$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft File: cadf002a-d081-4e51-89c4-f7121259516d.mft (raw, json) Hash identifier: XmBlSfpdzgIL+5F4aKeVBcpEbSTItRnC3UaP3cRAgZA= Subject key identifier: 4A:9A:55:6D:A9:27:C5:D6:B2:CC:C4:90:03:DC:34:16:AE:8D:7D:4B Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584BC058018F6050D52B3F710920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft Manifest number: 010D0C9F43285842AD9ECC2C9997439D002F56EA Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (hash: 6yr7gWMsAWMubTWqtDcGjdh4z6fKxosCh8LQTXW0Rkc=) 2: 966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (hash: HMTUjKEpac4VxGPwBJX5Y2jSHN8Yidc5Cbnprs41NIs=) 3: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (hash: DfDyuPkSrXvzuzzvvLQKi9LI1KN2koniYe1HMEi20qE=) 4: cadf002a-d081-4e51-89c4-f7121259516d.crl (hash: GuRMPv1Ql/6qvvbsa1C26BgwjhJ1at0aNyYREVik1co=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:01:8f:60:50:d5:2b:3f:71:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=f692ad08-b673-46ef-9363-dee6cf701db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:fa:81:4e:58:48:87:2b:dc:7c:13:76:a5: a1:f1:e6:0a:38:12:51:e1:53:dd:2e:fe:1b:7d:2b: d0:40:7c:d5:84:a1:63:12:7f:c0:d4:20:27:b2:6c: 50:27:c3:dd:1b:48:55:42:ea:7d:88:52:a5:4f:62: b8:8e:90:ea:62:b7:00:07:28:a9:29:80:18:ef:f2: ec:0f:76:12:60:57:66:da:5a:6b:8a:6a:8c:81:c1: d1:9a:9c:83:ec:44:18:03:76:a2:b4:47:22:e7:6d: 99:ea:07:e3:eb:11:9d:ac:a9:bd:a9:bd:57:d2:95: b8:a2:26:67:12:ed:2a:95:5c:e0:e9:96:75:db:09: d6:5a:92:75:43:da:64:a6:7a:de:6e:3f:72:92:c4: 33:75:3c:41:43:8f:d7:1b:5a:b2:e9:45:c6:30:c9: fe:e6:46:62:f2:5b:1e:bc:ca:f1:93:3c:93:35:58: 98:3e:39:9a:83:cb:87:bc:30:e4:bb:87:23:86:fa: bb:f0:05:0d:56:69:28:c0:7e:7b:8c:1b:cb:5d:1c: 64:81:f6:2e:06:1f:1d:fd:a1:4e:38:e0:f6:c6:20: 6f:7f:dd:93:a9:95:51:8b:29:b2:50:9f:87:84:92: 39:bc:24:d7:45:92:79:fd:91:c2:d1:bc:4c:99:a9: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:55:6D:A9:27:C5:D6:B2:CC:C4:90:03:DC:34:16:AE:8D:7D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:60:b9:23:ea:a7:7d:e1:d0:de:88:e0:6a:8a:58:86:57:f4: eb:23:eb:14:dd:b8:75:92:2e:fc:85:18:a7:da:8b:41:be:32: 5b:c5:61:f5:5d:eb:01:82:f0:e8:0f:fa:dd:9f:1b:83:2a:4d: ec:0f:2b:16:44:e2:40:8a:31:48:1c:dd:e3:ac:b3:62:ad:ac: 0b:66:71:ac:a9:88:b4:58:6e:8d:77:33:bf:3b:35:a4:ba:75: ad:63:43:09:59:28:94:73:4d:aa:5c:48:ea:07:d8:e7:ef:88: cc:87:6f:a5:37:eb:e2:68:4a:81:b3:12:24:3e:26:f2:9f:05: 0a:d9:fe:11:35:28:4d:2f:64:2d:0c:25:a7:2b:13:64:ce:27: 63:6c:1d:5e:28:42:88:fa:68:1b:f5:37:36:8a:b9:81:42:42: 39:00:2a:48:99:e9:16:e2:24:f4:a8:43:cd:6e:90:64:a9:f3: a0:94:b3:99:83:7a:33:54:e8:1e:42:0e:30:c9:59:7f:c1:20: 4f:98:dd:9b:d4:f9:0c:ec:fb:1b:80:da:06:6c:2e:b9:fb:9d: bc:de:7d:27:6d:ac:15:7e:8b:6e:dc:17:8c:26:f4:52:66:c0: 4f:74:49:5f:04:22:8a:ec:b3:27:5f:81:9b:88:cf:38:f2:24: 3f:9e:f5:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAGPYFDVKz9xCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ZjY5MmFkMDgtYjY3My00NmVmLTkzNjMtZGVlNmNmNzAxZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAH6gU5YSIcr3HwTdqWh8eYKOBJR4VPdLv4b fSvQQHzVhKFjEn/A1CAnsmxQJ8PdG0hVQup9iFKlT2K4jpDqYrcAByipKYAY7/Ls D3YSYFdm2lprimqMgcHRmpyD7EQYA3aitEci522Z6gfj6xGdrKm9qb1X0pW4oiZn Eu0qlVzg6ZZ12wnWWpJ1Q9pkpnrebj9yksQzdTxBQ4/XG1qy6UXGMMn+5kZi8lse vMrxkzyTNViYPjmag8uHvDDku4cjhvq78AUNVmkowH57jBvLXRxkgfYuBh8d/aFO OOD2xiBvf92TqZVRiymyUJ+HhJI5vCTXRZJ5/ZHC0bxMmamHHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqaVW2pJ8XWsszEkAPcNBaujX1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvY2FkZjAwMmEtZDA4MS00 ZTUxLTg5YzQtZjcxMjEyNTk1MTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRYLkj6qd94dDeiOBqiliG V/TrI+sU3bh1ki78hRin2otBvjJbxWH1XesBgvDoD/rdnxuDKk3sDysWROJAijFI HN3jrLNirawLZnGsqYi0WG6NdzO/OzWkunWtY0MJWSiUc02qXEjqB9jn74jMh2+l N+viaEqBsxIkPibynwUK2f4RNShNL2QtDCWnKxNkzidjbB1eKEKI+mgb9Tc2irmB QkI5ACpImekW4iT0qEPNbpBkqfOglLOZg3ozVOgeQg4wyVl/wSBPmN2b1PkM7Psb gNoGbC65+5283n0nbawVfotu3BeMJvRSZsBPdElfBCKK7LMnX4GbiM848iQ/nvXp -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:15 2025 by rpki-client