$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft File: 511ed25c-3ac7-4d86-9290-879e3813322e.mft (raw, json) Hash identifier: FgLsdNuxUpxPmPRUbx5/tJcJ7NEEmoRPQFAFsXZHUjo= Subject key identifier: A5:8D:68:D5:AE:CE:15:2B:F3:AF:58:B0:72:5D:14:3E:2A:29:CB:ED Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584B9C2AE0B46CFD861CDD75E7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft Manifest number: 010D0C9F43285841EFE6102B086F82254ED047AD Signing time: Wed 22 Oct 2025 21:00:08 +0000 Manifest this update: Wed 22 Oct 2025 21:00:08 +0000 Manifest next update: Fri 24 Oct 2025 21:00:00 +0000 Files and hashes: 1: 511ed25c-3ac7-4d86-9290-879e3813322e.crl (hash: eIoqFtXbflcDEh9oRVqnF/G/39QbXrXVM/3zYS69Fv0=) 2: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (hash: KvOFKgH8rdYkelFqc1dPUasJferEwzUjBSrKbVQ2pMk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:2a:e0:b4:6c:fd:86:1c:dd:75:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Oct 22 21:00:08 2025 GMT Not After : Oct 24 21:00:00 2025 GMT Subject: CN=1a022ae7-d88e-4c3e-9992-cc2413f25c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:2a:69:7c:7f:28:47:ea:f0:57:c3:33:00: 3c:c3:be:c8:2b:0c:78:a6:20:47:6c:94:32:8c:36: 38:62:08:ec:91:b6:07:f3:c2:c4:0e:17:d0:7c:20: 60:ce:88:83:b5:44:ad:4a:20:45:79:ca:ee:22:5c: a1:ed:10:4e:45:7d:3d:20:1d:1d:03:d3:53:f0:b7: aa:1e:0e:25:09:dc:1c:5f:e0:d2:f5:0a:fd:ef:59: 7c:35:4d:91:5a:7b:e8:ec:90:fb:c9:fd:d4:d9:e1: 9f:d5:cb:71:98:37:b3:6d:0e:e7:e8:51:42:92:0c: 03:fa:d7:02:bd:6a:d6:d1:b8:ec:db:28:df:6b:8b: 41:f6:a5:b8:50:22:5c:c1:11:b3:f1:91:7b:c0:04: f8:b8:d7:52:11:de:a1:8f:85:29:3b:cd:f9:3c:f5: 66:ca:d1:87:0a:66:ba:21:9b:20:e5:49:da:19:2e: 0c:75:17:74:40:c9:e4:23:92:0a:44:7a:74:46:ca: 31:1b:2d:6b:6b:1f:b1:23:d4:f1:39:fe:e1:b8:2f: a9:94:8d:e9:cf:2c:d1:cb:28:08:9c:d4:0e:5d:79: 80:df:ec:12:36:87:60:d4:20:21:b2:c0:52:c7:e1: 4a:27:a5:d5:c9:fb:42:05:60:b1:cd:75:82:36:5f: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:68:D5:AE:CE:15:2B:F3:AF:58:B0:72:5D:14:3E:2A:29:CB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5e:a6:37:ff:6b:2d:d4:29:78:99:a8:19:78:ab:c0:fa:bd: 32:30:d2:53:93:be:08:43:c0:c8:25:bc:3b:b3:87:5e:0a:41: f6:6c:34:11:99:84:7f:2c:d1:00:bb:de:72:5a:4d:3b:86:b4: 51:d8:62:20:a6:70:ed:d2:04:70:16:64:ef:55:28:c6:03:9f: 74:90:7e:ab:9f:f2:1a:78:a1:31:34:fc:23:27:dd:9d:ef:c7: b4:12:61:bb:8b:d5:2b:08:3b:a8:38:ac:52:7d:e6:5a:70:fc: e3:7e:e4:de:b2:31:30:64:96:8f:55:ff:79:89:07:f8:2b:da: ae:1c:ce:5b:83:4c:e1:c1:1d:1f:70:c8:1f:9f:f3:99:e1:6a: 74:f0:b8:45:65:f8:30:6c:28:81:d1:69:e5:d1:03:bd:07:2c: d8:05:38:5f:e9:4c:88:f4:74:bd:70:b5:38:31:74:57:a6:1b: fe:27:87:3f:80:fe:9c:27:9e:2a:b8:46:98:22:b2:e7:c0:1d: 1d:8b:3d:8e:bb:2d:ef:09:4c:d1:15:e0:23:ef:bc:97:42:48: ec:fe:d3:6d:06:5c:5b:60:df:77:56:48:27:b5:e0:4b:20:f2: 6f:57:fd:92:14:06:99:78:b0:8c:7b:97:24:1f:c7:33:d6:ad: 68:ef:cb:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEucKuC0bP2GHN115+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI1MTAyMjIxMDAwOFoXDTI1MTAyNDIxMDAwMFowLzEtMCsGA1UEAxMk MWEwMjJhZTctZDg4ZS00YzNlLTk5OTItY2MyNDEzZjI1YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GcqaXx/KEfq8FfDMwA8w77IKwx4piBHbJQy jDY4YgjskbYH88LEDhfQfCBgzoiDtUStSiBFecruIlyh7RBORX09IB0dA9NT8Leq Hg4lCdwcX+DS9Qr971l8NU2RWnvo7JD7yf3U2eGf1ctxmDezbQ7n6FFCkgwD+tcC vWrW0bjs2yjfa4tB9qW4UCJcwRGz8ZF7wAT4uNdSEd6hj4UpO835PPVmytGHCma6 IZsg5UnaGS4MdRd0QMnkI5IKRHp0RsoxGy1rax+xI9TxOf7huC+plI3pzyzRyygI nNQOXXmA3+wSNodg1CAhssBSx+FKJ6XVyftCBWCxzXWCNl/4vQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKWNaNWuzhUr869YsHJdFD4qKcvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvNTExZWQyNWMtM2FjNy00 ZDg2LTkyOTAtODc5ZTM4MTMzMjJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuXqY3/2st1Cl4magZeKvA +r0yMNJTk74IQ8DIJbw7s4deCkH2bDQRmYR/LNEAu95yWk07hrRR2GIgpnDt0gRw FmTvVSjGA590kH6rn/IaeKExNPwjJ92d78e0EmG7i9UrCDuoOKxSfeZacPzjfuTe sjEwZJaPVf95iQf4K9quHM5bg0zhwR0fcMgfn/OZ4Wp08LhFZfgwbCiB0Wnl0QO9 ByzYBThf6UyI9HS9cLU4MXRXphv+J4c/gP6cJ54quEaYIrLnwB0diz2Ouy3vCUzR FeAj77yXQkjs/tNtBlxbYN93VkgnteBLIPJvV/2SFAaZeLCMe5ckH8cz1q1o78uP -----END CERTIFICATE-----Generated at Thu Oct 23 20:19:52 2025 by rpki-client