$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: xFrerT4JQ/iyimFrQmv/LgFPpS7ZaqahRQn0jK+Aziw= Subject key identifier: 29:1F:82:1A:5A:4B:C1:7F:CB:54:58:4A:C7:4B:16:96:CB:C3:DC:8F Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584B74D9B27A9DC7A8F9DCAC4500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A7EB Signing time: Wed 08 Oct 2025 19:00:03 +0000 Manifest this update: Wed 08 Oct 2025 19:00:03 +0000 Manifest next update: Sat 11 Oct 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: Uc6onv0EF7Ri9hCCp79MsCvEZN+RrY+J+Lv84blAv4Y=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: vh1c/svpbaX3OOEQL3nCoaDkPQff6sq0IZGl3gbqu24=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: sSncewOK4aaysbPuOQqZReOsPxeMNSr63PtbmP75HKk=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: X7x66fM9XsgcVUK8YIc80dzR1Puitz6owWbsNgUr8hM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:d9:b2:7a:9d:c7:a8:f9:dc:ac:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Oct 8 19:00:03 2025 GMT Not After : Oct 11 19:00:00 2025 GMT Subject: CN=03151607-052c-43ad-b99a-f1f1c895808a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:83:f4:16:a6:42:d3:5d:34:4a:e2:84:a7: 8c:2a:e8:ea:b9:30:2d:8b:de:dc:ee:fc:77:43:d2: 49:68:27:b7:de:e5:19:66:83:11:b6:ae:d4:19:24: e2:a4:5f:df:2a:ce:af:77:77:83:73:6f:5a:8a:44: 63:ae:e2:0e:cb:4e:f7:1e:a7:c0:e7:c8:3b:f8:68: 77:67:65:d2:32:80:94:e0:97:de:38:d3:1e:fb:86: 07:1b:e8:16:a2:ec:f0:2c:48:41:bd:1b:bd:b7:d9: 24:a8:13:0e:92:71:6b:38:23:fd:12:ca:cf:59:fd: 5f:a5:9e:58:fd:89:bd:4a:74:39:ff:6d:4d:a6:7d: 06:a8:b2:a6:8a:45:5a:8c:d8:f2:af:2e:76:0f:5d: 59:ce:9c:13:8d:9d:f2:8d:7e:b7:7a:02:38:96:2a: de:35:9f:e4:25:35:65:1f:23:66:78:9b:dd:2e:a6: 48:b6:3d:c7:4d:1d:34:ef:3b:74:d0:dc:f7:57:c1: 70:2b:44:93:b1:4f:6b:6f:ae:d6:bc:cf:e6:b7:b8: 94:14:64:3a:05:1d:64:43:db:b7:cb:25:c5:4a:e1: 67:45:9a:ac:d3:1f:9a:1b:d9:da:56:5d:76:86:e6: 4e:e5:af:65:09:db:4b:f8:b1:30:8c:f8:47:c6:28: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1F:82:1A:5A:4B:C1:7F:CB:54:58:4A:C7:4B:16:96:CB:C3:DC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ab:5a:43:d1:e0:35:3c:9e:1c:1d:23:b8:62:07:32:3e:5c: 46:4c:c8:2f:24:32:d0:a9:63:19:8f:92:1c:f8:30:e9:77:e1: 5c:39:d3:51:72:79:da:63:e3:8c:82:0b:4b:ac:60:d9:01:c4: 76:91:06:69:35:5a:08:19:69:e5:17:97:55:2d:e8:55:b6:57: ab:ca:43:3d:ae:c2:ba:bf:97:76:0a:f4:dc:dc:ee:9d:8b:3c: cd:13:b5:0f:ca:3c:20:6a:30:51:88:be:be:52:f8:1c:a6:11: a7:e8:d5:80:97:89:28:51:c0:c1:7c:25:8b:36:68:d6:46:9f: 0b:50:54:64:f7:1e:e5:70:3c:bf:75:16:ea:9c:f7:34:2a:a7: 27:1e:cf:9f:a4:33:ae:61:cd:46:d9:2c:fe:81:01:d9:ef:9a: 75:6c:3c:40:3d:f1:cb:e8:88:a3:75:e5:f0:24:08:a5:be:73: 3e:e9:8d:72:be:77:ba:71:f8:fe:29:a8:a1:e2:e3:aa:96:db: 72:32:ad:90:b0:7e:ff:78:7d:4f:41:ef:68:af:06:7f:15:3e: c5:e0:95:5f:84:af:65:56:d4:2c:d3:f7:de:5c:f3:0b:0b:67: 1e:a8:5a:78:15:17:41:51:d3:ed:d3:55:44:41:e4:4e:fb:7b: 47:42:e3:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt02bJ6nceo+dysRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MTAwODE5MDAwM1oXDTI1MTAxMTE5MDAwMFowLzEtMCsGA1UEAxMk MDMxNTE2MDctMDUyYy00M2FkLWI5OWEtZjFmMWM4OTU4MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+WD9BamQtNdNErihKeMKujquTAti97c7vx3 Q9JJaCe33uUZZoMRtq7UGSTipF/fKs6vd3eDc29aikRjruIOy073HqfA58g7+Gh3 Z2XSMoCU4JfeONMe+4YHG+gWouzwLEhBvRu9t9kkqBMOknFrOCP9EsrPWf1fpZ5Y /Ym9SnQ5/21Npn0GqLKmikVajNjyry52D11ZzpwTjZ3yjX63egI4lireNZ/kJTVl HyNmeJvdLqZItj3HTR007zt00Nz3V8FwK0STsU9rb67WvM/mt7iUFGQ6BR1kQ9u3 yyXFSuFnRZqs0x+aG9naVl12huZO5a9lCdtL+LEwjPhHxig5IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCkfghpaS8F/y1RYSsdLFpbLw9yPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTq1pD0eA1PJ4cHSO4Ygcy PlxGTMgvJDLQqWMZj5Ic+DDpd+FcOdNRcnnaY+OMggtLrGDZAcR2kQZpNVoIGWnl F5dVLehVtlerykM9rsK6v5d2CvTc3O6dizzNE7UPyjwgajBRiL6+UvgcphGn6NWA l4koUcDBfCWLNmjWRp8LUFRk9x7lcDy/dRbqnPc0KqcnHs+fpDOuYc1G2Sz+gQHZ 75p1bDxAPfHL6IijdeXwJAilvnM+6Y1yvne6cfj+Kaih4uOqlttyMq2QsH7/eH1P Qe9orwZ/FT7F4JVfhK9lVtQs0/feXPMLC2ceqFp4FRdBUdPt01VEQeRO+3tHQuN6 -----END CERTIFICATE-----Generated at Wed Oct 8 21:22:48 2025 by rpki-client