$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: PzMrUdATVYZbOGK7iXsLLRyu06Chs5GY6pNYQkFHcSU= Subject key identifier: 12:13:EA:D6:A6:26:38:A8:8A:49:D3:32:78:C0:AB:19:60:D1:B0:F0 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584B74D9B3B61ADD9F2BD4CDF540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE2AB Signing time: Wed 08 Oct 2025 19:00:03 +0000 Manifest this update: Wed 08 Oct 2025 19:00:03 +0000 Manifest next update: Fri 10 Oct 2025 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: Qbqyvf5xqr2qPgRQJDJCGjvOMMQr3AUfhX6E4cMt3qQ=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: v9++3xdNs57HL24qveWpqoBqEGZr6WeV+gqMI6kO1uc=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: 5P5L5lTYY1COC8Xeyc4Y50HnMLWG9dZKKDpU+tXDWfI=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: W6/z3Jq7T/aNkq+NPFwqopLSJ3/Eh2n1hr41H+sNzEo=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: OgsLzfYUbvf4m2ISbbvAcrsOXWhRazzYX7iwa6kKZi4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:d9:b3:b6:1a:dd:9f:2b:d4:cd:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Oct 8 19:00:03 2025 GMT Not After : Oct 10 19:00:00 2025 GMT Subject: CN=e4f64cfd-1c82-4e82-abd0-545e8431f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:35:2c:ad:a0:a6:ab:35:8f:63:b6:d5:1e: 8b:16:5b:3b:20:30:79:43:6d:e1:22:50:7e:2d:1f: cb:ef:5c:24:d7:c9:a6:98:84:2e:73:c5:f3:f8:77: 60:48:a2:51:4e:ae:b3:d5:7f:7d:6a:74:49:14:08: 53:ba:fc:8d:5b:cb:1e:f4:f9:3b:07:f8:c0:03:c7: 24:6c:9c:c4:b6:06:d0:8a:13:46:9f:4a:ea:64:88: 99:82:d6:25:0c:5f:b8:04:a0:65:8e:c1:96:f8:cb: 1c:c8:30:7a:40:27:4d:c5:77:20:c5:69:36:30:5a: af:ed:75:62:e4:54:d4:cc:78:40:10:70:56:3a:d0: f4:f0:2e:6e:ec:b6:57:dc:2e:5c:45:49:74:fa:35: 7c:71:35:09:36:26:34:a2:22:25:a4:9d:70:ae:c4: 16:78:6c:c7:86:81:63:38:02:9d:3e:9b:d5:9c:0c: 19:ef:49:4c:ac:d3:e9:3b:ca:c2:6c:96:6c:d9:57: 26:6e:56:03:79:fb:da:77:4a:e2:3a:f2:3e:9f:7b: 79:b9:07:89:d5:15:46:72:c6:fe:51:72:4d:01:cd: c3:92:2a:c0:21:15:f8:b2:e9:aa:b1:69:f6:80:dd: 0c:b2:17:39:ad:93:d5:ef:6a:37:18:1a:85:21:96: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:EA:D6:A6:26:38:A8:8A:49:D3:32:78:C0:AB:19:60:D1:B0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d1:b9:f4:3f:5f:8c:89:cb:22:a4:2d:f7:d5:71:82:33:b5: 80:b2:b7:1a:82:b6:bc:47:7c:9c:6d:97:ad:b4:91:28:87:4a: fc:41:72:5e:29:a3:5e:87:af:01:03:87:f1:23:92:b5:ba:27: b9:9e:29:ac:20:b9:fd:dd:f2:48:59:06:1a:cb:7f:a1:5c:65: dd:4a:cc:b8:21:e9:34:5d:67:2f:e2:11:e8:b9:92:50:78:df: 96:52:f4:97:c9:a0:d9:d9:2c:36:5a:a8:51:f1:9a:32:80:e8: e2:88:81:a9:10:4e:42:77:f7:e3:46:61:b8:1f:08:5d:51:65: 3e:32:44:a2:d5:d1:71:ac:30:b5:46:c5:cd:01:9a:9f:b8:07: 7d:4c:cb:5e:4e:ec:13:e1:d2:6a:ee:c4:3c:00:78:4b:ab:78: f1:c2:af:41:6f:5d:10:e8:95:a7:64:be:34:16:b4:c1:6e:d0: bd:bf:3a:d7:14:f4:62:68:98:fa:62:fd:74:16:5f:ee:e4:5e: d4:f9:86:1e:cb:8c:37:9d:0f:a0:db:72:35:a8:a5:83:26:fe: eb:38:e8:bf:70:fd:a2:43:6a:26:f5:0b:d7:a3:2d:78:ad:4e: 0b:cd:97:39:9f:24:56:f7:e6:a7:7b:b5:f2:bf:a4:47:81:03: ff:ce:5b:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt02bO2Gt2fK9TN9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MTAwODE5MDAwM1oXDTI1MTAxMDE5MDAwMFowLzEtMCsGA1UEAxMk ZTRmNjRjZmQtMWM4Mi00ZTgyLWFiZDAtNTQ1ZTg0MzFmMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdI1LK2gpqs1j2O21R6LFls7IDB5Q23hIlB+ LR/L71wk18mmmIQuc8Xz+HdgSKJRTq6z1X99anRJFAhTuvyNW8se9Pk7B/jAA8ck bJzEtgbQihNGn0rqZIiZgtYlDF+4BKBljsGW+MscyDB6QCdNxXcgxWk2MFqv7XVi 5FTUzHhAEHBWOtD08C5u7LZX3C5cRUl0+jV8cTUJNiY0oiIlpJ1wrsQWeGzHhoFj OAKdPpvVnAwZ70lMrNPpO8rCbJZs2VcmblYDefvad0riOvI+n3t5uQeJ1RVGcsb+ UXJNAc3DkirAIRX4sumqsWn2gN0Mshc5rZPV72o3GBqFIZZaFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBIT6tamJjioiknTMnjAqxlg0bDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBy0bn0P1+MicsipC331XGC M7WAsrcagra8R3ycbZettJEoh0r8QXJeKaNeh68BA4fxI5K1uie5nimsILn93fJI WQYay3+hXGXdSsy4Iek0XWcv4hHouZJQeN+WUvSXyaDZ2Sw2WqhR8ZoygOjiiIGp EE5Cd/fjRmG4HwhdUWU+MkSi1dFxrDC1RsXNAZqfuAd9TMteTuwT4dJq7sQ8AHhL q3jxwq9Bb10Q6JWnZL40FrTBbtC9vzrXFPRiaJj6Yv10Fl/u5F7U+YYey4w3nQ+g 23I1qKWDJv7rOOi/cP2iQ2om9QvXoy14rU4LzZc5nyRW9+ane7Xyv6RHgQP/zlss -----END CERTIFICATE-----Generated at Thu Oct 9 15:39:53 2025 by rpki-client