$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft File: a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json) Hash identifier: Uo/hcjMku1Z3ZACgE6mL4t7GNYdwxE2PO7FTV+L35QI= Subject key identifier: EC:5E:07:F4:64:70:FE:9E:AE:96:D7:4E:F5:6E:56:2E:40:40:1D:DA Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584B9512643643335D2726C60980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft Manifest number: 010D0C9F4328584073A8471614A6B3775D4E4594 Signing time: Mon 20 Oct 2025 08:00:08 +0000 Manifest this update: Mon 20 Oct 2025 08:00:08 +0000 Manifest next update: Thu 23 Oct 2025 08:00:00 +0000 Files and hashes: 1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: woc79tdmrh39ZqdY7D+16BjuFCKMDUTvzHuDvhXGB7k=) 2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: TWBdQWi5/rv+LzitgjvUiMoslBasftHybk0t+4NSu0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:12:64:36:43:33:5d:27:26:c6:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Oct 20 08:00:08 2025 GMT Not After : Oct 23 08:00:00 2025 GMT Subject: CN=8bec9cc4-a77b-40b4-a36d-9d3db3359783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:bd:8e:ad:2f:40:c0:78:26:e3:2d:8f:59: 9a:b3:f4:a0:47:fb:33:c6:27:7a:6c:48:fe:36:17: 3d:37:0e:96:15:ce:4f:28:cc:a3:28:57:3c:34:25: 7f:43:0e:a1:e1:71:5e:dd:4a:14:45:b6:f9:3a:9f: 16:25:a6:35:62:d8:70:d5:bb:98:15:92:87:17:46: bb:72:8b:d2:26:c6:9d:07:6e:3d:53:bb:3a:03:dd: 1e:d8:01:e0:bc:83:e5:e4:d8:03:9e:14:f0:f6:1d: ab:d7:ff:39:ed:de:3f:14:64:4f:14:8b:21:70:f2: 16:e1:1b:b6:3c:40:9c:bf:b2:8e:ca:4e:62:79:b9: c2:96:4b:41:9c:97:1b:7a:97:1c:35:bc:f5:8f:0b: 02:02:e5:4f:68:28:51:09:a2:3f:16:5b:3a:e6:81: c9:5f:0d:fa:6d:bb:73:26:79:2a:fd:b8:6f:41:42: 9d:1e:1c:2e:05:79:f5:c7:f7:89:fb:16:54:28:4f: ee:36:5f:44:d5:22:d4:51:da:67:0d:d9:0c:1d:5a: 05:2e:93:00:00:8d:fd:29:0d:c6:d3:9d:b4:0e:18: bc:1c:14:95:84:0f:1b:90:da:60:c0:47:57:ba:22: 04:24:36:90:34:6e:e7:3b:13:03:0a:cd:c8:3d:b7: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5E:07:F4:64:70:FE:9E:AE:96:D7:4E:F5:6E:56:2E:40:40:1D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ec:23:f0:ad:17:8f:a3:56:a6:e9:da:58:de:b7:96:7b:d2: a3:08:7a:5f:12:89:90:5f:38:3b:09:2b:c3:48:17:41:df:32: 45:8d:0a:b1:8c:b7:23:dc:0a:d2:2c:7f:34:d7:de:ff:a2:0d: 1a:24:55:d6:08:3b:ac:70:4b:e9:d9:92:a5:59:38:e7:bc:8f: 3f:83:21:e8:b4:07:a0:1e:bf:e7:58:22:4b:17:98:7f:ae:10: fd:0a:d0:41:0b:6b:50:64:18:ee:25:2f:cc:c3:43:41:c8:13: 57:30:24:62:78:3f:3c:15:8d:e2:87:24:9a:2d:44:e0:71:a6: 79:cc:cf:86:4f:dc:22:6a:d6:c6:3c:ef:7a:d1:70:e9:07:e1: 27:bd:87:43:a5:f2:1a:b5:2a:5b:47:bc:bd:e9:4a:ae:14:ff: d4:45:05:5e:a4:4d:6f:a4:8c:f1:d1:28:1b:82:5d:fd:c4:ab: 7a:4e:d2:35:12:f3:4e:f7:ac:8c:24:8d:a5:47:90:73:3c:0c: e7:82:b5:56:ae:dc:c1:8d:d5:03:fa:ac:d1:e7:91:8a:c0:e7: 0e:58:97:ca:1e:70:5d:b4:b9:ef:1a:37:ec:29:83:7a:39:fa: 2b:43:89:15:9e:1b:96:e8:9f:80:2c:44:df:ef:ca:c9:bd:64: 1f:16:1a:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVEmQ2QzNdJybGCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI1MTAyMDA4MDAwOFoXDTI1MTAyMzA4MDAwMFowLzEtMCsGA1UEAxMk OGJlYzljYzQtYTc3Yi00MGI0LWEzNmQtOWQzZGIzMzU5NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MW9jq0vQMB4JuMtj1mas/SgR/szxid6bEj+ Nhc9Nw6WFc5PKMyjKFc8NCV/Qw6h4XFe3UoURbb5Op8WJaY1Ythw1buYFZKHF0a7 covSJsadB249U7s6A90e2AHgvIPl5NgDnhTw9h2r1/857d4/FGRPFIshcPIW4Ru2 PECcv7KOyk5iebnClktBnJcbepccNbz1jwsCAuVPaChRCaI/Fls65oHJXw36bbtz Jnkq/bhvQUKdHhwuBXn1x/eJ+xZUKE/uNl9E1SLUUdpnDdkMHVoFLpMAAI39KQ3G 0520Dhi8HBSVhA8bkNpgwEdXuiIEJDaQNG7nOxMDCs3IPbc0lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOxeB/RkcP6erpbXTvVuVi5AQB3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvYTMzOThkYzEtZGUwMy00 ODQ0LTk1N2ItZTg4MmQ3ODc4YWUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU7CPwrRePo1am6dpY3reW e9KjCHpfEomQXzg7CSvDSBdB3zJFjQqxjLcj3ArSLH80197/og0aJFXWCDuscEvp 2ZKlWTjnvI8/gyHotAegHr/nWCJLF5h/rhD9CtBBC2tQZBjuJS/Mw0NByBNXMCRi eD88FY3ihySaLUTgcaZ5zM+GT9wiatbGPO960XDpB+EnvYdDpfIatSpbR7y96Uqu FP/URQVepE1vpIzx0Sgbgl39xKt6TtI1EvNO96yMJI2lR5BzPAzngrVWrtzBjdUD +qzR55GKwOcOWJfKHnBdtLnvGjfsKYN6OforQ4kVnhuW6J+ALETf78rJvWQfFhoN -----END CERTIFICATE-----Generated at Mon Oct 20 16:59:41 2025 by rpki-client