$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft File: 7d172af9-258d-47d2-b4e6-7e0c02152fea.mft (raw, json) Hash identifier: SPX+WdeooGyscMzFfgcebcXpXOwJPJiR9Mr04QU2AUU= Subject key identifier: 87:41:B9:FF:FA:78:E7:5D:C5:10:76:EF:2B:AC:CD:3C:3F:40:A0:98 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F4328584BBE2232E120A5270C054D5C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft Manifest number: 010D0C9F432858424F53595E03DE2D788970B08E Signing time: Tue 04 Nov 2025 01:00:08 +0000 Manifest this update: Tue 04 Nov 2025 01:00:08 +0000 Manifest next update: Thu 06 Nov 2025 01:00:00 +0000 Files and hashes: 1: 7d172af9-258d-47d2-b4e6-7e0c02152fea.crl (hash: Nj5XYZobD3rHGIFLI0c202jbhsUhev5yzRjZ18cZVis=) 2: 8160f0e3-2d6f-3b91-9726-f47e80235128.roa (hash: +aUtr7g5IUPyz2lDhO73orEmj8Iz6WGkmGX7nWYQfGE=) 3: a561f62a-0e69-39cd-83e7-f82c0a8e291f.roa (hash: F/XaNuifFioHy0oXFWfyMqYZWztm9wctvsKBHZirWCY=) 4: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (hash: d0q1IQGIJJ+u0hVsVxzD3wWWqwn4IS0kJFiz9lrdINQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:22:32:e1:20:a5:27:0c:05:4d:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Nov 4 01:00:08 2025 GMT Not After : Nov 6 01:00:00 2025 GMT Subject: CN=e5d52c7d-fcf9-4f9f-a683-d33bb47f075b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:d9:8c:33:6a:c3:b0:06:8c:7e:03:ff:1a: 6b:b6:e7:5e:8b:2d:a9:16:3c:91:6b:d0:14:c3:ff: 95:cc:7e:2f:a4:27:76:24:02:3b:e9:e2:e6:64:2f: f9:18:30:cb:d9:bf:ed:f3:c7:1c:cd:ca:99:16:0b: b6:46:fb:d8:ce:20:60:d6:6e:b8:be:e1:85:e6:3f: 8e:be:09:ca:b3:96:21:7f:ed:f0:b3:d1:b6:26:fe: 3c:49:ae:d7:a8:95:6f:e0:aa:0f:ca:db:5c:2f:71: aa:a5:30:14:cb:a9:37:97:a8:3f:5f:43:d6:06:67: 15:de:51:e0:f2:90:42:26:b7:56:ab:ac:07:50:76: 34:63:da:29:c8:f3:59:e3:95:ce:2f:a5:11:62:d2: 30:83:de:a7:22:eb:3a:fe:40:51:e9:b6:fb:77:73: df:4f:58:f3:0d:c8:e8:04:96:bb:b8:c5:0e:9e:22: f4:69:b6:73:62:a9:6b:ea:b6:54:62:5b:79:43:c7: 6e:19:c5:11:31:f7:35:1a:df:80:94:8c:f5:e2:35: 1a:72:a0:4f:9a:c4:f7:1b:d6:4b:9c:d8:31:b9:e9: 1c:ea:28:fc:52:9b:22:33:e3:ab:42:e2:9e:24:81: e6:3d:fa:f4:64:52:23:e2:fe:ba:b9:cf:81:b7:ac: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:B9:FF:FA:78:E7:5D:C5:10:76:EF:2B:AC:CD:3C:3F:40:A0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fd:d6:dd:26:af:f0:99:9e:a0:46:16:81:cd:f1:51:e1:04: 14:a9:fa:33:27:9b:59:25:49:10:9f:3d:03:de:5b:15:bb:f8: 4c:47:64:46:17:17:21:7d:16:0d:44:54:17:80:2d:cd:81:26: 73:e1:b3:a8:8f:04:ae:9e:a1:f8:16:47:3a:e0:be:61:53:c3: fd:53:6b:49:ba:1b:fd:6f:dd:81:bf:32:33:f9:80:6a:a3:f6: ce:53:ad:fa:c1:3c:0a:0d:aa:91:aa:1e:da:d7:59:ee:24:a4: b1:85:77:af:05:f6:7b:9e:d9:69:87:60:18:46:08:61:ec:86: 64:f7:13:08:59:4a:9a:08:61:43:3d:08:d0:21:e7:ce:13:4c: 5b:a4:ca:47:f4:34:ab:a7:b6:59:0a:29:be:2d:fc:41:d9:9b: ca:da:c3:a6:0d:aa:84:06:d9:6a:65:9f:d5:d5:ff:30:ca:93: 6f:3e:9f:3c:e5:b1:d2:26:a1:84:e4:2f:ec:a8:62:92:ae:90: 89:81:84:d4:6b:7a:c4:f1:d6:fe:e3:6c:3a:da:85:67:72:b8: e6:ef:d5:0e:bc:56:3e:16:88:44:46:d7:54:2e:e5:cb:18:53: 8d:25:a2:bf:48:5b:db:51:a8:c3:1e:3f:6b:ba:ee:77:2f:e8: 34:57:34:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+IjLhIKUnDAVNXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI1MTEwNDAxMDAwOFoXDTI1MTEwNjAxMDAwMFowLzEtMCsGA1UEAxMk ZTVkNTJjN2QtZmNmOS00ZjlmLWE2ODMtZDMzYmI0N2YwNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE3ZjDNqw7AGjH4D/xprtudeiy2pFjyRa9AU w/+VzH4vpCd2JAI76eLmZC/5GDDL2b/t88cczcqZFgu2RvvYziBg1m64vuGF5j+O vgnKs5Yhf+3ws9G2Jv48Sa7XqJVv4KoPyttcL3GqpTAUy6k3l6g/X0PWBmcV3lHg 8pBCJrdWq6wHUHY0Y9opyPNZ45XOL6URYtIwg96nIus6/kBR6bb7d3PfT1jzDcjo BJa7uMUOniL0abZzYqlr6rZUYlt5Q8duGcURMfc1Gt+AlIz14jUacqBPmsT3G9ZL nNgxuekc6ij8UpsiM+OrQuKeJIHmPfr0ZFIj4v66uc+Bt6zWOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIdBuf/6eOddxRB27yuszTw/QKCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvN2QxNzJhZjktMjU4ZC00 N2QyLWI0ZTYtN2UwYzAyMTUyZmVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl/dbdJq/wmZ6gRhaBzfFR 4QQUqfozJ5tZJUkQnz0D3lsVu/hMR2RGFxchfRYNRFQXgC3NgSZz4bOojwSunqH4 Fkc64L5hU8P9U2tJuhv9b92BvzIz+YBqo/bOU636wTwKDaqRqh7a11nuJKSxhXev BfZ7ntlph2AYRghh7IZk9xMIWUqaCGFDPQjQIefOE0xbpMpH9DSrp7ZZCim+LfxB 2ZvK2sOmDaqEBtlqZZ/V1f8wypNvPp885bHSJqGE5C/sqGKSrpCJgYTUa3rE8db+ 42w62oVncrjm79UOvFY+FohERtdULuXLGFONJaK/SFvbUajDHj9ruu53L+g0VzSw -----END CERTIFICATE-----Generated at Tue Nov 4 05:15:06 2025 by rpki-client