$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft File: c43d9850-d596-4753-8190-8f123f903f5a.mft (raw, json) Hash identifier: xXg/dDEjJ5ckXfhY25M+J4aoK3pV+S6hbBj38YLmuyk= Subject key identifier: E9:B7:A9:F4:EC:0F:95:0C:4D:E1:B5:EB:D1:C3:2E:F4:3A:77:E5:76 Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F Certificate issuer: /CN=c43d9850-d596-4753-8190-8f123f903f5a Certificate serial: 010D0C9F4328584BBD33FFBDA731343ECAB07E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft Manifest number: 010D0C9F4328584B7A377BED36F79EE9AE8D6F99 Signing time: Mon 03 Nov 2025 17:00:09 +0000 Manifest this update: Mon 03 Nov 2025 17:00:09 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 93b01601-df72-3eaf-a64a-71145f132bfa.roa (hash: LdB/vg8mA5U4UfvYqgHvZ+pdRcVYxyfcjzJ+nHpWoAk=) 2: c43d9850-d596-4753-8190-8f123f903f5a.crl (hash: JoyiXQkpaMfox2K+ZBwjNLioOof+ldn7vB+lYMUrxSY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:33:ff:bd:a7:31:34:3e:ca:b0:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a Validity Not Before: Nov 3 17:00:09 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=d403c5d5-e4bd-4fa1-b0c5-8823a0e357d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:4c:67:f8:aa:6d:7f:cf:d6:23:5e:5c:e8: 95:41:42:f1:9c:a1:ff:25:b1:1b:b1:55:63:a8:20: 2b:fd:dd:de:a5:d8:d6:86:b5:fa:4a:5f:ef:65:70: 5c:20:65:36:49:16:06:03:95:8c:ed:69:7f:23:45: e4:56:05:6a:0e:80:1a:16:5b:d1:2d:14:62:95:27: 74:22:55:bc:7a:c6:2c:3d:4b:f0:af:a7:16:e0:12: 0e:5b:81:8f:3a:98:ec:1b:e6:18:72:65:f6:93:b7: ca:77:91:c9:06:43:08:bb:95:d2:77:17:76:de:ab: 66:6f:de:0a:f1:25:91:e5:5d:b8:82:07:7f:a5:eb: 84:01:53:1d:2f:94:7d:14:f7:ea:c4:2d:79:b9:01: 61:24:aa:08:d3:d3:9e:b8:b5:2c:02:19:fc:72:89: 4d:42:05:59:50:e2:4b:13:42:c6:00:5a:96:5d:af: 05:2d:dc:4d:12:6d:d2:e7:ef:54:39:9f:31:b6:55: 36:ba:40:75:af:36:21:7c:57:46:7b:21:56:11:5e: ec:63:91:6b:9c:b9:64:13:53:ac:58:93:e7:f3:d7: 53:66:8d:09:85:e9:06:53:34:f2:fa:8b:55:70:06: 22:b2:d6:70:ab:63:9c:7d:a2:41:f1:15:60:8e:a9: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B7:A9:F4:EC:0F:95:0C:4D:E1:B5:EB:D1:C3:2E:F4:3A:77:E5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl X509v3 Authority Key Identifier: keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bf:28:26:48:6d:ef:dc:81:fb:7d:1c:de:20:7e:61:8c:3e: 94:04:25:d2:69:75:32:a5:c6:8b:45:83:cd:74:53:1d:0f:26: a7:6d:40:04:96:7a:67:d8:44:27:30:78:c5:a2:fa:84:57:3d: bc:de:bb:07:35:35:fb:4d:66:20:ee:07:39:eb:26:99:9d:f8: 27:a2:3a:76:3a:f5:5f:03:26:43:f1:b8:8f:65:9b:5c:3e:2b: 65:fd:cc:39:92:32:f3:e9:bf:65:ef:bd:09:9e:ed:1a:1d:31: ce:99:2a:88:3f:fa:49:ea:fc:95:06:1f:27:a1:60:71:c5:02: 4f:f1:f2:ee:28:4b:3b:a0:fd:03:57:d8:24:e6:71:aa:53:12: 9f:ee:4d:62:10:e0:9e:ab:5e:da:8b:fc:75:f7:cb:ff:e4:2e: 9c:70:0a:be:70:b3:99:f9:39:24:de:c0:7b:58:df:f7:2d:cf: 6e:a1:d8:31:a0:e2:22:88:dc:2b:34:87:cc:58:12:8e:b6:3f: 2e:34:34:2c:ae:95:7a:e3:58:13:aa:ea:4a:01:e1:f9:2d:fa: 4e:9c:83:d9:e4:fa:98:76:28:92:be:f5:f1:f8:2d:03:12:02: 19:61:2a:76:a2:61:2f:9f:10:4d:58:28:91:9e:ef:70:86:42: b0:23:bc:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9M/+9pzE0PsqwfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzZDk4NTAtZDU5Ni00NzUzLTgxOTAtOGYxMjNmOTAz ZjVhMB4XDTI1MTEwMzE3MDAwOVoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk ZDQwM2M1ZDUtZTRiZC00ZmExLWIwYzUtODgyM2EwZTM1N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnRMZ/iqbX/P1iNeXOiVQULxnKH/JbEbsVVj qCAr/d3epdjWhrX6Sl/vZXBcIGU2SRYGA5WM7Wl/I0XkVgVqDoAaFlvRLRRilSd0 IlW8esYsPUvwr6cW4BIOW4GPOpjsG+YYcmX2k7fKd5HJBkMIu5XSdxd23qtmb94K 8SWR5V24ggd/peuEAVMdL5R9FPfqxC15uQFhJKoI09OeuLUsAhn8colNQgVZUOJL E0LGAFqWXa8FLdxNEm3S5+9UOZ8xtlU2ukB1rzYhfFdGeyFWEV7sY5FrnLlkE1Os WJPn89dTZo0JhekGUzTy+otVcAYistZwq2OcfaJB8RVgjqnLIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOm3qfTsD5UMTeG169HDLvQ6d+V2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNk OTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEyM2Y5MDNmNWEvYzQzZDk4NTAtZDU5Ni00 NzUzLTgxOTAtOGYxMjNmOTAzZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQzZDk4NTAtZDU5Ni00NzUzLTgx OTAtOGYxMjNmOTAzZjVhL2M0M2Q5ODUwLWQ1OTYtNDc1My04MTkwLThmMTIzZjkw M2Y1YS5jcmwwHwYDVR0jBBgwFoAU7pVBU5XXCqXb8FoWSdyzUlfYWg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDNkOTg1MC1kNTk2LTQ3NTMtODE5MC04ZjEy M2Y5MDNmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/vygmSG3v3IH7fRzeIH5h jD6UBCXSaXUypcaLRYPNdFMdDyanbUAElnpn2EQnMHjFovqEVz283rsHNTX7TWYg 7gc56yaZnfgnojp2OvVfAyZD8biPZZtcPitl/cw5kjLz6b9l770Jnu0aHTHOmSqI P/pJ6vyVBh8noWBxxQJP8fLuKEs7oP0DV9gk5nGqUxKf7k1iEOCeq17ai/x198v/ 5C6ccAq+cLOZ+Tkk3sB7WN/3Lc9uodgxoOIiiNwrNIfMWBKOtj8uNDQsrpV641gT qupKAeH5LfpOnIPZ5PqYdiiSvvXx+C0DEgIZYSp2omEvnxBNWCiRnu9whkKwI7yS -----END CERTIFICATE-----Generated at Tue Nov 4 01:01:57 2025 by rpki-client