$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft File: c42e23f5-032b-4670-8e05-b4b0477e4388.mft (raw, json) Hash identifier: th15ee73VxQ8PfNuYmiinjhxUGNBLUBGaukwNvY/ubA= Subject key identifier: BF:F3:E3:76:C2:1E:F8:69:4C:10:CD:9A:7F:24:CA:82:D4:D4:1F:40 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584BBD1636DA14517F1901F87BF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft Manifest number: 010D0C9F4328584389B3BAF0D09E548527ADC304 Signing time: Mon 03 Nov 2025 16:00:08 +0000 Manifest this update: Mon 03 Nov 2025 16:00:08 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (hash: v5hty6O4OLmJuXOGtOpdoSTLiUCfwHbEDSKMl/c5XL0=) 2: c42e23f5-032b-4670-8e05-b4b0477e4388.crl (hash: qhEbPn23TznhxfwG2UxMPzRiUL8m5oVPx4kzevJztRI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:16:36:da:14:51:7f:19:01:f8:7b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Nov 3 16:00:08 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=d2d1f36b-cda5-43cc-87c8-031aa6d225be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:67:ef:68:dd:5d:01:ea:7e:a9:76:94:8b: fc:68:a4:36:76:4b:42:83:65:d9:1b:fa:8c:5c:96: 21:1d:45:ea:4e:33:f1:e1:8f:bf:de:bb:f5:7f:35: c5:ed:c8:d3:5f:2b:6a:b1:34:12:e9:ad:bb:cd:65: c9:5b:4f:75:23:58:71:20:8f:4d:d2:48:a4:c7:40: 01:51:4c:4c:74:e4:cc:61:a3:fc:e8:b6:e1:96:20: aa:8f:ab:c9:ff:6f:25:7f:ce:9f:87:72:91:3a:6b: 85:6c:43:05:c7:c2:78:a2:ba:bc:15:ab:61:50:79: f4:4f:28:fb:56:0b:7e:c6:7f:2b:6c:30:a1:22:cd: 82:59:a2:6a:e0:3e:24:55:0e:8e:4e:9d:09:14:05: 26:0b:a7:9a:8f:c7:e4:c7:e6:d8:f4:dc:65:a2:cd: ea:53:d9:35:e3:04:a9:7b:e0:8b:b5:ef:8a:2e:f2: 8f:cb:8c:76:93:23:ad:82:49:8c:71:98:96:6a:83: 01:fe:87:9d:c2:e4:50:5f:89:c1:d8:54:8f:a2:76: b5:82:71:c8:a8:4c:45:d4:20:e0:a9:24:1f:94:93: f0:6e:ec:a5:3f:1e:42:5c:17:18:f9:09:fc:06:56: 58:9c:c5:2d:6e:76:07:49:44:77:93:c5:29:f9:06: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:E3:76:C2:1E:F8:69:4C:10:CD:9A:7F:24:CA:82:D4:D4:1F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:58:72:da:60:56:27:ef:12:99:f7:08:7d:70:31:bd:b7:b3: b8:95:ef:d6:ef:67:f3:c3:db:3d:50:a3:1d:8e:11:1b:77:a2: 88:06:29:f4:e7:18:d8:78:bf:80:df:8e:6f:8b:ea:d8:93:7f: 2e:ca:7d:29:f6:0b:d8:aa:53:50:a4:d0:75:75:c1:bc:00:cd: 1f:e3:bf:11:ce:c3:52:fe:2f:ee:53:6c:28:38:bb:ec:e5:29: 00:43:8a:f5:f3:c4:e6:f1:5e:24:32:68:9b:7b:e4:91:d2:07: c2:cd:2b:50:6b:82:80:03:94:14:65:22:3b:e1:0c:db:cf:d5: 0b:cf:47:5f:82:51:cb:d1:18:64:c7:96:21:86:12:04:ca:32: 27:2d:e3:a4:ed:f8:2d:cb:a6:73:bd:c6:8d:d0:46:cc:00:e6: 16:8d:13:c1:09:21:a8:e8:b9:7b:1a:42:6b:12:7f:0c:20:32: fd:cd:93:d3:7e:37:ee:d9:92:3c:1f:1a:c0:fc:16:6e:88:03: 4f:67:0e:1a:c7:8e:14:17:c6:be:bd:03:40:bc:73:d4:93:16: 01:d8:b7:cc:24:d8:25:22:1b:2a:ba:b1:8f:e3:32:ac:67:08: 4f:5e:bc:b6:be:39:48:c2:c5:28:a9:d8:9b:91:55:c4:b1:60: ec:6d:58:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9FjbaFFF/GQH4e/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI1MTEwMzE2MDAwOFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk ZDJkMWYzNmItY2RhNS00M2NjLTg3YzgtMDMxYWE2ZDIyNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNRn72jdXQHqfql2lIv8aKQ2dktCg2XZG/qM XJYhHUXqTjPx4Y+/3rv1fzXF7cjTXytqsTQS6a27zWXJW091I1hxII9N0kikx0AB UUxMdOTMYaP86LbhliCqj6vJ/28lf86fh3KROmuFbEMFx8J4orq8FathUHn0Tyj7 Vgt+xn8rbDChIs2CWaJq4D4kVQ6OTp0JFAUmC6eaj8fkx+bY9Nxlos3qU9k14wSp e+CLte+KLvKPy4x2kyOtgkmMcZiWaoMB/oedwuRQX4nB2FSPona1gnHIqExF1CDg qSQflJPwbuylPx5CXBcY+Qn8BlZYnMUtbnYHSUR3k8Up+QaONwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL/z43bCHvhpTBDNmn8kyoLU1B9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvYzQyZTIzZjUtMDMyYi00 NjcwLThlMDUtYjRiMDQ3N2U0Mzg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeWHLaYFYn7xKZ9wh9cDG9 t7O4le/W72fzw9s9UKMdjhEbd6KIBin05xjYeL+A345vi+rYk38uyn0p9gvYqlNQ pNB1dcG8AM0f478RzsNS/i/uU2woOLvs5SkAQ4r188Tm8V4kMmibe+SR0gfCzStQ a4KAA5QUZSI74Qzbz9ULz0dfglHL0Rhkx5YhhhIEyjInLeOk7fgty6ZzvcaN0EbM AOYWjRPBCSGo6Ll7GkJrEn8MIDL9zZPTfjfu2ZI8HxrA/BZuiANPZw4ax44UF8a+ vQNAvHPUkxYB2LfMJNglIhsqurGP4zKsZwhPXry2vjlIwsUoqdibkVXEsWDsbVgU -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:24 2025 by rpki-client