$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft File: 5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft (raw, json) Hash identifier: h+qGETF3szRNxWNJifY53eGiZ9xAwB6sVR/c9+uwv+g= Subject key identifier: C8:87:77:D7:EF:50:5A:88:3E:D1:3D:65:74:28:0A:D2:51:0E:85:92 Authority key identifier: FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 Certificate issuer: /CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Certificate serial: 010D0C9F4328584BC058018ED380EE56B9F1A2D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft Manifest number: 010D0C9F4328584073A826DC63937BC3F2F798A4 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl (hash: BS+kRGa3zsdJVlZ29oXl5c+lwjEL9I7QTmirPEYsH6o=) 2: e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa (hash: 7+B9WM6qQXboEYboAZuOmGdeVzqRqOixtIJKFo5YBYM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:01:8e:d3:80:ee:56:b9:f1:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=96332a4e-59d1-45e1-bbc8-4ea410c4888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:d7:f1:dd:30:18:ae:74:ca:f3:b2:e9:2d: e3:f0:10:7e:ab:f8:06:4f:73:dc:8b:a3:1c:dd:4d: e7:db:61:a4:0a:01:61:f0:1e:2b:7a:d0:72:ce:11: 63:bc:9e:01:b5:10:14:67:00:a9:b4:b0:04:3b:21: 71:ec:dc:2b:6c:ed:18:b8:05:ac:89:91:4b:5d:9d: d2:16:66:34:9d:86:c6:d4:ce:65:aa:35:73:3b:9e: ab:66:9b:3b:cc:df:45:52:68:1a:b0:7d:cd:83:b7: 1f:75:f4:4b:d2:14:5e:94:68:b1:7b:a8:bc:1e:15: cb:7f:02:5c:3e:1d:db:47:17:8d:be:c3:40:25:04: b9:72:6d:10:9a:16:ab:7b:72:e3:47:99:fa:df:d9: 01:a2:2f:b8:f2:2c:73:cd:9a:99:f3:77:52:2f:6e: f1:dd:09:86:3c:03:fb:5b:a2:51:1c:c0:c2:bf:a5: ec:ad:88:e4:ed:cb:a8:64:84:e5:91:78:74:6f:8a: ea:11:e7:b0:98:2a:57:67:2a:c7:97:b1:cf:8a:3b: 29:31:d4:f6:fe:ce:11:f0:79:88:66:d1:9e:aa:ff: 68:55:c7:87:1f:26:c5:a1:e1:22:bb:d2:c3:63:d1: e3:5d:49:4e:e2:89:45:9f:15:cc:dc:5c:e3:d7:f0: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:77:D7:EF:50:5A:88:3E:D1:3D:65:74:28:0A:D2:51:0E:85:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl X509v3 Authority Key Identifier: keyid:FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:54:64:bd:09:be:89:b0:5d:6f:c5:b6:d2:78:f2:ba:5a:9d: 08:fd:b3:19:62:c6:25:67:0d:ba:a2:13:60:68:19:f2:35:c6: 60:c0:b8:6b:4a:b2:8c:41:7d:5d:40:4b:2c:6f:cc:64:cb:90: 78:d3:b3:37:51:e8:8a:57:1f:f1:c2:36:78:b7:53:5b:2d:ce: cf:98:33:94:5f:5a:e7:6d:0a:b4:d1:a8:a9:4d:20:d6:b3:96: c2:9b:8b:1d:43:04:71:40:41:9a:d1:ce:ea:a3:62:be:36:dd: b7:ef:d4:ca:f6:49:fd:08:43:c6:94:f0:b5:3d:97:d9:b1:4a: f0:7e:07:f5:b4:f5:f1:44:b0:7b:47:a9:e3:20:e2:07:91:da: 1a:14:dc:f5:b5:04:88:4f:08:15:7a:0e:bf:0f:ae:7f:3b:e8: 4f:7a:f3:8e:67:d6:2c:e1:27:23:58:be:ed:38:39:da:ac:ff: 87:7d:ec:22:78:e2:2f:df:01:3b:85:7f:7d:70:fa:cd:4c:d0: d9:87:5c:62:a7:2b:21:7b:96:fc:e8:d4:37:56:64:bf:1e:e7: 0a:b2:82:e0:af:94:07:bf:a6:75:cf:8a:24:28:a3:91:ce:bb: 31:f9:fb:11:70:a2:2c:38:7a:0a:a9:93:7d:49:ac:69:43:26: ab:4b:01:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAGO04DuVrnxotAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY1NTljZjgtYWQxOC00NGMwLTkwZDctM2ExZDkxOTVl ZDJmMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk OTYzMzJhNGUtNTlkMS00NWUxLWJiYzgtNGVhNDEwYzQ4ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6fX8d0wGK50yvOy6S3j8BB+q/gGT3Pci6Mc 3U3n22GkCgFh8B4retByzhFjvJ4BtRAUZwCptLAEOyFx7NwrbO0YuAWsiZFLXZ3S FmY0nYbG1M5lqjVzO56rZps7zN9FUmgasH3Ng7cfdfRL0hRelGixe6i8HhXLfwJc Ph3bRxeNvsNAJQS5cm0Qmhare3LjR5n639kBoi+48ixzzZqZ83dSL27x3QmGPAP7 W6JRHMDCv6XsrYjk7cuoZITlkXh0b4rqEeewmCpXZyrHl7HPijspMdT2/s4R8HmI ZtGeqv9oVceHHybFoeEiu9LDY9HjXUlO4olFnxXM3Fzj1/CQDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMiHd9fvUFqIPtE9ZXQoCtJRDoWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1 OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFkOTE5NWVkMmYvNWY1NTljZjgtYWQxOC00 NGMwLTkwZDctM2ExZDkxOTVlZDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWY1NTljZjgtYWQxOC00NGMwLTkw ZDctM2ExZDkxOTVlZDJmLzVmNTU5Y2Y4LWFkMTgtNDRjMC05MGQ3LTNhMWQ5MTk1 ZWQyZi5jcmwwHwYDVR0jBBgwFoAU/je2butrPMyKuCHKJD81alECAEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFk OTE5NWVkMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWVGS9Cb6JsF1vxbbSePK6 Wp0I/bMZYsYlZw26ohNgaBnyNcZgwLhrSrKMQX1dQEssb8xky5B407M3UeiKVx/x wjZ4t1NbLc7PmDOUX1rnbQq00aipTSDWs5bCm4sdQwRxQEGa0c7qo2K+Nt2379TK 9kn9CEPGlPC1PZfZsUrwfgf1tPXxRLB7R6njIOIHkdoaFNz1tQSITwgVeg6/D65/ O+hPevOOZ9Ys4ScjWL7tODnarP+HfewieOIv3wE7hX99cPrNTNDZh1xipyshe5b8 6NQ3VmS/HucKsoLgr5QHv6Z1z4okKKORzrsx+fsRcKIsOHoKqZN9SaxpQyarSwG7 -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:56 2025 by rpki-client