$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft File: 4a7f2143-6131-414b-81ad-be960f2a78c1.mft (raw, json) Hash identifier: YFBao6l7ECBH1HFeO5b6m3ouv3Omdl7FQBpXKOyWLDI= Subject key identifier: 37:81:7A:6C:4C:15:51:A3:05:52:BB:93:63:60:2E:19:AC:F2:BF:30 Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Certificate serial: 010D0C9F4328584BBB1BEC95CE95797C46D29500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft Manifest number: 010D0C9F43285844E2031BA4799937C272278C82 Signing time: Sun 02 Nov 2025 23:00:03 +0000 Manifest this update: Sun 02 Nov 2025 23:00:03 +0000 Manifest next update: Wed 05 Nov 2025 23:00:00 +0000 Files and hashes: 1: 4a7f2143-6131-414b-81ad-be960f2a78c1.crl (hash: Ni37Z4XPQI9fcdrfUbv9OxdM06m9ZLssfrYnHwXcCx0=) 2: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (hash: O4JjloeBPfY8lHlEV1KNz7NGoFyA2K7jgr1lR1sUqpM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:1b:ec:95:ce:95:79:7c:46:d2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Validity Not Before: Nov 2 23:00:03 2025 GMT Not After : Nov 5 23:00:00 2025 GMT Subject: CN=2d0fb9be-50ce-4dd7-b3e3-374f80f11ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:16:b2:d8:a1:03:47:bb:75:82:6d:06:a1: 2b:11:a5:a7:d2:7a:66:07:f5:99:62:73:27:8e:a2: 76:1b:32:2a:c5:6d:11:29:19:1a:df:c5:b0:e9:84: a7:c0:d4:d6:16:ae:37:a0:a4:46:43:b2:ec:e6:9e: 85:c5:9a:49:91:13:4f:86:88:80:05:e4:26:37:0f: be:ae:a8:bc:8e:6c:b9:db:b2:b1:4e:cb:aa:c2:d4: d5:e6:2c:3c:58:e5:f5:d2:8f:34:22:db:7f:61:a6: 17:00:0a:08:1d:b1:3b:b5:d1:94:0d:ba:f2:fc:51: 0e:c0:7a:90:32:bf:ea:c9:64:b9:1b:68:ac:16:ca: 56:e8:dd:85:bd:f2:c1:9a:0a:c9:6c:79:46:17:5c: cd:53:29:7d:aa:c2:b6:c8:42:ff:7f:21:59:a7:c5: c1:f7:ff:e6:7b:6c:73:69:af:97:bf:0b:0f:cd:71: 3e:62:61:0e:30:d8:72:29:cf:d0:0d:24:f8:d3:5f: de:27:c0:66:87:33:96:6b:1f:6a:44:90:5d:77:12: 40:c0:ea:c2:b1:9c:df:c0:90:e3:0b:64:5d:f1:05: 2e:b5:bd:de:66:79:cb:cf:43:f7:ae:fb:c7:0d:9e: 67:cd:6b:cc:04:b2:86:95:87:49:ee:fc:a6:12:87: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:7A:6C:4C:15:51:A3:05:52:BB:93:63:60:2E:19:AC:F2:BF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl X509v3 Authority Key Identifier: keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1f:41:46:af:aa:9c:41:a0:79:84:a1:32:f2:53:cf:36:fc: 35:0d:8a:8a:4a:23:d0:d3:10:7d:3d:2d:7a:dd:12:47:db:17: 