$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft File: 1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft (raw, json) Hash identifier: oPpKo/zEOeEq6iw4NJCNZweKCfU9kh656eM4n863xbs= Subject key identifier: 9E:1E:99:35:9F:55:25:ED:D0:68:12:52:DB:D7:09:4D:68:9D:F6:DF Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Certificate issuer: /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Certificate serial: 010D0C9F4328584BBFA55405FB70927C276A0740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft Manifest number: 010D0C9F432858476031ED073AA2C8F6B5AD841E Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl (hash: dXjgq0M1GskZdERu35hdUwJI7/FUzPFloImYoRiOBvE=) 2: f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa (hash: OHsot5yQyPSRKyEMUglfMpZcdebbhXISsTftSaRcxG0=) 3: fc1d422d-b307-38b9-a471-8551b35adec8.roa (hash: jUZTsl5y8j3lJAbmRIRu4sGihPXhJyUJCRVWbnmm9ZU=) 4: fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa (hash: Y+LpCGPeJI7w7fcPZaXKllsn8FHg5lkHYKAnViyItlM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:54:05:fb:70:92:7c:27:6a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=9ea53b37-b7fb-44bb-a356-d0cd650781f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:75:a6:20:7a:f3:85:1f:95:f3:3c:fe:07: 41:cf:d4:91:85:d5:f3:9c:76:79:08:6e:8b:25:bc: 00:12:62:73:85:bc:fe:65:fd:68:11:1a:94:16:dd: 50:68:ad:7e:26:49:01:0c:54:c8:83:73:30:00:71: 6f:e8:a7:76:96:c9:57:6a:2e:dc:0b:7b:ac:e7:cb: 48:d6:c3:4d:00:56:0f:1f:81:e3:f1:b8:45:40:8d: b3:08:5c:a1:85:80:5e:3d:97:a5:78:0d:fa:ce:3f: 58:ba:51:62:16:a5:b6:cd:df:61:17:d2:00:b3:64: db:11:10:88:1b:1e:37:16:31:ac:da:5b:30:c0:44: 6b:68:d6:ba:57:68:91:9b:11:45:0b:f6:9b:07:17: d4:dc:2a:3e:9e:67:f4:de:16:8f:9c:cc:16:06:3b: 86:22:e7:7a:c3:4a:f5:3b:6d:33:92:3d:0d:05:66: 38:89:75:fe:71:b6:0d:34:82:dc:60:e1:75:ad:8a: 2f:70:35:47:e8:f3:72:43:03:6f:c4:35:5e:33:68: 96:8e:47:d0:2a:b5:41:b8:b4:a4:05:ce:e0:97:cf: 9d:e9:e2:af:a7:51:26:25:45:a6:16:7f:98:82:82: bd:8f:62:c4:17:40:35:84:d4:4d:8b:33:81:19:8d: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1E:99:35:9F:55:25:ED:D0:68:12:52:DB:D7:09:4D:68:9D:F6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl X509v3 Authority Key Identifier: keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:80:f2:26:96:72:d8:77:ab:d3:32:75:54:d6:73:92:b4:16: e2:91:5b:b3:b8:e8:eb:ec:c4:67:84:df:ed:f6:81:20:76:a3: db:5f:58:fe:b0:2d:6d:18:27:9c:65:2e:b7:b4:5a:d7:0e:21: 5d:98:48:4b:47:4d:89:c4:e4:54:ec:20:4f:d6:45:de:0c:e5: 3b:d0:4f:0e:cd:d8:a3:e1:27:3c:de:22:52:27:71:50:fe:ec: 8b:e8:5b:da:b1:d9:a8:3d:ed:03:e2:fd:4a:ca:09:8d:3d:d7: 01:dc:d8:dc:5b:46:34:0f:f8:04:fa:8e:02:45:48:13:0e:ff: f5:b0:4c:23:7e:1e:6e:7e:1a:7d:32:a5:9b:27:ee:a9:26:06: bd:3e:db:a8:a5:98:11:8b:72:8a:be:fb:a8:41:e2:51:a7:ef: d6:8f:76:3e:9c:70:e7:05:02:51:e9:dd:bd:c1:17:5f:b8:1d: 21:0f:f8:da:d5:0b:1c:88:9a:a9:e9:ac:9b:db:7c:b4:85:c9: 7e:50:42:c6:f4:40:40:61:20:96:d1:87:6f:38:71:cb:98:bd: 01:5f:e3:9a:96:78:40:d8:3d:bb:c2:d3:c1:aa:3b:c2:4b:97: 05:90:43:de:01:cb:fb:24:3c:22:19:96:41:d3:d9:ef:bb:78: 6c:6a:f9:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVQF+3CSfCdqB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJm NTQ2MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk OWVhNTNiMzctYjdmYi00NGJiLWEzNTYtZDBjZDY1MDc4MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswx1piB684UflfM8/gdBz9SRhdXznHZ5CG6L JbwAEmJzhbz+Zf1oERqUFt1QaK1+JkkBDFTIg3MwAHFv6Kd2lslXai7cC3us58tI 1sNNAFYPH4Hj8bhFQI2zCFyhhYBePZeleA36zj9YulFiFqW2zd9hF9IAs2TbERCI Gx43FjGs2lswwERraNa6V2iRmxFFC/abBxfU3Co+nmf03haPnMwWBjuGIud6w0r1 O20zkj0NBWY4iXX+cbYNNILcYOF1rYovcDVH6PNyQwNvxDVeM2iWjkfQKrVBuLSk Bc7gl8+d6eKvp1EmJUWmFn+YgoK9j2LEF0A1hNRNizOBGY3e1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ4emTWfVSXt0GgSUtvXCU1onfbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJl NjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvMWQyZTY2OWUtOGQ1ZC00 YjM5LWE2OGYtNGY1MzZjYzJmNTQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWQyZTY2OWUtOGQ1ZC00YjM5LWE2 OGYtNGY1MzZjYzJmNTQ2LzFkMmU2NjllLThkNWQtNGIzOS1hNjhmLTRmNTM2Y2My ZjU0Ni5jcmwwHwYDVR0jBBgwFoAUKz2jHTp9jhffSL1srEpi0l9UvhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUz NmNjMmY1NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2gPImlnLYd6vTMnVU1nOS tBbikVuzuOjr7MRnhN/t9oEgdqPbX1j+sC1tGCecZS63tFrXDiFdmEhLR02JxORU 7CBP1kXeDOU70E8Ozdij4Sc83iJSJ3FQ/uyL6FvasdmoPe0D4v1KygmNPdcB3Njc W0Y0D/gE+o4CRUgTDv/1sEwjfh5ufhp9MqWbJ+6pJga9PtuopZgRi3KKvvuoQeJR p+/Wj3Y+nHDnBQJR6d29wRdfuB0hD/ja1QsciJqp6ayb23y0hcl+UELG9EBAYSCW 0YdvOHHLmL0BX+OalnhA2D27wtPBqjvCS5cFkEPeAcv7JDwiGZZB09nvu3hsavk2 -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:00 2025 by rpki-client