$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft File: 452d8948-a48b-4a64-bb88-5c289408944c.mft (raw, json) Hash identifier: tR/tqAzepCtyjSLQoq9v4rd/fQGheNiEjaxxV2JvWX0= Subject key identifier: 9D:8B:93:8A:CC:23:8B:F6:A8:30:27:3C:86:EB:91:CC:66:2E:F3:AB Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63 Certificate issuer: /CN=452d8948-a48b-4a64-bb88-5c289408944c Certificate serial: 010D0C9F4328584BB93F76E574C83E3DA893AD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft Manifest number: 010D0C9F4328584073A845E2B75342A457BB9C22 Signing time: Sun 02 Nov 2025 07:00:03 +0000 Manifest this update: Sun 02 Nov 2025 07:00:03 +0000 Manifest next update: Tue 04 Nov 2025 07:00:00 +0000 Files and hashes: 1: 452d8948-a48b-4a64-bb88-5c289408944c.crl (hash: mSP51+4cSTd0ZZQDgOGJp6ucebKU2pd3xMcj8p1Pd1c=) 2: 97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (hash: sNJc1Olt8vOzK3WTbH/IMxg4wzx/Os/eI0oIhrgtn+I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:3f:76:e5:74:c8:3e:3d:a8:93:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c Validity Not Before: Nov 2 07:00:03 2025 GMT Not After : Nov 4 07:00:00 2025 GMT Subject: CN=66a6ad3e-58be-48f5-82fb-23d7869350ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:30:e6:65:88:8b:87:6f:9a:0c:0c:a5:d0: 46:5c:0b:8d:7e:68:4e:48:87:42:9a:58:9b:b9:8a: 66:b7:5c:6c:6f:93:90:9f:09:2d:67:b4:f0:25:c1: 5b:11:85:c0:b7:6f:55:58:58:b6:92:de:08:7c:4f: 77:34:5f:98:94:1e:a0:c2:5c:34:b1:3f:32:77:1e: e8:dd:69:ac:2a:eb:db:b6:82:36:0e:32:39:2b:30: d0:82:ad:a4:91:37:d1:8e:db:61:f0:d2:f5:2c:5a: 1c:bc:85:ab:ac:dd:93:7e:38:ec:12:04:e3:0a:6d: c1:26:3a:2f:e6:6e:32:77:ea:03:45:fe:5a:8e:f8: 5b:9d:f9:54:cf:48:fd:a7:a3:f7:f2:8e:10:39:c7: 00:2c:6e:dd:2b:e2:23:d9:ee:d1:58:e7:22:10:0c: 2b:c8:1e:e9:a1:2b:bc:54:69:fa:b0:6f:b5:2c:2f: 74:cc:51:0f:96:80:d1:e5:81:32:56:ff:c3:0d:a0: 0a:74:af:11:0a:4f:60:39:52:8b:f7:53:a3:29:98: 59:eb:4c:e8:c4:37:ac:fa:b9:f7:41:c3:d1:c0:93: 8f:4a:aa:34:36:48:9b:b2:00:74:24:84:ba:33:4e: 48:bd:67:1a:97:a7:d4:50:23:c8:3b:40:26:f1:2a: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8B:93:8A:CC:23:8B:F6:A8:30:27:3C:86:EB:91:CC:66:2E:F3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl X509v3 Authority Key Identifier: keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c0:06:b1:9f:a0:89:21:40:f7:0a:77:35:0e:e7:e9:af:b5: c2:e9:b8:bc:5d:79:61:28:2a:44:e9:86:27:b4:13:e5:5a:4f: 