$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft File: 1794548d-96a3-4f5c-9451-2571ed4ac097.mft (raw, json) Hash identifier: fdIR3E0/H8X/JrfVr7DttKouJqz50QyMMoJ6/c7U6lI= Subject key identifier: 5D:F7:01:6A:84:A5:15:59:09:A3:8F:BC:D1:C4:33:E9:BA:AD:AD:CE Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584BB8513AC437312B3D914C3C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft Manifest number: 010D0C9F4328584073A830009ABD42796CF58699 Signing time: Sat 01 Nov 2025 23:00:03 +0000 Manifest this update: Sat 01 Nov 2025 23:00:03 +0000 Manifest next update: Mon 03 Nov 2025 23:00:00 +0000 Files and hashes: 1: 1794548d-96a3-4f5c-9451-2571ed4ac097.crl (hash: 9xwLPqa90lmERRWIQFz+UqFnrixGok/pUOGHPflXrC0=) 2: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (hash: NZucJpGoylVZXJj20ZU+mtaeWOKHlY4IlRmDjGQO8Ck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:51:3a:c4:37:31:2b:3d:91:4c:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Nov 1 23:00:03 2025 GMT Not After : Nov 3 23:00:00 2025 GMT Subject: CN=b946db3c-30f1-4d85-88f0-b573baaf2445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:81:b8:67:a3:1a:4e:c7:22:5a:27:84:29:8c: cf:97:b4:14:70:84:fa:c3:68:ed:81:e8:51:11:12: a7:6a:dc:4c:4c:bf:48:a5:45:c1:25:06:a7:be:06: 67:93:03:dd:97:c0:44:10:30:95:99:e9:97:63:7d: 08:65:1d:84:7b:49:5f:1b:f3:98:2a:57:86:3a:1b: c0:61:b3:92:df:7f:24:a3:70:b6:ae:3c:5d:ca:31: 62:ab:3c:18:18:98:76:1f:30:4e:47:53:a0:54:3b: 15:96:12:23:00:3a:8d:22:d1:43:30:e2:bd:ab:99: 29:d4:4e:68:c9:e3:67:56:1c:3b:b1:40:9c:af:af: 05:f5:a8:9d:2b:d4:a9:9b:47:d9:17:c5:32:df:65: cd:f5:17:b1:77:5d:01:1b:03:a0:47:e1:64:51:b8: 83:df:b1:27:00:65:16:2c:ca:4e:1e:36:f5:5b:6c: 97:dc:a9:40:6f:31:93:38:b2:07:13:70:be:96:ab: 4b:ec:e6:65:b6:9e:4f:5d:ec:22:43:ca:47:31:0e: 00:4c:e0:07:fb:5e:e4:93:fa:78:30:3a:e8:43:09: 1d:c3:93:9c:80:84:79:d2:6f:a3:95:b0:37:e8:a2: c6:03:e5:81:90:c6:d4:43:11:4c:f4:3f:bd:6e:82: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F7:01:6A:84:A5:15:59:09:A3:8F:BC:D1:C4:33:E9:BA:AD:AD:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6a:92:d4:95:53:de:c7:49:94:f1:b3:41:bc:5c:2b:03:d6: 2e:42:e7:ee:a4:b6:5b:e8:7b:e3:a6:62:ee:4b:cd:98:a2:8f: 98:3f:7c:b7:a1:e1:8f:18:d9:ab:99:ee:ad:7f:0e:4c:00:c8: e2:7c:f6:57:4b:c6:79:d6:7c:94:75:94:00:8f:84:b5:dd:26: fe:43:f6:09:eb:1f:57:7a:38:91:e8:05:9e:db:c7:0a:4e:cb: 0f:ca:d3:57:43:38:d1:8e:17:73:21:c7:14:cb:61:a5:ef:b8: 79:a8:08:93:68:5d:d9:bf:43:aa:0b:ed:75:cb:0d:ed:59:a7: 89:79:d7:ac:77:7b:19:06:25:bd:36:74:45:f9:07:06:08:12: ab:da:ed:12:33:7c:27:e9:80:90:87:67:b1:4b:9d:9c:b7:c3: 99:c7:d7:36:58:c5:7c:08:87:29:b1:b5:a8:4c:ab:f4:d9:7e: 1f:96:c5:b4:17:be:db:8c:ae:46:35:34:f6:c9:50:92:bb:6e: 53:12:07:5f:c6:7e:66:4b:35:85:b8:9f:5c:87:5f:ce:2a:8c: c5:e7:8a:9c:a9:4c:48:36:28:17:58:da:d1:fb:6c:e6:e5:5c: fa:47:8b:af:c2:69:49:60:55:03:61:56:52:4d:fb:c2:31:da: b7:be:5d:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu4UTrENzErPZFMPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI1MTEwMTIzMDAwM1oXDTI1MTEwMzIzMDAwMFowLzEtMCsGA1UEAxMk Yjk0NmRiM2MtMzBmMS00ZDg1LTg4ZjAtYjU3M2JhYWYyNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oG4Z6MaTsciWieEKYzPl7QUcIT6w2jtgehR ERKnatxMTL9IpUXBJQanvgZnkwPdl8BEEDCVmemXY30IZR2Ee0lfG/OYKleGOhvA YbOS338ko3C2rjxdyjFiqzwYGJh2HzBOR1OgVDsVlhIjADqNItFDMOK9q5kp1E5o yeNnVhw7sUCcr68F9aidK9Spm0fZF8Uy32XN9Rexd10BGwOgR+FkUbiD37EnAGUW LMpOHjb1W2yX3KlAbzGTOLIHE3C+lqtL7OZltp5PXewiQ8pHMQ4ATOAH+17kk/p4 MDroQwkdw5OcgIR50m+jlbA36KLGA+WBkMbUQxFM9D+9boK9mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF33AWqEpRVZCaOPvNHEM+m6ra3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTc5NDU0OGQtOTZhMy00 ZjVjLTk0NTEtMjU3MWVkNGFjMDk3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEapLUlVPex0mU8bNBvFwr A9YuQufupLZb6HvjpmLuS82Yoo+YP3y3oeGPGNmrme6tfw5MAMjifPZXS8Z51nyU dZQAj4S13Sb+Q/YJ6x9XejiR6AWe28cKTssPytNXQzjRjhdzIccUy2Gl77h5qAiT aF3Zv0OqC+11yw3tWaeJedesd3sZBiW9NnRF+QcGCBKr2u0SM3wn6YCQh2exS52c t8OZx9c2WMV8CIcpsbWoTKv02X4flsW0F77bjK5GNTT2yVCSu25TEgdfxn5mSzWF uJ9ch1/OKozF54qcqUxINigXWNrR+2zm5Vz6R4uvwmlJYFUDYVZSTfvCMdq3vl3D -----END CERTIFICATE-----Generated at Sun Nov 2 16:34:32 2025 by rpki-client