$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft File: 798448e2-55be-4c24-8014-28c2c70dfc84.mft (raw, json) Hash identifier: C3ksQLWJg82XM9n8gmnX1iawgbRAuXInakhv6n+PmhY= Subject key identifier: B4:69:17:FD:80:17:86:A4:3C:D6:74:A3:2A:FA:94:2C:D7:9D:05:C3 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584BBDC8D2A538A08E702280FCD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft Manifest number: 010D0C9F4328584073A82D089A5A692CDAC228C1 Signing time: Mon 03 Nov 2025 22:00:03 +0000 Manifest this update: Mon 03 Nov 2025 22:00:03 +0000 Manifest next update: Wed 05 Nov 2025 22:00:00 +0000 Files and hashes: 1: 798448e2-55be-4c24-8014-28c2c70dfc84.crl (hash: X1F7iFsAneLwl2ks0cJVrTJUmYlWhy66fv0uq7H8DAY=) 2: 7f6bb015-abd7-32fb-8fdc-86fc3d8c15bf.roa (hash: WUVUXmOqcpfxaxQ4Idg/7hZ82AuHLi3hSn0lUioLfOA=) 3: 97f6a99c-5994-36e5-96af-33d5a5e18816.roa (hash: PvEFC96BxFSv7uce0syHmCwlisUyEa910h/+Qep7k4I=) 4: bfb2273f-712e-3f5f-b862-366e898e589d.roa (hash: GvnDt6+D5E22n6qmjwKrBPNVSsAk2XKvoLx+4WklF6Q=) 5: c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa (hash: BR0+tVVGksjQfBjSAimO+aXcrvWp9okouPVc+2OceGg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:c8:d2:a5:38:a0:8e:70:22:80:fc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Nov 3 22:00:03 2025 GMT Not After : Nov 5 22:00:00 2025 GMT Subject: CN=fe0b5a7a-a8be-4d6b-8dcd-496109252e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:4f:b5:34:78:41:67:a9:8b:b4:b0:c4:d1: a2:f3:a2:ff:43:02:6a:ae:78:5c:68:37:d8:df:24: d0:c1:94:15:df:fc:41:d2:41:03:64:4d:e9:8a:d5: 5a:59:7f:e5:be:95:28:31:0a:34:d0:68:93:4d:cc: 26:40:b9:bd:c6:94:bc:7b:e1:bc:97:8b:05:ef:08: 02:39:03:0d:d3:b3:a6:5a:16:ab:5a:54:38:bd:67: d6:69:02:2a:27:5a:1d:1a:e4:f2:a9:98:f8:a5:ba: 55:d0:5c:f8:a9:ab:42:50:f6:f0:8a:75:e9:49:6f: d1:3f:45:5b:b6:11:3c:80:ef:bd:6a:01:c7:0a:bb: c9:91:f2:25:8f:f7:a5:ad:6a:70:02:ea:5d:bd:69: 1a:fa:72:b3:7f:a3:ec:da:7d:9a:5d:b0:45:d7:82: ea:ae:b6:a6:c7:5b:a4:a7:91:5d:86:9a:f9:77:7e: fd:10:fe:fc:83:4f:72:1a:de:37:cc:d0:11:cc:3e: 11:8a:07:61:58:28:ea:dc:be:9b:26:8a:54:1b:23: eb:ce:25:50:07:68:21:a3:41:87:59:6d:c1:d9:3e: ee:77:4a:5c:60:cc:22:73:04:52:a3:04:7f:4c:d5: c0:94:5c:a2:e1:86:9d:65:13:27:81:4a:7f:d3:0a: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:69:17:FD:80:17:86:A4:3C:D6:74:A3:2A:FA:94:2C:D7:9D:05:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:96:6b:b2:df:c0:3a:d0:5c:f1:69:52:14:e9:52:b0:d7:e9: bd:3e:66:6c:1d:86:be:f5:d3:3c:8e:18:b7:41:16:aa:11:6c: 58:c2:9a:34:6d:e0:ad:28:98:62:c7:f9:4a:b2:da:eb:0e:7a: 58:eb:a1:64:0d:e0:2a:73:4f:03:0f:04:8e:2f:bf:6f:b8:0e: 05:1b:05:9e:a4:c7:e5:68:58:16:18:5d:57:52:d9:40:aa:0f: f3:69:1b:f4:12:5f:5f:5e:b2:6d:d0:c6:a5:10:0a:8c:6a:19: 58:2b:71:e6:91:54:46:bc:e7:02:5b:b3:58:9b:f0:96:93:32: 6c:6e:75:19:8f:92:d5:da:b6:f2:03:3f:c4:13:3c:ee:de:d4: 60:0a:74:be:a4:89:fb:9f:83:9b:89:dd:01:d2:6b:c6:e7:b3: 57:56:6e:12:30:de:22:5b:23:29:18:5b:e7:32:45:34:f5:b6: 9c:5a:3c:0d:01:f2:28:e5:d6:51:10:7b:74:99:59:30:02:3d: a5:0d:4c:14:17:47:82:7f:ff:8f:cd:86:f4:a4:74:9c:c8:a5: 52:1e:a8:47:ca:2b:d5:5e:54:90:fb:89:9a:16:c5:a1:15:55: ac:5d:61:a6:d3:45:54:d8:8c:b5:ed:e2:8c:95:9b:db:a0:75: cf:5d:4f:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9yNKlOKCOcCKA/NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI1MTEwMzIyMDAwM1oXDTI1MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk ZmUwYjVhN2EtYThiZS00ZDZiLThkY2QtNDk2MTA5MjUyZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprhPtTR4QWepi7SwxNGi86L/QwJqrnhcaDfY 3yTQwZQV3/xB0kEDZE3pitVaWX/lvpUoMQo00GiTTcwmQLm9xpS8e+G8l4sF7wgC OQMN07OmWharWlQ4vWfWaQIqJ1odGuTyqZj4pbpV0Fz4qatCUPbwinXpSW/RP0Vb thE8gO+9agHHCrvJkfIlj/elrWpwAupdvWka+nKzf6Ps2n2aXbBF14Lqrramx1uk p5Fdhpr5d379EP78g09yGt43zNARzD4RigdhWCjq3L6bJopUGyPrziVQB2gho0GH WW3B2T7ud0pcYMwicwRSowR/TNXAlFyi4YadZRMngUp/0wpmswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLRpF/2AF4akPNZ0oyr6lCzXnQXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvNzk4NDQ4ZTItNTViZS00 YzI0LTgwMTQtMjhjMmM3MGRmYzg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBllmuy38A60FzxaVIU6VKw 1+m9PmZsHYa+9dM8jhi3QRaqEWxYwpo0beCtKJhix/lKstrrDnpY66FkDeAqc08D DwSOL79vuA4FGwWepMflaFgWGF1XUtlAqg/zaRv0El9fXrJt0MalEAqMahlYK3Hm kVRGvOcCW7NYm/CWkzJsbnUZj5LV2rbyAz/EEzzu3tRgCnS+pIn7n4Obid0B0mvG 57NXVm4SMN4iWyMpGFvnMkU09bacWjwNAfIo5dZREHt0mVkwAj2lDUwUF0eCf/+P zYb0pHScyKVSHqhHyivVXlSQ+4maFsWhFVWsXWGm00VU2Iy17eKMlZvboHXPXU85 -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:03 2025 by rpki-client