$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft File: abaad708-212e-4627-8dbe-416a8512677d.mft (raw, json) Hash identifier: J07pRcGDi2CJILTaGoutZTxtGzTrwiddDv2AgPqyW6c= Subject key identifier: DC:66:C0:21:7E:11:E7:D8:C3:F8:59:3C:1D:DE:74:11:06:E4:3D:15 Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39 Certificate issuer: /CN=abaad708-212e-4627-8dbe-416a8512677d Certificate serial: 010D0C9F4328584BBF887F5FD1B37C4AB1450300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft Manifest number: 010D0C9F4328584073A856D525DF2BB8159C5424 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: aac7bd5d-664a-3506-9970-0032633ef323.roa (hash: wJTI/3T5eib9tUvq1HrJh3aMod20zLevAA2S/y/dD1Y=) 2: abaad708-212e-4627-8dbe-416a8512677d.crl (hash: /1EZ23VRdDe/tL+7wJSdVgYkwuZI09f7UjsiG5YTdGg=) 3: c3cb8684-f47f-3303-a3bd-521051961d0c.roa (hash: tYstbLcWneFbLW9+cgdD6N3PD70XrqRxdD8qtznO/mo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7f:5f:d1:b3:7c:4a:b1:45:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=baa75a2f-c466-44e9-871c-ca6d8a13e065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:64:34:d7:53:a3:0b:4e:05:bf:5d:3e:06: 56:62:fb:fe:ce:15:27:ce:6c:fb:77:69:33:c2:54: 73:5a:57:43:68:88:5d:32:de:72:44:50:8d:97:1a: b2:1b:f3:d2:52:4b:27:e5:10:fe:88:ba:02:f9:33: 1c:79:99:c1:0c:66:02:b8:9b:75:43:45:43:a9:8e: 32:d1:83:3c:de:6c:39:a4:38:ed:7b:15:e5:29:d4: 90:a0:b0:f7:4e:24:7b:fe:7b:f5:b1:b4:c5:48:88: 5b:46:f0:00:6d:0c:be:aa:f0:10:d7:58:37:6d:92: f4:89:e6:8e:aa:d1:77:96:47:78:b6:82:fe:ff:64: 85:0a:52:61:bb:29:39:1b:0b:d3:6f:34:7d:6c:11: 91:7e:f1:92:70:19:2c:ea:07:3a:65:00:bc:74:03: 9a:fd:61:55:6e:a4:00:96:35:bc:44:50:ea:98:e2: 97:a3:e5:14:a2:69:62:f7:66:b3:f8:cb:7d:31:c1: dc:f5:0d:18:c8:95:1e:4f:f7:d9:75:27:b1:9f:1c: c9:32:af:37:c5:89:73:6f:af:b4:dd:c9:47:ac:c8: 41:ce:de:08:a2:57:43:c4:ef:96:b6:7b:54:4d:8a: bd:4d:d1:70:af:13:d5:83:b8:14:fa:0d:f7:64:ea: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:C0:21:7E:11:E7:D8:C3:F8:59:3C:1D:DE:74:11:06:E4:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl X509v3 Authority Key Identifier: keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:16:af:2a:67:be:0c:f8:34:9f:0f:e9:64:90:1d:14:63:29: a0:0c:87:69:14:6a:9a:f5:42:9a:bd:4c:91:d5:3f:27:ce:2b: d3:2f:0f:d0:75:ef:97:8d:cd:34:be:c1:90:cf:44:6f:8f:9f: 73:1f:b8:dd:04:df:ac:98:f8:25:dd:4d:46:28:d5:8e:60:51: db:0d:00:54:95:3c:9b:8d:7d:f8:c3:40:29:2e:a1:3d:5a:28: 2f:bd:5f:5f:66:63:c6:2f:2b:71:cb:34:cf:36:d9:17:f3:af: b7:66:09:25:b5:6f:13:22:4f:4f:2b:29:44:41:73:00:e7:3b: 85:eb:af:02:df:f4:67:ed:88:39:ae:27:18:a9:2e:5f:ae:87: 13:31:7f:17:83:a5:d9:70:62:4e:e6:6d:fb:df:f4:b8:c4:62: 1c:49:ba:dc:9a:fd:1a:16:17:de:0b:64:d0:14:cd:25:ba:39: 33:5f:6b:17:cc:70:56:5c:e1:27:d1:c9:33:2e:49:6c:36:4a: e7:d9:3c:f2:9b:26:67:57:73:6d:0f:af:cf:70:4a:69:41:f9: 86:d5:fa:e2:5e:c8:89:5f:67:70:8d:be:fb:70:9e:11:14:c9: 76:c5:68:79:f3:ea:b5:ed:5e:de:a4:5f:43:1f:41:5d:76:ab: b8:cc:09:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH9f0bN8SrFFAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJhYWQ3MDgtMjEyZS00NjI3LThkYmUtNDE2YTg1MTI2 NzdkMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk YmFhNzVhMmYtYzQ2Ni00NGU5LTg3MWMtY2E2ZDhhMTNlMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUlkNNdTowtOBb9dPgZWYvv+zhUnzmz7d2kz wlRzWldDaIhdMt5yRFCNlxqyG/PSUksn5RD+iLoC+TMceZnBDGYCuJt1Q0VDqY4y 0YM83mw5pDjtexXlKdSQoLD3TiR7/nv1sbTFSIhbRvAAbQy+qvAQ11g3bZL0ieaO qtF3lkd4toL+/2SFClJhuyk5GwvTbzR9bBGRfvGScBks6gc6ZQC8dAOa/WFVbqQA ljW8RFDqmOKXo+UUomli92az+Mt9McHc9Q0YyJUeT/fZdSexnxzJMq83xYlzb6+0 3clHrMhBzt4IoldDxO+WtntUTYq9TdFwrxPVg7gU+g33ZOp8TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNxmwCF+EefYw/hZPB3edBEG5D0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFh ZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZhODUxMjY3N2QvYWJhYWQ3MDgtMjEyZS00 NjI3LThkYmUtNDE2YTg1MTI2NzdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWJhYWQ3MDgtMjEyZS00NjI3LThk YmUtNDE2YTg1MTI2NzdkL2FiYWFkNzA4LTIxMmUtNDYyNy04ZGJlLTQxNmE4NTEy Njc3ZC5jcmwwHwYDVR0jBBgwFoAU1QoKzHl+J09Gak0Ow4NeaOPYHzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFhZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZh ODUxMjY3N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfFq8qZ74M+DSfD+lkkB0U YymgDIdpFGqa9UKavUyR1T8nzivTLw/Qde+Xjc00vsGQz0Rvj59zH7jdBN+smPgl 3U1GKNWOYFHbDQBUlTybjX34w0ApLqE9WigvvV9fZmPGLytxyzTPNtkX86+3Zgkl tW8TIk9PKylEQXMA5zuF668C3/Rn7Yg5ricYqS5frocTMX8Xg6XZcGJO5m373/S4 xGIcSbrcmv0aFhfeC2TQFM0lujkzX2sXzHBWXOEn0ckzLklsNkrn2TzymyZnV3Nt D6/PcEppQfmG1friXsiJX2dwjb77cJ4RFMl2xWh58+q17V7epF9DH0Fddqu4zAl6 -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:29 2025 by rpki-client