$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft File: 9bd0a861-f835-4585-9517-e1dba949c123.mft (raw, json) Hash identifier: A4VSx1jlot3WSeYhIIEOwUJ4sSj8z45YjkwZYaIChag= Subject key identifier: 94:C4:8E:99:F8:DC:9D:D0:41:65:10:06:A4:F8:C7:6F:BB:F5:06:43 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584B799E9C8A280A8118D3B8A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft Manifest number: 010D0C9F4328584073A854438D0E56BC123312F6 Signing time: Fri 10 Oct 2025 12:00:03 +0000 Manifest this update: Fri 10 Oct 2025 12:00:03 +0000 Manifest next update: Mon 13 Oct 2025 12:00:00 +0000 Files and hashes: 1: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (hash: O6XmsOSbmuZLq+5I8K8RNoTIG87VuMmvKduBWjFjmTc=) 2: 35a4a280-a419-3d31-a496-90f9731524db.roa (hash: hiv9UunjF41+7iiJbjxQdlzKHicdhwY7wQABhnmqjkI=) 3: 9bd0a861-f835-4585-9517-e1dba949c123.crl (hash: mYKRaUQKO8DAMrjlBIABhGD7BKEPc1TMsB+51JzbS4k=) 4: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (hash: 3LvioKizMI4xtl5Wzy2pb2LuyPF3HDpO+Z8w9SkBcXM=) 5: c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (hash: J84PqSqRX23aGHr7A6UJNGlIo1PNKWzf+gDqDhGiciA=) 6: e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa (hash: xn3/P/QCe7B6qT2SujFWGB2PYspd93k+Bd3TOAH+YtA=) 7: fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (hash: u+8idXfLNIDJE3Sf6oSqensOMeH6wt/28Ad5qK1N8vc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:9c:8a:28:0a:81:18:d3:b8:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Oct 10 12:00:03 2025 GMT Not After : Oct 13 12:00:00 2025 GMT Subject: CN=01344f70-13b2-4303-b2be-64eed6a94e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:ee:24:ef:b4:da:cb:2a:04:5f:16:0f:62: 62:f8:74:5f:92:71:27:ec:a6:df:8d:c4:55:19:35: b8:6d:5b:56:c3:3c:cc:9f:ce:1c:ca:f5:fe:57:7a: e7:f8:bd:3e:35:dd:e8:97:7c:1c:f4:1a:1d:5c:44: 53:d1:ac:eb:98:a2:09:c1:3c:cf:32:ac:02:ba:ac: 29:9e:c7:11:e9:a2:13:cf:c7:de:c4:fe:b0:ea:af: 22:b1:2a:23:49:7b:f0:80:66:68:3b:95:9a:f8:57: 72:95:22:01:7a:98:9c:50:69:78:3c:e2:eb:db:69: 34:91:cc:14:8b:b9:68:1f:6d:b5:e6:e4:0a:5a:62: f6:b3:3e:4c:80:42:49:75:43:b0:67:22:3e:7e:05: 05:59:90:cc:cb:c1:e7:9e:00:d5:1a:ac:32:5f:78: 54:f5:9e:b3:bc:0a:99:a3:9e:97:58:a4:fa:7a:89: 36:25:5d:63:bc:1a:8f:c4:41:de:a3:84:19:6c:52: d2:60:53:48:a5:8e:2f:ea:2a:d9:e2:49:a4:71:59: 14:26:f6:a5:84:7c:ec:94:6d:f3:f3:29:8f:64:33: e6:0a:5b:c3:61:f3:1d:04:f0:3a:aa:3f:2c:58:9f: 7e:da:03:06:7c:aa:e2:75:6c:7e:2a:74:04:84:ca: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:8E:99:F8:DC:9D:D0:41:65:10:06:A4:F8:C7:6F:BB:F5:06:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d8:8a:3f:70:d5:e0:c0:67:23:38:67:ec:a4:ef:99:b1:72: 97:6f:ee:a3:e8:61:54:41:9c:a7:8c:a2:8c:b9:fa:c0:98:8a: 60:a6:3e:e1:ea:cc:9c:6b:21:5b:c4:58:7a:15:49:e7:c9:4c: 72:bf:9f:fe:19:2f:15:f4:06:bc:ec:c5:b1:2a:07:57:19:38: 04:03:34:1c:04:be:db:dc:da:a3:e6:9d:e3:7b:f5:e7:ac:5b: c2:23:bd:15:3f:4c:54:a5:c1:69:2e:d6:55:8e:c1:69:2a:d0: 29:49:10:ec:fd:1e:d1:71:68:0b:b8:ee:49:a8:70:2a:a8:1b: a5:41:23:78:b1:d8:1b:77:ca:1b:e9:13:84:b7:6e:11:b2:e2: 53:96:69:d0:10:ce:a6:22:cd:49:06:b3:80:e3:4a:5c:34:17: 22:fc:67:e5:cf:14:84:17:ef:1a:ae:47:fe:d6:eb:30:d3:36: c2:75:ef:a1:4f:e0:71:65:cb:35:b6:4c:06:49:e8:3e:d5:ab: 84:6e:97:77:8d:b6:10:3a:35:8d:0f:e4:58:80:47:6b:2f:c3: 2b:8c:ce:96:18:36:20:12:17:aa:38:c7:dd:e7:a0:5d:52:e9: fd:fc:b0:8b:94:c6:63:74:81:92:d5:22:d4:6a:e3:c7:ce:7d: 16:ea:a6:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5npyKKAqBGNO4poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MTAxMDEyMDAwM1oXDTI1MTAxMzEyMDAwMFowLzEtMCsGA1UEAxMk MDEzNDRmNzAtMTNiMi00MzAzLWIyYmUtNjRlZWQ2YTk0ZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVzuJO+02ssqBF8WD2Ji+HRfknEn7KbfjcRV GTW4bVtWwzzMn84cyvX+V3rn+L0+Nd3ol3wc9BodXERT0azrmKIJwTzPMqwCuqwp nscR6aITz8fexP6w6q8isSojSXvwgGZoO5Wa+FdylSIBepicUGl4POLr22k0kcwU i7loH2215uQKWmL2sz5MgEJJdUOwZyI+fgUFWZDMy8HnngDVGqwyX3hU9Z6zvAqZ o56XWKT6eok2JV1jvBqPxEHeo4QZbFLSYFNIpY4v6irZ4kmkcVkUJvalhHzslG3z 8ymPZDPmClvDYfMdBPA6qj8sWJ9+2gMGfKridWx+KnQEhMqKgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJTEjpn43J3QQWUQBqT4x2+79QZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvOWJkMGE4NjEtZjgzNS00 NTg1LTk1MTctZTFkYmE5NDljMTIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD2Io/cNXgwGcjOGfspO+Z sXKXb+6j6GFUQZynjKKMufrAmIpgpj7h6sycayFbxFh6FUnnyUxyv5/+GS8V9Aa8 7MWxKgdXGTgEAzQcBL7b3Nqj5p3je/XnrFvCI70VP0xUpcFpLtZVjsFpKtApSRDs /R7RcWgLuO5JqHAqqBulQSN4sdgbd8ob6ROEt24RsuJTlmnQEM6mIs1JBrOA40pc NBci/GflzxSEF+8arkf+1usw0zbCde+hT+BxZcs1tkwGSeg+1auEbpd3jbYQOjWN D+RYgEdrL8MrjM6WGDYgEheqOMfd56BdUun9/LCLlMZjdIGS1SLUauPHzn0W6qbo -----END CERTIFICATE-----Generated at Fri Oct 10 18:05:19 2025 by rpki-client