$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft File: 391a6c01-da6c-449a-9b50-ba54fb84039a.mft (raw, json) Hash identifier: 2D7kd+qfXGkGztG72rR96ga91HiLUn1jIkVVgfDaMtI= Subject key identifier: A3:91:CE:53:78:55:23:F7:CF:52:F1:C5:16:5C:E9:34:7D:E0:B5:7D Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a Certificate serial: 010D0C9F4328584BA89D216960208A89DE3E8480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft Manifest number: 010D0C9F432858440EC75423D0E1769E88E3089D Signing time: Mon 27 Oct 2025 08:00:04 +0000 Manifest this update: Mon 27 Oct 2025 08:00:04 +0000 Manifest next update: Wed 29 Oct 2025 08:00:00 +0000 Files and hashes: 1: 391a6c01-da6c-449a-9b50-ba54fb84039a.crl (hash: fCuztqx3e72PkDU7XPzK3vTvhgr3p0CEMGnDGyDA4I4=) 2: 50266634-758a-353f-871a-b6e402b25f31.roa (hash: B9aJDfL+RtvjlXMJGYB+jGTHDzaNhP9xFL4lhpAIeAw=) 3: da93378e-6d07-3a1e-98f7-6ec0063c7938.roa (hash: FTrxHJbT8HhDzOa1zuigdhFg0mz8bKOemKFUPat6hPo=) 4: f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (hash: 1/Pt0OB7njLfDAerZ0bAX1TS89oiVB6BozsJ2k2UYjA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:9d:21:69:60:20:8a:89:de:3e:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a Validity Not Before: Oct 27 08:00:04 2025 GMT Not After : Oct 29 08:00:00 2025 GMT Subject: CN=970ebff4-ee24-4c91-86fa-d457c9b181f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:ac:57:d1:41:21:c6:97:df:93:d6:fc:49: 83:e0:30:60:29:c5:22:9b:0d:82:22:9c:31:8b:33: 1e:39:62:4e:d9:1e:e7:77:76:64:ac:f6:7a:a2:5b: 9e:c3:de:08:b6:10:77:90:e4:11:28:e8:f9:01:a8: 1d:28:ca:3e:10:65:ca:bc:bc:6a:2a:f8:67:cd:bf: ab:cd:ec:67:2e:6f:ec:7b:b1:96:ba:cc:5e:c1:e4: 79:69:c0:84:af:e4:de:d1:50:14:8d:d3:71:0a:d4: 48:0f:75:69:a8:a8:03:6c:09:62:21:ef:9f:62:6e: 7e:ad:10:40:8d:7f:c0:07:f1:d1:21:30:ee:ca:9f: 7b:89:98:c6:ee:20:10:89:be:a7:a6:ef:82:e9:be: eb:4f:70:44:26:a6:71:a2:f7:fb:52:8e:50:04:f8: e7:a2:cd:5f:5f:df:6f:c3:46:b8:ef:e1:91:7d:44: f8:0b:c4:1d:b2:59:f8:1b:19:9e:4e:c6:5d:eb:28: 47:24:78:25:ed:45:75:4b:10:67:c4:46:20:3a:9c: 1d:9f:ac:da:15:10:0f:c5:64:3b:b2:c9:fb:a7:f9: 36:23:4b:1c:dc:c9:a9:a0:cb:73:4b:5c:ec:85:b3: ec:57:34:48:0d:27:7c:66:58:85:06:af:e3:97:33: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:CE:53:78:55:23:F7:CF:52:F1:C5:16:5C:E9:34:7D:E0:B5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl X509v3 Authority Key Identifier: keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2c:a9:e2:55:52:fb:b7:f7:8c:e2:1f:35:82:8c:df:b5:88: 