$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.mft File: 12c27394-30f8-456b-b6d6-41b0dd1f8ea7.mft (raw, json) Hash identifier: EHbt0fbm8q6SYNEVmrqyvsfYraanXoC67LRqN28NfSg= Subject key identifier: 62:26:1B:56:97:27:26:68:CB:95:CD:E6:D8:8E:0D:47:08:CC:5B:89 Authority key identifier: 34:1C:FE:B7:77:82:40:98:6D:85:72:51:3E:60:FA:22:5D:F8:60:08 Certificate issuer: /CN=12c27394-30f8-456b-b6d6-41b0dd1f8ea7 Certificate serial: 010D0C9F4328584BB86F0E148976A4387B551540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.mft Manifest number: 010D0C9F4328584073A830CF2D94829A2268942C Signing time: Sun 02 Nov 2025 00:00:08 +0000 Manifest this update: Sun 02 Nov 2025 00:00:08 +0000 Manifest next update: Tue 04 Nov 2025 00:00:00 +0000 Files and hashes: 1: 12c27394-30f8-456b-b6d6-41b0dd1f8ea7.crl (hash: Jo3uLaNks88T3doVwvNbxXPkNfur60LYVkCh5mUGFuk=) 2: 1934753e-e7d4-3b1d-961f-b7e3b6b3b327.roa (hash: 9xqkeVUGpjHC8kAOXPzTYZ+MVYeKKhnj2gGQo74BF0A=) 3: 4a8e7d97-bd86-335b-af97-d8d14227856b.roa (hash: V8vc8rmq78WnXK8jAdv3T6Vfn5x4oXxN3RgTaKxbhU0=) 4: 8448860c-5f20-3a3d-9ada-742f3ce6c9a7.roa (hash: 4jv2/2/sApnMbKWeZcAWevez9cnxe7zh742bxXUb6c8=) 5: 901d8d49-28b6-3944-8f99-d58261fac2cc.roa (hash: t9ca0APxREG+YmKjchBfAajwK6Q7gtvTPIdA99qKHJk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:6f:0e:14:89:76:a4:38:7b:55:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c27394-30f8-456b-b6d6-41b0dd1f8ea7 Validity Not Before: Nov 2 00:00:08 2025 GMT Not After : Nov 4 00:00:00 2025 GMT Subject: CN=268bfbbf-024d-479a-b649-d0a17e98c1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:9a:f1:1e:aa:06:92:16:9b:0c:54:4d:a2: f0:e8:fa:d8:e7:89:11:73:a7:c9:bf:1b:c1:74:bf: d7:75:7f:0e:58:1c:4b:a4:50:2a:0c:03:b2:a9:af: c5:07:7b:a3:de:8c:9b:2d:f3:8d:b3:4f:9d:8d:3b: 70:5f:09:96:db:8d:6c:8c:b7:71:31:2a:45:86:d1: 4b:1a:24:89:0b:67:97:da:a9:59:77:c3:b8:3c:22: 58:9b:43:e6:13:71:52:bf:4c:d8:f1:11:b4:16:bd: ea:6e:23:58:d2:99:15:30:f2:bc:79:27:81:22:9d: a0:f8:84:ca:94:f5:8f:98:8e:10:99:e9:31:bf:67: 6a:e5:d9:c7:17:80:c5:d4:a5:f1:e1:7b:d7:31:cf: 0c:6f:73:64:0d:10:6d:70:cb:db:d9:dc:96:f8:61: 0d:a8:fb:5b:f5:78:a9:ae:63:e7:03:d1:1e:37:f8: 0d:02:04:cc:8a:8d:48:86:26:5b:ed:c7:41:91:d3: c4:a2:e1:e3:0f:be:ba:da:53:ba:b2:5b:b4:c5:7a: 1e:ee:99:82:64:25:3d:5f:5f:04:e8:92:ee:48:a0: 44:e4:4d:75:98:c9:fc:69:26:4d:b7:d5:83:e0:b3: af:22:e6:b7:34:52:b7:ba:da:29:a2:e0:c1:5f:c3: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:26:1B:56:97:27:26:68:CB:95:CD:E6:D8:8E:0D:47:08:CC:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.crl X509v3 Authority Key Identifier: