$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft File: c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft (raw, json) Hash identifier: yxAA9DJZA/58r0375nShGYx+oZ1WRydkUXDVOJCSRB8= Subject key identifier: 11:37:56:A0:BF:FC:12:36:66:21:AE:08:D0:C6:75:DC:B0:04:EA:53 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584BC057FFB25518C18A27342B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft Manifest number: 010D0C9F4328584B6F7DE6DF002171B9DFF2441E Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl (hash: MBZr8Mr1Ep0OR+U6MOUL4zdrswnH5nDnEGxCHlg2y/4=) 2: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (hash: ITxHqhjwmYNR8ai7r77QvLmbNm1sQJVpgMGDCzimfzo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:ff:b2:55:18:c1:8a:27:34:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=96cf8217-a9bf-4916-a0a4-b178a0a1277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:eb:49:e3:4f:72:ec:63:8c:d1:ea:f8:5e: 38:a8:ff:2b:f8:0e:82:b0:63:78:74:83:99:50:c4: c4:d4:19:1c:2f:dd:1a:fb:cb:af:c7:39:54:a8:fe: 8b:4c:70:d8:32:55:c3:fb:5f:f1:32:cd:30:0b:12: 7a:6f:f0:68:2b:fe:68:b0:bf:64:18:7e:ba:46:b9: 36:34:6b:cd:86:3b:f7:a7:0f:0b:6f:b4:ed:b6:13: 33:99:f5:44:9f:fe:e5:70:4c:41:2a:a0:2d:90:fa: ec:92:43:33:0a:a2:82:2e:3f:98:d6:6f:52:e2:f3: 0c:28:18:b7:e8:c8:c3:ed:43:e5:a9:36:97:f2:ea: 52:55:09:e2:bd:29:60:eb:c3:6d:14:fb:21:40:bb: 6e:27:b9:7b:f2:e9:ab:5e:b7:a7:ee:de:2b:af:08: 0f:38:6e:d3:1f:e8:dc:52:27:d1:9b:a1:e7:49:22: 6f:5c:c1:9c:80:06:73:e2:f7:8e:9f:c2:05:3c:ee: 0f:08:e8:83:e4:41:20:d9:98:b2:4f:3d:d5:a5:fa: 78:0b:90:ea:6c:a7:fd:80:39:37:fd:cf:f6:0b:13: 6d:00:1f:68:ec:e4:e7:02:df:e3:95:6b:ae:db:75: 76:01:aa:48:a0:ed:de:b6:80:1f:39:86:63:5a:4c: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:37:56:A0:BF:FC:12:36:66:21:AE:08:D0:C6:75:DC:B0:04:EA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:10:f5:8e:17:1d:e4:0d:2b:27:ba:e8:50:d4:2b:59:8e:51: 51:27:e3:97:92:5a:b6:a5:29:de:fe:9d:08:17:63:4c:2f:8b: ad:39:d2:3c:57:e2:f9:c0:0a:fa:c3:86:e9:16:c7:64:f3:2a: 2c:d5:4f:c8:61:2b:01:a5:8d:0d:d4:38:f1:4e:ae:1d:58:38: 6a:10:5f:3b:4c:99:7d:98:6a:89:e3:4d:ba:54:b0:5f:81:67: fd:a9:24:f3:ad:8d:6a:fb:03:c4:97:32:b7:b1:21:a4:16:c4: 82:a6:35:6c:e6:4b:a4:25:41:1b:20:3c:0d:c8:9f:12:35:52: ed:57:b0:71:8d:73:f6:1a:73:1e:0f:04:cd:68:c0:39:cf:d3: 31:20:4a:23:70:4f:86:06:24:f3:1f:e9:b5:dd:05:e4:d2:63: 94:a6:89:52:f3:87:da:13:78:0f:6d:e8:aa:b9:b3:e9:d2:c0: 7c:78:c8:7e:17:93:6d:9d:cf:b9:2c:c0:88:65:a6:75:39:25: 11:0f:48:ce:1d:4d:58:a8:51:87:7f:c2:53:24:f8:d3:ac:7e: 3a:e9:36:09:3f:2a:4e:2c:38:06:70:03:81:31:3f:fa:25:86: a6:86:8d:3e:d2:4f:15:93:9d:bb:8c:15:c3:93:4e:b3:47:ab: 09:2e:37:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/+yVRjBiic0KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk OTZjZjgyMTctYTliZi00OTE2LWEwYTQtYjE3OGEwYTEyNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC/rSeNPcuxjjNHq+F44qP8r+A6CsGN4dIOZ UMTE1BkcL90a+8uvxzlUqP6LTHDYMlXD+1/xMs0wCxJ6b/BoK/5osL9kGH66Rrk2 NGvNhjv3pw8Lb7TtthMzmfVEn/7lcExBKqAtkPrskkMzCqKCLj+Y1m9S4vMMKBi3 6MjD7UPlqTaX8upSVQnivSlg68NtFPshQLtuJ7l78umrXren7t4rrwgPOG7TH+jc UifRm6HnSSJvXMGcgAZz4veOn8IFPO4PCOiD5EEg2ZiyTz3Vpfp4C5DqbKf9gDk3 /c/2CxNtAB9o7OTnAt/jlWuu23V2AapIoO3etoAfOYZjWkzsLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBE3VqC//BI2ZiGuCNDGddywBOpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvYzMyNzg4ZTYtN2FiMC00 YTMyLThmZjEtM2M4MjY5MGZmYWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9EPWOFx3kDSsnuuhQ1CtZ jlFRJ+OXklq2pSne/p0IF2NML4utOdI8V+L5wAr6w4bpFsdk8yos1U/IYSsBpY0N 1DjxTq4dWDhqEF87TJl9mGqJ4026VLBfgWf9qSTzrY1q+wPElzK3sSGkFsSCpjVs 5kukJUEbIDwNyJ8SNVLtV7BxjXP2GnMeDwTNaMA5z9MxIEojcE+GBiTzH+m13QXk 0mOUpolS84faE3gPbeiqubPp0sB8eMh+F5Ntnc+5LMCIZaZ1OSURD0jOHU1YqFGH f8JTJPjTrH466TYJPypOLDgGcAOBMT/6JYamho0+0k8Vk527jBXDk06zR6sJLjeS -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:56 2025 by rpki-client