56:84:e6:a2:31:90:10:a1:88:d8:2e:4f:92:9f:04:9a:b0:58: 4d:f5:b8:01:35:6b:b9:7b:73:a8:dc:ab:4f:20:a6:19:19:18: 52:79:b2:83:d3:bc:84:fc:51:d8:00:13:1b:06:df:f9:a3:da: 31:fe:36:ff:de:a8:c8:57:c4:e0:a8:16:73:fa:e8:7c:7c:ef: 38:e5:72:7e:37:df:39:44:0b:53:de:97:2f:36:1a:b0:61:32: 0f:69:e4:6e:1e:45:45:e0:b9:28:ee:1e:af:e5:1d:66:aa:07: 43:93:a6:ec:3b:45:df:9c:25:bf:c5:e5:de:f3:e5:c6:4d:60: 3b:f9:a7:f1:34:e9:f3:97:ec:ee:bb:5a:8f:e1:b9:a4:55:2b: 89:50:4e:9e:de:4d:64:05:99:6a:7b:b2:5e:d3:73:ee:7e:8d: 04:9f:9a:32:aa:a3:11:c4:c7:fb:93:b9:cd:60:ef:cc:50:39: ec:a6:99:3b:68:c5:16:e3:85:3a:23:69:8f:eb:d4:82:b8:9b: 25:53:b8:eb:0f:77:25:7b:e4:f9:5b:7d:d1:ac:16:cd:39:c5: e1:61:16:c7:ba:c0:22:f3:42:67:bd:dc:37:eb:ac:bf:7e:9b: 18:a4:42:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuonSFpYCCKid4+hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkxYTZjMDEtZGE2Yy00NDlhLTliNTAtYmE1NGZiODQw MzlhMB4XDTI1MTAyNzA4MDAwNFoXDTI1MTAyOTA4MDAwMFowLzEtMCsGA1UEAxMk OTcwZWJmZjQtZWUyNC00YzkxLTg2ZmEtZDQ1N2M5YjE4MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloesV9FBIcaX35PW/EmD4DBgKcUimw2CIpwx izMeOWJO2R7nd3ZkrPZ6oluew94IthB3kOQRKOj5AagdKMo+EGXKvLxqKvhnzb+r zexnLm/se7GWusxeweR5acCEr+Te0VAUjdNxCtRID3VpqKgDbAliIe+fYm5+rRBA jX/AB/HRITDuyp97iZjG7iAQib6npu+C6b7rT3BEJqZxovf7Uo5QBPjnos1fX99v w0a47+GRfUT4C8Qdsln4GxmeTsZd6yhHJHgl7UV1SxBnxEYgOpwdn6zaFRAPxWQ7 ssn7p/k2I0sc3MmpoMtzS1zshbPsVzRIDSd8ZliFBq/jlzNgIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKORzlN4VSP3z1LxxRZc6TR94LV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFh NmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4NDAzOWEvMzkxYTZjMDEtZGE2Yy00 NDlhLTliNTAtYmE1NGZiODQwMzlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkxYTZjMDEtZGE2Yy00NDlhLTli NTAtYmE1NGZiODQwMzlhLzM5MWE2YzAxLWRhNmMtNDQ5YS05YjUwLWJhNTRmYjg0 MDM5YS5jcmwwHwYDVR0jBBgwFoAU02OLz5nQfmCBKU/RAYtha4JuYHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0 ZmI4NDAzOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSLKniVVL7t/eM4h81gozf tYhWhOaiMZAQoYjYLk+SnwSasFhN9bgBNWu5e3Oo3KtPIKYZGRhSebKD07yE/FHY ABMbBt/5o9ox/jb/3qjIV8TgqBZz+uh8fO845XJ+N985RAtT3pcvNhqwYTIPaeRu HkVF4Lko7h6v5R1mqgdDk6bsO0XfnCW/xeXe8+XGTWA7+afxNOnzl+zuu1qP4bmk VSuJUE6e3k1kBZlqe7Je03Pufo0En5oyqqMRxMf7k7nNYO/MUDnsppk7aMUW44U6 I2mP69SCuJslU7jrD3cle+T5W33RrBbNOcXhYRbHusAi80Jnvdw366y/fpsYpEJx -----END CERTIFICATE-----Generated at Tue Oct 28 06:48:21 2025 by rpki-client