$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft File: f30a83fc-5753-4d94-85d1-26924afa8ea3.mft (raw, json) Hash identifier: XibSNOwm4Qci+tLanY+fKJYRkjg5D1IfbIH9H/k5E6A= Subject key identifier: 23:69:3A:2C:29:7F:C8:98:20:89:10:A6:4A:42:D2:DF:04:12:34:87 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F4328584BBFC30C2871EDF90E3DAE6480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft Manifest number: 010D0C9F4328584073A85A5393752575F39E6743 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (hash: fZe7+PDUqa24EOLngCQ9mjIaeYJYxIWuaTSrvXfVWEg=) 2: f30a83fc-5753-4d94-85d1-26924afa8ea3.crl (hash: Qfh9Ooa7UwbBK1208YSfM6+Qm9gsIe4+IQ7sqsJUSRw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0c:28:71:ed:f9:0e:3d:ae:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=fb35bbd3-b4dc-4ad2-b755-6a44d0878ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:7a:fb:59:31:2d:41:4f:db:58:df:4d:ca: a0:b1:70:49:bd:79:85:58:bb:9f:0c:5d:e4:e4:06: ec:96:41:5e:08:bc:b1:f1:04:e5:0a:29:5f:db:de: 5d:76:3e:95:0d:41:0d:f1:1a:76:ca:7c:60:67:ae: 8b:d4:27:42:01:d2:37:22:c4:eb:e4:62:5e:eb:90: ce:73:ef:5b:ef:4f:2e:e3:dc:49:94:12:35:b5:a6: 9a:4d:c8:4b:39:3f:d5:74:f0:59:77:f5:30:c3:d0: 55:b1:c6:d3:f1:d5:cf:b7:df:1a:4d:1a:71:4e:00: c6:00:3c:56:84:80:16:62:e9:ad:ec:06:b0:34:f3: 31:de:7e:01:f1:fd:fa:92:09:da:54:fb:70:9e:5b: 4f:a1:29:69:c7:76:8e:3b:c8:0d:6b:a4:13:23:be: eb:7e:28:61:8b:7e:82:07:6a:88:05:25:2b:61:bf: e7:38:f4:12:33:ec:1a:b7:d4:d5:10:63:e7:b1:0a: 21:ad:52:bd:78:5a:4b:bc:6f:37:13:94:b0:e4:89: 83:c7:1f:18:90:8c:6e:1a:32:c7:95:0b:b7:d2:3f: 54:9e:ec:65:55:50:d6:cc:8c:92:e7:92:8e:75:16: b2:e2:3b:7f:77:1a:4f:37:93:47:00:01:78:bd:d9: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:69:3A:2C:29:7F:C8:98:20:89:10:A6:4A:42:D2:DF:04:12:34:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:b8:78:d3:57:61:63:fa:41:f5:3f:80:e3:7c:1a:d0:80: ab:02:60:72:b1:06:e8:b1:dc:56:03:9c:f4:1b:be:94:e3:8b: 98:68:b6:03:4b:f9:d4:fe:83:3c:f0:9c:b8:3f:d9:27:5c:d3: b2:f9:cb:d4:44:3a:e6:a5:fc:fa:9d:01:94:d3:59:17:ab:51: 03:76:b8:06:60:eb:95:0d:f2:f6:81:10:28:d5:e4:31:38:53: 92:c2:ac:34:9b:e3:47:47:f5:93:2c:ce:cb:00:fb:a4:85:87: 1e:b4:05:5f:a1:78:21:6c:fe:74:6f:48:b3:e7:59:58:9d:ba: 85:60:5e:8f:b2:d7:7d:2f:95:23:38:ad:f5:dc:c1:48:45:e7: 06:cf:a0:76:76:01:a1:30:6b:a2:a4:7a:d8:49:c1:09:30:ad: 48:ec:68:63:6e:ce:e6:29:b0:01:58:86:a7:dc:97:d7:53:95: 25:7e:53:af:af:a5:5b:85:07:eb:f8:ad:60:bd:c4:12:fe:59: da:6a:18:2e:ca:bb:10:4d:7c:77:9b:6c:93:4c:9d:13:f8:f2: 7d:64:94:5e:eb:ce:1e:20:21:9e:56:ae:17:cc:42:3d:9b:80: 3e:01:7a:f8:f5:e2:a7:b5:6a:7e:28:d5:7c:c3:4b:4c:41:e9: 0a:ce:9b:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wwwoce35Dj2uZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk ZmIzNWJiZDMtYjRkYy00YWQyLWI3NTUtNmE0NGQwODc4ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc16+1kxLUFP21jfTcqgsXBJvXmFWLufDF3k 5AbslkFeCLyx8QTlCilf295ddj6VDUEN8Rp2ynxgZ66L1CdCAdI3IsTr5GJe65DO c+9b708u49xJlBI1taaaTchLOT/VdPBZd/Uww9BVscbT8dXPt98aTRpxTgDGADxW hIAWYumt7AawNPMx3n4B8f36kgnaVPtwnltPoSlpx3aOO8gNa6QTI77rfihhi36C B2qIBSUrYb/nOPQSM+wat9TVEGPnsQohrVK9eFpLvG83E5Sw5ImDxx8YkIxuGjLH lQu30j9UnuxlVVDWzIyS55KOdRay4jt/dxpPN5NHAAF4vdloiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNpOiwpf8iYIIkQpkpC0t8EEjSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvZjMwYTgzZmMtNTc1My00 ZDk0LTg1ZDEtMjY5MjRhZmE4ZWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa6Lh401dhY/pB9T+A43wa 0ICrAmBysQbosdxWA5z0G76U44uYaLYDS/nU/oM88Jy4P9knXNOy+cvURDrmpfz6 nQGU01kXq1EDdrgGYOuVDfL2gRAo1eQxOFOSwqw0m+NHR/WTLM7LAPukhYcetAVf oXghbP50b0iz51lYnbqFYF6Pstd9L5UjOK313MFIRecGz6B2dgGhMGuipHrYScEJ MK1I7Ghjbs7mKbABWIan3JfXU5UlflOvr6VbhQfr+K1gvcQS/lnaahguyrsQTXx3 m2yTTJ0T+PJ9ZJRe684eICGeVq4XzEI9m4A+AXr49eKntWp+KNV8w0tMQekKzpvR -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:28 2025 by rpki-client