$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: ogovHh3ZChWqAMFo6ce65VVfRJ1LoJmnivmrIYmip2I= Subject key identifier: 4B:89:1D:4F:0A:28:E6:66:84:8B:FB:A8:D3:EA:8A:35:2B:EB:E1:2D Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584B742717B437D30BF8B7F4BC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11BC8 Signing time: Wed 08 Oct 2025 13:00:09 +0000 Manifest this update: Wed 08 Oct 2025 13:00:09 +0000 Manifest next update: Sat 11 Oct 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: 2We7IJCneOXj5JL9p8TCYLUbFpiXjNTcoP/GU1j1W/Y=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: 7Ia932ofNnwQvmtwygKXGx8tJiPafqqUgkfXM7yIz9s=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: QPdNWr3FiAhyNmcaU87JL/8SnojxpmKL3ltTU+tJmoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:17:b4:37:d3:0b:f8:b7:f4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Oct 8 13:00:09 2025 GMT Not After : Oct 11 13:00:00 2025 GMT Subject: CN=6d19a1f0-5fcc-4722-892f-f9017e853846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:44:eb:6c:f6:7e:d8:7f:7f:94:14:b0:e2: 46:38:95:11:22:08:fb:4a:56:e9:cf:95:a7:d7:df: 3d:90:57:f5:75:9d:72:09:6a:fa:24:ec:17:07:a3: 21:df:02:70:9b:68:6b:1c:4b:d7:30:8c:2d:c8:ca: 84:64:d2:bf:55:b3:1d:8d:d3:86:ab:1d:dd:03:64: 72:c6:56:4a:29:ca:77:71:95:e1:fd:9f:49:98:d0: 23:ea:67:e9:8d:6b:2b:b6:6f:16:d9:69:a4:79:de: bf:bc:55:e1:3f:14:d7:67:7e:51:cb:e7:c6:94:dc: b9:05:4e:e4:d6:eb:ef:7d:35:99:17:58:5e:ee:3f: 5b:05:c7:82:0e:7e:b5:32:79:38:ee:00:2c:9b:5f: e6:85:cb:8f:10:aa:d5:d7:f6:db:b2:81:16:c9:13: ca:55:5a:fb:61:93:1d:8c:2b:2f:31:cc:24:f8:d0: d4:35:91:91:80:f4:d3:eb:42:7e:e3:30:45:bf:2d: 91:4a:cf:dc:6c:bf:a6:b1:7e:bb:11:92:17:ee:c8: 25:78:9d:83:f6:27:34:07:c5:7d:fc:75:9b:dd:22: 28:97:83:38:93:3b:68:21:4d:46:ce:ed:01:fc:48: 17:40:c6:11:79:6e:e4:26:53:b4:2d:06:83:f7:54: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:1D:4F:0A:28:E6:66:84:8B:FB:A8:D3:EA:8A:35:2B:EB:E1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ba:3a:f7:86:64:a9:81:78:ae:d5:95:36:1c:be:f6:e0:e9: 43:16:4a:45:98:1a:c0:23:a2:65:31:56:5a:9b:c4:b4:5c:71: 87:27:f9:fe:56:66:1e:05:3a:0a:6a:da:eb:3d:9b:6c:e4:83: a3:d6:b6:b1:ca:08:36:20:49:22:fc:f1:ad:82:6d:b9:35:0f: 06:da:4c:ea:88:3f:24:c8:9c:93:59:83:73:f9:03:81:49:78: 03:df:3e:75:30:33:0f:ef:c3:81:2a:21:5b:fc:1d:58:1d:15: 04:89:0d:a5:ed:43:c0:20:71:9e:b2:23:8a:6b:d5:8b:15:95: c5:0c:60:05:98:de:8f:be:75:69:df:a6:4e:44:20:b8:7f:f0: e4:cf:ed:be:21:cd:d1:e7:e5:8e:fa:37:fd:2f:30:b4:56:d3: 36:8f:7c:bb:7c:14:84:17:5c:07:22:61:10:b6:54:cf:19:a1: c8:b2:41:55:6a:37:fc:44:27:e6:bd:ac:de:be:80:46:17:fd: 94:c0:77:2b:a6:b4:e8:ed:b2:d4:73:8b:40:fd:53:6d:25:7a: cd:d3:44:4d:bb:15:1f:81:9f:df:1d:8a:fd:24:43:39:4d:78: 33:ea:39:fa:d8:53:52:ad:9e:be:64:1e:0d:e3:ab:d7:76:8d: 4d:4c:4d:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0Jxe0N9ML+Lf0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTAwODEzMDAwOVoXDTI1MTAxMTEzMDAwMFowLzEtMCsGA1UEAxMk NmQxOWExZjAtNWZjYy00NzIyLTg5MmYtZjkwMTdlODUzODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBNE62z2fth/f5QUsOJGOJURIgj7Slbpz5Wn 1989kFf1dZ1yCWr6JOwXB6Mh3wJwm2hrHEvXMIwtyMqEZNK/VbMdjdOGqx3dA2Ry xlZKKcp3cZXh/Z9JmNAj6mfpjWsrtm8W2Wmked6/vFXhPxTXZ35Ry+fGlNy5BU7k 1uvvfTWZF1he7j9bBceCDn61Mnk47gAsm1/mhcuPEKrV1/bbsoEWyRPKVVr7YZMd jCsvMcwk+NDUNZGRgPTT60J+4zBFvy2RSs/cbL+msX67EZIX7sgleJ2D9ic0B8V9 /HWb3SIol4M4kztoIU1Gzu0B/EgXQMYReW7kJlO0LQaD91TApQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEuJHU8KKOZmhIv7qNPqijUr6+EtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIujr3hmSpgXiu1ZU2HL72 4OlDFkpFmBrAI6JlMVZam8S0XHGHJ/n+VmYeBToKatrrPZts5IOj1raxygg2IEki /PGtgm25NQ8G2kzqiD8kyJyTWYNz+QOBSXgD3z51MDMP78OBKiFb/B1YHRUEiQ2l 7UPAIHGesiOKa9WLFZXFDGAFmN6PvnVp36ZORCC4f/Dkz+2+Ic3R5+WO+jf9LzC0 VtM2j3y7fBSEF1wHImEQtlTPGaHIskFVajf8RCfmvazevoBGF/2UwHcrprTo7bLU c4tA/VNtJXrN00RNuxUfgZ/fHYr9JEM5TXgz6jn62FNSrZ6+ZB4N46vXdo1NTE11 -----END CERTIFICATE-----Generated at Wed Oct 8 21:24:50 2025 by rpki-client