$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft File: d5f40b37-0b89-4790-9a53-8f690461c4ff.mft (raw, json) Hash identifier: s3/mfCgQFSOUqzWZ2d3Lz2AfoRU1UQQBquqe9TzE+k0= Subject key identifier: EA:3F:69:53:1B:CB:68:EB:0D:96:BB:FF:F6:34:38:E5:87:9E:9C:33 Authority key identifier: 52:4B:B0:DB:FC:00:35:CF:36:6F:69:55:09:87:E2:02:ED:6D:4C:A9 Certificate issuer: /CN=d5f40b37-0b89-4790-9a53-8f690461c4ff Certificate serial: 010D0C9F4328584BA98B61065E8B6F7696EED900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft Manifest number: 010D0C9F43285849AD8DA8D10F358034F35F2B3E Signing time: Mon 27 Oct 2025 16:00:03 +0000 Manifest this update: Mon 27 Oct 2025 16:00:03 +0000 Manifest next update: Thu 30 Oct 2025 16:00:00 +0000 Files and hashes: 1: c86827f2-2366-35c4-a6fd-8c5f617121e8.roa (hash: O0HuAr1QEPsNk5blKMP3iF6konisj8dMAmK87ecj37E=) 2: d5f40b37-0b89-4790-9a53-8f690461c4ff.crl (hash: 6oKbX+/u/ttgnCKKktabnZziXmC0nv2xThozOpZzbXE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:8b:61:06:5e:8b:6f:76:96:ee:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f40b37-0b89-4790-9a53-8f690461c4ff Validity Not Before: Oct 27 16:00:03 2025 GMT Not After : Oct 30 16:00:00 2025 GMT Subject: CN=d50f05bd-8739-49e2-b381-b5d3f4075a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:a6:1f:98:f0:d7:d5:41:fb:ca:ca:1c:2c: 34:42:cb:92:b8:6a:35:74:2f:a8:b7:d8:34:da:d3: 7b:f0:13:eb:2d:74:8e:e4:88:08:74:cb:ef:76:df: 5a:2a:1d:8b:6a:92:16:72:ef:3f:2b:f7:dd:13:01: 44:b8:88:6a:2f:21:e4:b9:60:d3:1b:9d:d4:18:e9: a0:a8:40:b3:b6:29:56:1e:1a:86:5d:f3:a1:28:6d: 1a:7a:25:55:1a:92:e6:04:71:db:14:c6:a0:9a:f6: ec:6e:44:f0:31:39:98:45:25:1c:ed:b3:b2:13:18: d7:79:bc:4d:00:9e:75:ef:92:e9:0c:a1:2a:8a:50: bc:2c:15:20:e1:35:ec:03:04:e6:b2:84:47:f8:a2: f2:fa:b5:f7:41:b0:8a:b3:7d:72:78:7b:5e:97:d5: 78:f5:77:15:77:21:28:9a:2f:8b:ca:26:ca:5c:dd: 7d:5a:da:a8:5d:83:d8:0b:2d:a3:42:ca:3e:96:c9: 55:5a:bf:55:9a:21:39:1c:d3:da:58:30:b9:a7:5e: 31:62:8e:5a:24:67:ff:98:a7:6c:b4:18:88:07:4c: d0:1e:be:3a:4a:26:06:ac:ac:2f:14:6d:e0:52:a9: f6:03:63:b0:54:54:aa:a6:a6:c4:97:cf:c4:a2:2e: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:69:53:1B:CB:68:EB:0D:96:BB:FF:F6:34:38:E5:87:9E:9C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.crl X509v3 Authority Key Identifier: keyid:52:4B:B0:DB:FC:00:35:CF:36:6F:69:55:09:87:E2:02:ED:6D:4C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:da:82:4f:57:c6:cc:52:b7:7f:23:a0:e4:e8:1f:25:c8:40: 