6b:8e:4e:92:7f:66:f4:04:5b:28:b7:d7:b8:72:66:be:8e:cd: fa:51:42:2f:5e:7e:b5:7e:a5:d9:89:63:14:e2:8d:ca:fb:d6: 95:aa:da:85:29:40:17:de:ef:52:15:47:94:f7:19:44:1f:fe: c3:8a:ef:db:8b:50:be:c0:0e:45:3a:38:4c:b2:1d:1c:07:2f: 08:d5:9d:f3:50:85:7f:45:a3:2c:dc:64:47:3c:7a:a1:18:d3: 90:be:37:dd:6c:d1:97:0e:9c:58:94:16:52:3d:42:59:f1:95: 47:55:69:c3:72:e1:0c:9a:96:80:7f:d2:b4:ed:d9:dd:62:f1: f8:0d:eb:86:bc:61:14:bc:7a:c7:34:96:34:73:9b:58:66:dc: 9b:31:b1:25:cf:66:20:35:a5:e1:ba:90:85:ec:6c:c9:f9:4b: 53:b4:eb:c6:f0:48:19:11:3c:3e:6a:a8:74:a6:1d:1e:11:2e: cc:45:82:14:36:e6:30:32:2b:a9:e4:1e:f0:f7:51:db:4e:7d: 21:65:57:b2:ce:84:e4:c0:f2:24:83:62:27:dd:67:b3:30:73: ff:ac:05:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5P3bldMg+PaiTrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUyZDg5NDgtYTQ4Yi00YTY0LWJiODgtNWMyODk0MDg5 NDRjMB4XDTI1MTEwMjA3MDAwM1oXDTI1MTEwNDA3MDAwMFowLzEtMCsGA1UEAxMk NjZhNmFkM2UtNThiZS00OGY1LTgyZmItMjNkNzg2OTM1MGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRww5mWIi4dvmgwMpdBGXAuNfmhOSIdCmlib uYpmt1xsb5OQnwktZ7TwJcFbEYXAt29VWFi2kt4IfE93NF+YlB6gwlw0sT8ydx7o 3WmsKuvbtoI2DjI5KzDQgq2kkTfRjtth8NL1LFocvIWrrN2TfjjsEgTjCm3BJjov 5m4yd+oDRf5ajvhbnflUz0j9p6P38o4QOccALG7dK+Ij2e7RWOciEAwryB7poSu8 VGn6sG+1LC90zFEPloDR5YEyVv/DDaAKdK8RCk9gOVKL91OjKZhZ60zoxDes+rn3 QcPRwJOPSqo0NkibsgB0JIS6M05IvWcal6fUUCPIO0Am8SpccQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ2Lk4rMI4v2qDAnPIbrkcxmLvOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTJk ODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4OTQwODk0NGMvNDUyZDg5NDgtYTQ4Yi00 YTY0LWJiODgtNWMyODk0MDg5NDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDUyZDg5NDgtYTQ4Yi00YTY0LWJi ODgtNWMyODk0MDg5NDRjLzQ1MmQ4OTQ4LWE0OGItNGE2NC1iYjg4LTVjMjg5NDA4 OTQ0Yy5jcmwwHwYDVR0jBBgwFoAUKsewww4das+JnT01pxsrYbZMN2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTJkODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4 OTQwODk0NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQwAaxn6CJIUD3Cnc1Dufp r7XC6bi8XXlhKCpE6YYntBPlWk9rjk6Sf2b0BFsot9e4cma+js36UUIvXn61fqXZ iWMU4o3K+9aVqtqFKUAX3u9SFUeU9xlEH/7Diu/bi1C+wA5FOjhMsh0cBy8I1Z3z UIV/RaMs3GRHPHqhGNOQvjfdbNGXDpxYlBZSPUJZ8ZVHVWnDcuEMmpaAf9K07dnd YvH4DeuGvGEUvHrHNJY0c5tYZtybMbElz2YgNaXhupCF7GzJ+UtTtOvG8EgZETw+ aqh0ph0eES7MRYIUNuYwMiup5B7w91HbTn0hZVeyzoTkwPIkg2In3WezMHP/rAWF -----END CERTIFICATE-----Generated at Mon Nov 3 07:17:23 2025 by rpki-client