$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft File: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft (raw, json) Hash identifier: o5ElN3Em1RbJSWobOBMuAroZ2FRRRz8T8HxaBrGs5kM= Subject key identifier: 93:8C:DA:A7:97:FF:D8:20:EE:4A:57:28:08:0B:D9:B5:E8:2D:68:8C Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F4328584BC34076DA5DAC659562099C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft Manifest number: 010D0C9F4328584073A825ACC8E0595BA4259D25 Signing time: Wed 05 Nov 2025 21:00:08 +0000 Manifest this update: Wed 05 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (hash: OTU4rbXNbbBphC/iC+RM8RTYQIc98of0HAm4sA2K7Rw=) 2: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl (hash: 5qlaKfkpnpuarhnO9k8zSpZqzVr/cdae05L1WV0WIhI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:40:76:da:5d:ac:65:95:62:09:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Nov 5 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=3055f417-9a2b-4e55-aa38-593ed9fd69d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:15:b4:e9:36:05:b7:af:17:04:db:74:0a: 7b:02:29:90:35:75:b9:09:ef:f9:08:4f:3f:46:6a: 6c:fb:77:9e:fe:75:14:ff:80:ae:6b:70:68:70:93: 78:d3:6e:52:76:64:56:82:0e:0c:d9:37:12:7d:c3: 3e:d4:96:90:4d:a1:ce:b6:8d:a7:c0:f8:56:7b:e9: 17:d0:55:d6:42:19:e6:ad:47:d7:42:da:a0:d4:88: 9c:ad:2f:0f:ee:28:05:27:50:26:f8:7c:19:d9:c2: 52:4d:23:dd:97:ef:47:57:1c:d2:52:49:a7:14:e1: 84:2b:be:e5:c8:ef:7b:de:f8:84:4d:46:42:59:c6: ef:b8:2f:69:59:a9:92:f8:ec:f1:4f:3e:6b:41:e2: c9:c7:c9:b1:ff:10:f2:84:2c:3b:61:3a:2c:9f:0e: aa:f6:18:19:a6:56:21:ab:b0:11:62:53:5c:22:6a: a3:17:69:84:a5:da:82:54:87:37:1c:4a:63:0c:1b: 62:6c:e7:9a:05:95:58:d9:5a:8b:a9:6f:97:d2:d1: 09:df:d9:36:38:67:73:54:82:64:12:12:17:32:53: 59:29:f9:97:1b:2e:2a:d6:d4:1c:06:f4:05:92:bd: 98:1f:f9:f2:c7:8d:b8:67:b6:d4:9b:2b:5a:59:d9: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8C:DA:A7:97:FF:D8:20:EE:4A:57:28:08:0B:D9:B5:E8:2D:68:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d4:9f:45:54:5f:db:00:28:10:bd:47:3b:04:ef:d2:0e:eb: 7f:f8:06:fe:61:f3:8c:49:8a:97:46:00:7f:48:5d:74:72:bd: b5:e9:0d:68:fd:c6:02:4f:9b:71:58:47:d7:3d:9d:59:b3:49: d0:fa:9d:d2:ac:7a:cd:1d:f3:4e:df:7d:55:34:c2:e8:02:20: 01:1e:6c:ff:fc:9d:79:c3:7d:78:7d:99:42:e0:60:cb:67:af: 0d:cc:2d:d1:97:a4:a1:77:7b:59:1a:af:bc:36:19:e5:07:1c: da:df:51:3d:ba:cd:68:5b:5d:2a:d5:62:c4:a9:61:5e:c9:60: 77:24:09:22:09:1e:4b:2e:f7:cb:74:bf:78:54:a8:4d:d7:63: 31:c1:d1:18:21:2b:24:2f:6d:6a:f8:cf:81:bd:f8:0d:9a:ea: 94:d5:56:b7:0b:3a:f5:a4:f8:45:1f:7c:a3:e1:62:83:6a:c5: 15:fa:90:63:ed:a9:2a:1f:0c:3c:a3:b2:73:1f:f4:5f:2d:46: 1a:74:b3:67:43:f7:b3:67:f0:37:33:73:6c:88:8a:eb:46:63: 8f:ba:78:3d:f9:6c:2d:56:6b:e3:b0:40:aa:fb:ef:3b:a3:92: 9a:d8:03:2f:b6:c9:3d:5a:de:86:5d:c3:75:de:41:50:da:5b: 72:d5:ff:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvDQHbaXaxllWIJnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI1MTEwNTIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk MzA1NWY0MTctOWEyYi00ZTU1LWFhMzgtNTkzZWQ5ZmQ2OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSgVtOk2BbevFwTbdAp7AimQNXW5Ce/5CE8/ Rmps+3ee/nUU/4Cua3BocJN4025SdmRWgg4M2TcSfcM+1JaQTaHOto2nwPhWe+kX 0FXWQhnmrUfXQtqg1IicrS8P7igFJ1Am+HwZ2cJSTSPdl+9HVxzSUkmnFOGEK77l yO973viETUZCWcbvuC9pWamS+OzxTz5rQeLJx8mx/xDyhCw7YTosnw6q9hgZplYh q7ARYlNcImqjF2mEpdqCVIc3HEpjDBtibOeaBZVY2VqLqW+X0tEJ39k2OGdzVIJk EhIXMlNZKfmXGy4q1tQcBvQFkr2YH/nyx424Z7bUmytaWdlbNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJOM2qeX/9gg7kpXKAgL2bXoLWiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvYWMyYmQ1OTEtYjQ1ZS00 N2M2LTkzZjktODNmYjRhOTVlOWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK1J9FVF/bACgQvUc7BO/S Dut/+Ab+YfOMSYqXRgB/SF10cr216Q1o/cYCT5txWEfXPZ1Zs0nQ+p3SrHrNHfNO 331VNMLoAiABHmz//J15w314fZlC4GDLZ68NzC3Rl6Shd3tZGq+8NhnlBxza31E9 us1oW10q1WLEqWFeyWB3JAkiCR5LLvfLdL94VKhN12MxwdEYISskL21q+M+BvfgN muqU1Va3Czr1pPhFH3yj4WKDasUV+pBj7akqHww8o7JzH/RfLUYadLNnQ/ezZ/A3 M3NsiIrrRmOPung9+WwtVmvjsECq++87o5Ka2AMvtsk9Wt6GXcN13kFQ2lty1f9h -----END CERTIFICATE-----Generated at Thu Nov 6 06:06:18 2025 by rpki-client