$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft File: 9281adc0-928e-432b-8a28-e77e9cddfcfe.mft (raw, json) Hash identifier: oc3Xf9JYmcaLNvpHJ2kHivstDsD+dX7nCMSUDbtPVZU= Subject key identifier: 3F:2D:80:5B:18:F1:BA:24:C8:C7:75:92:51:73:07:B4:A6:A7:F3:79 Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Certificate serial: 010D0C9F4328584BBFFEABC4967798792F200A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft Manifest number: 010D0C9F43285841D654BDAD72F758BAAB2B8882 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 9281adc0-928e-432b-8a28-e77e9cddfcfe.crl (hash: GZJEQihSeNiLIIu2qwRjshqIGnxKllmPzvIDZW/z5OY=) 2: c38a686c-1237-3b63-8f94-0581beb86b44.roa (hash: xNBPGo5vxbeFXW2qXRoGJkeVIjlUg+JkPBxGXpRGkJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:ab:c4:96:77:98:79:2f:20:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=043aa533-141a-4d2b-9947-2a8fc121c46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:6d:64:56:20:9a:e1:44:c1:d4:de:fd:d4: 9a:11:3e:fa:ca:ba:e4:a5:c8:56:db:e1:ed:e7:cb: 02:83:c4:dd:df:25:c2:69:2c:c3:98:0c:8f:f5:e8: 2d:1a:a4:05:50:a1:83:eb:4d:42:2b:5f:31:b9:5d: 21:91:05:7c:9d:3d:61:28:ab:39:50:10:bf:c3:8d: 27:13:ac:f2:93:d4:3e:1d:9a:f9:55:d9:b7:3f:f3: e4:7d:f4:ea:05:f5:55:4c:07:da:5f:f0:b0:38:58: 2c:c0:68:8f:36:12:4f:dd:85:08:7e:88:4f:fa:bd: 98:4e:d6:0d:38:04:a4:0d:94:08:7c:8b:cc:13:da: f8:e0:95:de:8e:7b:6f:60:3d:39:6f:0b:0e:1d:c8: 9e:7b:7d:77:7b:62:fc:56:71:72:46:0b:72:32:41: d9:54:5e:c7:9e:23:23:f6:aa:38:98:db:63:18:82: 36:d6:97:5f:4f:22:37:6a:cf:15:9b:bb:d0:26:51: 57:85:f5:94:ed:16:72:d9:d6:bb:f0:3a:84:ec:14: b3:c9:77:37:33:4c:a4:68:eb:3a:2b:3d:34:42:bb: ca:77:5c:5d:6b:0b:9c:64:aa:8f:8b:52:46:19:73: 15:06:dc:37:91:e3:10:10:75:1d:5a:b7:b3:d9:3c: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:80:5B:18:F1:BA:24:C8:C7:75:92:51:73:07:B4:A6:A7:F3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl X509v3 Authority Key Identifier: keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:1b:c4:98:a8:b8:8a:80:fa:6b:b5:6a:70:30:0b:39:84:6e: f3:23:d2:50:09:e2:90:58:f5:eb:68:fa:40:21:53:bd:4a:af: 63:e6:0c:6b:96:cb:28:b9:fe:91:30:37:2c:f3:9c:33:1e:fe: 2a:40:9e:5f:26:78:5b:90:f0:24:49:25:e2:78:f8:f8:de:82: ae:f1:7e:b2:7d:88:cc:86:36:a5:ed:a1:b0:7b:86:6c:54:70: d3:22:3c:c3:a7:2e:59:95:46:39:18:08:a5:cf:e8:32:d4:b8: bd:c4:6f:f5:6d:64:14:e0:1e:52:e3:86:ae:14:36:bc:21:23: 30:28:2f:c3:c4:69:9e:e1:c8:6c:a5:66:b3:d5:c3:ee:6a:f7: 3b:9c:fc:d4:41:58:4d:a5:a3:aa:c7:38:4b:c2:63:2a:3c:32: f8:25:69:18:24:bf:fa:18:82:5d:6a:57:63:e7:ae:f6:4a:ef: cd:f2:1b:7b:24:ed:1d:cf:f0:4a:c9:53:9d:e7:ce:03:26:2c: 72:15:18:fd:65:b7:c6:76:51:8a:80:0a:35:11:1d:1a:e4:90: 89:60:8a:1f:46:29:3a:37:23:d8:cd:89:cd:79:0c:cf:0f:a1: bb:c5:10:8c:07:d5:90:ed:e5:51:f7:84:d9:fb:0d:d8:bf:f6: ce:90:eb:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qvElneYeS8gCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4MWFkYzAtOTI4ZS00MzJiLThhMjgtZTc3ZTljZGRm Y2ZlMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk MDQzYWE1MzMtMTQxYS00ZDJiLTk5NDctMmE4ZmMxMjFjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXZtZFYgmuFEwdTe/dSaET76yrrkpchW2+Ht 58sCg8Td3yXCaSzDmAyP9egtGqQFUKGD601CK18xuV0hkQV8nT1hKKs5UBC/w40n E6zyk9Q+HZr5Vdm3P/PkffTqBfVVTAfaX/CwOFgswGiPNhJP3YUIfohP+r2YTtYN OASkDZQIfIvME9r44JXejntvYD05bwsOHciee313e2L8VnFyRgtyMkHZVF7HniMj 9qo4mNtjGII21pdfTyI3as8Vm7vQJlFXhfWU7RZy2da78DqE7BSzyXc3M0ykaOs6 Kz00QrvKd1xdawucZKqPi1JGGXMVBtw3keMQEHUdWrez2TxIlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD8tgFsY8bokyMd1klFzB7Smp/N5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx YWRjMC05MjhlLTQzMmItOGEyOC1lNzdlOWNkZGZjZmUvOTI4MWFkYzAtOTI4ZS00 MzJiLThhMjgtZTc3ZTljZGRmY2ZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MWFkYzAtOTI4ZS00MzJiLThh MjgtZTc3ZTljZGRmY2ZlLzkyODFhZGMwLTkyOGUtNDMyYi04YTI4LWU3N2U5Y2Rk ZmNmZS5jcmwwHwYDVR0jBBgwFoAUs3fmz1nG6JnU5+sbW6FMixQQUCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxYWRjMC05MjhlLTQzMmItOGEyOC1lNzdl OWNkZGZjZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDKG8SYqLiKgPprtWpwMAs5 hG7zI9JQCeKQWPXraPpAIVO9Sq9j5gxrlssouf6RMDcs85wzHv4qQJ5fJnhbkPAk SSXiePj43oKu8X6yfYjMhjal7aGwe4ZsVHDTIjzDpy5ZlUY5GAilz+gy1Li9xG/1 bWQU4B5S44auFDa8ISMwKC/DxGme4chspWaz1cPuavc7nPzUQVhNpaOqxzhLwmMq PDL4JWkYJL/6GIJdaldj5672Su/N8ht7JO0dz/BKyVOd584DJixyFRj9ZbfGdlGK gAo1ER0a5JCJYIofRik6NyPYzYnNeQzPD6G7xRCMB9WQ7eVR94TZ+w3Yv/bOkOvR -----END CERTIFICATE-----Generated at Wed Nov 5 13:19:33 2025 by rpki-client