$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft File: c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft (raw, json) Hash identifier: oyZd2m9XpipBatGccOYKoWFwtlcGRNAsPRt1jKug1ro= Subject key identifier: BD:4E:5F:55:50:F8:08:4D:73:C3:8C:DC:58:F0:74:84:37:81:5A:BF Authority key identifier: C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F Certificate issuer: /CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Certificate serial: 010D0C9F4328584BBFA55204195742017A7BF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft Manifest number: 010D0C9F4328584AEE60C2451783F1E28DF0464C Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl (hash: vEhaGC449S/245ZTprliM5pEFa01h+xZVSp+UtMHGZM=) 2: e96993f5-ca60-3022-be74-738b3dcf4ced.roa (hash: bHZl78qTxC857v5JaWzc3QTK0Q/VYmUeZEiF2oVBiEQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:52:04:19:57:42:01:7a:7b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=011cbd3c-06a8-44e5-bd1f-90e61acc4e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:a5:fc:ee:0b:26:48:e4:2c:90:2f:9e:2b: 13:ab:ac:30:72:02:52:35:f9:39:7b:ed:4e:f5:b6: 05:91:80:0a:da:23:cf:43:22:0e:b3:9a:8e:8e:7d: 19:4b:a4:0c:5c:58:32:e3:4e:e2:12:eb:40:1f:c9: 71:9a:95:dc:c4:ac:20:61:dc:d9:46:b3:bc:ba:b3: 44:c8:fc:97:6d:07:18:f9:77:e9:a0:8e:c2:b9:e9: 62:f3:85:3d:8d:dd:70:50:92:8e:8b:6e:58:ff:32: 71:19:91:cb:08:b0:be:4d:ca:22:6a:b4:17:c0:bb: c6:6a:60:36:ef:4f:8b:7e:19:a9:f8:b4:b7:ff:72: e1:9b:f7:d4:0c:4b:f5:f6:37:de:16:ed:22:66:e6: 29:60:5c:2b:c4:eb:e9:18:df:9e:5c:8d:13:ef:79: 7b:76:f8:68:e7:df:fe:05:f7:73:88:76:35:b1:c5: cd:4e:85:65:c4:76:29:ff:d0:ad:3b:8b:f6:1b:a4: e5:8f:f7:c4:48:e7:20:97:49:3b:6e:5e:f9:82:60: 77:0d:ea:67:a9:93:35:1c:2f:af:b4:81:8b:c0:fa: bb:0f:54:13:be:69:c3:c8:98:49:56:ba:d9:59:fb: 16:c4:f0:e9:5a:60:7f:81:44:20:8a:ba:da:83:76: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:5F:55:50:F8:08:4D:73:C3:8C:DC:58:F0:74:84:37:81:5A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl X509v3 Authority Key Identifier: keyid:C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b3:b9:34:43:33:a0:20:c9:08:3a:bd:93:7a:bb:dd:d5:8a: a7:8e:f3:b9:72:09:88:db:a7:65:47:62:ac:7e:6c:bb:12:b5: 72:be:db:dd:94:c4:08:99:61:35:2a:cc:35:ca:dc:a5:48:5a: 46:1d:0d:f3:22:81:98:76:80:5d:11:1d:c1:82:a9:c5:6d:8c: aa:37:3b:42:a6:57:da:8e:3c:f3:98:a9:14:53:22:d6:3b:a7: 7e:c7:8a:8c:46:4f:14:79:fc:76:16:7a:e8:6e:67:81:c9:f1: f6:d4:d5:ec:5c:88:e5:19:c1:2f:1b:0d:71:94:41:c2:9a:ef: 6f:84:f8:0f:09:da:e2:31:34:60:88:4f:61:d7:80:bb:a3:ac: 1c:88:df:01:e3:97:9f:b5:bc:e8:21:f5:92:ef:75:80:fe:af: 5d:0c:7b:8b:50:8c:71:55:14:af:03:ea:c0:ee:c2:2f:a1:58: 59:2b:d0:67:e0:7f:df:80:83:2a:5c:8e:0a:8f:ee:58:90:28: d8:b1:cc:b0:59:69:85:d5:27:66:05:1e:55:7f:14:79:35:57: b6:5e:55:0c:59:6c:c8:16:e8:c4:ce:d6:7e:37:7c:00:90:9f: b4:b0:1a:60:64:00:c8:10:75:a5:62:de:86:23:c4:b7:d8:3a: e9:78:ba:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVIEGVdCAXp784AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMzQ5ZGItNmMwYi00OWQ4LWFjZWItN2I0ODg4YTIy YjFkMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MDExY2JkM2MtMDZhOC00NGU1LWJkMWYtOTBlNjFhY2M0ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicul/O4LJkjkLJAvnisTq6wwcgJSNfk5e+1O 9bYFkYAK2iPPQyIOs5qOjn0ZS6QMXFgy407iEutAH8lxmpXcxKwgYdzZRrO8urNE yPyXbQcY+XfpoI7Cueli84U9jd1wUJKOi25Y/zJxGZHLCLC+TcoiarQXwLvGamA2 70+Lfhmp+LS3/3Lhm/fUDEv19jfeFu0iZuYpYFwrxOvpGN+eXI0T73l7dvho59/+ BfdziHY1scXNToVlxHYp/9CtO4v2G6Tlj/fESOcgl0k7bl75gmB3DepnqZM1HC+v tIGLwPq7D1QTvmnDyJhJVrrZWfsWxPDpWmB/gUQgirrag3bT5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL1OX1VQ+AhNc8OM3FjwdIQ3gVq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIz NDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4ODhhMjJiMWQvYzQyMzQ5ZGItNmMwYi00 OWQ4LWFjZWItN2I0ODg4YTIyYjFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQyMzQ5ZGItNmMwYi00OWQ4LWFj ZWItN2I0ODg4YTIyYjFkL2M0MjM0OWRiLTZjMGItNDlkOC1hY2ViLTdiNDg4OGEy MmIxZC5jcmwwHwYDVR0jBBgwFoAUwMMXJ3A9h/7fzpLNMnfWDBKkIJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIzNDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4 ODhhMjJiMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5s7k0QzOgIMkIOr2Tervd 1YqnjvO5cgmI26dlR2Ksfmy7ErVyvtvdlMQImWE1Ksw1ytylSFpGHQ3zIoGYdoBd ER3BgqnFbYyqNztCplfajjzzmKkUUyLWO6d+x4qMRk8Uefx2FnrobmeByfH21NXs XIjlGcEvGw1xlEHCmu9vhPgPCdriMTRgiE9h14C7o6wciN8B45eftbzoIfWS73WA /q9dDHuLUIxxVRSvA+rA7sIvoVhZK9Bn4H/fgIMqXI4Kj+5YkCjYscywWWmF1Sdm BR5VfxR5NVe2XlUMWWzIFujEztZ+N3wAkJ+0sBpgZADIEHWlYt6GI8S32DrpeLpL -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:40 2025 by rpki-client