$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.mft File: 74672faa-68ae-4e42-97a3-e819f0e1a721.mft (raw, json) Hash identifier: AV0YBqR8DhzTepFwks0BejP+91717OhP36GGBFybtu8= Subject key identifier: 02:DA:4E:02:99:96:AB:92:AD:53:DE:C8:9F:9B:03:70:9D:3B:89:05 Authority key identifier: AB:75:6C:01:DA:C1:42:C0:D7:5A:7D:EF:8E:CF:71:79:AA:5C:69:95 Certificate issuer: /CN=74672faa-68ae-4e42-97a3-e819f0e1a721 Certificate serial: 010D0C9F4328584BC216B264E3BB3A3D774EAE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.mft Manifest number: 010D0C9F432858498E3851F7487A413A727C350F Signing time: Wed 05 Nov 2025 11:00:09 +0000 Manifest this update: Wed 05 Nov 2025 11:00:09 +0000 Manifest next update: Sat 08 Nov 2025 11:00:00 +0000 Files and hashes: 1: 467af422-435f-3ce8-8666-6f28292c67a3.roa (hash: 8tGITTq7Ek8d/2Lf2EgmlCIa050I4rZIu1V9CvEWTNs=) 2: 74672faa-68ae-4e42-97a3-e819f0e1a721.crl (hash: Q2/RdkXrymB0qJnjmnqGYB8jyZ2z1piGM1IwHzWyme0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:16:b2:64:e3:bb:3a:3d:77:4e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74672faa-68ae-4e42-97a3-e819f0e1a721 Validity Not Before: Nov 5 11:00:09 2025 GMT Not After : Nov 8 11:00:00 2025 GMT Subject: CN=9419c0d6-6e2f-47fb-b302-82eea257fcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:03:83:01:31:01:3a:9c:a4:19:df:90:32: 21:a1:7e:43:aa:84:c6:8d:0a:57:b5:27:cc:b7:6e: 7e:c3:0f:9b:c4:fe:d5:43:2a:bf:20:c7:39:04:b3: 28:a7:9c:9c:90:b0:41:8b:db:b6:43:63:7c:a1:b8: 5f:4d:12:e7:8c:0b:30:52:42:56:9b:33:b1:88:21: 15:17:da:83:4a:56:d5:d0:a2:34:fb:50:f6:dd:f7: 57:5a:da:1d:7d:ee:9d:16:af:79:47:00:36:76:12: b6:a8:da:75:6f:bc:57:59:24:5d:0c:4e:18:de:a6: 92:d0:1b:be:c0:af:13:e2:df:4e:bc:cf:00:e5:d6: bb:54:25:05:09:04:f9:56:c8:00:1b:17:de:e9:7c: c9:a1:a9:3d:af:d2:6e:48:06:fb:93:1b:35:a6:d6: b8:87:c0:86:17:71:8e:45:c5:19:cf:9b:d7:52:40: a1:36:c6:cb:75:6f:65:9e:7d:b4:5d:01:37:e0:ff: 5a:f0:af:1c:32:b9:ee:8b:90:18:e9:58:9d:e8:7d: e8:2a:c0:16:46:65:d4:48:cd:5c:ee:01:c6:f7:0d: e7:9f:41:9c:3f:5d:07:f4:db:f5:48:3e:33:e1:72: a6:ba:25:3a:76:78:29:bb:ee:be:88:7a:5f:df:d3: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:4E:02:99:96:AB:92:AD:53:DE:C8:9F:9B:03:70:9D:3B:89:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721/74672faa-68ae-4e42-97a3-e819f0e1a721.crl X509v3 Authority Key Identifier: keyid:AB:75:6C:01:DA:C1:42:C0:D7:5A:7D:EF:8E:CF:71:79:AA:5C:69:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/74672faa-68ae-4e42-97a3-e819f0e1a721.