$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft File: 5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft (raw, json) Hash identifier: uvmuv7A5rwf31pR+4EQSYfr9mE1fSGqeanhTpW7RSCE= Subject key identifier: 32:3D:DC:ED:7C:56:9D:48:E2:E8:05:D7:D8:0C:DC:37:88:69:FC:CF Authority key identifier: 29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 Certificate issuer: /CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Certificate serial: 010D0C9F4328584BBE99438BDA83E403E99D1B08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft Manifest number: 010D0C9F4328584AD6F25F5BDC390FB610364094 Signing time: Tue 04 Nov 2025 05:00:03 +0000 Manifest this update: Tue 04 Nov 2025 05:00:03 +0000 Manifest next update: Thu 06 Nov 2025 05:00:00 +0000 Files and hashes: 1: 5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa (hash: 29bC5Iorrphh+AAM2rgjQBrmCywXQKvhI5e/gSwy3V0=) 2: 5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl (hash: XxTaFz/YJ5Ln9ajwbFb5QuA6vcQmz3B5CY8ezsSe9+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:99:43:8b:da:83:e4:03:e9:9d:1b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Validity Not Before: Nov 4 05:00:03 2025 GMT Not After : Nov 6 05:00:00 2025 GMT Subject: CN=98c9b378-23aa-49f5-a7db-3ab0ad61eb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:e8:6f:9d:55:6f:aa:0e:f0:c2:63:85:d5: 47:8e:58:9f:0d:0b:80:70:59:a5:94:80:dc:3d:5b: 73:30:c6:0e:e8:08:a0:d1:60:1e:d7:fe:81:73:82: 45:97:e6:92:6a:d1:71:65:1b:70:5e:f5:28:00:24: 4f:4f:f3:bc:3e:17:50:6b:16:e4:79:46:34:ce:65: 3b:72:3f:0f:4c:da:c7:00:01:60:9f:09:7a:e3:95: 9d:fd:c4:52:df:1d:eb:00:ec:78:1e:16:42:a2:8e: 0c:43:92:50:dc:64:1a:f2:a0:08:0f:66:c8:df:3a: 37:d3:1b:63:91:9f:5a:d4:6d:8c:40:b0:09:3c:c0: 22:b2:9b:19:4b:96:e1:63:ae:39:db:1f:b4:ed:36: 1a:81:3d:25:92:eb:bd:41:86:f5:51:4d:1d:12:62: d7:f5:fe:6b:ec:33:49:c3:23:8f:7f:6b:89:87:df: 0f:03:30:eb:f4:43:ec:a7:f7:dc:9f:07:c6:c5:8f: b8:b9:ff:76:f3:e1:56:7d:77:19:20:d8:5a:24:e6: b2:f6:8b:8f:9e:50:f5:83:1d:05:b0:bd:af:ab:e4: 55:8b:3a:a8:3c:79:dc:0d:2d:90:8a:6d:b5:1e:a4: 3b:28:6d:0a:0f:62:92:69:d0:a7:32:fb:9f:31:da: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3D:DC:ED:7C:56:9D:48:E2:E8:05:D7:D8:0C:DC:37:88:69:FC:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl X509v3 Authority Key Identifier: keyid:29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:49:de:c4:b6:ba:28:e9:fb:a1:06:8a:47:83:f7:74:17:68: 18:bb:fd:fb:47:6f:f6:a9:c1:87:85:41:37:2b:16:4f:a8:65: 01:3c:4e:94:8f:50:f1:35:04:f3:26:cd:56:bc:5c:4c:56:10: f1:49:dc:cc:61:c6:ef:9b:5d:09:e8:5b:ea:28:6b:4a:99:b2: dc:da:7e:81:ca:d8:ef:ab:b0:ed:6c:72:c9:10:87:ff:c0:6c: f1:23:a9:65:e0:14:06:a1:a1:42:4b:05:c2:a7:22:f8:74:01: ce:63:81:3b:c8:c4:7f:c4:0b:04:be:f3:b6:41:7d:54:21:f4: 1a:c2:5b:4b:a3:a0:7a:a3:00:2e:e8:60:64:b3:65:b3:df:90: 0e:97:1b:66:5a:fc:42:13:a9:b0:41:52:67:7b:0e:d1:30:b8: 9b:4b:64:1c:a2:7c:e8:b7:4a:9b:7a:fb:a0:a4:7e:d6:c3:10: 88:34:6e:df:83:fc:72:22:03:e6:36:96:93:b7:27:87:20:a0: c1:cc:89:36:50:aa:c1:13:06:33:ba:06:b0:81:95:6a:65:7c: 75:1a:f0:16:79:24:45:c6:19:34:8e:38:33:67:34:0a:e4:a5: be:d3:8c:dc:57:d3:53:2f:6b:9d:ed:ea:95:91:4c:ae:e8:52: fd:1d:91:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+mUOL2oPkA+mdGwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIyYmY4YjMtY2ZmZS00MjJlLWE3OWUtMWMxYWJiZTI1 MWIyMB4XDTI1MTEwNDA1MDAwM1oXDTI1MTEwNjA1MDAwMFowLzEtMCsGA1UEAxMk OThjOWIzNzgtMjNhYS00OWY1LWE3ZGItM2FiMGFkNjFlYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+bob51Vb6oO8MJjhdVHjlifDQuAcFmllIDc PVtzMMYO6Aig0WAe1/6Bc4JFl+aSatFxZRtwXvUoACRPT/O8PhdQaxbkeUY0zmU7 cj8PTNrHAAFgnwl645Wd/cRS3x3rAOx4HhZCoo4MQ5JQ3GQa8qAID2bI3zo30xtj kZ9a1G2MQLAJPMAispsZS5bhY6452x+07TYagT0lkuu9QYb1UU0dEmLX9f5r7DNJ wyOPf2uJh98PAzDr9EPsp/fcnwfGxY+4uf928+FWfXcZINhaJOay9ouPnlD1gx0F sL2vq+RVizqoPHncDS2Qim21HqQ7KG0KD2KSadCnMvufMdovvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDI93O18Vp1I4ugF19gM3DeIafzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjJi ZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFhYmJlMjUxYjIvNWIyYmY4YjMtY2ZmZS00 MjJlLWE3OWUtMWMxYWJiZTI1MWIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWIyYmY4YjMtY2ZmZS00MjJlLWE3 OWUtMWMxYWJiZTI1MWIyLzViMmJmOGIzLWNmZmUtNDIyZS1hNzllLTFjMWFiYmUy NTFiMi5jcmwwHwYDVR0jBBgwFoAUKdjXgxehciThZ1nAyNd3x6/51nMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjJiZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFh YmJlMjUxYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmSd7Etroo6fuhBopHg/d0 F2gYu/37R2/2qcGHhUE3KxZPqGUBPE6Uj1DxNQTzJs1WvFxMVhDxSdzMYcbvm10J 6FvqKGtKmbLc2n6Bytjvq7DtbHLJEIf/wGzxI6ll4BQGoaFCSwXCpyL4dAHOY4E7 yMR/xAsEvvO2QX1UIfQawltLo6B6owAu6GBks2Wz35AOlxtmWvxCE6mwQVJnew7R MLibS2Qconzot0qbevugpH7WwxCING7fg/xyIgPmNpaTtyeHIKDBzIk2UKrBEwYz ugawgZVqZXx1GvAWeSRFxhk0jjgzZzQK5KW+04zcV9NTL2ud7eqVkUyu6FL9HZHQ -----END CERTIFICATE-----Generated at Tue Nov 4 19:48:44 2025 by rpki-client