UidC+ScA5fBa3U= Subject key identifier: CA:BC:F6:8C:F5:9D:8B:82:DF:52:E3:72:C1:76:CC:F1:7C:EF:88:B2 Authority key identifier: D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85 Certificate issuer: /CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67 Certificate serial: 010D0C9F4328584BC01C65A3086A44534D1FC680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft Manifest number: 010D0C9F43285843FC792FF696D3C4E6A23E95B9 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa (hash: vzxWMxdT/ZwDVDda3XjlrXjjK0LBQrrrvmFPWYZLXGc=) 2: fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl (hash: Qg++nZQt9ApCeKMUjqySh3dMTfdgN/ViECgB4LsvXCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:65:a3:08:6a:44:53:4d:1f:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=7e88d303-2b23-4b12-b465-2ba863c91883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:fe:27:05:4b:16:a9:d5:93:55:8f:39:e3: 0c:8c:68:76:ed:9d:6b:d7:3b:bd:78:ec:82:83:e0: b4:39:c6:4e:be:69:e1:30:e8:a5:1d:8a:23:f5:17: 38:71:aa:e0:f5:ab:ea:a4:24:e9:60:54:bf:14:56: 23:b9:33:8a:58:5a:bb:1f:a0:f5:5c:01:51:13:65: a6:af:61:1f:8b:32:90:07:b0:7c:a4:c1:42:25:57: 8d:91:f3:a1:c3:f6:3c:ef:0c:b5:00:a4:ec:d3:b5: df:6d:5f:61:dd:3e:ff:ea:01:0a:fd:6f:4b:48:d0: 91:79:bc:d9:2a:2a:fd:9a:61:3c:cc:fa:6e:1a:04: 81:f6:5b:7f:85:35:92:de:c4:15:58:1a:d9:01:ef: d2:17:b3:fa:14:65:41:1a:34:0e:21:d4:5d:d9:9c: 85:e8:93:05:61:7a:ba:44:8e:83:2f:8f:12:07:cd: bf:7a:28:c8:83:95:d5:06:15:c7:e6:b2:50:57:3b: d9:24:b9:dc:e1:08:fe:f0:09:0f:bc:c0:ad:61:a4: 35:8b:25:5a:69:ef:80:65:ee:3e:5d:0d:e3:49:7f: a7:da:e5:6e:f5:1d:6f:69:5e:45:53:04:38:10:d8: 6d:4e:5a:8f:78:7b:62:03:f8:2e:ea:ca:7b:26:e7: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BC:F6:8C:F5:9D:8B:82:DF:52:E3:72:C1:76:CC:F1:7C:EF:88:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl X509v3 Authority Key Identifier: keyid:D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ce:1f:f5:88:03:e0:c1:2b:65:45:fe:2a:64:9e:af:1a:ac: 6f:b7:c4:12:9c:64:10:04:e7:8b:6b:7e:90:17:40:cf:10:a3: b5:e9:8a:33:5a:c5:82:46:b7:29:49:80:22:a1:a9:9e:df:91: 2b:2f:93:a0:23:4a:61:06:4f:d6:c1:bd:7d:8a:56:9c:d7:87: a6:2a:90:de:4b:b1:44:c6:52:01:44:97:02:a7:5e:9d:ad:4d: de:58:ab:28:19:10:3a:fa:2a:ba:e7:84:22:1d:07:1c:fb:42: 2b:d7:2d:b6:a9:79:cf:d6:36:0b:29:84:cf:31:66:ea:65:49: da:d9:2c:48:3e:04:2a:23:55:bd:fb:16:54:b0:bc:b0:ec:a5: ab:d8:6a:9d:7a:26:b6:63:05:84:c2:3c:7a:98:9f:3f:e8:0a: 75:df:96:68:5a:e1:fd:8d:b5:42:ce:cd:a1:0d:bf:de:68:4f: 2e:2b:b9:b6:99:aa:a9:fa:25:6a:63:09:c6:85:2e:19:75:0d: 43:de:95:dd:cc:24:74:1d:78:83:c6:0a:50:50:d9:f8:f5:42: ef:f8:53:04:f0:2f:71:94:a3:81:1e:49:40:50:8a:5a:50:da: 80:2b:63:b2:e1:8d:17:b8:71:90:53:c6:28:9f:7f:3a:da:42: 84:a8:e4:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGWjCGpEU00fxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzZTQzZjEtNzAzNi00NmUxLTk0NmEtYzllN2E2N2Vm YTY3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk N2U4OGQzMDMtMmIyMy00YjEyLWI0NjUtMmJhODYzYzkxODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYP+JwVLFqnVk1WPOeMMjGh27Z1r1zu9eOyC g+C0OcZOvmnhMOilHYoj9Rc4carg9avqpCTpYFS/FFYjuTOKWFq7H6D1XAFRE2Wm r2EfizKQB7B8pMFCJVeNkfOhw/Y87wy1AKTs07XfbV9h3T7/6gEK/W9LSNCRebzZ Kir9mmE8zPpuGgSB9lt/hTWS3sQVWBrZAe/SF7P6FGVBGjQOIdRd2ZyF6JMFYXq6 RI6DL48SB82/eijIg5XVBhXH5rJQVzvZJLnc4Qj+8AkPvMCtYaQ1iyVaae+AZe4+ XQ3jSX+n2uVu9R1vaV5FUwQ4ENhtTlqPeHtiA/gu6sp7Jue6FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMq89oz1nYuC31LjcsF2zPF874iyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzNl NDNmMS03MDM2LTQ2ZTEtOTQ2YS1jOWU3YTY3ZWZhNjcvZmMzZTQzZjEtNzAzNi00 NmUxLTk0NmEtYzllN2E2N2VmYTY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmMzZTQzZjEtNzAzNi00NmUxLTk0 NmEtYzllN2E2N2VmYTY3L2ZjM2U0M2YxLTcwMzYtNDZlMS05NDZhLWM5ZTdhNjdl ZmE2Ny5jcmwwHwYDVR0jBBgwFoAU0GJTSPfb5BBkM77DKwKTwWxTtIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzNlNDNmMS03MDM2LTQ2ZTEtOTQ2YS1jOWU3 YTY3ZWZhNjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPzh/1iAPgwStlRf4qZJ6v Gqxvt8QSnGQQBOeLa36QF0DPEKO16YozWsWCRrcpSYAioame35ErL5OgI0phBk/W wb19ilac14emKpDeS7FExlIBRJcCp16drU3eWKsoGRA6+iq654QiHQcc+0Ir1y22 qXnP1jYLKYTPMWbqZUna2SxIPgQqI1W9+xZUsLyw7KWr2Gqdeia2YwWEwjx6mJ8/ 6Ap135ZoWuH9jbVCzs2hDb/eaE8uK7m2maqp+iVqYwnGhS4ZdQ1D3pXdzCR0HXiD xgpQUNn49ULv+FME8C9xlKOBHklAUIpaUNqAK2Oy4Y0XuHGQU8Yon3862kKEqORR -----END CERTIFICATE-----Generated at Wed Nov 5 01:12:46 2025 by rpki-client