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:43:94:27:e6:db:02:81:e2:29:9a:12:d2:c8:4b:1e:d0:c0: 7a:0d:eb:a6:bd:60:d4:09:ad:44:9e:ae:49:7b:ed:a0:5c:06: 02:a9:fe:2c:ed:76:cb:44:f1:ff:ac:76:73:03:71:d3:4f:f3: df:ac:da:34:42:b9:93:7e:02:eb:b9:76:7d:5b:a6:c1:ab:62: 20:93:bf:0f:1f:ac:3c:a5:b0:42:7f:b8:b4:48:3e:cc:00:d3: d7:db:63:92:b7:c5:5a:63:93:9d:e3:67:fa:7e:3b:27:a2:38: 30:3b:34:98:e2:ef:ae:e8:31:eb:68:d2:bb:24:ec:0c:9e:91: cc:19:ad:52:1c:92:37:04:94:3e:56:99:05:be:db:a0:0e:14: 61:08:46:de:16:e6:e5:c8:a6:96:0a:50:c6:02:ad:75:3f:67: 33:1a:05:a8:cf:df:88:b7:bc:cc:dc:4f:19:10:8b:8d:6d:1c: b3:a1:b6:fb:09:85:71:ee:fc:0d:51:c6:2e:7e:9b:1a:7e:4a: 35:7d:d5:6c:93:cd:71:ea:93:ad:e3:35:97:ba:e2:88:93:40: 1c:bd:17:49:e3:61:53:8e:55:30:c8:d4:97:6c:1a:f5:74:5c: a8:70:6d:ce:2c:fd:25:a7:2b:9c:24:57:c4:60:07:fd:8f:37: a6:da:f5:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCFrJk47s6PXdOroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2NzJmYWEtNjhhZS00ZTQyLTk3YTMtZTgxOWYwZTFh NzIxMB4XDTI1MTEwNTExMDAwOVoXDTI1MTEwODExMDAwMFowLzEtMCsGA1UEAxMk OTQxOWMwZDYtNmUyZi00N2ZiLWIzMDItODJlZWEyNTdmY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYDgwExATqcpBnfkDIhoX5DqoTGjQpXtSfM t25+ww+bxP7VQyq/IMc5BLMop5yckLBBi9u2Q2N8obhfTRLnjAswUkJWmzOxiCEV F9qDSlbV0KI0+1D23fdXWtodfe6dFq95RwA2dhK2qNp1b7xXWSRdDE4Y3qaS0Bu+ wK8T4t9OvM8A5da7VCUFCQT5VsgAGxfe6XzJoak9r9JuSAb7kxs1pta4h8CGF3GO RcUZz5vXUkChNsbLdW9lnn20XQE34P9a8K8cMrnui5AY6Vid6H3oKsAWRmXUSM1c 7gHG9w3nn0GcP10H9Nv1SD4z4XKmuiU6dngpu+6+iHpf39P3GwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFALaTgKZlquSrVPeyJ+bA3CdO4kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83NDY3 MmZhYS02OGFlLTRlNDItOTdhMy1lODE5ZjBlMWE3MjEvNzQ2NzJmYWEtNjhhZS00 ZTQyLTk3YTMtZTgxOWYwZTFhNzIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzQ2NzJmYWEtNjhhZS00ZTQyLTk3 YTMtZTgxOWYwZTFhNzIxLzc0NjcyZmFhLTY4YWUtNGU0Mi05N2EzLWU4MTlmMGUx YTcyMS5jcmwwHwYDVR0jBBgwFoAUq3VsAdrBQsDXWn3vjs9xeapcaZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83NDY3MmZhYS02OGFlLTRlNDItOTdhMy1lODE5 ZjBlMWE3MjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOQ5Qn5tsCgeIpmhLSyEse 0MB6DeumvWDUCa1Enq5Je+2gXAYCqf4s7XbLRPH/rHZzA3HTT/PfrNo0QrmTfgLr uXZ9W6bBq2Igk78PH6w8pbBCf7i0SD7MANPX22OSt8VaY5Od42f6fjsnojgwOzSY 4u+u6DHraNK7JOwMnpHMGa1SHJI3BJQ+VpkFvtugDhRhCEbeFublyKaWClDGAq11 P2czGgWoz9+It7zM3E8ZEIuNbRyzobb7CYVx7vwNUcYufpsafko1fdVsk81x6pOt 4zWXuuKIk0AcvRdJ42FTjlUwyNSXbBr1dFyocG3OLP0lpyucJFfEYAf9jzem2vXs -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:08 2025 by rpki-client