$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft File: 42c666c1-a603-4b7f-a5b1-8292a815144e.mft (raw, json) Hash identifier: sMRumOmdtTcDvz3QJmLyCAgxctEOavPuvo4FZmNykjI= Subject key identifier: D9:37:90:19:77:C0:3E:B7:4F:F5:65:DB:B7:1D:3C:73:84:AA:0B:9C Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 Certificate issuer: /CN=42c666c1-a603-4b7f-a5b1-8292a815144e Certificate serial: 010D0C9F4328584BBFE0D5327CD562F04F994D30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft Manifest number: 010D0C9F4328584890AF1FF4945AFE1912081C6E Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (hash: /mNAxAwLHuf1eitSfHitm2hqte7GYXpmWkbfGXkhUOg=) 2: 42c666c1-a603-4b7f-a5b1-8292a815144e.crl (hash: swvN2Qie+xabyPxAIV7feswO5mPUkRK/DFz2QFoV9B8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:32:7c:d5:62:f0:4f:99:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=9dea49e3-9e11-4e99-8ae2-fad12e5c6ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:e2:23:e4:73:7c:f7:3b:b4:8d:d0:5b:43: 33:ea:5b:88:20:00:81:b2:7f:4f:bf:06:25:a5:4b: 14:42:74:9c:1a:81:2f:0c:74:1b:67:69:0d:93:51: 8d:d7:87:24:a6:86:56:ad:0f:0e:7c:bc:4b:74:cf: 7d:05:a6:b5:a0:cd:1e:9d:65:e0:57:31:09:28:d9: ce:c7:67:ef:86:b4:53:9a:05:86:89:7d:04:38:dd: 0b:89:32:63:64:92:dd:fc:07:1a:fe:cc:8d:33:66: 14:d8:a5:5f:3d:5a:ef:11:08:20:29:d7:cb:b9:87: 08:52:7e:79:68:9d:19:be:17:df:4f:13:7d:bc:ec: 7a:6c:e0:96:da:93:79:fc:29:a2:0e:db:f0:5b:ca: c6:c8:56:74:df:e5:b4:10:04:63:07:78:d5:15:c1: 40:a0:df:1b:10:c9:e3:ff:cf:a1:57:74:66:f6:ef: 55:4c:a6:12:3f:fa:f2:b5:fc:85:01:39:7c:ec:72: 6f:f5:1c:7d:a0:cf:93:54:ed:e6:c6:56:27:00:80: fb:a5:5b:45:0a:23:58:8a:a5:d6:06:3b:61:47:16: bf:1e:ad:d7:63:26:8f:9c:d6:71:75:c2:9e:c5:a0: 4b:e8:a1:6b:ff:58:ae:31:9d:03:47:e3:f7:ac:57: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:90:19:77:C0:3E:B7:4F:F5:65:DB:B7:1D:3C:73:84:AA:0B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl X509v3 Authority Key Identifier: keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4c:0f:2d:e6:da:dc:30:c5:ab:79:5a:0a:2b:d6:39:af:34: 6d:70:f0:5d:01:23:06:75:73:bf:5b:a4:28:c2:dd:d2:5b:34: 25:55:f2:f9:f4:f1:36:c1:ff:12:74:31:22:18:bc:48:35:ae: fe:cb:a7:3c:e3:7d:d2:97:1b:93:cd:bf:53:85:4d:36:a8:78: a4:53:a2:2a:78:f3:6e:27:82:0c:40:0f:56:00:b1:77:56:79: 29:1b:31:28:87:31:e0:e3:ce:5d:9c:25:fc:9a:b7:9c:81:6a: 16:3d:d7:32:53:62:a5:f2:fc:23:31:36:ef:9e:03:97:b3:62: 45:b5:3e:ff:5e:14:97:1a:a7:45:2e:f7:84:28:26:36:5a:44: e9:38:4d:ca:8c:99:d6:9f:ed:de:a5:50:96:4c:02:60:09:cb: 9e:6d:ee:1b:95:37:97:8d:4e:a1:64:9b:dd:00:06:6e:36:61: a3:7a:ea:bc:81:63:eb:d1:aa:e8:f2:f1:e6:d5:15:a2:50:65: d6:05:cd:e2:d3:e0:f3:8e:22:95:cc:ea:f1:34:c3:c0:67:f0: 70:7d:6d:3c:5b:fc:c8:65:5f:5f:43:f0:68:b0:a9:d4:87:a3: 76:a1:98:ea:69:9e:4f:a5:64:72:bf:8f:7d:6f:1b:51:92:d3: 40:a8:48:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NUyfNVi8E+ZTTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjNjY2YzEtYTYwMy00YjdmLWE1YjEtODI5MmE4MTUx NDRlMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk OWRlYTQ5ZTMtOWUxMS00ZTk5LThhZTItZmFkMTJlNWM2ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mjiI+RzfPc7tI3QW0Mz6luIIACBsn9PvwYl pUsUQnScGoEvDHQbZ2kNk1GN14ckpoZWrQ8OfLxLdM99Baa1oM0enWXgVzEJKNnO x2fvhrRTmgWGiX0EON0LiTJjZJLd/Aca/syNM2YU2KVfPVrvEQggKdfLuYcIUn55 aJ0ZvhffTxN9vOx6bOCW2pN5/CmiDtvwW8rGyFZ03+W0EARjB3jVFcFAoN8bEMnj /8+hV3Rm9u9VTKYSP/rytfyFATl87HJv9Rx9oM+TVO3mxlYnAID7pVtFCiNYiqXW BjthRxa/Hq3XYyaPnNZxdcKexaBL6KFr/1iuMZ0DR+P3rFebNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNk3kBl3wD63T/Vl27cdPHOEqgucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmM2 NjZjMS1hNjAzLTRiN2YtYTViMS04MjkyYTgxNTE0NGUvNDJjNjY2YzEtYTYwMy00 YjdmLWE1YjEtODI5MmE4MTUxNDRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJjNjY2YzEtYTYwMy00YjdmLWE1 YjEtODI5MmE4MTUxNDRlLzQyYzY2NmMxLWE2MDMtNGI3Zi1hNWIxLTgyOTJhODE1 MTQ0ZS5jcmwwHwYDVR0jBBgwFoAUnho0ILBmT5g5OjPvVBiVYd6vu3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmM2NjZjMS1hNjAzLTRiN2YtYTViMS04Mjky YTgxNTE0NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdTA8t5trcMMWreVoKK9Y5 rzRtcPBdASMGdXO/W6Qowt3SWzQlVfL59PE2wf8SdDEiGLxINa7+y6c8433SlxuT zb9ThU02qHikU6IqePNuJ4IMQA9WALF3VnkpGzEohzHg485dnCX8mrecgWoWPdcy U2Kl8vwjMTbvngOXs2JFtT7/XhSXGqdFLveEKCY2WkTpOE3KjJnWn+3epVCWTAJg Ccuebe4blTeXjU6hZJvdAAZuNmGjeuq8gWPr0aro8vHm1RWiUGXWBc3i0+DzjiKV zOrxNMPAZ/BwfW08W/zIZV9fQ/BosKnUh6N2oZjqaZ5PpWRyv499bxtRktNAqEjA -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:13 2025 by rpki-client