keyid:34:1C:FE:B7:77:82:40:98:6D:85:72:51:3E:60:FA:22:5D:F8:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12c27394-30f8-456b-b6d6-41b0dd1f8ea7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:21:3f:ac:a8:d6:fe:fc:c5:c9:95:36:eb:03:2f:81:5b:e7: cf:c1:64:15:35:15:6d:d3:00:1f:27:5c:ba:bf:5a:50:86:14: 14:2c:ab:47:16:d5:db:34:c4:cc:1e:a8:9a:b4:7e:70:52:15: 9b:b7:d1:c9:4b:bc:db:d3:94:4b:6d:16:f3:3a:50:63:5f:9d: 2d:22:db:aa:2d:57:73:b5:26:af:4a:e1:f3:6e:8c:d2:e2:a4: c0:30:7d:34:95:1b:72:1b:f1:8f:6a:6a:e2:8a:94:39:12:d5: 2f:4f:8c:68:cd:d6:f0:ba:fe:3b:3c:ad:37:8b:8e:02:2c:21: ff:06:91:fb:6e:2d:3f:0f:81:f8:e1:75:4b:23:60:85:ac:38: 85:4b:6a:ec:b3:d8:34:31:62:40:d3:c0:09:7d:a9:5f:e2:9c: e9:66:6b:b8:74:c2:98:95:23:bd:fb:82:90:94:18:57:9e:60: 37:d3:d0:39:4c:1c:60:f1:02:08:fa:82:45:76:74:ea:04:56: af:fc:19:f4:fd:14:bb:ed:b2:19:54:ac:2f:ac:66:1c:f9:15: 8c:6d:5e:16:f0:8b:71:b9:ec:3f:2e:f3:28:2f:af:32:f8:dc: 30:64:0d:a1:fb:ee:99:a6:fd:70:25:87:26:f9:70:78:75:cc: a8:7a:9c:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu4bw4UiXakOHtVFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJjMjczOTQtMzBmOC00NTZiLWI2ZDYtNDFiMGRkMWY4 ZWE3MB4XDTI1MTEwMjAwMDAwOFoXDTI1MTEwNDAwMDAwMFowLzEtMCsGA1UEAxMk MjY4YmZiYmYtMDI0ZC00NzlhLWI2NDktZDBhMTdlOThjMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTqa8R6qBpIWmwxUTaLw6PrY54kRc6fJvxvB dL/XdX8OWBxLpFAqDAOyqa/FB3uj3oybLfONs0+djTtwXwmW241sjLdxMSpFhtFL GiSJC2eX2qlZd8O4PCJYm0PmE3FSv0zY8RG0Fr3qbiNY0pkVMPK8eSeBIp2g+ITK lPWPmI4Qmekxv2dq5dnHF4DF1KXx4XvXMc8Mb3NkDRBtcMvb2dyW+GENqPtb9Xip rmPnA9EeN/gNAgTMio1IhiZb7cdBkdPEouHjD7662lO6slu0xXoe7pmCZCU9X18E 6JLuSKBE5E11mMn8aSZNt9WD4LOvIua3NFK3utopouDBX8MZdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGImG1aXJyZoy5XN5tiODUcIzFuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMmMy NzM5NC0zMGY4LTQ1NmItYjZkNi00MWIwZGQxZjhlYTcvMTJjMjczOTQtMzBmOC00 NTZiLWI2ZDYtNDFiMGRkMWY4ZWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTJjMjczOTQtMzBmOC00NTZiLWI2 ZDYtNDFiMGRkMWY4ZWE3LzEyYzI3Mzk0LTMwZjgtNDU2Yi1iNmQ2LTQxYjBkZDFm OGVhNy5jcmwwHwYDVR0jBBgwFoAUNBz+t3eCQJhthXJRPmD6Il34YAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMmMyNzM5NC0zMGY4LTQ1NmItYjZkNi00MWIw ZGQxZjhlYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1IT+sqNb+/MXJlTbrAy+B W+fPwWQVNRVt0wAfJ1y6v1pQhhQULKtHFtXbNMTMHqiatH5wUhWbt9HJS7zb05RL bRbzOlBjX50tItuqLVdztSavSuHzbozS4qTAMH00lRtyG/GPamriipQ5EtUvT4xo zdbwuv47PK03i44CLCH/BpH7bi0/D4H44XVLI2CFrDiFS2rss9g0MWJA08AJfalf 4pzpZmu4dMKYlSO9+4KQlBhXnmA309A5TBxg8QII+oJFdnTqBFav/Bn0/RS77bIZ VKwvrGYc+RWMbV4W8Itxuew/LvMoL68y+NwwZA2h++6Zpv1wJYcm+XB4dcyoepxp -----END CERTIFICATE-----Generated at Sun Nov 2 07:40:40 2025 by rpki-client