$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: HzdFxtOv+47ytv0toa2vFDSJL0qMOkAU6iKnZTHOFBo= Subject key identifier: 8E:CB:24:22:23:1A:4E:DC:73:15:9B:58:1D:12:24:8E:37:EA:C2:46 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584BC075C8D4C752CA7A7EFD6A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079A07 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: R8CdL8MoPUU8xZFqalTqRSsShXEqOupQjl0ESWb4+lE=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: cQ9RsZSqLz+7oCsoX8xRPcA1ut8lrLrb6NNGKr+awlU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:d4:c7:52:ca:7a:7e:fd:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=2b7e20f3-8258-494f-9edc-d1f669e68aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:e4:ae:13:2e:71:0f:39:f2:02:22:57:28: 43:62:a9:91:31:79:63:1d:95:39:e0:b4:cd:04:c7: 8d:61:85:dd:e3:6b:88:c4:99:90:93:ee:95:99:e1: d7:8e:2b:e7:53:bc:ff:d3:ca:da:0b:8d:ac:04:9b: 89:77:68:05:00:cf:0a:21:05:e8:94:3b:af:39:49: c4:7b:4f:6e:bd:bb:ea:35:ba:41:9f:2c:00:f0:ad: ac:1d:d7:95:7f:6f:67:f0:97:69:96:4f:7f:0d:98: 91:ce:7f:fb:53:7b:5b:54:3c:b5:95:92:d3:91:63: 91:db:b8:d8:a4:3b:c1:d4:fc:b4:cc:f6:73:f9:43: d4:a4:99:ff:5a:5e:d3:e8:76:20:ac:87:01:79:15: 9d:3a:5e:e8:3f:d5:80:88:17:a0:06:d2:ac:58:7c: ff:3e:ed:fb:b0:0a:9d:f1:26:5a:82:e6:eb:f4:d1: e1:28:0a:0d:3a:8a:cd:7f:aa:6a:4d:b5:b0:9e:f4: 22:fa:e5:2c:53:05:6c:86:2e:e3:90:c7:ad:09:6f: 7a:30:59:51:76:dc:d4:26:1f:78:7e:e8:3d:ec:6b: 2e:d4:c4:05:f6:d3:22:82:ef:c7:a1:3b:9a:f2:ad: 1e:2e:8f:af:d8:ac:ca:ea:7e:04:9f:97:65:ed:00: 3f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CB:24:22:23:1A:4E:DC:73:15:9B:58:1D:12:24:8E:37:EA:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8c:d5:af:1e:2b:dc:da:64:62:2c:bd:43:89:86:98:ed:bc: 08:a7:43:68:78:f9:2a:c8:21:42:6f:fb:b8:59:68:1a:88:ca: b0:1a:cd:85:79:74:3a:c3:e8:60:ee:56:18:9b:e5:16:92:ee: df:0d:b9:bd:eb:e1:13:d6:9a:23:1e:c4:6b:59:d3:a9:a1:a8: c6:c1:26:45:48:79:f4:cd:cc:89:ec:bc:06:4b:f7:38:a1:1a: 10:41:a9:70:e2:f0:9f:d3:de:20:14:da:5e:d1:5f:70:08:58: 56:99:37:5e:9a:3e:5b:92:8d:61:a7:64:cb:4c:4e:84:49:fc: 42:62:9d:5a:79:0e:7f:8c:5d:43:30:8d:c4:dc:45:d3:de:f7: 31:34:28:95:e1:1e:20:01:ab:6d:81:cc:ee:e5:f9:b1:7e:27: 03:b0:bc:40:08:50:06:27:8e:ec:f4:5b:e8:18:03:6f:86:0c: bb:6a:94:7d:bf:26:94:d4:0d:04:a6:4b:5f:60:da:cc:30:91: b0:4d:40:60:ed:e9:ba:9e:eb:15:35:f1:c7:cb:02:45:7e:6c: c7:9a:e3:9a:cc:7d:04:13:c8:ff:5f:70:e0:c7:46:f7:7d:6e: c9:85:e3:c8:62:01:3f:31:2f:2a:ac:be:4d:74:90:84:2c:26: 88:21:a9:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcjUx1LKen79agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk MmI3ZTIwZjMtODI1OC00OTRmLTllZGMtZDFmNjY5ZTY4YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsTkrhMucQ858gIiVyhDYqmRMXljHZU54LTN BMeNYYXd42uIxJmQk+6VmeHXjivnU7z/08raC42sBJuJd2gFAM8KIQXolDuvOUnE e09uvbvqNbpBnywA8K2sHdeVf29n8Jdplk9/DZiRzn/7U3tbVDy1lZLTkWOR27jY pDvB1Py0zPZz+UPUpJn/Wl7T6HYgrIcBeRWdOl7oP9WAiBegBtKsWHz/Pu37sAqd 8SZagubr9NHhKAoNOorNf6pqTbWwnvQi+uUsUwVshi7jkMetCW96MFlRdtzUJh94 fug97Gsu1MQF9tMigu/HoTua8q0eLo+v2KzK6n4En5dl7QA/RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI7LJCIjGk7ccxWbWB0SJI436sJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVjNWvHivc2mRiLL1DiYaY 7bwIp0NoePkqyCFCb/u4WWgaiMqwGs2FeXQ6w+hg7lYYm+UWku7fDbm96+ET1poj HsRrWdOpoajGwSZFSHn0zcyJ7LwGS/c4oRoQQalw4vCf094gFNpe0V9wCFhWmTde mj5bko1hp2TLTE6ESfxCYp1aeQ5/jF1DMI3E3EXT3vcxNCiV4R4gAattgczu5fmx ficDsLxACFAGJ47s9FvoGANvhgy7apR9vyaU1A0EpktfYNrMMJGwTUBg7em6nusV NfHHywJFfmzHmuOazH0EE8j/X3Dgx0b3fW7JhePIYgE/MS8qrL5NdJCELCaIIak9 -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:47 2025 by rpki-client