$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft File: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft (raw, json) Hash identifier: PTp4rO4qtdgf8SneFmFyP+4NCIWzhrp5tCM4lL4Ct8w= Subject key identifier: 9E:9E:09:4C:CE:5D:32:D7:B8:A5:D7:46:12:98:C0:61:67:ED:ED:3E Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F4328584BBF1063DB242F282ABA2CE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft Manifest number: 010D0C9F4328584073A84B5EB96B10DEBF636C98 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl (hash: FfSQUQkZGlgholahWZsidSxzHOwerbjA68NW5RBbI3M=) 2: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (hash: rXJcTZB3TbcYtRezkgIx7W/nejzoCzZYpxz0n5wnpLY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:63:db:24:2f:28:2a:ba:2c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=d8dd999d-c4c6-4a3f-bd44-a2b6b08306ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:c7:85:77:37:7a:5a:12:cf:b9:e6:19:91: fd:fc:bc:5f:82:08:ad:21:8c:51:74:89:bc:56:31: ef:3f:65:26:1e:d5:57:0a:8a:4e:27:15:3b:ff:94: fe:01:4b:e0:82:1a:d8:7f:c5:44:a1:6c:3b:c4:f2: 25:9d:de:a1:c3:86:0b:20:f3:2e:98:bd:2d:8f:77: e2:dc:fe:96:86:35:ae:9c:51:10:e1:29:ab:01:2d: 7f:9c:b9:d5:62:d0:08:56:77:1f:39:54:8a:47:3b: 37:01:85:c6:29:e9:12:d8:2f:86:73:00:16:dc:ee: c3:fd:1f:c9:03:3c:b9:24:cd:58:5c:22:e2:e9:5f: 28:b8:36:d9:7f:b4:0e:fc:cf:5c:bc:ff:22:80:fa: 49:c2:75:8e:77:70:ec:78:bd:16:fa:09:9b:e5:de: bc:f6:f1:4c:05:a4:ce:53:f4:bb:8a:0f:fe:4f:25: 19:25:00:8a:de:0b:3d:d2:76:35:a4:b4:c1:6c:d4: f3:d8:bf:8f:90:ea:8d:26:a2:0d:46:e0:cc:c2:32: 16:92:8f:d7:e2:0e:8e:8f:ee:be:79:db:79:4e:b8: 2b:95:24:52:d4:8c:4e:9f:ae:a9:31:90:de:ac:3c: f7:c0:a8:e7:f5:e4:eb:f7:4d:df:de:3f:93:e8:8e: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:09:4C:CE:5D:32:D7:B8:A5:D7:46:12:98:C0:61:67:ED:ED:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:e3:29:b0:58:ec:4f:b0:a6:62:80:06:34:c0:49:9d:8f: a5:d0:d6:5b:9e:bc:84:3a:34:4a:7e:2b:f6:51:ae:14:3e:79: 53:12:76:98:20:ae:7e:ec:31:eb:77:a2:a4:b1:9f:f9:60:24: ed:4a:87:3f:a3:18:4b:a3:26:02:9f:81:fa:09:7f:d8:6e:f0: 59:09:b6:33:de:6e:08:62:d6:61:1b:86:8e:9a:ba:d4:3e:0e: 23:d9:01:ac:1e:38:2f:d9:a4:66:dc:f1:f7:bc:27:78:f7:bc: af:27:32:ac:5b:e2:76:db:f3:a4:6f:4f:94:ef:f2:23:3e:b0: ad:37:ca:41:0d:23:3f:30:58:83:ec:fd:8f:3b:85:ed:79:8d: 5b:ab:32:02:b0:f4:1d:c1:56:68:50:36:34:1c:94:bc:21:bf: 06:ac:73:0d:8e:fa:d5:10:08:d3:3f:c7:9c:6b:01:82:62:76: 0f:01:03:fe:31:c6:b2:9d:ec:24:f9:b7:7e:56:03:a7:0e:5b: 12:d7:1d:9f:22:db:fe:63:ad:7c:54:4f:93:0b:02:18:36:f6: e9:14:f8:4c:c1:01:2c:42:15:ac:e7:72:5e:9b:35:ab:d0:e2: af:8a:f7:5f:ec:bb:fe:e2:62:8d:a6:0e:1d:a4:8b:48:2a:ae: e7:8e:a0:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGPbJC8oKros5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk ZDhkZDk5OWQtYzRjNi00YTNmLWJkNDQtYTJiNmIwODMwNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmLHhXc3eloSz7nmGZH9/LxfggitIYxRdIm8 VjHvP2UmHtVXCopOJxU7/5T+AUvgghrYf8VEoWw7xPIlnd6hw4YLIPMumL0tj3fi 3P6WhjWunFEQ4SmrAS1/nLnVYtAIVncfOVSKRzs3AYXGKekS2C+GcwAW3O7D/R/J Azy5JM1YXCLi6V8ouDbZf7QO/M9cvP8igPpJwnWOd3DseL0W+gmb5d689vFMBaTO U/S7ig/+TyUZJQCK3gs90nY1pLTBbNTz2L+PkOqNJqINRuDMwjIWko/X4g6Oj+6+ edt5TrgrlSRS1IxOn66pMZDerDz3wKjn9eTr903f3j+T6I4ojQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ6eCUzOXTLXuKXXRhKYwGFn7e0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvMGE1YTg5MDktM2FhZi00 NGU4LWIwZDYtYzUwN2U1NTBkMDU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQoeMpsFjsT7CmYoAGNMBJ nY+l0NZbnryEOjRKfiv2Ua4UPnlTEnaYIK5+7DHrd6KksZ/5YCTtSoc/oxhLoyYC n4H6CX/YbvBZCbYz3m4IYtZhG4aOmrrUPg4j2QGsHjgv2aRm3PH3vCd497yvJzKs W+J22/Okb0+U7/IjPrCtN8pBDSM/MFiD7P2PO4XteY1bqzICsPQdwVZoUDY0HJS8 Ib8GrHMNjvrVEAjTP8ecawGCYnYPAQP+Mcaynewk+bd+VgOnDlsS1x2fItv+Y618 VE+TCwIYNvbpFPhMwQEsQhWs53JemzWr0OKvivdf7Lv+4mKNpg4dpItIKq7njqBC -----END CERTIFICATE-----Generated at Wed Nov 5 03:32:01 2025 by rpki-client