$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft File: 90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft (raw, json) Hash identifier: YXhpGo75qyhfQOKKvYi1jLQg2dwLl8tpYrha/Ty7tLk= Subject key identifier: 32:E2:2B:E8:E9:EA:88:45:82:1E:A1:53:6C:EA:E5:A5:16:7B:42:59 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584BC0B14A89F3B3D5500C5B4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft Manifest number: 010D0C9F4328584073A82FCDA98589E8CBEB13A3 Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (hash: SmCm+mWpyrJ9PTb76aLJa0Lmzjidrpr6aiYf+clFRcg=) 2: 90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl (hash: LJ7CppM7kJpwdVpZYyUR3BOZRHAmJRBW3P3OPKZnNk8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:4a:89:f3:b3:d5:50:0c:5b:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=597d5e96-06d5-4d38-9c5c-d7f47c3c46ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:ab:82:70:62:91:41:d5:3a:d2:fe:ef:b0: 69:e0:9e:da:96:80:1c:0a:4e:49:67:51:c7:64:e3: a1:92:19:31:12:43:43:78:e0:c9:e8:8e:98:bd:5c: 46:ba:0a:79:d6:ab:2c:7d:c3:1c:bb:14:3c:41:c7: 3e:4f:96:da:3c:56:7f:0e:36:82:16:b9:3b:4c:72: fb:a7:bc:76:e5:42:83:cc:ca:9b:87:2e:2a:4d:f0: bb:8c:a6:59:1b:dc:91:55:9a:38:96:41:b5:96:13: a1:9e:8c:57:2d:ec:09:95:32:44:ed:0d:3e:11:4a: 22:48:39:59:26:6d:fb:bc:ac:05:65:43:5b:8b:63: da:e8:df:db:ba:96:c9:fa:31:61:27:32:0b:7b:ab: ce:13:c0:ce:69:3d:bf:f3:16:0e:a3:68:03:00:0c: a2:ba:dc:5c:12:80:92:43:0a:94:1e:e9:41:ba:c8: 67:d9:24:67:fd:6c:c4:85:e7:2e:04:a8:a7:ca:7c: 24:69:22:13:a4:d8:86:d1:3f:56:a5:d3:30:a2:cf: 33:06:04:c4:c7:71:08:03:42:43:a3:df:3a:cc:26: 6d:f1:6c:42:58:f0:37:e5:22:e1:62:6c:47:e8:c1: 8b:34:02:33:ac:4e:35:1b:2e:33:3f:94:38:96:39: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:2B:E8:E9:EA:88:45:82:1E:A1:53:6C:EA:E5:A5:16:7B:42:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8b:92:67:e2:31:5c:ca:d7:d4:4d:a9:e0:3a:77:66:d3:bf: 88:ee:6c:3d:61:79:73:e9:9c:11:d7:fb:e3:47:ea:83:a3:c8: 6a:54:38:21:4c:c6:50:0d:a8:7b:70:c1:56:df:08:75:97:27: d7:ed:ca:a6:22:ff:77:65:4a:df:a7:63:84:08:91:2d:33:fd: 95:cd:4f:80:37:53:9a:02:bb:79:18:5b:3c:92:36:6d:7b:08: be:44:d9:4c:88:2a:66:0d:4e:c4:0f:5e:eb:20:e9:67:c3:0a: 36:1e:40:2c:9c:b1:e3:9f:e8:5f:9b:6d:5c:83:b6:7c:86:4f: 3d:2a:38:11:bf:bb:cc:e7:38:5b:c2:87:30:f9:9a:be:1a:83: e0:21:74:31:7f:8b:b6:6b:55:9c:5f:e3:69:e9:59:cf:a8:b6: b8:6a:ef:4b:c1:cd:bd:94:74:4e:68:eb:44:39:f8:56:0a:42: d4:08:f8:9b:a3:72:da:51:94:73:19:f4:60:42:8f:af:6f:aa: 58:f4:3f:28:10:33:94:7c:94:65:d7:43:73:9a:72:32:cf:ce: 07:61:42:48:64:6d:dd:8a:2b:61:9f:fc:cf:a1:1d:c5:e3:f2: 1a:00:a2:68:85:bc:3c:55:32:92:c8:6d:87:54:9c:fc:23:12: af:c3:13:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUqJ87PVUAxbSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk NTk3ZDVlOTYtMDZkNS00ZDM4LTljNWMtZDdmNDdjM2M0NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6WrgnBikUHVOtL+77Bp4J7aloAcCk5JZ1HH ZOOhkhkxEkNDeODJ6I6YvVxGugp51qssfcMcuxQ8Qcc+T5baPFZ/DjaCFrk7THL7 p7x25UKDzMqbhy4qTfC7jKZZG9yRVZo4lkG1lhOhnoxXLewJlTJE7Q0+EUoiSDlZ Jm37vKwFZUNbi2Pa6N/bupbJ+jFhJzILe6vOE8DOaT2/8xYOo2gDAAyiutxcEoCS QwqUHulBushn2SRn/WzEhecuBKinynwkaSITpNiG0T9WpdMwos8zBgTEx3EIA0JD o986zCZt8WxCWPA35SLhYmxH6MGLNAIzrE41Gy4zP5Q4ljnGYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDLiK+jp6ohFgh6hU2zq5aUWe0JZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvOTBhYWNkNWEtNDZhYy00 ZTE4LTllZjItNzIyMjgwZGRmYTk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmi5Jn4jFcytfUTangOndm 07+I7mw9YXlz6ZwR1/vjR+qDo8hqVDghTMZQDah7cMFW3wh1lyfX7cqmIv93ZUrf p2OECJEtM/2VzU+AN1OaArt5GFs8kjZtewi+RNlMiCpmDU7ED17rIOlnwwo2HkAs nLHjn+hfm21cg7Z8hk89KjgRv7vM5zhbwocw+Zq+GoPgIXQxf4u2a1WcX+Np6VnP qLa4au9Lwc29lHROaOtEOfhWCkLUCPibo3LaUZRzGfRgQo+vb6pY9D8oEDOUfJRl 10NzmnIyz84HYUJIZG3diithn/zPoR3F4/IaAKJohbw8VTKSyG2HVJz8IxKvwxM2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:03 2025 by rpki-client