$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft File: cea06048-7bc3-4b65-8443-4c600b73bc11.mft (raw, json) Hash identifier: +oBGP6uUfrDzlUUNI3vYpe7ZVwIXm4NQuTr5HDqFPJU= Subject key identifier: 19:91:D9:BC:A2:DF:9D:5C:56:EF:63:70:BE:15:36:BD:22:03:DC:6F Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Certificate issuer: /CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Certificate serial: 010D0C9F4328584BBE3FFC0BB5A0158C65425960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft Manifest number: 010D0C9F4328584073A8389DDFFA881819A769A2 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Thu 06 Nov 2025 02:00:00 +0000 Files and hashes: 1: 36273f28-a723-33e1-a389-9416819cddb6.roa (hash: pLdfprTuDQg2Vhwx1qExabJ3N385VIwTSnri8YHycKU=) 2: cea06048-7bc3-4b65-8443-4c600b73bc11.crl (hash: wl8SC+LqDiE05HrTmFGpru1SSHvrvQtmOrGlc5DoKpQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:3f:fc:0b:b5:a0:15:8c:65:42:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 6 02:00:00 2025 GMT Subject: CN=7b82bb45-66b2-4e19-b6b7-209dd6f97f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:a3:e8:63:86:c5:db:92:67:6d:b6:6a:b3: 52:f4:91:f0:32:36:2b:82:dc:e9:cb:41:d3:4d:38: cc:18:5a:43:3f:1c:15:52:2d:e6:f8:30:ec:71:66: e2:34:1f:1e:0c:16:18:d6:7d:05:68:c0:26:6f:17: 9b:5d:1e:7d:11:41:34:19:7c:e1:b6:f6:7c:5c:9b: 88:ef:3c:fd:ac:7e:88:ae:40:2c:bc:a9:82:8b:8e: 25:b4:3c:53:59:51:e6:33:22:f2:6d:7d:86:35:43: c2:1f:d1:af:0c:47:9e:37:9a:0a:37:d6:73:27:f1: 87:03:86:ec:54:f0:a8:21:53:d3:6a:6a:70:5d:6a: 88:a6:ba:69:c3:dd:1c:bd:11:b0:3a:fa:14:e2:0e: 01:12:be:de:53:11:a0:f6:f8:f6:3d:17:73:b7:3d: 7a:cf:97:8f:46:8b:a8:a2:fd:22:20:e2:7b:e3:be: ed:05:1b:71:ee:3e:c2:ae:8c:25:0e:af:66:f9:2b: e6:97:df:2e:b6:00:6f:c9:7b:f4:1e:99:ec:f6:65: cf:61:b5:4e:e6:8d:05:01:2a:80:ad:4e:14:f5:92: bc:0c:45:60:84:43:c9:13:4e:13:ad:3b:12:ba:03: 7c:d2:af:84:78:d5:ff:fa:a3:44:f1:85:0e:9d:46: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:D9:BC:A2:DF:9D:5C:56:EF:63:70:BE:15:36:BD:22:03:DC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl X509v3 Authority Key Identifier: keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:12:f6:22:71:86:d6:5d:e8:c7:de:86:3a:b1:36:35:e9:3d: 85:55:45:77:70:98:70:fe:e6:1f:75:92:f1:5d:8e:3a:7c:62: 46:e8:8c:74:c4:c8:f2:1d:eb:12:b3:da:be:c3:01:a1:f4:a0: 1e:eb:1c:b4:f1:85:a7:9b:85:0f:93:8e:1f:8b:1f:48:2f:02: 57:71:5f:8f:3d:3c:70:92:e4:53:b7:3b:d8:e3:45:bf:49:75: fe:8e:ab:7f:ef:5d:e2:ff:02:4d:83:dd:a0:b7:df:b5:6b:0b: df:6c:a7:e6:e9:56:06:7a:b1:70:f0:bf:96:df:d8:f9:58:e3: e2:76:4a:9b:d5:a7:18:93:c8:3b:a5:ab:9b:e7:46:88:6f:fd: 2e:14:90:ad:4d:9c:5e:34:0f:7a:27:80:a5:23:ce:1f:95:10: c7:fe:2c:af:86:c1:10:3f:41:a7:30:4f:cd:cf:05:da:47:79: ab:39:51:b0:23:8a:4f:4f:ea:f5:6e:eb:76:09:38:a5:e1:78: de:21:73:de:a6:df:4d:04:cb:b6:f4:9b:07:85:43:aa:24:ff: ab:3f:fc:1e:54:d7:d2:28:fc:bc:ea:d8:8c:1b:a2:26:77:fa: 47:24:bb:8a:b8:18:ec:8f:9c:13:f0:6b:50:07:4a:83:72:71: a6:e4:bc:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+P/wLtaAVjGVCWWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi YzExMB4XDTI1MTEwNDAyMDAwOFoXDTI1MTEwNjAyMDAwMFowLzEtMCsGA1UEAxMk N2I4MmJiNDUtNjZiMi00ZTE5LWI2YjctMjA5ZGQ2Zjk3ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yj6GOGxduSZ222arNS9JHwMjYrgtzpy0HT TTjMGFpDPxwVUi3m+DDscWbiNB8eDBYY1n0FaMAmbxebXR59EUE0GXzhtvZ8XJuI 7zz9rH6IrkAsvKmCi44ltDxTWVHmMyLybX2GNUPCH9GvDEeeN5oKN9ZzJ/GHA4bs VPCoIVPTampwXWqIprppw90cvRGwOvoU4g4BEr7eUxGg9vj2PRdztz16z5ePRouo ov0iIOJ7477tBRtx7j7CrowlDq9m+Svml98utgBvyXv0Hpns9mXPYbVO5o0FASqA rU4U9ZK8DEVghEPJE04TrTsSugN80q+EeNX/+qNE8YUOnUYAawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBmR2byi351cVu9jcL4VNr0iA9xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvY2VhMDYwNDgtN2JjMy00 YjY1LTg0NDMtNGM2MDBiNzNiYzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0 NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw MGI3M2JjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqEvYicYbWXejH3oY6sTY1 6T2FVUV3cJhw/uYfdZLxXY46fGJG6Ix0xMjyHesSs9q+wwGh9KAe6xy08YWnm4UP k44fix9ILwJXcV+PPTxwkuRTtzvY40W/SXX+jqt/713i/wJNg92gt9+1awvfbKfm 6VYGerFw8L+W39j5WOPidkqb1acYk8g7paub50aIb/0uFJCtTZxeNA96J4ClI84f lRDH/iyvhsEQP0GnME/NzwXaR3mrOVGwI4pPT+r1but2CTil4XjeIXPept9NBMu2 9JsHhUOqJP+rP/weVNfSKPy86tiMG6Imd/pHJLuKuBjsj5wT8GtQB0qDcnGm5LyH -----END CERTIFICATE-----Generated at Wed Nov 5 02:01:48 2025 by rpki-client