$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft File: a57f543d-54f7-4dd6-a478-95849cb77e5e.mft (raw, json) Hash identifier: yHxeSY6t/LkR/NXqGK9RTySjnffONV0208/FFLdxbjs= Subject key identifier: 11:90:DF:6B:3D:46:8E:86:81:28:61:05:E2:90:54:51:E2:4F:A8:A5 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F4328584BBB39B2449B831B1883B9C600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft Manifest number: 010D0C9F4328584485E6811458181A060C4607A6 Signing time: Mon 03 Nov 2025 00:00:03 +0000 Manifest this update: Mon 03 Nov 2025 00:00:03 +0000 Manifest next update: Wed 05 Nov 2025 00:00:00 +0000 Files and hashes: 1: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (hash: PKQr8MIgALNunu9ZBJLMdyG3TWQKxWlOh8KSGY2PsPU=) 2: a57f543d-54f7-4dd6-a478-95849cb77e5e.crl (hash: VOOo2pAaN7/ogNa67BwtSRhxa65B4h1ffVN0hlvAbeE=) 3: f1adbd29-319d-377f-910e-3fd95df8a73b.roa (hash: MXOm38bNo4YDBknK196LmiLxTGVc2Q2CGf7nc+4TNkw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:39:b2:44:9b:83:1b:18:83:b9:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: Nov 3 00:00:03 2025 GMT Not After : Nov 5 00:00:00 2025 GMT Subject: CN=458d531c-9eeb-49aa-8f13-6a2e5714a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:5d:ef:9a:c0:42:5f:6a:b0:58:1d:b8:63: 82:7c:48:c6:f9:00:79:ac:e9:37:c5:54:6b:3c:c7: df:e8:77:2e:02:5b:02:93:6a:34:fa:1e:07:ef:03: a8:bd:c8:39:be:0a:17:bc:fc:e9:2d:91:06:90:29: df:cf:de:84:4b:20:64:c8:59:72:5d:97:58:81:58: 5f:dc:dd:53:f8:21:81:8f:5a:9b:d3:24:73:2b:be: ea:00:33:dc:b2:52:69:d7:e0:45:28:f4:b6:97:9f: df:2e:e2:4e:33:ec:a6:bf:d1:c0:ab:21:cc:17:87: a3:c6:87:06:44:f7:4d:d7:dc:e5:26:b7:20:54:a6: ad:4b:26:ac:24:cc:5e:3d:b0:05:32:02:88:32:42: 39:f9:e7:f6:22:07:a1:76:e8:8a:94:15:61:b2:c2: c0:33:2e:ec:99:1e:31:57:c1:26:de:42:43:de:6e: 1b:52:52:07:49:e1:80:10:38:23:b7:2e:26:ca:1b: cf:18:87:cf:94:88:7b:fb:d0:63:f8:c1:4e:d8:a4: 05:cd:5a:fc:6d:c0:e0:30:a8:c0:98:06:ad:12:b5: 1b:75:ba:b8:39:64:84:f4:1b:47:b8:22:26:57:2a: d0:a1:2e:d1:98:e4:58:b2:0d:cd:30:27:94:56:85: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:90:DF:6B:3D:46:8E:86:81:28:61:05:E2:90:54:51:E2:4F:A8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:51:df:09:2e:4f:ee:59:49:96:73:8b:35:22:6e:1b:ca:0d: ca:27:08:b2:d8:4c:1e:c5:af:d3:c1:40:9f:d1:86:9c:63:d4: 5d:9d:13:e1:40:b5:d2:80:36:8c:bf:dd:af:4a:9a:3d:52:b3: d4:17:da:c9:d7:33:43:77:c3:69:da:31:d7:bf:77:4b:79:a6: 71:ae:08:56:ed:f9:d4:50:d4:d5:8b:24:e4:05:ff:af:58:47: 5c:c0:61:c6:9e:58:c4:8a:ab:bf:67:43:65:a1:d6:c9:2f:5a: 45:ec:14:d7:ca:9e:51:b6:55:5a:0d:42:a5:14:33:7c:ed:88: 13:fd:5b:50:1b:0b:1f:48:4a:a6:a7:f3:6b:a2:36:af:6f:ec: b1:9c:e1:0c:89:db:a2:d2:9d:b0:e1:f9:ce:5f:ae:02:f8:6e: 4d:00:aa:84:43:c2:3b:39:85:c2:18:dc:5b:f3:04:eb:9f:f1: e1:87:21:33:a7:d1:24:09:20:99:45:d3:15:ec:72:c6:b4:4a: 78:06:f5:0e:1d:da:84:21:4c:3a:52:0f:1f:8d:4f:60:1e:23: 4b:81:f8:d5:cb:7e:8b:91:11:a9:b8:62:bc:31:ac:cf:f1:8f: e4:2d:3c:1b:fe:8b:00:38:30:db:c9:37:9c:f4:18:7e:be:82: 48:5e:00:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu7ObJEm4MbGIO5xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI1MTEwMzAwMDAwM1oXDTI1MTEwNTAwMDAwMFowLzEtMCsGA1UEAxMk NDU4ZDUzMWMtOWVlYi00OWFhLThmMTMtNmEyZTU3MTRhNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT9d75rAQl9qsFgduGOCfEjG+QB5rOk3xVRr PMff6HcuAlsCk2o0+h4H7wOovcg5vgoXvPzpLZEGkCnfz96ESyBkyFlyXZdYgVhf 3N1T+CGBj1qb0yRzK77qADPcslJp1+BFKPS2l5/fLuJOM+ymv9HAqyHMF4ejxocG RPdN19zlJrcgVKatSyasJMxePbAFMgKIMkI5+ef2IgehduiKlBVhssLAMy7smR4x V8Em3kJD3m4bUlIHSeGAEDgjty4myhvPGIfPlIh7+9Bj+MFO2KQFzVr8bcDgMKjA mAatErUbdbq4OWSE9BtHuCImVyrQoS7RmORYsg3NMCeUVoXcsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBGQ32s9Ro6GgShhBeKQVFHiT6ilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvYTU3ZjU0M2QtNTRmNy00 ZGQ2LWE0NzgtOTU4NDljYjc3ZTVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTUd8JLk/uWUmWc4s1Im4b yg3KJwiy2Ewexa/TwUCf0YacY9RdnRPhQLXSgDaMv92vSpo9UrPUF9rJ1zNDd8Np 2jHXv3dLeaZxrghW7fnUUNTViyTkBf+vWEdcwGHGnljEiqu/Z0NlodbJL1pF7BTX yp5RtlVaDUKlFDN87YgT/VtQGwsfSEqmp/Nrojavb+yxnOEMidui0p2w4fnOX64C +G5NAKqEQ8I7OYXCGNxb8wTrn/HhhyEzp9EkCSCZRdMV7HLGtEp4BvUOHdqEIUw6 Ug8fjU9gHiNLgfjVy36LkRGpuGK8MazP8Y/kLTwb/osAODDbyTec9Bh+voJIXgAo -----END CERTIFICATE-----Generated at Mon Nov 3 02:01:09 2025 by rpki-client