$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.mft File: ce55f9da-9b86-4bde-883a-5aacddf9560b.mft (raw, json) Hash identifier: bjXIhzcfZK/2oboLnA4AVjNqSDj6ox17aYTaPUOV5jI= Subject key identifier: EC:08:8D:E4:A1:C7:55:DB:85:28:06:16:0A:E9:41:97:20:43:7A:CD Authority key identifier: FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2 Certificate issuer: /CN=ce55f9da-9b86-4bde-883a-5aacddf9560b Certificate serial: 010D0C9F4328584BC01C66BA3DE7D6D2CAFDCA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.mft Manifest number: 010D0C9F43285846B66348E2C1CF5F1272862C59 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa (hash: xTEfjxFSkVqRuaFHpBYWsvGsKai6qHrXHpfKs56aY6k=) 2: ce55f9da-9b86-4bde-883a-5aacddf9560b.crl (hash: OzYM4xMkwUM7cbcpqamvecxca6jrTrhDxGhq6sD4m9A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:66:ba:3d:e7:d6:d2:ca:fd:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce55f9da-9b86-4bde-883a-5aacddf9560b Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=e5cbe40a-4836-4da7-9d75-7599452ac008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:b9:34:7c:2d:fc:36:b5:01:a2:14:45:0b: f0:48:83:3c:f1:c8:26:61:f5:dd:37:fc:e9:25:70: aa:b5:40:d5:ce:71:23:1e:ac:c1:50:2b:ea:8c:44: 01:40:6c:ca:36:75:1a:70:bf:77:15:33:b2:6c:d0: 9d:3a:0b:80:6b:ae:43:c6:a7:a0:64:5e:01:67:0f: ed:5d:6c:f4:c0:71:8a:9b:79:ee:30:29:9d:8e:05: 47:7d:ea:79:da:16:23:08:2d:46:42:db:8e:7e:ba: 44:5b:ff:f5:90:f6:a6:d4:f3:dd:2d:07:c5:ca:ba: 0f:c8:ec:85:46:8c:3a:7c:32:a9:a6:85:16:85:36: cc:1b:32:de:18:2e:31:bb:bd:b4:53:23:a1:47:7b: f3:d2:27:ef:9a:67:08:dd:d8:ea:17:44:07:d8:d3: d2:7d:ce:83:ce:f7:e1:c0:aa:83:7b:4e:e1:4f:86: d6:12:5b:08:78:55:69:31:42:0c:e1:c1:80:8f:65: aa:29:24:7a:b4:77:0e:4f:f4:2c:c2:66:8a:a7:a1: b7:66:18:41:7b:75:43:8e:15:d8:8b:c9:db:3b:88: db:58:54:bd:aa:10:10:9b:d2:c9:b0:fd:5f:b6:dc: 72:13:b7:c1:8d:c8:78:75:d9:08:77:d0:03:c4:b1: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:8D:E4:A1:C7:55:DB:85:28:06:16:0A:E9:41:97:20:43:7A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.crl X509v3 Authority Key Identifier: keyid:FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:53:87:27:cd:1e:0f:5a:94:74:9c:b0:2a:e2:e5:45:d4:84: 86:44:58:5d:0e:ef:ca:a2:b3:9d:16:f0:4e:66:fe:38:5c:d7: 86:ab:1a:f5:a2:29:80:db:44:50:d3:d6:88:3c:bb:4e:9e:ee: 23:2d:df:39:8a:30:73:0d:6b:e6:74:da:ea:8f:93:a9:a9:a1: ab:e9:82:f2:79:54:4b:f1:6f:0d:85:95:ba:06:1b:20:7e:0e: 27:81:be:a8:9c:e1:e7:33:27:0c:4d:f0:ea:e8:74:dc:57:84: 95:df:ee:e3:d3:0e:63:ce:8e:f3:b1:a8:e4:de:71:c3:1a:d3: 89:fc:39:38:10:88:21:0f:9e:08:a6:8a:a8:46:8a:5e:cb:2f: 66:b1:ec:6f:71:02:47:24:f5:54:c4:a6:00:10:f4:f6:1d:6a: 94:d1:b3:b1:e2:dd:89:90:82:2a:d9:03:89:49:cc:9c:52:5c: 3f:11:67:8f:52:28:ce:f9:f8:dc:d9:d7:ec:65:d0:c2:62:de: 2f:56:c7:fe:d2:bd:53:9a:ed:e4:31:56:25:85:c9:0c:56:0f: f2:6e:41:07:b8:cd:a3:e8:d2:96:ec:f6:bd:88:8a:40:d5:5f: bf:8c:f6:44:15:14:c1:5c:df:89:2f:d7:90:f8:1e:e0:a7:6e: 8c:5a:9a:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGa6PefW0sr9ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1NWY5ZGEtOWI4Ni00YmRlLTg4M2EtNWFhY2RkZjk1 NjBiMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZTVjYmU0MGEtNDgzNi00ZGE3LTlkNzUtNzU5OTQ1MmFjMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPG5NHwt/Da1AaIURQvwSIM88cgmYfXdN/zp JXCqtUDVznEjHqzBUCvqjEQBQGzKNnUacL93FTOybNCdOguAa65DxqegZF4BZw/t XWz0wHGKm3nuMCmdjgVHfep52hYjCC1GQtuOfrpEW//1kPam1PPdLQfFyroPyOyF Row6fDKppoUWhTbMGzLeGC4xu720UyOhR3vz0ifvmmcI3djqF0QH2NPSfc6Dzvfh wKqDe07hT4bWElsIeFVpMUIM4cGAj2WqKSR6tHcOT/QswmaKp6G3ZhhBe3VDjhXY i8nbO4jbWFS9qhAQm9LJsP1fttxyE7fBjch4ddkId9ADxLF2jQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOwIjeShx1XbhSgGFgrpQZcgQ3rNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZTU1 ZjlkYS05Yjg2LTRiZGUtODgzYS01YWFjZGRmOTU2MGIvY2U1NWY5ZGEtOWI4Ni00 YmRlLTg4M2EtNWFhY2RkZjk1NjBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2U1NWY5ZGEtOWI4Ni00YmRlLTg4 M2EtNWFhY2RkZjk1NjBiL2NlNTVmOWRhLTliODYtNGJkZS04ODNhLTVhYWNkZGY5 NTYwYi5jcmwwHwYDVR0jBBgwFoAU/8LCObbGEtBGQ+TzEDQaFPAO1eIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jZTU1ZjlkYS05Yjg2LTRiZGUtODgzYS01YWFj ZGRmOTU2MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTU4cnzR4PWpR0nLAq4uVF 1ISGRFhdDu/KorOdFvBOZv44XNeGqxr1oimA20RQ09aIPLtOnu4jLd85ijBzDWvm dNrqj5OpqaGr6YLyeVRL8W8NhZW6Bhsgfg4ngb6onOHnMycMTfDq6HTcV4SV3+7j 0w5jzo7zsajk3nHDGtOJ/Dk4EIghD54IpoqoRopeyy9msexvcQJHJPVUxKYAEPT2 HWqU0bOx4t2JkIIq2QOJScycUlw/EWePUijO+fjc2dfsZdDCYt4vVsf+0r1Tmu3k MVYlhckMVg/ybkEHuM2j6NKW7Pa9iIpA1V+/jPZEFRTBXN+JL9eQ+B7gp26MWpqD -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:30 2025 by rpki-client