$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: e5UKMjIYHlpqSO9QvVSKgIPNS8NAAhsXMRKPVU46+f0= Subject key identifier: EB:D2:DE:95:BE:2F:3D:6F:7D:A4:DD:26:2A:F4:27:98:52:DF:D6:AA Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584B974821674273ABEF3717CFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784BDD Signing time: Tue 21 Oct 2025 03:00:03 +0000 Manifest this update: Tue 21 Oct 2025 03:00:03 +0000 Manifest next update: Fri 24 Oct 2025 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: XUOwNj6JNJuj9Q/u2XD0ldvdIJDA89Eq0wlRQpKqCg0=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: AZxrxFcpOPlwncaJs8rFDIbZDAWVcw7AMuqcBqrqfVs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:48:21:67:42:73:ab:ef:37:17:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Oct 21 03:00:03 2025 GMT Not After : Oct 24 03:00:00 2025 GMT Subject: CN=6b76aaf5-1680-4093-a3e2-3c469e567bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:40:d3:13:0e:fe:a5:cd:be:28:5e:3b:2f:0f: f8:f0:18:e6:b9:fb:91:27:b7:62:1c:cc:00:85:a4: 4c:08:f4:1a:be:9d:b8:0b:cd:6c:1b:92:a4:6d:73: 33:ca:16:bf:5b:97:ad:d6:3e:f0:2f:bf:85:22:d7: 07:30:ed:5d:0d:26:4d:bb:31:a6:a6:0a:c8:cb:2e: 69:1c:2f:e3:72:a0:eb:83:6a:bc:8c:67:3e:31:da: df:7a:81:29:38:71:1e:4b:d1:3e:63:24:7b:d5:7d: 1f:66:93:8f:ca:ec:be:37:7b:be:45:89:4f:67:74: b2:a3:dc:46:9b:b2:84:78:49:ee:c2:60:69:e9:de: b9:10:1d:d6:ca:31:11:01:d1:45:88:9a:4e:55:e8: ad:9e:2f:24:e7:27:41:9c:a3:ca:14:8c:3e:73:5c: bd:43:7a:2d:51:2c:9f:98:d2:56:3c:a9:ee:d0:f8: a2:f5:1f:fc:de:53:c9:e4:da:62:5a:32:f7:94:1c: a1:e0:60:55:16:fc:12:1f:d4:70:93:5d:b7:ec:e0: 6b:59:a2:77:51:b2:42:ba:e1:80:70:37:e3:c5:0a: e4:0e:67:2a:5b:44:d6:12:73:de:5b:f0:43:12:5b: 13:cf:11:88:71:e3:73:a7:a5:b7:69:72:aa:00:e9: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:DE:95:BE:2F:3D:6F:7D:A4:DD:26:2A:F4:27:98:52:DF:D6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:67:b6:6b:74:f8:9f:82:0c:ec:32:5e:82:1e:1a:d8:55:f5: af:1c:1d:3a:b1:43:35:c3:eb:04:77:64:a1:79:5b:b1:8f:e1: e6:68:03:25:7d:19:f7:13:d4:8b:0e:08:2e:dc:55:3d:20:5d: e3:11:d6:d1:db:37:f5:66:b9:eb:96:ab:f0:a5:7b:4b:46:97: 01:3a:e2:f3:a8:67:87:b3:1c:f1:c0:9d:cc:9d:ff:32:c1:a0: 73:10:4e:72:60:aa:4b:1d:81:1a:c4:c9:89:ab:42:f3:48:c0: 7b:cb:2c:de:e9:eb:39:8d:d0:89:a3:d0:6a:c2:6b:d0:7a:83: ed:68:92:81:b0:c3:cf:8e:c5:dc:97:cb:21:a4:d8:6c:e9:a8: a5:b7:c2:b4:e2:8f:8b:c9:fa:5c:b6:ac:8f:9f:b0:e9:bb:0a: 6d:7c:59:bc:1e:e7:47:36:09:a8:01:57:fa:ed:45:36:da:06: 5b:25:75:54:3c:d8:97:66:47:ba:fe:69:56:70:02:78:4c:b0: 43:65:c2:23:5f:ea:bf:8f:09:23:5e:92:b2:a3:25:26:58:8b: 7f:29:bd:f5:a9:5a:44:3f:38:1e:b5:a6:52:b9:e7:e8:85:24: 91:20:25:e0:43:ed:a9:9e:75:75:39:38:e1:5d:e9:6b:a6:3e: bc:35:3d:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXSCFnQnOr7zcXz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI1MTAyMTAzMDAwM1oXDTI1MTAyNDAzMDAwMFowLzEtMCsGA1UEAxMk NmI3NmFhZjUtMTY4MC00MDkzLWEzZTItM2M0NjllNTY3YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60DTEw7+pc2+KF47Lw/48BjmufuRJ7diHMwA haRMCPQavp24C81sG5KkbXMzyha/W5et1j7wL7+FItcHMO1dDSZNuzGmpgrIyy5p HC/jcqDrg2q8jGc+MdrfeoEpOHEeS9E+YyR71X0fZpOPyuy+N3u+RYlPZ3Syo9xG m7KEeEnuwmBp6d65EB3WyjERAdFFiJpOVeitni8k5ydBnKPKFIw+c1y9Q3otUSyf mNJWPKnu0Pii9R/83lPJ5NpiWjL3lByh4GBVFvwSH9Rwk1237OBrWaJ3UbJCuuGA cDfjxQrkDmcqW0TWEnPeW/BDElsTzxGIceNzp6W3aXKqAOmQlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOvS3pW+Lz1vfaTdJir0J5hS39aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpZ7ZrdPifggzsMl6CHhrY VfWvHB06sUM1w+sEd2SheVuxj+HmaAMlfRn3E9SLDggu3FU9IF3jEdbR2zf1Zrnr lqvwpXtLRpcBOuLzqGeHsxzxwJ3Mnf8ywaBzEE5yYKpLHYEaxMmJq0LzSMB7yyze 6es5jdCJo9BqwmvQeoPtaJKBsMPPjsXcl8shpNhs6ailt8K04o+LyfpctqyPn7Dp uwptfFm8HudHNgmoAVf67UU22gZbJXVUPNiXZke6/mlWcAJ4TLBDZcIjX+q/jwkj XpKyoyUmWIt/Kb31qVpEPzgetaZSuefohSSRICXgQ+2pnnV1OTjhXelrpj68NT0x -----END CERTIFICATE-----Generated at Tue Oct 21 15:09:16 2025 by rpki-client