$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft File: 147f088f-ace0-45c8-9c73-f06e60d7debb.mft (raw, json) Hash identifier: o5IYA6vNNQQMTmQb6JRXDMY9/hLdixerdPN1X4sCgiY= Subject key identifier: 64:4B:79:31:E1:DB:E7:66:DA:AC:1C:D6:81:19:84:FD:69:69:F9:F5 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584BBFE0D83706777E78CECBEE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft Manifest number: 010D0C9F4328584073A81CB24F53859D333B5826 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0cb111af-a543-3309-ae6c-921150fde1ac.roa (hash: fEEWizyJlAXd6SjO/RM+vp8c5hV+afMRi2qlKLmaSA8=) 2: 0e01958e-a540-34cb-879c-4da74aecf192.roa (hash: MmUz1cTCLRtjS7KLzczKV8H5ByMPao4LdXVLAEjEI5A=) 3: 147f088f-ace0-45c8-9c73-f06e60d7debb.crl (hash: yohwfTH1XHBOiNMB8G9zPykpSN7F4inAS4kjR8Zmcgs=) 4: 2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (hash: RN8RBKF1HzVrjDKbF/bQU+5NpUbbXpPWYeExWx6vWiA=) 5: 7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa (hash: d9O7ivQcIqzmVFSdQoev3pIqXEJ9lnbfYjaP3psc9+E=) 6: 92078ffe-c821-3634-ac6a-82cf20232772.roa (hash: OTWXkhO5jH4QDJIN7Qn1FozNT7zkga0d7MoqQeX97FI=) 7: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (hash: GBRFsz7Pw0Ub/f0CMjT6oa/+nyk3tyXYc+WfmIr3jHw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d8:37:06:77:7e:78:ce:cb:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=88214ec5-2062-4b60-a1f4-877b29abeaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:a7:49:81:18:d9:30:72:1e:b4:92:01:35: 9e:d6:d4:a8:c2:c9:92:94:2b:7b:6d:f9:b5:88:14: af:14:7a:e5:2d:5f:84:a6:be:a3:50:0e:a4:c0:15: d1:6a:78:a7:49:ae:2f:14:59:ff:c0:39:84:e9:01: 3d:f2:9c:64:35:34:ae:2d:fa:d3:84:bc:b8:f5:df: d3:c2:dc:e5:e1:e9:f4:bf:65:49:68:5a:b3:8e:96: 59:36:fe:15:bb:b7:e1:e9:d1:f6:46:e6:f2:fb:96: d7:a0:d6:37:10:49:b2:6f:de:ab:9b:3c:8c:5e:0a: 3a:0d:94:19:ea:ab:c1:ad:92:f2:39:af:c5:a8:c5: 98:a1:85:59:6d:21:eb:d5:5e:d2:e3:d9:3c:33:d1: c6:36:57:e3:20:6c:25:37:fd:69:76:f6:9c:92:38: 0c:e7:ab:73:96:64:b0:a0:17:97:89:39:ca:92:b1: 4d:e7:32:8d:90:dd:04:d2:3e:5a:96:b1:f7:3a:12: e2:dd:cb:0d:ca:a3:1f:28:f6:04:4c:a1:a1:99:67: 9c:36:01:00:c6:db:04:fd:d0:8e:d8:d3:68:07:45: 5d:f4:74:70:fc:ef:4f:1f:6a:7d:f5:85:bc:a1:50: d0:bd:8a:bc:a2:a3:e5:79:6e:b0:c0:43:74:3a:20: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:79:31:E1:DB:E7:66:DA:AC:1C:D6:81:19:84:FD:69:69:F9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:97:7e:0f:d2:0a:23:3e:38:62:cd:41:ac:f5:d6:aa:47:a8: 08:1a:1c:68:2c:1d:4c:5c:95:90:1f:57:99:d7:0c:da:2f:b7: 60:bb:93:de:43:d0:fb:8b:5d:f5:34:c6:79:54:d7:f5:71:19: 18:ed:4f:b6:92:3f:4f:f2:4c:27:84:cd:73:ea:fe:06:af:33: b8:59:d6:02:df:f3:0a:ea:cf:4a:49:1f:a3:54:0b:63:08:b2: 6d:ef:df:0c:48:b8:71:1f:75:e2:6c:ea:12:4b:94:aa:fe:8a: b9:57:f0:33:cb:e0:13:47:71:72:f4:03:e2:77:8c:38:94:6f: 10:71:8d:2e:c9:f8:b6:f5:32:1c:df:f0:b5:4b:30:de:e9:eb: f7:93:a9:c8:d6:17:6d:d0:76:60:a9:e0:90:58:82:1b:46:65: fe:47:1b:20:5d:5d:b4:cc:8b:0e:fe:3a:a3:8c:13:06:89:fa: a3:58:1c:cd:5c:c9:7b:4f:ab:aa:23:f0:8a:66:00:57:ce:3c: 22:d4:26:da:bd:c3:65:99:a8:1f:66:8f:9f:09:d9:aa:ab:21: 0a:df:04:13:c5:5d:50:c0:7a:48:3f:93:b5:23:70:e7:d1:ff: 7a:1c:e1:10:2d:34:74:8a:81:de:d7:62:04:34:d8:6e:f5:3c: 19:89:97:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Ng3Bnd+eM7L7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ODgyMTRlYzUtMjA2Mi00YjYwLWExZjQtODc3YjI5YWJlYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsmnSYEY2TByHrSSATWe1tSowsmSlCt7bfm1 iBSvFHrlLV+Epr6jUA6kwBXRaninSa4vFFn/wDmE6QE98pxkNTSuLfrThLy49d/T wtzl4en0v2VJaFqzjpZZNv4Vu7fh6dH2Ruby+5bXoNY3EEmyb96rmzyMXgo6DZQZ 6qvBrZLyOa/FqMWYoYVZbSHr1V7S49k8M9HGNlfjIGwlN/1pdvackjgM56tzlmSw oBeXiTnKkrFN5zKNkN0E0j5alrH3OhLi3csNyqMfKPYETKGhmWecNgEAxtsE/dCO 2NNoB0Vd9HRw/O9PH2p99YW8oVDQvYq8oqPleW6wwEN0OiCumQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGRLeTHh2+dm2qwc1oEZhP1pafn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMTQ3ZjA4OGYtYWNlMC00 NWM4LTljNzMtZjA2ZTYwZDdkZWJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVl34P0gojPjhizUGs9daq R6gIGhxoLB1MXJWQH1eZ1wzaL7dgu5PeQ9D7i131NMZ5VNf1cRkY7U+2kj9P8kwn hM1z6v4GrzO4WdYC3/MK6s9KSR+jVAtjCLJt798MSLhxH3XibOoSS5Sq/oq5V/Az y+ATR3Fy9APid4w4lG8QcY0uyfi29TIc3/C1SzDe6ev3k6nI1hdt0HZgqeCQWIIb RmX+RxsgXV20zIsO/jqjjBMGifqjWBzNXMl7T6uqI/CKZgBXzjwi1CbavcNlmagf Zo+fCdmqqyEK3wQTxV1QwHpIP5O1I3Dn0f96HOEQLTR0ioHe12IENNhu9TwZiZdc -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:05 2025 by rpki-client