$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft File: d2e35455-e012-4897-80f6-c6386a9f779c.mft (raw, json) Hash identifier: zOAQGBeYps/PAPsgUEtN1YEFzLQt1/j6uv0Fjki3RMM= Subject key identifier: CB:D6:14:A1:D1:81:D1:26:94:73:63:95:08:49:78:3C:F2:72:B8:1C Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c Certificate serial: 010D0C9F4328584BBAFE306B267D2020E7DCF0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft Manifest number: 010D0C9F43285844D6ACB2C19CD62F6FCFCB4B09 Signing time: Sun 02 Nov 2025 22:00:08 +0000 Manifest this update: Sun 02 Nov 2025 22:00:08 +0000 Manifest next update: Wed 05 Nov 2025 22:00:00 +0000 Files and hashes: 1: 932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa (hash: MFdJMp30ICUnwMjZ6SxzrigJPN0XyPObr3feIZ1hgYs=) 2: d2e35455-e012-4897-80f6-c6386a9f779c.crl (hash: uBb402c0BYxrGuWr7UGH2P72JzQ/4zsLcmAaiI5OzXU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:fe:30:6b:26:7d:20:20:e7:dc:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c Validity Not Before: Nov 2 22:00:08 2025 GMT Not After : Nov 5 22:00:00 2025 GMT Subject: CN=53fd31b3-da60-448c-988b-1fc46fc9bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:80:2c:e7:b8:b0:5b:11:c9:b5:55:5e:7a: 6f:4f:3a:53:b9:48:71:68:f4:91:b1:7a:b6:d0:74: a6:66:b4:b2:73:fc:ae:4a:00:f0:5d:9c:e6:93:c1: 86:0e:1a:c4:72:8a:71:b9:38:0f:1d:67:da:8f:86: 19:5c:ad:fc:b4:54:03:64:7b:2d:07:30:77:49:19: 52:cf:82:e6:ac:10:d9:38:bd:0f:61:b2:27:19:5e: 75:34:58:19:bc:a2:9c:b4:21:d4:b2:e7:d4:d6:4e: 05:1f:1b:8e:b5:62:dd:0b:fd:41:6f:90:2f:25:e3: 80:e5:b2:9f:9a:91:3f:65:d5:87:6d:ff:7a:bf:01: 35:2d:5f:7d:6e:a6:20:5f:71:fd:97:50:cf:c9:11: 3f:51:e2:56:95:0d:58:76:41:91:4f:2b:d9:89:7f: 00:81:5c:fe:aa:f4:df:60:f8:2f:03:b0:8a:e9:49: 90:88:b9:ce:9b:da:88:bb:de:4a:cd:cc:53:a9:12: bc:e0:a7:98:59:ff:c5:5d:15:9e:d7:d3:cf:c1:6a: 6a:90:2c:b4:30:66:46:e3:35:95:bb:34:39:a5:66: 30:a5:1d:af:6e:87:9a:e9:17:38:df:39:8f:d5:b5: d1:55:e6:4c:5b:b6:85:fa:c0:27:8a:c0:32:06:74: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D6:14:A1:D1:81:D1:26:94:73:63:95:08:49:78:3C:F2:72:B8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl X509v3 Authority Key Identifier: keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:b5:4a:17:a5:f9:8d:7d:dc:f9:aa:c0:c4:f6:30:06:a8: 54:d0:f7:f1:b1:91:bf:26:62:2f:67:a0:22:0d:51:cf:76:11: a7:aa:e9:b8:5a:79:60:29:ef:2a:59:24:6f:8c:8e:3a:ff:41: b1:73:05:37:a6:d5:1e:1a:78:63:5c:9e:21:6e:6f:8c:9b:a7: fd:b9:f5:e9:64:47:68:fe:55:54:1e:32:1b:7b:2d:b1:e2:3a: 37:da:12:f1:40:9c:1b:02:e7:e8:57:ee:8d:3c:76:a6:41:cc: 2b:d3:5c:4c:08:6d:2a:b6:1e:8d:4e:0e:09:71:b7:6c:e1:7f: 4b:d8:b9:84:ab:67:b3:ce:60:1f:93:aa:92:a1:bf:86:b4:a1: 07:79:c4:83:31:72:6b:b9:0f:ee:69:08:30:63:a4:e2:d9:d4: 1c:97:47:74:18:7c:3b:24:c4:40:e6:b5:80:64:08:78:d1:31: 16:8b:2e:f3:55:ba:66:7b:2d:5e:4a:8b:8a:60:ad:bb:0d:31: f8:80:ff:e6:8c:9c:d4:7e:bd:81:60:d3:10:3d:9b:06:87:da: e0:dd:17:31:77:e3:e1:d0:89:f1:5d:bb:6d:a3:c5:71:82:2c: ca:b6:55:6d:54:62:d3:53:69:71:1c:41:c1:87:6f:fc:27:06: 39:3f:37:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6/jBrJn0gIOfc8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3 NzljMB4XDTI1MTEwMjIyMDAwOFoXDTI1MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk NTNmZDMxYjMtZGE2MC00NDhjLTk4OGItMWZjNDZmYzliZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZuALOe4sFsRybVVXnpvTzpTuUhxaPSRsXq2 0HSmZrSyc/yuSgDwXZzmk8GGDhrEcopxuTgPHWfaj4YZXK38tFQDZHstBzB3SRlS z4LmrBDZOL0PYbInGV51NFgZvKKctCHUsufU1k4FHxuOtWLdC/1Bb5AvJeOA5bKf mpE/ZdWHbf96vwE1LV99bqYgX3H9l1DPyRE/UeJWlQ1YdkGRTyvZiX8AgVz+qvTf YPgvA7CK6UmQiLnOm9qIu95KzcxTqRK84KeYWf/FXRWe19PPwWpqkCy0MGZG4zWV uzQ5pWYwpR2vboea6Rc43zmP1bXRVeZMW7aF+sAnisAyBnTHPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMvWFKHRgdEmlHNjlQhJeDzycrgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMmUz NTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvZDJlMzU0NTUtZTAxMi00 ODk3LTgwZjYtYzYzODZhOWY3NzljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDJlMzU0NTUtZTAxMi00ODk3LTgw ZjYtYzYzODZhOWY3NzljL2QyZTM1NDU1LWUwMTItNDg5Ny04MGY2LWM2Mzg2YTlm Nzc5Yy5jcmwwHwYDVR0jBBgwFoAUvEWEw2iY1M2b5naDXDNTw2OoF3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4 NmE5Zjc3OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYdLVKF6X5jX3c+arAxPYw BqhU0PfxsZG/JmIvZ6AiDVHPdhGnqum4WnlgKe8qWSRvjI46/0GxcwU3ptUeGnhj XJ4hbm+Mm6f9ufXpZEdo/lVUHjIbey2x4jo32hLxQJwbAufoV+6NPHamQcwr01xM CG0qth6NTg4Jcbds4X9L2LmEq2ezzmAfk6qSob+GtKEHecSDMXJruQ/uaQgwY6Ti 2dQcl0d0GHw7JMRA5rWAZAh40TEWiy7zVbpmey1eSouKYK27DTH4gP/mjJzUfr2B YNMQPZsGh9rg3Rcxd+Ph0InxXbtto8VxgizKtlVtVGLTU2lxHEHBh2/8JwY5PzcS -----END CERTIFICATE-----Generated at Mon Nov 3 01:53:14 2025 by rpki-client