$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: QXFitQsOIUnnk2s6+NrGkxeth+9WpE869xlrrNq9XqA= Subject key identifier: 5F:5B:41:0A:AD:1C:C4:72:35:E9:40:66:A9:8C:6E:4D:D9:14:C9:D1 Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584BBFFEAACDF459A661A639AD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D6F9A Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: LdB/vg8mA5U4UfvYqgHvZ+pdRcVYxyfcjzJ+nHpWoAk=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: 6bwZK/Nj6uSBqlX87EWZiEo7Qgzzg0ECyVCDAH3V9Ss=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:aa:cd:f4:59:a6:61:a6:39:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=ddf95360-13fa-46db-9d15-e1ad6773a357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:a7:b7:25:6d:d1:3f:67:ef:5e:75:c3:a2: d9:c8:b9:43:b5:4e:ea:9c:4c:77:a7:f3:9d:45:92: a3:d8:c1:9c:58:81:ed:c3:58:76:00:53:1c:52:e2: ac:bc:42:e9:56:98:0b:76:46:39:22:93:63:59:c9: a8:1d:f6:ec:c5:b1:0d:6f:cf:20:98:d0:65:64:ed: 16:55:83:74:7a:c3:b1:09:7e:18:8a:cc:98:60:0d: 4b:a0:83:56:2e:5d:93:f2:80:23:90:44:29:2b:98: 43:e4:83:06:67:0a:88:8d:06:d3:24:dd:d1:08:73: d9:be:5b:73:d0:60:71:bb:61:99:fd:62:99:26:ae: 8f:dc:d9:98:d4:bd:fa:fc:75:1c:96:bc:d0:40:02: 8a:56:37:7b:91:37:83:24:f6:5d:6e:9b:9b:23:a2: 40:7f:87:0f:f4:0a:6a:2a:77:76:cd:4f:d8:45:39: de:b4:7f:b5:27:9f:f7:7d:fc:dd:97:4a:73:39:29: da:c6:a9:04:ce:a2:23:44:4c:5e:c4:f2:13:a9:2f: ed:7c:e9:ea:26:56:be:fe:d5:c1:97:21:ac:89:09: ec:d4:58:1a:52:b3:d8:29:da:e2:e3:b5:c3:46:1b: 0b:c3:9f:1e:6d:56:b2:03:68:d6:4e:eb:cc:de:ed: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:41:0A:AD:1C:C4:72:35:E9:40:66:A9:8C:6E:4D:D9:14:C9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:70:1a:16:d5:70:33:69:da:a2:5e:e1:b9:98:8e:c3:5f:2c: 96:25:18:95:e2:06:be:b8:a2:16:af:32:ec:be:5d:b9:40:76: 40:42:9d:fd:c1:41:f4:38:be:00:c2:0a:73:38:f9:3f:33:1d: 44:30:09:ae:d6:ed:be:de:1d:60:f9:3d:e8:2c:71:e5:d1:5b: 1e:a5:42:ec:54:88:f3:96:e0:b7:92:67:a2:05:9b:1e:5d:18: e9:8c:fe:e6:14:13:9e:4e:c5:7a:cb:47:d7:2f:fa:d1:39:85: 96:9c:d2:fc:47:ab:44:56:81:77:c9:20:d5:14:d7:45:be:e3: f4:79:e8:dc:f1:30:cc:fb:2a:f3:cd:32:21:24:81:66:18:9c: bb:84:58:67:30:96:20:25:02:14:12:d6:18:9e:42:1a:fb:4a: 27:9d:c8:a9:a2:38:30:f3:64:86:ad:93:99:e2:1e:87:33:ef: 40:47:56:55:b7:e5:fc:4c:b5:70:f5:71:a5:18:01:cb:f0:8e: 04:3f:75:34:2b:fc:b3:5e:59:0f:5c:d3:87:ed:cc:e5:1c:60: 92:25:ed:97:ee:29:19:e5:1c:c1:4a:3a:d6:12:c2:24:73:9d: c2:f3:0c:67:b5:11:ab:9e:66:94:92:16:b8:5e:db:c1:e4:3f: db:2f:1f:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qrN9FmmYaY5rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk ZGRmOTUzNjAtMTNmYS00NmRiLTlkMTUtZTFhZDY3NzNhMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJWntyVt0T9n7151w6LZyLlDtU7qnEx3p/Od RZKj2MGcWIHtw1h2AFMcUuKsvELpVpgLdkY5IpNjWcmoHfbsxbENb88gmNBlZO0W VYN0esOxCX4YisyYYA1LoINWLl2T8oAjkEQpK5hD5IMGZwqIjQbTJN3RCHPZvltz 0GBxu2GZ/WKZJq6P3NmY1L36/HUclrzQQAKKVjd7kTeDJPZdbpubI6JAf4cP9Apq Knd2zU/YRTnetH+1J5/3ffzdl0pzOSnaxqkEzqIjRExexPITqS/tfOnqJla+/tXB lyGsiQns1FgaUrPYKdri47XDRhsLw58ebVayA2jWTuvM3u1V3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF9bQQqtHMRyNelAZqmMbk3ZFMnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMcBoW1XAzadqiXuG5mI7D XyyWJRiV4ga+uKIWrzLsvl25QHZAQp39wUH0OL4AwgpzOPk/Mx1EMAmu1u2+3h1g +T3oLHHl0VsepULsVIjzluC3kmeiBZseXRjpjP7mFBOeTsV6y0fXL/rROYWWnNL8 R6tEVoF3ySDVFNdFvuP0eejc8TDM+yrzzTIhJIFmGJy7hFhnMJYgJQIUEtYYnkIa +0onncipojgw82SGrZOZ4h6HM+9AR1ZVt+X8TLVw9XGlGAHL8I4EP3U0K/yzXlkP XNOH7czlHGCSJe2X7ikZ5RzBSjrWEsIkc53C8wxntRGrnmaUkha4XtvB5D/bLx9U -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:28 2025 by rpki-client