$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft File: a99940f3-ed95-444a-a18b-6d4d902f65bd.mft (raw, json) Hash identifier: D5cbX4hTZ8SlNY5Air0+Wd/d2dj35Pn9DsvxDTEEmo0= Subject key identifier: 7C:5A:3F:9A:70:E7:6E:68:49:21:E8:31:CD:0B:69:83:2A:FA:20:8E Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 Certificate issuer: /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Certificate serial: 010D0C9F4328584BBD1630FBF692474DAF821A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft Manifest number: 010D0C9F4328584B880D2253A526F32E53D32754 Signing time: Mon 03 Nov 2025 16:00:08 +0000 Manifest this update: Mon 03 Nov 2025 16:00:08 +0000 Manifest next update: Wed 05 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (hash: FkDMr7ELSp8hovwXRN2srvEmX1aYdYGncRC8qsrnEJY=) 2: a99940f3-ed95-444a-a18b-6d4d902f65bd.crl (hash: iXR8wzH+jIYEPhEIcIcpaNH8fxSwHxukCkpdyVtzV1c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:16:30:fb:f6:92:47:4d:af:82:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Validity Not Before: Nov 3 16:00:08 2025 GMT Not After : Nov 5 16:00:00 2025 GMT Subject: CN=698dd45a-27f9-44a7-85f7-52e6f9d4a0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:a6:c4:ee:31:7e:1e:2e:a3:75:21:31:53: 48:de:c6:ef:2f:98:0a:d4:64:64:b6:04:0a:15:35: f3:7b:04:ec:af:12:0f:1a:51:18:3d:06:5f:fd:f6: 44:1d:8f:22:87:c3:ac:0d:4b:36:19:06:ac:0a:2e: 1e:eb:50:72:91:56:16:80:43:75:e1:55:dc:27:be: 89:6c:d9:8b:8b:1e:d2:a3:ef:d9:da:29:4e:5f:7d: 6c:d6:d9:b2:87:05:27:60:0e:66:78:58:61:da:f7: c6:29:0f:5d:c9:2c:ef:8e:e2:76:db:4a:02:12:a6: 1c:69:24:1c:2d:71:53:3d:66:85:04:e8:bb:2b:57: c0:a6:14:24:59:08:e3:d3:a8:45:0a:37:38:d8:b0: 62:dc:ab:10:34:54:93:7a:80:38:19:61:89:a7:f6: bf:fe:ac:6b:1b:da:1a:7f:7f:2e:a1:41:5b:1c:c7: 78:1d:f4:93:5c:0d:cb:b5:b2:27:91:b4:a7:c0:46: 6a:8f:16:22:40:e3:95:e7:b6:9f:1a:00:97:a0:3b: 5d:32:79:d5:59:2d:4a:84:f5:ab:4d:a2:46:1e:cf: 67:d7:a4:36:da:85:92:4e:81:25:c5:95:0f:86:b5: ce:c8:43:c0:45:65:04:cd:1a:21:77:c4:ca:2c:dd: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5A:3F:9A:70:E7:6E:68:49:21:E8:31:CD:0B:69:83:2A:FA:20:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl X509v3 Authority Key Identifier: keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:41:47:a1:5f:70:61:cc:16:e4:be:42:60:8f:7a:71:2c:ce: 75:40:5b:39:37:f7:73:b4:6d:8e:8b:c5:be:39:8a:19:fa:4e: f6:ba:00:0b:33:30:bf:11:36:ae:dd:4b:aa:84:40:0a:52:73: 10:c9:82:1d:c9:d6:6f:28:5c:cf:36:be:2e:89:22:4f:0d:a8: 37:ea:e7:76:4a:68:09:d9:2d:15:f1:19:88:8d:5c:7f:a6:69: bf:80:13:5c:21:1b:54:27:53:2b:8c:1e:c3:3c:5a:19:39:f7: 35:e7:e5:ec:1d:53:17:39:7d:c6:f5:4a:06:fa:b7:04:a3:81: 9d:bf:f2:13:0e:14:a0:d0:d7:7b:2f:a6:6b:7e:95:7f:39:f2: 57:f3:ef:4e:60:75:8e:33:9b:17:bf:dd:fc:3f:51:32:bf:12: 55:88:77:1f:92:85:54:00:0d:43:8b:6f:2e:6b:72:ba:13:46: a5:c0:66:47:8e:df:6f:59:b4:3b:b4:ad:0c:31:cf:8c:f0:3c: 2d:ed:fe:d4:db:25:af:0d:27:20:7f:93:b2:c0:2b:33:f9:5f: 22:90:80:27:5c:7d:7f:91:fb:04:9a:a2:e5:56:e4:88:43:39: 5d:66:3d:f3:7f:c5:3d:8e:c6:b0:52:3d:a5:c7:1e:5f:d1:18: 15:a1:6f:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9FjD79pJHTa+CGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5OTQwZjMtZWQ5NS00NDRhLWExOGItNmQ0ZDkwMmY2 NWJkMB4XDTI1MTEwMzE2MDAwOFoXDTI1MTEwNTE2MDAwMFowLzEtMCsGA1UEAxMk Njk4ZGQ0NWEtMjdmOS00NGE3LTg1ZjctNTJlNmY5ZDRhMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcamxO4xfh4uo3UhMVNI3sbvL5gK1GRktgQK FTXzewTsrxIPGlEYPQZf/fZEHY8ih8OsDUs2GQasCi4e61BykVYWgEN14VXcJ76J bNmLix7So+/Z2ilOX31s1tmyhwUnYA5meFhh2vfGKQ9dySzvjuJ220oCEqYcaSQc LXFTPWaFBOi7K1fAphQkWQjj06hFCjc42LBi3KsQNFSTeoA4GWGJp/a//qxrG9oa f38uoUFbHMd4HfSTXA3LtbInkbSnwEZqjxYiQOOV57afGgCXoDtdMnnVWS1KhPWr TaJGHs9n16Q22oWSToElxZUPhrXOyEPARWUEzRohd8TKLN0x1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHxaP5pw525oSSHoMc0LaYMq+iCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5 NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRkOTAyZjY1YmQvYTk5OTQwZjMtZWQ5NS00 NDRhLWExOGItNmQ0ZDkwMmY2NWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk5OTQwZjMtZWQ5NS00NDRhLWEx OGItNmQ0ZDkwMmY2NWJkL2E5OTk0MGYzLWVkOTUtNDQ0YS1hMThiLTZkNGQ5MDJm NjViZC5jcmwwHwYDVR0jBBgwFoAUf57IjbFfMlfRP/ECGija1oY8VDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRk OTAyZjY1YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVQUehX3BhzBbkvkJgj3px LM51QFs5N/dztG2Oi8W+OYoZ+k72ugALMzC/ETau3UuqhEAKUnMQyYIdydZvKFzP Nr4uiSJPDag36ud2SmgJ2S0V8RmIjVx/pmm/gBNcIRtUJ1MrjB7DPFoZOfc15+Xs HVMXOX3G9UoG+rcEo4Gdv/ITDhSg0Nd7L6ZrfpV/OfJX8+9OYHWOM5sXv938P1Ey vxJViHcfkoVUAA1Di28ua3K6E0alwGZHjt9vWbQ7tK0MMc+M8Dwt7f7U2yWvDScg f5OywCsz+V8ikIAnXH1/kfsEmqLlVuSIQzldZj3zf8U9jsawUj2lxx5f0RgVoW/c -----END CERTIFICATE-----Generated at Tue Nov 4 09:04:11 2025 by rpki-client