$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft File: 3025c657-32e7-49d2-ab95-71634243f0d7.mft (raw, json) Hash identifier: 8480/9WJq5W86lro9fDBjw1IvjCqkvsTwpaLReDNygM= Subject key identifier: 89:F9:60:17:9A:D5:AA:4C:0A:57:FA:8E:21:77:41:6A:9E:4A:3D:7B Authority key identifier: 48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 Certificate issuer: /CN=3025c657-32e7-49d2-ab95-71634243f0d7 Certificate serial: 010D0C9F4328584BBF887D20A74C522E780AEC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft Manifest number: 010D0C9F4328584073A854BD021D1F4667AE7723 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 3025c657-32e7-49d2-ab95-71634243f0d7.crl (hash: Vl8b156dR7p6pcs6OFn1Oa21hUfPxUE5zfVIxH3Yb0o=) 2: bb853397-5327-3933-b5ba-b925a6c10ca7.roa (hash: uxAJrqxofcsVkkEgorK+Gc0oNVcUAa4rjO43HULZjDM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7d:20:a7:4c:52:2e:78:0a:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3025c657-32e7-49d2-ab95-71634243f0d7 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=757b6653-5c0e-4640-8b8c-21e48da3b387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:cf:16:1d:79:2a:cc:73:b9:b0:4e:c3:6f: 02:3c:59:36:bf:07:29:91:ee:63:da:e8:ea:17:b9: 3e:21:ca:7a:cc:fd:d9:53:3b:7e:ac:5e:83:7d:7c: 0d:30:41:fe:2a:c4:65:34:d4:10:11:7d:8b:38:09: 01:c6:d4:2e:0f:d0:ba:9e:03:c1:a6:44:b9:86:21: 4d:22:0e:68:13:aa:8a:ff:2d:c0:52:d0:5b:08:9c: 1f:7b:a9:43:23:5f:79:7b:f7:9f:2d:83:c0:dd:61: e0:18:95:8f:07:91:75:54:79:54:f9:10:8a:42:d5: 83:73:cc:be:e6:4e:ae:3c:f4:33:11:99:aa:8f:40: 3e:a2:92:95:b8:09:cb:16:88:ed:21:2d:c5:3f:ce: 69:dc:e9:3b:94:7b:3b:bd:38:95:17:48:4f:62:60: 26:96:fb:eb:2d:f2:a5:97:e3:f9:bf:9d:c6:4b:aa: 05:f8:3d:11:d4:9f:d8:96:0a:41:b6:e9:70:13:d7: 01:51:2b:b5:27:9d:eb:bf:c1:18:4f:87:c4:32:49: 0d:08:eb:8c:6b:1d:93:e6:88:33:66:3e:f0:e0:91: bc:4d:ff:93:ec:70:fd:1a:a9:a7:0b:04:58:9f:5f: a7:ce:2e:a5:49:93:03:e5:28:db:62:84:52:21:2b: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:60:17:9A:D5:AA:4C:0A:57:FA:8E:21:77:41:6A:9E:4A:3D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.crl X509v3 Authority Key Identifier: keyid:48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:03:72:f9:35:a1:17:87:3a:6f:1a:aa:55:90:14:d0:9d: a1:36:7a:e0:57:e0:6a:ca:2c:c2:f0:4d:f3:4e:69:4d:58:b0: ed:ba:ed:b8:8b:fe:96:9f:2a:6c:05:04:8f:de:73:31:0c:32: de:fa:a8:63:b5:47:5a:4e:e4:b4:0f:41:44:40:cf:07:e2:1c: 41:45:10:6e:00:05:27:23:53:b8:59:41:77:cc:ff:b9:57:0c: 01:0b:c8:87:53:7f:ff:ea:3b:62:88:6e:d9:3f:26:38:cb:c5: 18:60:c9:f8:67:8b:82:76:70:9e:c4:6b:d3:ca:ac:b7:be:9c: 34:bb:fd:43:94:64:d7:ed:17:80:42:ff:16:99:a4:04:53:0b: b7:ad:66:3c:ca:c3:bd:90:0f:c4:05:a4:e9:d2:3a:53:3e:25: 8e:47:c6:69:6b:38:10:aa:43:9e:6a:e0:6b:51:eb:1c:27:15: 71:b1:88:a6:69:e6:4c:01:8a:d1:cd:e3:b0:1f:a7:62:3f:af: 73:48:13:42:5f:50:a4:b0:65:0f:2b:18:82:82:1c:80:b5:98: 28:55:e5:62:a3:40:33:88:89:d7:b5:e2:7b:10:43:c6:97:10: 11:fb:07:a8:14:52:8d:d2:6c:78:07:ed:00:bc:7c:10:b8:a8: be:68:37:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH0gp0xSLngK7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAyNWM2NTctMzJlNy00OWQyLWFiOTUtNzE2MzQyNDNm MGQ3MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk NzU3YjY2NTMtNWMwZS00NjQwLThiOGMtMjFlNDhkYTNiMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgLPFh15KsxzubBOw28CPFk2vwcpke5j2ujq F7k+Icp6zP3ZUzt+rF6DfXwNMEH+KsRlNNQQEX2LOAkBxtQuD9C6ngPBpkS5hiFN Ig5oE6qK/y3AUtBbCJwfe6lDI195e/efLYPA3WHgGJWPB5F1VHlU+RCKQtWDc8y+ 5k6uPPQzEZmqj0A+opKVuAnLFojtIS3FP85p3Ok7lHs7vTiVF0hPYmAmlvvrLfKl l+P5v53GS6oF+D0R1J/YlgpBtulwE9cBUSu1J53rv8EYT4fEMkkNCOuMax2T5ogz Zj7w4JG8Tf+T7HD9GqmnCwRYn1+nzi6lSZMD5SjbYoRSISvWMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIn5YBea1apMClf6jiF3QWqeSj17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDI1 YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYzNDI0M2YwZDcvMzAyNWM2NTctMzJlNy00 OWQyLWFiOTUtNzE2MzQyNDNmMGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzAyNWM2NTctMzJlNy00OWQyLWFi OTUtNzE2MzQyNDNmMGQ3LzMwMjVjNjU3LTMyZTctNDlkMi1hYjk1LTcxNjM0MjQz ZjBkNy5jcmwwHwYDVR0jBBgwFoAUSIgWwXD4v9+Fu9FY+DeVDWN+lugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDI1YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYz NDI0M2YwZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6lwNy+TWhF4c6bxqqVZAU 0J2hNnrgV+BqyizC8E3zTmlNWLDtuu24i/6WnypsBQSP3nMxDDLe+qhjtUdaTuS0 D0FEQM8H4hxBRRBuAAUnI1O4WUF3zP+5VwwBC8iHU3//6jtiiG7ZPyY4y8UYYMn4 Z4uCdnCexGvTyqy3vpw0u/1DlGTX7ReAQv8WmaQEUwu3rWY8ysO9kA/EBaTp0jpT PiWOR8ZpazgQqkOeauBrUescJxVxsYimaeZMAYrRzeOwH6diP69zSBNCX1CksGUP KxiCghyAtZgoVeVio0AziInXteJ7EEPGlxAR+weoFFKN0mx4B+0AvHwQuKi+aDfw -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:08 2025 by rpki-client