73:4f:80:ca:ad:04:28:ef:49:40:10:f4:ac:3a:a2:8f:f2:ca: 72:61:cc:0b:d1:52:39:ac:7b:cf:3c:1d:1d:10:a6:13:e6:01: 78:7d:fb:51:8d:84:f0:56:be:8b:5c:d1:21:52:f4:f5:ce:00: 09:b1:98:14:53:e2:ca:aa:ac:06:75:ff:24:78:33:be:c9:5d: c5:38:86:66:09:17:c5:38:17:09:4d:90:42:93:0e:05:0d:2e: 62:57:3e:4f:c9:85:e8:bb:4b:8a:4e:f4:05:ec:c5:c4:99:f6: 84:b5:1c:1d:2e:eb:bb:5c:18:70:3b:b8:36:83:f9:40:9f:22: 02:ba:ba:6c:09:51:94:09:d2:0d:0a:b6:48:7d:63:ab:b8:45: e0:21:f1:3b:71:40:09:12:19:4a:88:a9:e9:4c:35:c4:74:50: fd:69:47:90:be:14:dc:72:7f:17:37:0d:7e:f6:ca:72:fb:0d: 4f:70:36:ac:fa:90:2b:6a:25:cd:12:3e:3a:3f:3c:c2:1f:70: 88:44:4f:77:aa:2a:f8:a6:80:e5:7b:fc:30:ea:2b:cc:0d:b7: 7c:f4:a3:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu7G+yVzpV5fEbSlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZjIxNDMtNjEzMS00MTRiLTgxYWQtYmU5NjBmMmE3 OGMxMB4XDTI1MTEwMjIzMDAwM1oXDTI1MTEwNTIzMDAwMFowLzEtMCsGA1UEAxMk MmQwZmI5YmUtNTBjZS00ZGQ3LWIzZTMtMzc0ZjgwZjExZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6IWstihA0e7dYJtBqErEaWn0npmB/WZYnMn jqJ2GzIqxW0RKRka38Ww6YSnwNTWFq43oKRGQ7Ls5p6FxZpJkRNPhoiABeQmNw++ rqi8jmy527KxTsuqwtTV5iw8WOX10o80Itt/YaYXAAoIHbE7tdGUDbry/FEOwHqQ Mr/qyWS5G2isFspW6N2FvfLBmgrJbHlGF1zNUyl9qsK2yEL/fyFZp8XB9//me2xz aa+XvwsPzXE+YmEOMNhyKc/QDST401/eJ8BmhzOWax9qRJBddxJAwOrCsZzfwJDj C2Rd8QUutb3eZnnLz0P3rvvHDZ5nzWvMBLKGlYdJ7vymEofuLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDeBemxMFVGjBVK7k2NgLhms8r8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm MjE0My02MTMxLTQxNGItODFhZC1iZTk2MGYyYTc4YzEvNGE3ZjIxNDMtNjEzMS00 MTRiLTgxYWQtYmU5NjBmMmE3OGMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZjIxNDMtNjEzMS00MTRiLTgx YWQtYmU5NjBmMmE3OGMxLzRhN2YyMTQzLTYxMzEtNDE0Yi04MWFkLWJlOTYwZjJh NzhjMS5jcmwwHwYDVR0jBBgwFoAUasjFEWRe7Olu1mzcnOqP3x4E9OYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmMjE0My02MTMxLTQxNGItODFhZC1iZTk2 MGYyYTc4YzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIH0FGr6qcQaB5hKEy8lPP Nvw1DYqKSiPQ0xB9PS163RJH2xdzT4DKrQQo70lAEPSsOqKP8spyYcwL0VI5rHvP PB0dEKYT5gF4fftRjYTwVr6LXNEhUvT1zgAJsZgUU+LKqqwGdf8keDO+yV3FOIZm CRfFOBcJTZBCkw4FDS5iVz5PyYXou0uKTvQF7MXEmfaEtRwdLuu7XBhwO7g2g/lA nyICurpsCVGUCdINCrZIfWOruEXgIfE7cUAJEhlKiKnpTDXEdFD9aUeQvhTccn8X Nw1+9spy+w1PcDas+pAraiXNEj46PzzCH3CIRE93qir4poDle/ww6ivMDbd89KPu -----END CERTIFICATE-----Generated at Mon Nov 3 01:47:50 2025 by rpki-client