$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: RwcCWXNTL7n08HPvvVIlpeP83LDvtphxa6vT4LyH+dU= Subject key identifier: AF:74:AC:37:29:BC:B7:6E:06:BA:69:E4:40:2B:E9:2D:FC:61:D4:1F Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584BC09383CDB3B6934FA1C15000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FABF8 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Thu 06 Nov 2025 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: 7SCx2vESS/62p+HyfDPbCNMbUsdlt1XddsTYtwyukdQ=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WCsl/uHAuRHFK8iwHtx6pvMStWiWbxyew8aipe66l+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:83:cd:b3:b6:93:4f:a1:c1:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 6 22:00:00 2025 GMT Subject: CN=d160ed1e-0863-4c8b-bba1-4a3d443eb843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:75:13:17:52:d7:0b:2e:14:0b:24:8a:0b:34: 05:ad:3f:6b:51:6f:c7:bb:a5:4e:cc:56:76:3c:39: 52:13:e6:18:a7:7b:06:23:70:75:2f:88:2a:7f:76: 3a:21:1d:27:52:f6:d9:13:0f:4e:be:b5:7a:07:fc: 05:00:f3:67:68:b2:83:38:30:3d:b4:1f:b5:ee:74: 2a:c1:76:7c:46:1a:93:fb:de:53:36:a9:37:5c:f9: e8:1f:4f:0f:a2:ab:ad:9e:1e:9e:fd:32:42:9d:de: 3a:34:95:11:82:73:fe:1e:0e:45:fc:c2:75:88:86: 01:c7:cc:15:15:88:ab:11:a7:55:66:eb:ea:a3:39: fd:13:7b:15:ac:d8:cd:8b:d8:13:ca:4d:b1:75:f8: b6:a7:24:80:5d:f2:8e:17:d8:26:52:b9:b4:22:78: ce:05:55:31:b4:e0:2d:a2:cb:de:4a:17:3f:e6:a9: 60:9c:7f:93:76:ad:36:8e:d4:66:28:ae:60:ac:49: 80:ba:5d:b8:91:ef:f1:fd:9a:e7:78:56:c9:71:aa: ae:ec:15:c8:e4:0d:1e:1a:92:0a:76:c6:11:7b:68: 6b:80:76:b4:1b:73:a1:ac:ef:d8:3f:78:b2:72:ab: e8:65:d8:c9:ee:e9:7d:6a:f0:2f:16:4d:6b:5b:b5: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:AC:37:29:BC:B7:6E:06:BA:69:E4:40:2B:E9:2D:FC:61:D4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:98:03:c7:38:61:3a:76:38:65:d8:1c:17:f2:33:3b:e4:78: 96:ad:30:5f:1f:03:97:e4:19:a1:6c:48:08:4e:e9:b0:d7:27: 10:02:03:f0:df:62:5b:da:76:31:76:5f:7a:ce:04:09:67:cf: a7:3c:fa:bf:95:b1:80:8d:2d:f2:a8:c8:96:1b:72:a8:3b:77: b2:e6:57:17:ff:ba:76:c4:50:2f:7f:b7:24:c2:f4:2d:ef:20: a1:36:98:3b:9a:64:e5:6d:3b:8a:e6:50:f3:a4:db:4d:9b:b1: 9e:00:ae:af:4b:76:b0:5e:cd:79:22:59:83:c0:79:64:2f:0f: c9:03:95:35:51:c5:49:99:3f:95:37:6a:13:25:78:a7:a7:5f: 4c:d7:b7:cf:7c:a9:0f:cb:7a:5a:50:ce:c4:61:3d:4f:af:27: e9:4f:29:29:f5:a3:37:b9:3e:a8:41:40:e2:93:90:07:91:58: 5c:80:fb:a2:13:d3:96:97:aa:ff:2d:03:5c:d5:bd:58:bb:ac: be:f5:26:ce:4f:c6:c6:c5:38:56:a0:9d:ad:4b:f1:33:8b:5a: 55:db:b5:5e:20:6b:ac:7a:e4:13:60:cb:65:e3:a6:19:b7:7a: 82:98:b4:7b:33:81:af:5f:e5:cd:b7:c9:d9:27:c4:6f:ec:92: 2d:4d:3b:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4PNs7aTT6HBUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNjIyMDAwMFowLzEtMCsGA1UEAxMk ZDE2MGVkMWUtMDg2My00YzhiLWJiYTEtNGEzZDQ0M2ViODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nUTF1LXCy4UCySKCzQFrT9rUW/Hu6VOzFZ2 PDlSE+YYp3sGI3B1L4gqf3Y6IR0nUvbZEw9OvrV6B/wFAPNnaLKDODA9tB+17nQq wXZ8RhqT+95TNqk3XPnoH08Poqutnh6e/TJCnd46NJURgnP+Hg5F/MJ1iIYBx8wV FYirEadVZuvqozn9E3sVrNjNi9gTyk2xdfi2pySAXfKOF9gmUrm0InjOBVUxtOAt osveShc/5qlgnH+Tdq02jtRmKK5grEmAul24ke/x/ZrneFbJcaqu7BXI5A0eGpIK dsYRe2hrgHa0G3OhrO/YP3iycqvoZdjJ7ul9avAvFk1rW7VOmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK90rDcpvLduBrpp5EAr6S38YdQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+mAPHOGE6djhl2BwX8jM7 5HiWrTBfHwOX5BmhbEgITumw1ycQAgPw32Jb2nYxdl96zgQJZ8+nPPq/lbGAjS3y qMiWG3KoO3ey5lcX/7p2xFAvf7ckwvQt7yChNpg7mmTlbTuK5lDzpNtNm7GeAK6v S3awXs15IlmDwHlkLw/JA5U1UcVJmT+VN2oTJXinp19M17fPfKkPy3paUM7EYT1P ryfpTykp9aM3uT6oQUDik5AHkVhcgPuiE9OWl6r/LQNc1b1Yu6y+9SbOT8bGxThW oJ2tS/Ezi1pV27VeIGuseuQTYMtl46YZt3qCmLR7M4GvX+XNt8nZJ8Rv7JItTTtN -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:23 2025 by rpki-client