$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft File: 0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft (raw, json) Hash identifier: S//tzxG0HQaaa/8pgN85bwpR6eqcZJgy5cCvSHjThbY= Subject key identifier: 57:E7:5A:96:D7:93:03:64:01:06:69:80:9B:EB:84:15:EC:90:85:16 Authority key identifier: 2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA Certificate issuer: /CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Certificate serial: 010D0C9F4328584BC075C888EA74152323F4AD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft Manifest number: 010D0C9F4328584073A82A40CF0ED76A73702FE8 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 04d911aa-036c-302e-aec4-a9fdfb56ac50.roa (hash: +kbrKIE/BA72jKkQtO+Dr8xzdsgn8JBVI+7NWdP67gI=) 2: 0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl (hash: 57suBxfyr24+TX042XzECsZw9cRJ0oXghkoYaxBpusA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:88:ea:74:15:23:23:f4:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebf4b3-f223-4dcf-b466-5757dc91a10d Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=a65b8141-bb56-4aa6-a6ca-51c3c221b79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:48:58:3b:5f:4d:72:a3:0c:9e:d6:4f:09:58: 86:ea:bd:4f:d9:cc:95:bb:7a:2c:41:d9:46:bf:ba: ef:90:e3:05:de:97:21:cc:ae:d4:d6:ac:72:80:f3: df:be:9a:b9:01:b0:69:3a:f1:ab:b8:3f:81:89:38: 27:6f:55:bd:ba:d6:d9:99:a9:51:1d:20:cc:b4:96: 66:5e:7e:a8:dd:6f:2e:9e:dd:86:17:85:d6:45:fe: 56:03:12:2a:b6:18:fd:de:70:5e:ab:60:14:34:e5: 86:99:d2:15:98:9c:39:ad:ca:cd:3b:35:a5:b5:73: 2b:e7:2a:1b:b3:20:bf:b1:1f:14:c0:70:a3:f0:6d: d5:31:20:32:a9:ed:2d:09:cb:5a:51:89:bb:67:f2: 74:28:69:4f:fe:f9:9e:f0:5b:68:fa:20:5f:c1:de: 01:24:70:e2:72:79:2e:7d:43:61:64:53:91:d5:c2: 5d:f4:64:34:6d:a9:89:66:e4:fe:1e:2c:0d:9b:39: a8:4b:20:d0:f5:9c:24:aa:be:23:58:3d:ab:62:d7: e1:8c:52:83:55:9f:9c:ee:3a:8b:fa:62:14:59:57: 53:54:85:18:53:70:86:92:b0:8e:06:c8:14:c3:5f: 91:a0:73:16:8a:e8:7f:f6:57:53:e2:01:24:6e:c9: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E7:5A:96:D7:93:03:64:01:06:69:80:9B:EB:84:15:EC:90:85:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d/0cebf4b3-f223-4dcf-b466-5757dc91a10d.crl X509v3 Authority Key Identifier: keyid:2C:B1:C6:6F:30:76:4D:ED:BC:60:2E:48:E6:39:C0:66:25:09:3B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0cebf4b3-f223-4dcf-b466-5757dc91a10d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ff:fe:39:50:51:a6:21:ed:5b:58:a9:bc:d8:9f:6f:08:43: 4a:04:8e:bb:d2:db:b3:36:85:6b:25:49:e5:97:fd:a7:5b:cd: fe:10:ef:62:6c:46:61:35:86:c2:4a:7e:69:1d:2a:f7:05:f7: db:72:b2:d1:ae:a8:76:33:cf:38:7b:47:87:a6:15:e3:7d:d9: e3:b1:ca:c7:3f:5c:82:12:48:9e:8e:eb:57:ff:5c:5d:69:aa: bc:9e:3c:94:6a:7d:50:b4:27:19:a6:a5:29:d1:e5:30:c5:2b: fe:e8:e7:d8:38:57:b3:47:e3:fd:34:e1:16:96:94:2d:64:bd: ea:8d:f2:fb:83:24:50:60:49:90:ba:85:67:51:94:f2:eb:21: 85:25:05:e8:7d:16:07:d2:5e:ed:71:ba:c8:fb:53:65:ec:06: d5:7a:66:e0:b3:6b:30:7c:35:52:a6:e5:53:58:65:34:31:49: c7:b2:c4:1b:01:2f:80:e7:24:4b:0d:f6:63:e3:19:44:b6:60: 04:1b:d3:2d:a5:80:51:29:aa:a9:5a:6d:dd:df:b6:ba:7c:1e: 9b:47:69:c2:d0:8d:52:52:be:3c:63:c0:91:48:81:27:7e:85: 46:87:41:e1:db:d1:ec:73:61:f9:c1:40:06:15:31:b8:70:35: 31:94:bb:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdciI6nQVIyP0rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNlYmY0YjMtZjIyMy00ZGNmLWI0NjYtNTc1N2RjOTFh MTBkMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk YTY1YjgxNDEtYmI1Ni00YWE2LWE2Y2EtNTFjM2MyMjFiNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EhYO19NcqMMntZPCViG6r1P2cyVu3osQdlG v7rvkOMF3pchzK7U1qxygPPfvpq5AbBpOvGruD+BiTgnb1W9utbZmalRHSDMtJZm Xn6o3W8unt2GF4XWRf5WAxIqthj93nBeq2AUNOWGmdIVmJw5rcrNOzWltXMr5yob syC/sR8UwHCj8G3VMSAyqe0tCctaUYm7Z/J0KGlP/vme8Fto+iBfwd4BJHDicnku fUNhZFOR1cJd9GQ0bamJZuT+HiwNmzmoSyDQ9Zwkqr4jWD2rYtfhjFKDVZ+c7jqL +mIUWVdTVIUYU3CGkrCOBsgUw1+RoHMWiuh/9ldT4gEkbsmGxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFfnWpbXkwNkAQZpgJvrhBXskIUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2Vi ZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3ZGM5MWExMGQvMGNlYmY0YjMtZjIyMy00 ZGNmLWI0NjYtNTc1N2RjOTFhMTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGNlYmY0YjMtZjIyMy00ZGNmLWI0 NjYtNTc1N2RjOTFhMTBkLzBjZWJmNGIzLWYyMjMtNGRjZi1iNDY2LTU3NTdkYzkx YTEwZC5jcmwwHwYDVR0jBBgwFoAULLHGbzB2Te28YC5I5jnAZiUJO/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wY2ViZjRiMy1mMjIzLTRkY2YtYjQ2Ni01NzU3 ZGM5MWExMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1//45UFGmIe1bWKm82J9v CENKBI670tuzNoVrJUnll/2nW83+EO9ibEZhNYbCSn5pHSr3BffbcrLRrqh2M884 e0eHphXjfdnjscrHP1yCEkiejutX/1xdaaq8njyUan1QtCcZpqUp0eUwxSv+6OfY OFezR+P9NOEWlpQtZL3qjfL7gyRQYEmQuoVnUZTy6yGFJQXofRYH0l7tcbrI+1Nl 7AbVembgs2swfDVSpuVTWGU0MUnHssQbAS+A5yRLDfZj4xlEtmAEG9MtpYBRKaqp Wm3d37a6fB6bR2nC0I1SUr48Y8CRSIEnfoVGh0Hh29Hsc2H5wUAGFTG4cDUxlLu8 -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:43 2025 by rpki-client