$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft File: 32e1eff5-1423-4100-89f4-3340efd8f1ea.mft (raw, json) Hash identifier: fYk3aPk1Gt76hlGwGE51+pg0knaIH8rXqYcaWa1xw48= Subject key identifier: 2F:E6:37:C6:ED:FB:25:9B:82:35:8E:18:11:74:0B:A4:1E:5C:78:AE Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 Certificate issuer: /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Certificate serial: 010D0C9F4328584BC075C65C2BD190B56AD88C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft Manifest number: 010D0C9F43285847F4EEB68E0F8455B2D5797C67 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 32e1eff5-1423-4100-89f4-3340efd8f1ea.crl (hash: trMLcjJTYfmlOk+uwiV1KRiuhpBOEqZjGYNVTT+FmFQ=) 2: b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (hash: A4CenVK6Slf2TaZfM/G6yGradZky/NKnds5iUFdR1Ko=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c6:5c:2b:d1:90:b5:6a:d8:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=82afc5c5-10f9-4fc0-8f05-df1e5da0f9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:c7:d5:46:a9:9f:21:b4:75:6e:02:da:46: e0:8b:fb:7a:a0:07:85:fa:bc:aa:34:24:a0:78:2f: c2:4e:a6:a2:bc:15:46:e2:97:07:0a:4c:9c:6f:c8: 05:66:62:66:70:e5:4d:fd:0e:19:72:bc:6d:17:f9: 49:fb:e7:be:28:05:67:af:75:0a:af:41:86:33:0f: 35:bd:51:e7:c7:ef:4d:85:b5:45:39:57:0b:61:a0: e0:63:fd:ad:23:c6:8a:1b:4e:92:f4:75:ed:f7:e0: 54:f1:22:2f:56:a6:fb:52:d5:43:b7:58:1d:8d:bc: 61:eb:ac:c8:13:ef:1c:5b:8d:9c:78:fa:46:6a:49: 25:0d:07:17:59:95:87:4f:46:5b:83:21:09:70:ed: e5:63:ee:bc:73:8e:1c:fd:67:f8:a5:a2:2b:6d:30: 45:e2:be:db:61:6c:80:ce:36:7d:cb:59:0b:6d:3c: ae:8e:6d:51:77:00:73:a7:aa:be:86:2d:3b:c0:9c: d2:e1:9f:81:53:e1:61:bb:f1:66:4a:ae:34:b9:b5: 70:c8:42:13:0c:c1:89:58:6e:ec:37:b7:13:0c:dc: db:9f:ed:07:e9:9d:33:83:3e:8c:64:a7:38:17:d2: a5:17:15:86:8e:5f:e8:87:dc:f4:d9:33:35:55:89: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E6:37:C6:ED:FB:25:9B:82:35:8E:18:11:74:0B:A4:1E:5C:78:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl X509v3 Authority Key Identifier: keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c0:cd:91:85:dd:b5:b9:05:02:33:e9:7f:cb:b5:3c:11:54: bb:76:40:aa:f3:2b:af:c6:80:ef:ae:d3:52:c2:d6:36:91:35: 13:4f:b3:1f:de:70:de:e4:22:7d:44:2a:59:cd:93:5a:3c:e3: 9e:7e:68:4d:35:03:db:34:83:b6:6d:58:4a:5c:3c:5e:c7:16: 0c:0b:ca:9c:8b:2d:da:9d:63:61:b6:db:c9:45:f4:31:72:52: 1e:de:9e:5f:f6:24:a2:d7:87:5a:6a:bf:ef:f7:fc:51:54:3f: a6:e8:e6:f1:33:c4:e1:1b:42:94:81:1a:0a:16:d3:24:c9:79: 14:48:49:de:c3:ed:ea:da:0d:45:e9:9e:e1:9b:22:8e:e5:d2: 7f:f2:6b:87:2a:26:60:de:29:1c:76:42:59:80:49:64:c8:22: 0f:77:81:54:49:84:dd:0c:f8:4f:8e:6b:87:1f:c3:fc:ef:a9: dc:87:5c:9b:44:6a:f3:f7:d4:07:cf:7f:59:ee:b4:91:3e:82: f5:36:c4:e2:a9:95:b9:ee:98:3e:78:52:57:b1:37:83:fc:e5: 4e:d3:c3:0e:a5:c2:74:18:7d:6a:47:de:21:36:20:b9:f5:99: c9:03:31:b3:bb:6d:59:8f:9f:aa:62:94:7d:c8:9a:ef:f2:51: ae:fd:c8:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcZcK9GQtWrYjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlMWVmZjUtMTQyMy00MTAwLTg5ZjQtMzM0MGVmZDhm MWVhMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk ODJhZmM1YzUtMTBmOS00ZmMwLThmMDUtZGYxZTVkYTBmOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcLH1UapnyG0dW4C2kbgi/t6oAeF+ryqNCSg eC/CTqaivBVG4pcHCkycb8gFZmJmcOVN/Q4ZcrxtF/lJ++e+KAVnr3UKr0GGMw81 vVHnx+9NhbVFOVcLYaDgY/2tI8aKG06S9HXt9+BU8SIvVqb7UtVDt1gdjbxh66zI E+8cW42cePpGakklDQcXWZWHT0ZbgyEJcO3lY+68c44c/Wf4paIrbTBF4r7bYWyA zjZ9y1kLbTyujm1RdwBzp6q+hi07wJzS4Z+BU+Fhu/FmSq40ubVwyEITDMGJWG7s N7cTDNzbn+0H6Z0zgz6MZKc4F9KlFxWGjl/oh9z02TM1VYm2zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC/mN8bt+yWbgjWOGBF0C6QeXHiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUx ZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQwZWZkOGYxZWEvMzJlMWVmZjUtMTQyMy00 MTAwLTg5ZjQtMzM0MGVmZDhmMWVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJlMWVmZjUtMTQyMy00MTAwLTg5 ZjQtMzM0MGVmZDhmMWVhLzMyZTFlZmY1LTE0MjMtNDEwMC04OWY0LTMzNDBlZmQ4 ZjFlYS5jcmwwHwYDVR0jBBgwFoAUJUAu2vdRljOCQujdZADl1BGI5/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmUxZWZmNS0xNDIzLTQxMDAtODlmNC0zMzQw ZWZkOGYxZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRwM2Rhd21uQUCM+l/y7U8 EVS7dkCq8yuvxoDvrtNSwtY2kTUTT7Mf3nDe5CJ9RCpZzZNaPOOefmhNNQPbNIO2 bVhKXDxexxYMC8qciy3anWNhttvJRfQxclIe3p5f9iSi14daar/v9/xRVD+m6Obx M8ThG0KUgRoKFtMkyXkUSEnew+3q2g1F6Z7hmyKO5dJ/8muHKiZg3ikcdkJZgElk yCIPd4FUSYTdDPhPjmuHH8P876nch1ybRGrz99QHz39Z7rSRPoL1NsTiqZW57pg+ eFJXsTeD/OVO08MOpcJ0GH1qR94hNiC59ZnJAzGzu21Zj5+qYpR9yJrv8lGu/ciF -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:17 2025 by rpki-client