77:fb:78:25:ea:68:b8:8b:f9:5c:a1:81:04:12:3a:68:ac:5a: 13:bb:78:c8:55:99:cf:68:6b:75:44:a5:5d:07:8f:66:2b:41: a4:9b:59:3c:95:3b:a6:b6:c8:27:1a:29:42:e3:18:b3:91:42: 6e:8d:20:fc:d1:e0:52:f7:35:8e:96:4d:dd:ae:15:8c:82:6f: e3:c0:d4:c2:08:7f:c9:5f:25:21:8b:91:58:cb:72:5d:9f:57: e8:58:34:9e:e1:12:ff:63:3d:57:14:83:a4:1d:81:38:29:0b: e3:3d:9f:fe:54:99:b5:8d:06:00:a9:00:d1:4a:26:74:de:57: c2:ea:57:56:dd:12:51:a9:36:60:7a:39:4e:72:ae:a9:04:db: 46:1c:2c:dc:61:f7:e6:68:1e:15:e1:6b:a2:b5:8a:50:97:c7: 29:51:fa:c0:02:99:d5:27:ad:51:7c:68:19:31:e4:a1:a2:c1: 29:c8:e8:80:b5:08:30:eb:25:d2:1a:58:98:aa:0d:1c:5b:ba: 68:2a:a7:b5:cc:57:f8:e7:bd:52:cf:d9:e9:b8:b4:ac:46:a9: 2f:08:ad:3f:b3:4f:56:b8:ce:2d:25:f3:81:1e:82:50:ac:5f: 64:ca:e1:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupi2EGXotvdpbu2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmNDBiMzctMGI4OS00NzkwLTlhNTMtOGY2OTA0NjFj NGZmMB4XDTI1MTAyNzE2MDAwM1oXDTI1MTAzMDE2MDAwMFowLzEtMCsGA1UEAxMk ZDUwZjA1YmQtODczOS00OWUyLWIzODEtYjVkM2Y0MDc1YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqimH5jw19VB+8rKHCw0QsuSuGo1dC+ot9g0 2tN78BPrLXSO5IgIdMvvdt9aKh2LapIWcu8/K/fdEwFEuIhqLyHkuWDTG53UGOmg qECztilWHhqGXfOhKG0aeiVVGpLmBHHbFMagmvbsbkTwMTmYRSUc7bOyExjXebxN AJ5175LpDKEqilC8LBUg4TXsAwTmsoRH+KLy+rX3QbCKs31yeHtel9V49XcVdyEo mi+LyibKXN19WtqoXYPYCy2jQso+lslVWr9VmiE5HNPaWDC5p14xYo5aJGf/mKds tBiIB0zQHr46SiYGrKwvFG3gUqn2A2OwVFSqpqbEl8/Eoi450wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOo/aVMby2jrDZa7//Y0OOWHnpwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNWY0 MGIzNy0wYjg5LTQ3OTAtOWE1My04ZjY5MDQ2MWM0ZmYvZDVmNDBiMzctMGI4OS00 NzkwLTlhNTMtOGY2OTA0NjFjNGZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDVmNDBiMzctMGI4OS00NzkwLTlh NTMtOGY2OTA0NjFjNGZmL2Q1ZjQwYjM3LTBiODktNDc5MC05YTUzLThmNjkwNDYx YzRmZi5jcmwwHwYDVR0jBBgwFoAUUkuw2/wANc82b2lVCYfiAu1tTKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNWY0MGIzNy0wYjg5LTQ3OTAtOWE1My04ZjY5 MDQ2MWM0ZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM2oJPV8bMUrd/I6Dk6B8l yEB3+3gl6mi4i/lcoYEEEjporFoTu3jIVZnPaGt1RKVdB49mK0Gkm1k8lTumtsgn GilC4xizkUJujSD80eBS9zWOlk3drhWMgm/jwNTCCH/JXyUhi5FYy3Jdn1foWDSe 4RL/Yz1XFIOkHYE4KQvjPZ/+VJm1jQYAqQDRSiZ03lfC6ldW3RJRqTZgejlOcq6p BNtGHCzcYffmaB4V4WuitYpQl8cpUfrAApnVJ61RfGgZMeShosEpyOiAtQgw6yXS GliYqg0cW7poKqe1zFf4571Sz9npuLSsRqkvCK0/s09WuM4tJfOBHoJQrF9kyuHD -----END CERTIFICATE-----Generated at Tue Oct 28 03:15:46 2025 by rpki-client