$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: QPuOdMnI237XBWHBeSugeERCqGp5R4dArAoITW4TsqE= Subject key identifier: 39:A3:FC:17:E4:59:5E:5F:4E:2D:B3:D7:A3:F9:C3:E3:A3:55:F4:16 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584BBED4DEFA76400CD9ED8F8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A33A3 Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Thu 06 Nov 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: +HumoP+y1kRF/KbtKLXmgaKsyGkfY1ADuS5c+aY+Rf8=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: 4USQC6/baUlAu5/mT78qPhdl1rlpawKRUNvw8D9b6cw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:de:fa:76:40:0c:d9:ed:8f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=e3cbb0af-5e14-4fe7-8965-10f0915a9d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:d7:57:c3:14:1d:36:23:2b:8b:98:d7:a5: 1d:1e:30:02:51:89:3e:d9:70:81:b5:c4:66:a9:d9: d3:2c:57:d9:f4:6d:80:35:13:14:90:da:4b:22:42: f6:b1:54:2e:42:81:05:64:32:d4:cb:6b:96:5c:d0: 39:8e:b3:3e:67:12:a8:a2:a3:38:26:2a:bd:df:e9: e3:f0:85:24:e4:21:81:c9:d9:6e:70:59:45:24:6f: 06:55:cf:0d:21:de:d1:0c:e5:6e:54:10:76:a2:f8: 79:89:26:de:49:f6:f7:43:44:91:03:6e:3b:ef:91: ed:4c:8f:c8:a8:31:0c:4d:59:49:21:2b:6b:16:f0: f6:73:96:e7:a3:c7:fb:79:8b:a5:f7:13:b8:9b:3a: b8:49:90:d6:38:c0:0a:7b:ec:32:7b:3a:a3:a7:0b: 01:83:9d:b1:ca:02:48:52:87:f1:32:62:2b:a2:d0: d0:e1:97:77:b4:a3:ae:81:7d:c6:ab:52:40:50:0c: 1f:41:5a:7b:f7:b9:02:3a:20:2a:56:02:d9:f3:8f: 9a:2f:16:4c:1f:98:d9:91:23:41:fe:a8:a0:c7:31: 0b:a4:a6:a2:34:78:77:ad:86:60:67:39:a5:8c:b9: 60:2d:e0:f2:5a:c0:ca:4b:21:67:fc:e8:a6:b4:9c: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:FC:17:E4:59:5E:5F:4E:2D:B3:D7:A3:F9:C3:E3:A3:55:F4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7d:28:6b:c3:6c:7e:71:01:72:a2:ad:26:30:d5:28:70:fd: b2:e7:5a:35:89:d6:4c:54:51:12:6c:3a:73:19:ff:41:5b:b0: ab:96:9a:ea:12:37:97:a0:e7:52:dc:09:5f:31:65:96:c9:59: 7f:74:7e:a6:11:e9:61:76:22:c9:91:11:a4:af:ac:df:df:da: 5a:82:ae:e4:df:d3:15:58:15:fb:a1:79:43:4c:05:69:56:5e: b0:89:7f:19:ec:92:34:20:58:a4:e1:eb:8a:7e:58:d3:a7:47: b0:28:75:c1:c1:51:ae:a6:4b:f6:f2:b1:81:a9:8d:19:86:b6: 32:fe:28:df:49:76:c9:4f:10:6b:61:7b:02:a5:41:49:4a:7d: cf:cb:05:92:be:eb:71:ab:65:fd:e7:f0:cc:09:be:33:52:b1: b0:2c:1f:ff:7d:5b:30:4a:59:03:26:5a:38:bd:40:23:41:94: fd:75:57:0f:2d:2f:12:52:ca:72:78:d8:89:a1:75:c7:e4:ad: d7:49:c2:b7:15:4b:9e:2b:6b:8f:5c:73:34:a5:7a:18:d8:1f: ec:d9:8d:b8:a2:b0:c8:86:b1:a3:8d:51:e6:a8:62:a8:b1:ea: b6:a8:c8:87:cb:ab:ea:f6:49:d3:3f:d0:76:98:76:43:63:bb: 25:7c:4a:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1N76dkAM2e2PiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNjA3MDAwMFowLzEtMCsGA1UEAxMk ZTNjYmIwYWYtNWUxNC00ZmU3LTg5NjUtMTBmMDkxNWE5ZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbPXV8MUHTYjK4uY16UdHjACUYk+2XCBtcRm qdnTLFfZ9G2ANRMUkNpLIkL2sVQuQoEFZDLUy2uWXNA5jrM+ZxKooqM4Jiq93+nj 8IUk5CGBydlucFlFJG8GVc8NId7RDOVuVBB2ovh5iSbeSfb3Q0SRA24775HtTI/I qDEMTVlJIStrFvD2c5bno8f7eYul9xO4mzq4SZDWOMAKe+wyezqjpwsBg52xygJI UofxMmIrotDQ4Zd3tKOugX3Gq1JAUAwfQVp797kCOiAqVgLZ84+aLxZMH5jZkSNB /qigxzELpKaiNHh3rYZgZzmljLlgLeDyWsDKSyFn/OimtJyU3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDmj/BfkWV5fTi2z16P5w+OjVfQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyfShrw2x+cQFyoq0mMNUo cP2y51o1idZMVFESbDpzGf9BW7CrlprqEjeXoOdS3AlfMWWWyVl/dH6mEelhdiLJ kRGkr6zf39pagq7k39MVWBX7oXlDTAVpVl6wiX8Z7JI0IFik4euKfljTp0ewKHXB wVGupkv28rGBqY0ZhrYy/ijfSXbJTxBrYXsCpUFJSn3PywWSvutxq2X95/DMCb4z UrGwLB//fVswSlkDJlo4vUAjQZT9dVcPLS8SUspyeNiJoXXH5K3XScK3FUueK2uP XHM0pXoY2B/s2Y24orDIhrGjjVHmqGKoseq2qMiHy6vq9knTP9B2mHZDY7slfEor -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:08 2025 by rpki-client