$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft File: d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft (raw, json) Hash identifier: xq+yMyV0QMvLrg1FjyponG5ivnPc4CR2tzKnyVVYGB8= Subject key identifier: 97:86:68:43:5F:B9:B4:75:B5:C7:34:DD:71:E5:63:97:38:CD:99:BB Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Certificate issuer: /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Certificate serial: 010D0C9F4328584BBF69B66AA78BF17967E6B8A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft Manifest number: 010D0C9F4328584073A85400E54E58E0019E93B5 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 09da335a-7bde-3f25-9732-e626e6be5353.roa (hash: BM1Xde+AY9zSLFWh+XLTg2BS5Bgaog3m+F2sgN0QLuA=) 2: 4e0c3e54-11a2-3f99-a379-f22fb23c9791.roa (hash: lqJq2RnON+JAgqRsJ4svAFa8PAWdNeR1R+HzCfnMccs=) 3: 70a2edab-599b-37b9-90c6-3e15b53af115.roa (hash: NgtjRrkdOQkU7ED6NtA0kwvl4ob+sOUQjlwk0+qsjRI=) 4: d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl (hash: n2zoExP288B9dgK0MpvVg0/8lXP55INgrzb5yrIDKH4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b6:6a:a7:8b:f1:79:67:e6:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=3c729cb6-e782-4268-80aa-e65ff1c51b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:2f:14:9f:d9:20:56:f1:5b:ff:86:69:5f: 77:8b:bd:e1:36:be:38:f9:6b:7d:86:40:bb:61:39: 2b:bd:55:ad:f5:ac:22:85:93:bc:57:ac:e5:0e:b1: 5a:d9:b2:33:eb:5e:35:41:12:22:6a:a2:35:91:73: 5f:82:e4:a8:53:d7:3c:3d:0f:34:67:b1:3a:04:28: d1:53:b9:d7:d8:f2:66:25:6f:ea:47:d4:67:b3:d6: 87:93:a0:91:0b:4b:35:5d:5b:02:1e:ae:47:6b:8c: a1:d0:15:14:43:81:d0:c2:24:0f:ac:97:ab:11:fd: 36:31:b1:04:db:57:33:98:7f:d6:c5:f9:91:72:fa: a0:3f:55:a7:a1:eb:3d:fb:72:1c:8b:b7:c1:a6:10: 5c:a9:28:e7:56:d1:8b:b4:bb:62:23:67:a2:64:b5: bb:7c:4d:ad:e4:cf:ce:90:6f:e1:75:87:52:78:f1: 22:fa:04:44:48:f4:2d:11:e7:09:00:e5:dc:b4:08: 62:72:00:81:74:ef:c6:bf:9a:b4:e7:f0:eb:1e:9c: a2:96:ba:eb:2a:e7:67:73:51:dd:65:bc:be:6a:97: 45:57:17:93:06:37:67:cf:a8:45:b8:fe:a2:ac:67: c8:31:14:42:8d:df:be:e0:aa:9c:a9:aa:67:4f:03: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:86:68:43:5F:B9:B4:75:B5:C7:34:DD:71:E5:63:97:38:CD:99:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl X509v3 Authority Key Identifier: keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3d:ad:1b:1e:9d:b8:59:e7:d4:c3:4c:c2:1d:25:88:6b:75: d1:a6:1d:c1:1c:24:90:2c:d9:3d:fc:f5:27:5a:47:d0:e5:7c: c0:34:e9:66:c1:8d:48:42:3a:9e:2e:8d:f1:9c:6c:65:77:d5: c6:0d:94:73:22:25:83:6e:25:69:36:f1:a5:a4:d8:85:ce:17: 71:9d:52:4a:e3:48:61:d1:86:6d:aa:3c:fc:bc:f6:a5:c0:bb: 0f:6e:8d:b2:65:1f:65:43:62:4f:2e:b6:25:24:fe:41:af:1f: 1c:17:46:37:05:ae:51:52:bc:2e:2f:1f:b0:7c:6e:b4:7d:56: 4a:9b:a7:48:4c:28:b7:73:ee:19:d4:ec:e4:99:2d:c2:38:67: fb:99:b8:dc:fe:98:2d:77:5b:6f:63:87:ed:1f:4a:3e:e8:bf: e1:9b:e3:42:15:fa:67:70:79:2b:c4:89:7a:44:e3:45:96:c5: 3a:70:68:8a:d9:1c:c5:00:14:cc:8f:7d:90:66:a8:d6:0a:4b: c8:d0:a2:d6:eb:00:2e:c1:22:65:73:34:3f:30:b2:0d:a0:dc: 4a:18:b9:4f:51:09:6e:a8:e8:34:f4:a6:16:ae:a4:a0:fa:79: 9a:29:8c:d0:bf:51:21:71:52:ba:f5:e6:1e:55:dc:1a:87:81: 5e:18:10:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abZqp4vxeWfmuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI0NDJlNDktZmIzMS00YmY3LWFlZTYtMmE3MDMzYTU3 Y2ZhMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk M2M3MjljYjYtZTc4Mi00MjY4LTgwYWEtZTY1ZmYxYzUxYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH8vFJ/ZIFbxW/+GaV93i73hNr44+Wt9hkC7 YTkrvVWt9awihZO8V6zlDrFa2bIz6141QRIiaqI1kXNfguSoU9c8PQ80Z7E6BCjR U7nX2PJmJW/qR9Rns9aHk6CRC0s1XVsCHq5Ha4yh0BUUQ4HQwiQPrJerEf02MbEE 21czmH/WxfmRcvqgP1Wnoes9+3Ici7fBphBcqSjnVtGLtLtiI2eiZLW7fE2t5M/O kG/hdYdSePEi+gRESPQtEecJAOXctAhicgCBdO/Gv5q05/DrHpyilrrrKudnc1Hd Zby+apdFVxeTBjdnz6hFuP6irGfIMRRCjd++4KqcqapnTwM7FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJeGaENfubR1tcc03XHlY5c4zZm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0 MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNhNTdjZmEvZDI0NDJlNDktZmIzMS00 YmY3LWFlZTYtMmE3MDMzYTU3Y2ZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI0NDJlNDktZmIzMS00YmY3LWFl ZTYtMmE3MDMzYTU3Y2ZhL2QyNDQyZTQ5LWZiMzEtNGJmNy1hZWU2LTJhNzAzM2E1 N2NmYS5jcmwwHwYDVR0jBBgwFoAUN6IDVpWSLDW9mcJam4Igd3MUHn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcw MzNhNTdjZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaPa0bHp24WefUw0zCHSWI a3XRph3BHCSQLNk9/PUnWkfQ5XzANOlmwY1IQjqeLo3xnGxld9XGDZRzIiWDbiVp NvGlpNiFzhdxnVJK40hh0YZtqjz8vPalwLsPbo2yZR9lQ2JPLrYlJP5Brx8cF0Y3 Ba5RUrwuLx+wfG60fVZKm6dITCi3c+4Z1OzkmS3COGf7mbjc/pgtd1tvY4ftH0o+ 6L/hm+NCFfpncHkrxIl6RONFlsU6cGiK2RzFABTMj32QZqjWCkvI0KLW6wAuwSJl czQ/MLINoNxKGLlPUQluqOg09KYWrqSg+nmaKYzQv1EhcVK69eYeVdwah4FeGBAa -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:47 2025 by rpki-client