$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft File: b4ac08c7-b64b-4701-92e6-e136f50164b9.mft (raw, json) Hash identifier: MMHPlt3a92xac1WYPUhXV1gWMDq+fBPcU7CW7JNJgMQ= Subject key identifier: 4F:91:00:76:55:97:30:86:11:3B:91:7D:DA:AF:0B:26:C6:BF:B2:25 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F4328584BC01C629C622FE99DCFAD09C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft Manifest number: 010D0C9F4328584073A820385373D51FA25FA544 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: b4ac08c7-b64b-4701-92e6-e136f50164b9.crl (hash: dtC7C0tWn1zXN5zoLONuN/DpTvfNKPPEroWpj6E+7LU=) 2: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (hash: 8nUm8oTlYx3LBaGqAaKlC2Z09IZOJc5nITNiI44V//s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:9c:62:2f:e9:9d:cf:ad:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=17f60414-9418-4767-926a-e521ce218c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:7c:58:82:ea:3b:4d:10:cf:5c:1d:9c:db: ad:60:1b:94:e0:32:60:bf:e4:6b:96:2e:e2:3c:34: 94:bd:53:52:c2:fc:f9:99:91:0c:fa:be:f8:df:eb: a8:ce:23:26:fd:b0:8b:4b:4c:7e:6e:6b:41:5c:ab: 71:26:af:16:c8:ce:80:4f:91:54:e4:40:5d:ae:40: 7e:46:bc:e7:47:e0:a5:4d:02:00:e7:01:79:5f:6c: 66:dc:5c:5e:20:a2:1d:38:5d:fb:e6:83:eb:1e:13: 47:86:b2:85:81:fb:9b:fe:4c:f7:fc:de:32:c2:52: e7:6b:f5:3e:c8:25:c4:e9:e9:7d:ec:2a:50:05:56: ab:f5:f0:45:63:43:a3:4a:93:cd:d2:a2:17:1a:b4: 15:e5:27:50:1d:fa:93:aa:77:e0:ab:59:33:c7:48: d4:17:66:88:4c:d0:19:b0:c6:6c:93:bb:e8:f2:45: 37:bc:53:29:a3:93:aa:08:3a:4c:4c:0c:7a:74:e2: 33:c4:b8:7b:3d:15:b6:a6:00:cd:b9:30:0e:ba:1a: ea:dc:cb:d5:c1:8c:65:76:39:9a:93:49:34:36:66: 55:77:4c:9f:76:bd:85:47:3d:0a:a0:5a:f8:fb:2a: ec:8c:2f:0d:a0:bf:83:27:a6:ba:56:ab:b0:bd:e6: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:91:00:76:55:97:30:86:11:3B:91:7D:DA:AF:0B:26:C6:BF:B2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0e:8b:fb:3c:ba:8a:4e:36:99:37:10:0e:a7:71:a5:50:e9: 96:fe:00:7c:af:0f:f3:35:20:4b:67:f6:f3:c1:b8:60:de:b8: 2b:e6:d2:29:37:66:cc:b6:ec:1c:6b:4d:13:af:1b:7a:52:f9: 9e:2b:6c:16:48:1d:c9:a3:ed:8a:84:69:ec:d6:88:59:17:f7: 55:10:8b:0a:01:3a:48:9b:28:57:62:6c:0b:81:54:41:37:d6: c0:75:cd:aa:d1:82:eb:f5:cf:14:f3:bb:f2:9f:6c:bf:21:68: d8:44:45:f6:f0:bc:ae:da:53:27:98:f4:18:d8:a4:1d:0d:3b: 49:bc:ab:d5:34:41:9c:12:57:d1:49:9b:01:20:ef:2b:5d:73: cd:35:71:0d:50:16:30:c4:8e:84:11:bc:c3:b3:2e:45:3a:dd: 2c:73:4f:e1:0c:a6:46:a0:50:f5:48:31:d0:81:b8:65:32:19: 4b:50:5e:69:81:b3:19:2c:7a:1d:95:02:93:3a:f0:62:bb:bc: da:f9:39:79:21:10:af:aa:c4:a9:37:69:00:da:6b:b8:e9:44: 9c:6a:5b:d5:cd:eb:b5:54:75:14:44:4c:bc:42:f9:75:14:4f: a0:3e:74:c1:e7:35:51:bf:fd:68:80:ae:57:29:2d:68:02:3a: ef:5d:12:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGKcYi/pnc+tCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk MTdmNjA0MTQtOTQxOC00NzY3LTkyNmEtZTUyMWNlMjE4YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB18WILqO00Qz1wdnNutYBuU4DJgv+Rrli7i PDSUvVNSwvz5mZEM+r743+uoziMm/bCLS0x+bmtBXKtxJq8WyM6AT5FU5EBdrkB+ RrznR+ClTQIA5wF5X2xm3FxeIKIdOF375oPrHhNHhrKFgfub/kz3/N4ywlLna/U+ yCXE6el97CpQBVar9fBFY0OjSpPN0qIXGrQV5SdQHfqTqnfgq1kzx0jUF2aITNAZ sMZsk7vo8kU3vFMpo5OqCDpMTAx6dOIzxLh7PRW2pgDNuTAOuhrq3MvVwYxldjma k0k0NmZVd0yfdr2FRz0KoFr4+yrsjC8NoL+DJ6a6VquwveaoWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE+RAHZVlzCGETuRfdqvCybGv7IlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvYjRhYzA4YzctYjY0Yi00 NzAxLTkyZTYtZTEzNmY1MDE2NGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxDov7PLqKTjaZNxAOp3Gl UOmW/gB8rw/zNSBLZ/bzwbhg3rgr5tIpN2bMtuwca00Trxt6UvmeK2wWSB3Jo+2K hGns1ohZF/dVEIsKATpImyhXYmwLgVRBN9bAdc2q0YLr9c8U87vyn2y/IWjYREX2 8Lyu2lMnmPQY2KQdDTtJvKvVNEGcElfRSZsBIO8rXXPNNXENUBYwxI6EEbzDsy5F Ot0sc0/hDKZGoFD1SDHQgbhlMhlLUF5pgbMZLHodlQKTOvBiu7za+Tl5IRCvqsSp N2kA2mu46UScalvVzeu1VHUUREy8Qvl1FE+gPnTB5zVRv/1ogK5XKS1oAjrvXRIV -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:41 2025 by rpki-client