$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: uKymNrIKRTiBXuUiPFqKAT6huyWkrLKsh4ArMuoXpXw= Subject key identifier: BD:BD:9F:7D:D0:33:B4:1C:61:85:4C:B9:4C:A5:AE:83:92:DF:74:10 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584BC2AB91057E8DB1AD09F3C780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFF9F2 Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: 1fAz2KGWDpZyLl1V6R/u/2B7j1ktl/NhRQK+tR+f+70=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: MmSH6DImrKgCC/TJFuQDbBH8gkhl5NZjOYp2ytxSGS8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:91:05:7e:8d:b1:ad:09:f3:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=6fa4ca72-810b-4a22-9f26-776bb19ec72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:31:86:a4:be:f2:fb:28:d4:3f:d0:aa:f4: 86:58:a4:cd:5d:ae:63:b9:d8:13:f8:7f:88:d2:0b: 90:75:07:f9:16:b6:17:c8:2c:41:1c:3c:9c:11:d6: 64:3b:fd:d9:9b:79:95:b0:5c:d7:c2:fb:85:a1:b2: 27:e7:56:aa:f9:84:f6:e8:0c:5d:ab:f3:ef:b9:dc: 95:69:49:89:3c:93:94:4e:02:79:d2:b8:1e:c3:1d: 7e:bb:d0:39:b3:bf:70:a7:85:c5:0d:31:41:04:db: eb:0d:e3:e3:2d:f9:5c:6b:d2:4c:5d:42:cf:d1:36: dc:aa:93:9f:85:e1:a5:1a:31:fa:ec:86:88:d8:4b: 34:f9:39:c2:ff:4e:ff:4f:9e:c2:2c:53:d7:41:a3: ee:9e:ca:a4:d4:c9:5d:a5:67:0a:78:32:73:0e:95: 64:54:3a:3a:0a:ac:e3:36:52:6d:38:9b:50:37:ae: 16:bd:b8:29:7f:a1:ee:db:57:78:3e:85:62:f4:d6: 24:dd:fd:fe:5a:14:ee:ab:d3:17:96:63:16:01:b9: 53:3d:89:69:47:2e:33:2b:57:d1:ac:52:79:1e:d7: 36:3a:80:8f:6e:24:f4:aa:47:2c:9c:df:17:3e:af: 7b:50:5b:b7:bb:65:81:b2:8f:63:f2:cd:4d:98:dc: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BD:9F:7D:D0:33:B4:1C:61:85:4C:B9:4C:A5:AE:83:92:DF:74:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f4:5c:4e:bf:97:c7:d6:02:02:ac:6e:53:73:a7:a8:47:6e: f0:07:e4:c3:4b:dd:29:e1:d7:89:57:1a:82:4c:30:67:3c:62: b5:b6:5e:08:d7:21:29:0a:f8:ac:ae:aa:e4:5d:51:06:0a:29: 7d:b6:4a:c9:29:fc:d6:79:c1:f7:85:e9:24:b0:91:96:2b:ee: be:96:40:22:cb:30:00:60:d8:2e:7e:21:42:3a:c5:de:ce:d5: 35:26:e3:f4:cd:1d:51:15:21:14:1a:71:a3:3a:83:20:59:b9: 22:3c:95:2c:d1:ee:65:37:93:81:bd:f0:48:32:ae:3a:27:a5: 6f:2b:23:cb:50:af:0a:aa:a4:bc:33:7d:a3:fa:d6:cd:a0:46: 9d:cb:29:55:d7:39:fe:31:3f:6a:a6:5a:2f:39:5b:47:c8:5b: 7a:08:a5:aa:60:1d:39:8d:89:5b:c7:53:de:97:30:47:3b:0e: 18:9c:e1:77:36:89:0b:94:05:60:e2:53:46:78:61:b8:d2:08: dc:ac:26:5b:9d:4f:99:30:a4:c8:71:30:85:2f:cb:73:04:09: 97:93:bf:f6:57:32:a8:cf:db:cb:a1:3c:14:1d:81:f1:49:a8: c1:06:8a:78:4b:ed:83:76:f4:d2:56:a5:ab:7a:86:ec:37:d0: d4:e6:ec:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq5EFfo2xrQnzx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NmZhNGNhNzItODEwYi00YTIyLTlmMjYtNzc2YmIxOWVjNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ExhqS+8vso1D/QqvSGWKTNXa5judgT+H+I 0guQdQf5FrYXyCxBHDycEdZkO/3Zm3mVsFzXwvuFobIn51aq+YT26Axdq/PvudyV aUmJPJOUTgJ50rgewx1+u9A5s79wp4XFDTFBBNvrDePjLflca9JMXULP0TbcqpOf heGlGjH67IaI2Es0+TnC/07/T57CLFPXQaPunsqk1MldpWcKeDJzDpVkVDo6Cqzj NlJtOJtQN64Wvbgpf6Hu21d4PoVi9NYk3f3+WhTuq9MXlmMWAblTPYlpRy4zK1fR rFJ5Htc2OoCPbiT0qkcsnN8XPq97UFu3u2WBso9j8s1NmNwPSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL29n33QM7QcYYVMuUylroOS33QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw9FxOv5fH1gICrG5Tc6eo R27wB+TDS90p4deJVxqCTDBnPGK1tl4I1yEpCvisrqrkXVEGCil9tkrJKfzWecH3 hekksJGWK+6+lkAiyzAAYNgufiFCOsXeztU1JuP0zR1RFSEUGnGjOoMgWbkiPJUs 0e5lN5OBvfBIMq46J6VvKyPLUK8KqqS8M32j+tbNoEadyylV1zn+MT9qplovOVtH yFt6CKWqYB05jYlbx1PelzBHOw4YnOF3NokLlAVg4lNGeGG40gjcrCZbnU+ZMKTI cTCFL8tzBAmXk7/2VzKoz9vLoTwUHYHxSajBBop4S+2DdvTSVqWreobsN9DU5uyB -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:00 2025 by rpki-client