$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft File: ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft (raw, json) Hash identifier: cU2uBpLCSqxU9hq++QOs0GON7b4f8mkuBIfF7ahe1qY= Subject key identifier: E0:04:12:AE:89:43:7C:9E:78:94:18:74:16:53:7A:54:44:B7:14:86 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584BC10A9DE068FDA1E03641CDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft Manifest number: 010D0C9F4328584073A83658BAB2F242DC44564C Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Sat 08 Nov 2025 02:00:00 +0000 Files and hashes: 1: 17688313-b672-388e-bef1-cd24e224ed7e.roa (hash: rhNm9UU0rgvJEhD5PU7warG6dKsBvsJDRv/fE7AEGu0=) 2: 38849820-bd67-31ee-910f-a7325f635489.roa (hash: BfPPxRAMtws6j+45aobDMBeVBNDiJAmBQnr2cRc8jLY=) 3: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (hash: RCyfpmL5zujto3wIc1eBNeLZ+J2Rq/ZTDDTqhykWNqM=) 4: 67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (hash: 8T8ZVcfqqRKizURLm/kQesUofGrBEEvk7TfcwFYFJC8=) 5: b0ec175b-098d-3374-a654-a890d9f9f81f.roa (hash: ULRttdVx3xgvPpY3i+hS+zpAO4trqcJl+J0yhhBqa1g=) 6: ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl (hash: 9rpkx511paV16uSg9uz38kQhP85/4hXtCFZpOfcc/ZA=) 7: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (hash: BTnnwCwLiwfd2DWDIfrCLjOy/SmiwJidmDbEac6Gmcg=) 8: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (hash: JjRYQdAECh9fRKJsBevBNmj0Rz6NBdHomQ6fk94K+yo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9d:e0:68:fd:a1:e0:36:41:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 8 02:00:00 2025 GMT Subject: CN=3e72c0b3-194b-455e-a6e4-e4cd89d9edbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:54:8f:3e:7a:81:dc:e2:f7:27:dc:33:97: 89:73:22:42:07:ea:d9:20:9d:6c:27:e4:d8:2e:10: 48:f2:f6:cf:e8:96:93:ed:f8:6d:df:15:11:66:fe: 01:0f:80:a0:1e:3e:d0:88:3d:e8:c1:51:bf:b5:32: 65:ad:30:ef:84:cb:18:46:e4:71:6d:53:85:7d:f9: e7:d0:a6:31:a4:50:d1:92:6e:e3:8f:6a:3c:7c:68: cf:0e:a7:93:20:65:20:df:4a:d8:86:9f:35:7c:78: 0e:a7:f0:18:82:24:1d:d9:a3:5c:96:93:d6:c0:ea: 15:9f:af:5c:ff:49:c0:24:12:77:c6:92:aa:d7:18: 3c:36:07:18:ef:40:69:a2:2c:0b:7b:cf:68:5c:1a: 22:ae:a0:af:8f:3b:62:00:57:e9:d7:20:88:05:ca: 10:da:e5:af:73:d0:7f:80:6c:2f:23:c8:c3:9b:58: ac:40:ca:19:52:83:2d:86:b7:37:c0:c5:89:d8:69: 22:62:b5:ec:16:cf:96:3c:fc:0b:f3:03:8d:cb:22: 52:8d:7f:82:ea:45:23:67:aa:3e:4d:d5:de:ac:25: a0:18:af:89:4b:a2:b7:a3:1b:29:9e:f7:a9:0b:ab: 4d:e0:0f:46:78:de:0e:e4:24:ec:1f:4f:b1:b2:fb: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:04:12:AE:89:43:7C:9E:78:94:18:74:16:53:7A:54:44:B7:14:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2e:8c:87:6b:2f:b8:fc:d2:24:5b:a4:58:3c:f0:0d:f2:22: 70:0d:77:7d:0d:fb:a2:c2:67:b6:1a:a7:c4:77:43:c3:ad:2f: 13:75:08:d1:27:90:65:17:a4:df:bc:3e:af:8c:86:91:a7:23: 10:1b:f9:52:41:16:18:a8:cc:51:76:e1:3d:a2:c8:05:09:8b: e1:6e:e7:2f:19:cb:a5:26:26:14:b5:6c:1f:de:e8:a5:a2:9e: c2:5c:fe:8e:d5:d2:76:66:49:8d:89:c8:31:1d:1c:aa:58:df: 65:57:e8:ec:cd:d4:e3:74:bc:6b:8f:9e:c4:ae:4e:05:4f:a9: ac:64:86:32:2a:af:cc:c8:8d:41:40:ea:14:9f:87:52:1b:49: 61:34:95:c0:1b:06:17:0d:18:6b:3a:18:dd:75:de:d7:e2:59: 42:eb:d7:4e:47:95:e9:0f:59:6c:21:e9:d8:89:16:db:2f:c3: ed:94:d0:87:74:9c:72:64:c6:a6:0f:bc:04:e0:8c:39:3d:99: 4b:5d:f0:52:74:f1:d6:4c:23:00:06:c7:13:78:73:4b:56:3a: ff:30:92:2e:d2:59:7a:8a:5f:7c:35:94:5b:eb:57:6d:37:cb: 27:12:c8:df:44:d2:a6:c4:7c:78:86:60:3d:28:ea:b9:e0:74: 6c:84:42:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp3gaP2h4DZBzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwODAyMDAwMFowLzEtMCsGA1UEAxMk M2U3MmMwYjMtMTk0Yi00NTVlLWE2ZTQtZTRjZDg5ZDllZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5Ujz56gdzi9yfcM5eJcyJCB+rZIJ1sJ+TY LhBI8vbP6JaT7fht3xURZv4BD4CgHj7QiD3owVG/tTJlrTDvhMsYRuRxbVOFffnn 0KYxpFDRkm7jj2o8fGjPDqeTIGUg30rYhp81fHgOp/AYgiQd2aNclpPWwOoVn69c /0nAJBJ3xpKq1xg8NgcY70BpoiwLe89oXBoirqCvjztiAFfp1yCIBcoQ2uWvc9B/ gGwvI8jDm1isQMoZUoMthrc3wMWJ2GkiYrXsFs+WPPwL8wONyyJSjX+C6kUjZ6o+ TdXerCWgGK+JS6K3oxspnvepC6tN4A9GeN4O5CTsH0+xsvspTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOAEEq6JQ3yeeJQYdBZTelREtxSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvY2UxY2E1YTItNjg0NC00 NWYzLWIwMWEtY2ZjODg1MzdkNmEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgLoyHay+4/NIkW6RYPPAN 8iJwDXd9Dfuiwme2GqfEd0PDrS8TdQjRJ5BlF6TfvD6vjIaRpyMQG/lSQRYYqMxR duE9osgFCYvhbucvGculJiYUtWwf3uilop7CXP6O1dJ2ZkmNicgxHRyqWN9lV+js zdTjdLxrj57Erk4FT6msZIYyKq/MyI1BQOoUn4dSG0lhNJXAGwYXDRhrOhjddd7X 4llC69dOR5XpD1lsIenYiRbbL8PtlNCHdJxyZMamD7wE4Iw5PZlLXfBSdPHWTCMA BscTeHNLVjr/MJIu0ll6il98NZRb61dtN8snEsjfRNKmxHx4hmA9KOq54HRshEK9 -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:42 2025 by rpki-client