$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft File: 9227887c-706f-46d5-a5a6-f0db08bf46a0.mft (raw, json) Hash identifier: ie3hT217iS0DhtON8wke/4GQLug/6oHFoyCx2DV1z0E= Subject key identifier: BF:C0:3D:0A:42:BD:4F:2A:46:FE:FF:37:BC:81:F8:41:A3:1B:D8:E9 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584B7C2DBE78ACFF330F39F0F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft Manifest number: 010D0C9F4328584073A84E4823DD1B5DD6BD1E99 Signing time: Sat 11 Oct 2025 10:00:03 +0000 Manifest this update: Sat 11 Oct 2025 10:00:03 +0000 Manifest next update: Mon 13 Oct 2025 10:00:00 +0000 Files and hashes: 1: 0e0fc866-45da-33ff-bcd7-998937e25816.roa (hash: FpHTdybPGQofFgiv6juh/u9GtR4jNA2gfjzf2ueb0ow=) 2: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (hash: iY8zVJ3JCnIDu1jvCFwgmo5OfzaV3W7MQyyA2TMxe9o=) 3: 9227887c-706f-46d5-a5a6-f0db08bf46a0.crl (hash: RYa8sDgE9Nwool/ao73wnPCKECIuDAPQHI5WobWCakE=) 4: a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa (hash: QfmFa+S4pX9fdIrG+zjmIhj7uYDJ70S9kpoTBEbOWY0=) 5: f8a6bba3-cb5a-36b2-b8c7-f8481972e71d.roa (hash: 9u7+y1mv5vDG18zx+iP3nmN5mIcrVCu/jSKwFpXpYdg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:2d:be:78:ac:ff:33:0f:39:f0:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Oct 11 10:00:03 2025 GMT Not After : Oct 13 10:00:00 2025 GMT Subject: CN=9a88acbc-ec79-41fb-9431-f31cec1fab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:90:b5:56:81:54:43:79:1d:10:cb:79:aa: c8:3f:6e:9d:7b:34:4f:ae:1a:0e:31:95:54:a8:47: b3:5e:db:e9:bd:74:2e:c4:56:f6:95:4e:3d:5b:65: 66:9c:db:6f:27:9f:be:90:a3:52:33:66:8a:e8:a0: a6:fa:2a:94:d1:41:f4:4c:c7:a8:71:db:d4:26:d2: a8:50:18:27:cb:44:6a:48:73:d5:53:54:e4:d9:23: 13:9c:94:ad:7c:60:58:0a:cb:5c:dc:0d:31:8c:9a: 7a:a4:5f:ce:81:f3:c6:82:df:11:75:bd:48:08:f8: 8d:68:af:d2:b5:bc:f9:6a:5f:36:fc:85:f0:24:e0: a2:fb:e5:5b:55:04:51:c5:96:c1:7f:97:44:be:e8: 0f:81:7f:fc:7d:2c:9a:00:df:83:3a:ad:60:f4:02: 09:37:02:f3:ad:eb:57:70:d8:98:e4:be:a1:3b:c1: 22:69:fe:a0:18:90:1c:8a:ad:dc:ff:fe:68:a0:7e: d7:e3:b6:44:32:07:b1:7b:dd:f6:42:9e:9a:3d:0b: de:be:55:d4:78:9e:b6:70:d0:da:da:db:fa:ac:c6: 7f:74:37:fb:29:19:af:95:d3:19:f3:5f:7e:17:8d: 82:06:b5:44:2d:97:e9:0f:dd:20:08:fa:e1:e3:b7: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C0:3D:0A:42:BD:4F:2A:46:FE:FF:37:BC:81:F8:41:A3:1B:D8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:56:5a:5e:dc:8e:7e:fe:50:c3:58:06:3a:e4:1c:01:9b:e7: be:3b:2a:f6:62:aa:47:22:5a:99:42:ca:62:05:1f:00:8d:6c: a8:10:c6:a1:a4:f7:66:be:83:0c:a4:c9:50:9a:c4:f3:91:4d: 02:50:aa:50:6c:5f:36:92:fc:3f:52:2d:6a:d9:b8:dc:5f:e4: e6:1a:bf:89:b0:f6:65:63:e7:a3:75:f5:80:e0:d9:5c:d1:75: 95:ed:69:4d:4f:37:af:3e:3c:de:6a:38:56:32:a0:60:9d:97: 19:2e:41:f9:a9:46:b5:2e:9a:54:32:99:63:8f:8b:b6:d8:ee: b7:82:22:8f:99:c2:9d:ae:fb:58:bf:70:72:82:5a:e6:8c:c5: c8:fe:db:96:f3:5e:58:ae:c2:71:b8:a8:c9:72:bf:3c:43:8b: 79:f4:bf:7f:89:f8:fb:3c:03:6b:ff:e4:b0:6b:9f:54:3f:6b: c9:97:57:9e:6a:53:3e:78:c9:51:b2:19:ee:7c:36:d5:d8:64: 35:f8:6b:8f:0f:c0:7f:c2:42:95:97:bf:98:11:c1:0c:32:7f: 15:71:ff:d0:ae:55:83:df:cd:f3:02:01:34:eb:39:bd:4c:c5: 38:6b:51:ab:55:a4:8a:59:9a:2b:06:9a:6d:f0:ec:90:ad:b1: 3b:3c:10:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt8Lb54rP8zDznw9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MTAxMTEwMDAwM1oXDTI1MTAxMzEwMDAwMFowLzEtMCsGA1UEAxMk OWE4OGFjYmMtZWM3OS00MWZiLTk0MzEtZjMxY2VjMWZhYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPSQtVaBVEN5HRDLearIP26dezRPrhoOMZVU qEezXtvpvXQuxFb2lU49W2VmnNtvJ5++kKNSM2aK6KCm+iqU0UH0TMeocdvUJtKo UBgny0RqSHPVU1Tk2SMTnJStfGBYCstc3A0xjJp6pF/OgfPGgt8Rdb1ICPiNaK/S tbz5al82/IXwJOCi++VbVQRRxZbBf5dEvugPgX/8fSyaAN+DOq1g9AIJNwLzretX cNiY5L6hO8Eiaf6gGJAciq3c//5ooH7X47ZEMgexe932Qp6aPQvevlXUeJ62cNDa 2tv6rMZ/dDf7KRmvldMZ819+F42CBrVELZfpD90gCPrh47cPpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL/APQpCvU8qRv7/N7yB+EGjG9jpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvOTIyNzg4N2MtNzA2Zi00 NmQ1LWE1YTYtZjBkYjA4YmY0NmEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxVlpe3I5+/lDDWAY65BwB m+e+Oyr2YqpHIlqZQspiBR8AjWyoEMahpPdmvoMMpMlQmsTzkU0CUKpQbF82kvw/ Ui1q2bjcX+TmGr+JsPZlY+ejdfWA4Nlc0XWV7WlNTzevPjzeajhWMqBgnZcZLkH5 qUa1LppUMpljj4u22O63giKPmcKdrvtYv3ByglrmjMXI/tuW815YrsJxuKjJcr88 Q4t59L9/ifj7PANr/+Swa59UP2vJl1eealM+eMlRshnufDbV2GQ1+GuPD8B/wkKV l7+YEcEMMn8Vcf/QrlWD383zAgE06zm9TMU4a1GrVaSKWZorBppt8OyQrbE7PBA1 -----END CERTIFICATE-----Generated at Sat Oct 11 15:56:36 2025 by rpki-client