$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: zNxheafIk8QtzpYi7N9ICNfx6/JWcbrFTUQIN6hVs9Q= Subject key identifier: 2B:E6:8D:E0:C1:FF:7E:00:E9:E5:C0:3C:5A:64:0A:AB:4B:5F:82:A3 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584BBE7B7D4CD92DEB104000EFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF5643E2 Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Thu 06 Nov 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 8kTN9u66M6Nsztcy/hQhpR3uLP4Ht7SmYKQ0RACAH6s=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: 0dFhVwPjPRk3mii1EptsNMd1mk+BtUsr5diZ8ogb8Eo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:7d:4c:d9:2d:eb:10:40:00:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 6 04:00:00 2025 GMT Subject: CN=6d886920-4729-486a-b700-06c6b81ceae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:8d:2e:74:b3:fd:a7:21:9b:07:59:6f:c9: 6b:04:44:d1:34:43:b0:d3:26:c9:54:c2:38:33:bb: 18:12:7e:ad:2e:97:36:ab:53:b6:a4:c1:f1:27:52: 99:8d:5f:54:53:21:f8:cc:20:34:28:f9:7a:ca:00: 00:72:c5:56:5c:a4:df:0e:7f:d2:50:2a:00:19:80: 06:05:3e:96:41:b7:ca:a5:f4:25:bb:94:90:1d:21: f8:1a:2f:cf:74:c4:70:81:e1:35:e9:9b:96:71:01: 94:de:f9:43:ba:32:79:ed:7b:cc:31:38:0a:f4:59: 3c:b8:aa:24:a1:b9:a7:83:ab:11:af:21:f6:55:73: d7:2a:85:c2:da:ed:10:09:31:ec:2c:c3:01:2f:fc: 70:fc:10:79:a1:ab:b0:20:a7:65:e4:0f:ac:5c:b0: f1:f3:7b:ac:46:dd:53:a5:f3:87:e3:4e:e1:13:35: 0c:e1:17:1d:78:df:d9:ca:23:f1:5a:2d:e3:15:b6: fe:35:e5:af:f9:36:94:b0:95:af:31:0a:f5:40:80: 1d:fe:b8:fe:6c:fe:77:04:59:86:c2:7e:65:a5:c2: 77:05:e4:48:dd:69:a4:0f:84:11:f2:a7:bf:5a:8c: 95:c4:e3:a1:88:69:3b:4c:34:52:94:36:4b:f0:d4: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:8D:E0:C1:FF:7E:00:E9:E5:C0:3C:5A:64:0A:AB:4B:5F:82:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d8:16:52:f5:0f:32:05:2a:32:87:09:c8:84:f5:e8:13:ba: 96:6a:11:99:c9:33:8a:31:b8:0d:48:d4:c7:57:2a:b7:b3:ab: 67:e4:7f:c3:8e:68:84:20:b0:5d:b1:6f:34:45:b9:a1:93:73: d2:04:32:3b:44:20:69:f3:04:f5:46:f8:41:c2:57:38:34:4a: 2d:20:3d:6f:90:54:6f:df:18:37:dc:9c:bb:a6:a0:8d:e5:52: 7e:0e:16:84:20:aa:35:3d:8b:de:b1:b4:2e:02:72:ee:e3:85: 9b:29:99:bd:11:f6:fb:5e:9e:fa:ee:1c:9d:24:46:c3:42:58: ca:49:b6:cc:6b:18:ad:ee:5d:53:4e:26:2c:f1:f7:5b:9b:32: b1:97:bc:39:52:4a:b6:0a:64:c6:3b:38:dd:72:98:c7:3b:48: 72:b1:2d:cf:15:9a:96:8b:df:6b:7e:40:4b:62:ce:87:38:3c: f5:46:05:ad:14:8f:19:80:ac:f1:23:0b:fb:53:9e:fd:d9:49: 92:eb:af:af:38:67:fc:b2:02:13:60:7f:e4:fb:18:f2:dc:82: 73:a5:21:4f:b2:ff:eb:8e:7d:ab:a5:de:af:36:60:66:e4:e4: a0:77:b3:9f:f5:17:89:34:b4:c6:6c:63:5e:a0:98:15:48:e9: c6:69:f0:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e31M2S3rEEAA78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNjA0MDAwMFowLzEtMCsGA1UEAxMk NmQ4ODY5MjAtNDcyOS00ODZhLWI3MDAtMDZjNmI4MWNlYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGSNLnSz/achmwdZb8lrBETRNEOw0ybJVMI4 M7sYEn6tLpc2q1O2pMHxJ1KZjV9UUyH4zCA0KPl6ygAAcsVWXKTfDn/SUCoAGYAG BT6WQbfKpfQlu5SQHSH4Gi/PdMRwgeE16ZuWcQGU3vlDujJ57XvMMTgK9Fk8uKok obmng6sRryH2VXPXKoXC2u0QCTHsLMMBL/xw/BB5oauwIKdl5A+sXLDx83usRt1T pfOH407hEzUM4RcdeN/ZyiPxWi3jFbb+NeWv+TaUsJWvMQr1QIAd/rj+bP53BFmG wn5lpcJ3BeRI3WmkD4QR8qe/WoyVxOOhiGk7TDRSlDZL8NRVNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCvmjeDB/34A6eXAPFpkCqtLX4KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR2BZS9Q8yBSoyhwnIhPXo E7qWahGZyTOKMbgNSNTHVyq3s6tn5H/DjmiEILBdsW80Rbmhk3PSBDI7RCBp8wT1 RvhBwlc4NEotID1vkFRv3xg33Jy7pqCN5VJ+DhaEIKo1PYvesbQuAnLu44WbKZm9 Efb7Xp767hydJEbDQljKSbbMaxit7l1TTiYs8fdbmzKxl7w5Ukq2CmTGOzjdcpjH O0hysS3PFZqWi99rfkBLYs6HODz1RgWtFI8ZgKzxIwv7U5792UmS66+vOGf8sgIT YH/k+xjy3IJzpSFPsv/rjn2rpd6vNmBm5OSgd7Of9ReJNLTGbGNeoJgVSOnGafAz -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:50 2025 by rpki-client