$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: 8BDmu4SB3s5A1gKUlpqeH0MMVt0N02UGPvPkRKzgNwQ= Subject key identifier: 74:30:C3:C4:12:92:CC:0D:3A:53:CA:A9:21:0A:24:88:39:C3:0E:41 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584BBFC30C3D94DFDAC1F3C1CD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C65F Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: 6jgWxKtb7g0H1u32dbxApm06UNma5XQo9xjQOEV3teU=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: CV0fxKvx8+V5AwcVlEhvxpNzpiNgMOJdR07gO+KO0Ow=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0c:3d:94:df:da:c1:f3:c1:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=c3b8a7f7-d438-41c7-a026-fed8d9d8c6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:70:89:f3:2e:78:32:d0:a6:a4:d8:78:20: 9b:b3:21:1d:27:9d:eb:47:5c:a2:0a:24:60:b2:fe: ed:8c:bd:4c:43:46:9c:70:55:8b:f8:2a:01:0c:b5: d8:87:93:c6:61:25:b9:42:65:ab:8d:4c:cd:a7:a6: 44:e5:7c:48:f1:02:ca:5a:d2:b6:13:4c:fe:ef:3e: ad:01:ef:1f:9c:20:f0:42:2d:ab:6c:c7:a2:4b:9e: 9f:04:1f:45:94:21:aa:fd:14:a3:2a:7c:41:d2:62: c7:d2:11:55:45:d2:28:0a:ab:15:3f:d0:4f:ad:dc: 5b:f5:75:ce:0e:43:aa:0b:72:a9:87:68:52:b3:ca: 64:c6:9b:18:75:86:6d:41:51:51:0a:0d:81:17:1c: a7:ae:a1:d0:e9:f2:e8:94:ae:cf:b7:69:6d:82:a8: 85:5c:a1:2f:c1:41:b7:4a:4d:3d:f0:7b:b0:77:b4: 78:4c:55:0a:34:7f:67:60:c7:d4:fe:51:53:53:c1: 50:4f:cc:4d:fe:88:47:56:a7:9e:35:8a:98:fd:2a: 4d:c0:c5:b4:3f:9c:c5:78:08:af:96:0e:33:c4:ed: 72:4d:ba:9b:9a:33:ba:b1:27:68:54:20:0e:f2:da: cb:69:b0:e5:ea:61:2b:61:dd:75:2e:dd:ea:08:85: 06:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:C3:C4:12:92:CC:0D:3A:53:CA:A9:21:0A:24:88:39:C3:0E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c9:62:78:a2:e8:51:b1:07:81:f5:3a:0c:32:8d:5f:ed:0a: 29:95:f6:1f:53:6b:13:84:6d:b3:d0:1a:e5:ca:7f:81:7d:9c: 03:7c:a0:3d:e2:f4:8a:cf:ed:23:25:31:2f:da:24:06:0c:b4: d2:98:11:d6:95:6e:bd:6e:44:59:21:5e:af:ef:1d:4a:72:cf: dd:05:99:9c:dd:84:dd:35:1a:25:9d:78:d8:04:53:56:0f:ff: a3:86:ab:cb:30:c4:a8:67:84:12:5d:25:1a:b1:5f:cb:3a:dd: dc:45:91:31:85:dc:f3:e8:28:f2:6f:bb:f1:62:77:65:8e:bb: ab:c0:e7:55:53:42:3c:12:96:18:44:e2:64:97:b3:aa:e2:b0: a7:61:64:98:16:78:c1:77:c1:b0:0d:71:d1:e9:97:6b:d4:14: de:63:e3:ba:4d:ea:b2:ed:37:6f:30:7d:1d:57:5d:d3:1f:96: 73:6b:50:89:6b:b2:ce:b4:4e:8e:ae:ac:9d:a7:b5:09:45:be: 64:09:09:92:a0:a2:56:03:2c:5f:39:e2:c9:73:03:8c:75:bc: 54:2e:da:a9:0f:d2:9e:40:20:92:1f:7f:d6:7b:2a:5b:33:f0: 61:48:61:eb:49:3c:a9:29:30:f8:cb:8a:2c:bc:e2:ec:de:c5: 07:fe:eb:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/www9lN/awfPBzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk YzNiOGE3ZjctZDQzOC00MWM3LWEwMjYtZmVkOGQ5ZDhjNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHxwifMueDLQpqTYeCCbsyEdJ53rR1yiCiRg sv7tjL1MQ0accFWL+CoBDLXYh5PGYSW5QmWrjUzNp6ZE5XxI8QLKWtK2E0z+7z6t Ae8fnCDwQi2rbMeiS56fBB9FlCGq/RSjKnxB0mLH0hFVRdIoCqsVP9BPrdxb9XXO DkOqC3Kph2hSs8pkxpsYdYZtQVFRCg2BFxynrqHQ6fLolK7Pt2ltgqiFXKEvwUG3 Sk098Huwd7R4TFUKNH9nYMfU/lFTU8FQT8xN/ohHVqeeNYqY/SpNwMW0P5zFeAiv lg4zxO1yTbqbmjO6sSdoVCAO8trLabDl6mErYd11Lt3qCIUGpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHQww8QSkswNOlPKqSEKJIg5ww5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzyWJ4ouhRsQeB9ToMMo1f 7QoplfYfU2sThG2z0Brlyn+BfZwDfKA94vSKz+0jJTEv2iQGDLTSmBHWlW69bkRZ IV6v7x1Kcs/dBZmc3YTdNRolnXjYBFNWD/+jhqvLMMSoZ4QSXSUasV/LOt3cRZEx hdzz6Cjyb7vxYndljrurwOdVU0I8EpYYROJkl7Oq4rCnYWSYFnjBd8GwDXHR6Zdr 1BTeY+O6Teqy7TdvMH0dV13TH5Zza1CJa7LOtE6Orqydp7UJRb5kCQmSoKJWAyxf OeLJcwOMdbxULtqpD9KeQCCSH3/WeypbM/BhSGHrSTypKTD4y4osvOLs3sUH/uvR -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:16 2025 by rpki-client