$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: A4dgpwDjfjOB8r0zAaDUXljLVRniEGg26aUmjNyrBAo= Subject key identifier: ED:92:82:5E:0E:6F:3A:BD:E7:A6:02:76:AF:B9:2A:51:1E:68:40:72 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584B7392224B1E177A0E9FE6E9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43E8E Signing time: Wed 08 Oct 2025 08:00:03 +0000 Manifest this update: Wed 08 Oct 2025 08:00:03 +0000 Manifest next update: Fri 10 Oct 2025 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: M9OZp34aKCYeaX1TxdtkYuUs1h2FBBLK0gYrbUVGzFU=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: SJ5m7ffriiORiDHMsHpdhGgHljekEtblcwr6zpeou3U=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: RQnI+5S4fPW1nA25ebBlM4opr9khSgDfNfrzYVpKLwk=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: Ec6ssb2VN/eWdoMZf4jaCm+feqLm/yH48awfJFdKwLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:92:22:4b:1e:17:7a:0e:9f:e6:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Oct 8 08:00:03 2025 GMT Not After : Oct 10 08:00:00 2025 GMT Subject: CN=f5809e39-cc76-4420-b365-78e8db945a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:e2:a8:fc:12:69:1e:e7:44:57:f1:8c:99: 89:02:8e:63:b8:93:74:68:2c:7c:fd:65:c3:0e:e8: ae:6c:52:c6:7a:10:a6:59:fc:b3:ad:2f:60:5b:bb: b6:6a:e3:4d:5e:42:46:58:11:f9:a1:51:36:0b:ff: e9:f0:5f:a3:ea:f9:1f:ee:3d:50:c7:19:22:bf:30: 26:c2:27:fe:2e:ca:8d:cf:9c:47:19:a1:2d:dd:e9: ce:c9:88:d0:17:38:6f:f7:8d:c0:0b:eb:a8:fe:94: 74:31:da:71:4b:f3:f3:5e:43:0e:bd:63:ac:00:cf: 0a:4f:8c:f5:7f:7f:df:f3:59:b2:6b:2a:27:6a:21: c0:1f:8d:1f:7d:d5:26:41:8b:cc:36:2b:de:d5:59: 78:30:52:76:54:43:a6:81:a6:f2:14:fd:b0:d8:88: be:bf:24:84:50:73:d8:9a:a8:61:df:c5:1d:b3:a4: 85:1f:a0:d3:7e:08:ec:c7:aa:7c:3a:cc:38:73:7c: 63:d1:5b:ff:ae:49:e6:0a:81:f8:51:81:30:5d:d4: d2:a7:14:d5:9d:5a:66:79:22:af:80:c5:71:23:8d: 60:7f:83:2f:a1:d1:24:54:a7:fd:78:a8:1d:7a:88: c7:0b:83:d8:fb:ee:8d:43:08:70:34:5e:46:b1:c0: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:92:82:5E:0E:6F:3A:BD:E7:A6:02:76:AF:B9:2A:51:1E:68:40:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1e:55:ce:a7:f5:a9:f7:23:a0:40:cb:8b:b0:8d:43:9b:e3: e9:b9:f3:35:6c:de:05:b4:c8:58:4c:b8:13:75:47:18:06:8a: 20:3a:38:4e:24:47:80:50:14:19:fa:49:e8:89:65:8b:9b:e1: 61:c6:83:c6:b1:80:23:0a:37:42:56:7f:37:33:77:f6:fd:b9: 04:44:ee:48:7d:2b:f2:e3:97:d9:70:ac:f7:8a:23:64:bc:e9: 85:e9:aa:03:60:57:4f:8a:af:48:d7:9f:b2:0d:f1:6e:c2:6e: 26:04:ab:2f:fe:d2:c4:df:2c:13:dc:ad:03:39:ad:1c:66:00: 3f:02:b3:c3:8c:19:20:61:91:f8:63:42:90:08:74:0c:b3:d0: d2:4a:07:76:72:bb:84:8c:c6:29:bb:b8:54:b0:b2:7c:3a:c5: bf:83:f0:69:4c:24:c0:76:e3:5f:ed:e5:c2:df:e8:58:4f:86: 46:18:11:c8:29:76:47:f2:71:6a:6c:d6:f9:7e:ec:fb:b4:21: d8:56:94:8d:ec:d5:e4:43:3f:2c:e8:63:d1:6f:26:da:da:d4: 7d:f2:7d:56:d1:0d:62:e2:c7:b5:12:e1:9e:cc:a6:48:b5:b0: af:f8:4e:9f:74:87:21:c7:07:1c:2c:98:f0:b5:87:63:dc:2f: de:61:78:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtzkiJLHhd6Dp/m6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MTAwODA4MDAwM1oXDTI1MTAxMDA4MDAwMFowLzEtMCsGA1UEAxMk ZjU4MDllMzktY2M3Ni00NDIwLWIzNjUtNzhlOGRiOTQ1YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r/iqPwSaR7nRFfxjJmJAo5juJN0aCx8/WXD DuiubFLGehCmWfyzrS9gW7u2auNNXkJGWBH5oVE2C//p8F+j6vkf7j1QxxkivzAm wif+LsqNz5xHGaEt3enOyYjQFzhv943AC+uo/pR0MdpxS/PzXkMOvWOsAM8KT4z1 f3/f81myayonaiHAH40ffdUmQYvMNive1Vl4MFJ2VEOmgabyFP2w2Ii+vySEUHPY mqhh38Uds6SFH6DTfgjsx6p8Osw4c3xj0Vv/rknmCoH4UYEwXdTSpxTVnVpmeSKv gMVxI41gf4MvodEkVKf9eKgdeojHC4PY++6NQwhwNF5GscDBEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO2Sgl4Obzq956YCdq+5KlEeaEByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZHlXOp/Wp9yOgQMuLsI1D m+PpufM1bN4FtMhYTLgTdUcYBoogOjhOJEeAUBQZ+knoiWWLm+FhxoPGsYAjCjdC Vn83M3f2/bkERO5IfSvy45fZcKz3iiNkvOmF6aoDYFdPiq9I15+yDfFuwm4mBKsv /tLE3ywT3K0DOa0cZgA/ArPDjBkgYZH4Y0KQCHQMs9DSSgd2cruEjMYpu7hUsLJ8 OsW/g/BpTCTAduNf7eXC3+hYT4ZGGBHIKXZH8nFqbNb5fuz7tCHYVpSN7NXkQz8s 6GPRbyba2tR98n1W0Q1i4se1EuGezKZItbCv+E6fdIchxwccLJjwtYdj3C/eYXg9 -----END CERTIFICATE-----Generated at Wed Oct 8 17:25:56 2025 by rpki-client