$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft File: d3bf28f7-eba5-4254-a572-761a872427b5.mft (raw, json) Hash identifier: mzQ05Va1lAU2Q6kZK8rXgevuHbORk6m3hNUv/zdVj+0= Subject key identifier: C4:76:9F:06:F7:6D:92:6F:AA:95:59:F7:03:3E:DA:21:87:04:52:D6 Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19 Certificate issuer: /CN=d3bf28f7-eba5-4254-a572-761a872427b5 Certificate serial: 010D0C9F4328584BC03A2E15DD43D1857211A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft Manifest number: 010D0C9F432858428C0BBA437144D71ED8B54DA5 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 1bea0700-2bfc-3937-9a52-46b59459456c.roa (hash: uGxgT8HeJbtapCh+zyPrxTkt6u9/XpVIDa46gUvPysw=) 2: 2d512d2b-840f-30cb-88f8-f79128126588.roa (hash: iEx6qXFxBb8Oc0chH21znj9HaSccQs1D9Lw3ysHcaG8=) 3: 38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa (hash: s3wTLkLKS7HasZZGTNhQIFdXKf0TQJ1BA9Yg47Jf+F0=) 4: 8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (hash: 56P+fWwSKGmsgCjbSPpaMeMUW3eJlFSNb35wOvVMWb8=) 5: d3bf28f7-eba5-4254-a572-761a872427b5.crl (hash: ooeq8s73wBp5Q51WgLqBuadjJCj9dSUmcXFKZ2VsS5k=) 6: ea93ae24-34e7-3c83-9477-44557229880c.roa (hash: zUbTwd3RpK6clJRuvcrUlTifSHv0oeF9OAfXqs18s6c=) 7: f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa (hash: CTsV7PhWReDYedLVWUtd66Yj+XNl86hHA0GZEvPNeaU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2e:15:dd:43:d1:85:72:11:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=2629dd73-69f6-4935-9180-22afca1e55e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:34:13:5a:ae:44:73:4e:c2:c5:71:a6:fa: 72:8b:31:b3:e7:2e:63:e2:5d:89:18:d4:e5:d5:46: 1f:8b:3b:33:72:a9:d7:f7:18:ea:56:24:d7:5d:99: 32:61:52:55:fb:11:d9:3a:50:9e:0d:f2:6d:0b:62: 52:e4:b1:06:c1:0f:2a:c1:70:5f:cb:26:77:cb:84: 88:26:1f:46:fa:34:a4:16:dd:66:1b:81:1c:33:09: f4:c8:b8:0d:e0:06:88:3f:93:f1:90:29:78:0a:e3: d3:00:c7:89:a1:43:f2:37:c0:70:4e:18:f5:e5:00: 9f:c3:7b:1c:c1:75:4b:75:1f:49:07:9f:65:0d:6e: 65:99:61:86:f5:27:67:2f:dd:a8:ea:06:85:93:2e: 62:b8:bf:88:22:fe:b7:93:d7:c1:6b:5f:4b:87:c6: 67:da:8b:54:15:cf:c2:74:18:f4:08:c1:b3:36:e0: 16:65:72:1e:7d:90:82:d3:44:c5:66:7d:a3:ff:ef: 15:5d:86:14:f6:60:17:f7:54:02:03:be:7d:05:3a: d8:1b:f0:c7:c3:ac:56:6e:d5:1d:42:85:fd:da:a1: fa:6a:8a:50:16:88:46:9c:5c:45:6d:af:4c:3f:bd: 7c:0e:a1:d7:5e:49:20:6b:d5:a4:05:3a:75:40:5f: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:9F:06:F7:6D:92:6F:AA:95:59:F7:03:3E:DA:21:87:04:52:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl X509v3 Authority Key Identifier: keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ed:ed:32:82:97:0c:d0:34:87:be:2e:51:8c:d4:5f:a3:4f: 8e:32:66:7a:e5:d8:9e:77:6c:63:ba:7f:24:d4:e0:31:5e:c9: b3:69:38:87:b5:b6:61:8b:6f:f7:0f:8c:57:f4:40:ef:f3:f7: aa:bd:a9:13:f4:cf:c1:89:17:25:af:f8:52:f1:76:47:c0:93: 0a:b7:5e:47:b1:94:02:41:35:c8:8c:24:7f:67:44:d7:56:27: 87:10:c0:e3:dc:33:43:88:e0:36:c9:18:32:a0:7d:05:d4:00: 8f:a4:0e:8c:ac:80:4c:b4:93:b8:dc:30:d9:dc:cf:51:a9:99: d1:03:08:94:27:64:c6:62:07:ae:b5:0a:ce:5c:cc:33:60:de: cf:8c:d6:d5:1d:61:dc:2d:db:77:96:b3:df:33:47:1a:ce:31: 4f:05:12:ef:f9:87:ea:20:9e:cc:fc:36:21:24:6f:2c:dc:18: 49:ef:87:c6:f5:df:87:5b:c9:31:92:69:0b:b9:62:15:a8:c9: bc:42:cf:d8:62:74:83:74:d4:92:08:ba:d7:e4:08:ae:2f:19: 00:f0:bf:50:de:99:b7:8a:9a:18:26:fb:0a:64:83:76:82:89: 87:fd:d8:76:d0:8e:78:4a:b2:d6:b2:79:54:b8:26:84:f9:6a: 94:e1:ed:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi4V3UPRhXIRpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjI4ZjctZWJhNS00MjU0LWE1NzItNzYxYTg3MjQy N2I1MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk MjYyOWRkNzMtNjlmNi00OTM1LTkxODAtMjJhZmNhMWU1NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQs0E1quRHNOwsVxpvpyizGz5y5j4l2JGNTl 1UYfizszcqnX9xjqViTXXZkyYVJV+xHZOlCeDfJtC2JS5LEGwQ8qwXBfyyZ3y4SI Jh9G+jSkFt1mG4EcMwn0yLgN4AaIP5PxkCl4CuPTAMeJoUPyN8BwThj15QCfw3sc wXVLdR9JB59lDW5lmWGG9SdnL92o6gaFky5iuL+IIv63k9fBa19Lh8Zn2otUFc/C dBj0CMGzNuAWZXIefZCC00TFZn2j/+8VXYYU9mAX91QCA759BTrYG/DHw6xWbtUd QoX92qH6aopQFohGnFxFba9MP718DqHXXkkga9WkBTp1QF/1aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMR2nwb3bZJvqpVZ9wM+2iGHBFLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2Jm MjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFhODcyNDI3YjUvZDNiZjI4ZjctZWJhNS00 MjU0LWE1NzItNzYxYTg3MjQyN2I1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNiZjI4ZjctZWJhNS00MjU0LWE1 NzItNzYxYTg3MjQyN2I1L2QzYmYyOGY3LWViYTUtNDI1NC1hNTcyLTc2MWE4NzI0 MjdiNS5jcmwwHwYDVR0jBBgwFoAUBYO/RQRVyIycbPigW3Yx/vdqjBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2JmMjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFh ODcyNDI3YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw7e0ygpcM0DSHvi5RjNRf o0+OMmZ65died2xjun8k1OAxXsmzaTiHtbZhi2/3D4xX9EDv8/eqvakT9M/BiRcl r/hS8XZHwJMKt15HsZQCQTXIjCR/Z0TXVieHEMDj3DNDiOA2yRgyoH0F1ACPpA6M rIBMtJO43DDZ3M9RqZnRAwiUJ2TGYgeutQrOXMwzYN7PjNbVHWHcLdt3lrPfM0ca zjFPBRLv+YfqIJ7M/DYhJG8s3BhJ74fG9d+HW8kxkmkLuWIVqMm8Qs/YYnSDdNSS CLrX5AiuLxkA8L9Q3pm3ipoYJvsKZIN2gomH/dh20I54SrLWsnlUuCaE+WqU4e3y -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:55 2025 by rpki-client