$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft File: 2da00291-9798-4c46-adc8-0fe85d9e6c31.mft (raw, json) Hash identifier: sKJAiTyaxEAxpyBbSpTDR7LFH27BP9dze14h0QjNAAI= Subject key identifier: C8:97:D5:2B:00:BD:C7:06:0A:F0:04:A7:54:E7:C0:FA:54:E4:22:87 Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD Certificate issuer: /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Certificate serial: 010D0C9F4328584BC1462DA0392B8B1C485F1240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft Manifest number: 010D0C9F4328584B8127443E5AE304761D18965B Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 017f82d2-8fcc-3ffe-917e-340f3336d850.roa (hash: Y6MVD7psg+D14sNvAvJ6NQvM0DtnS3xgn0pbwtUbWWo=) 2: 2da00291-9798-4c46-adc8-0fe85d9e6c31.crl (hash: ImkrIbXrNxr7IXkCdjgQpCVSXC09f5Z9O7J6WDAlLCo=) 3: 8dd52655-4484-3807-b864-9eb3294c1922.roa (hash: EgwZ7yToYXnLQK74wyHSB12qUKXNv+uwPwx1k6KMS/E=) 4: 91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa (hash: vyY36jkrBN4SqEcDB5VOj2qf4Dp7EWqavbitQcJLCew=) 5: e5abe283-61fd-3f8b-9722-85ccbed835f7.roa (hash: bbFH0kNEWAw8bhAt7rPoMbO1rsRJc5ouVuH84bTrLd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2d:a0:39:2b:8b:1c:48:5f:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31 Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=ca02e4c3-ac90-42c8-a194-fcb698b85237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:9e:da:11:3d:57:ed:03:2b:a3:f8:c9:6f: 1b:28:60:49:17:5c:21:69:9b:dd:22:d0:86:72:27: 80:f5:4c:3c:5e:f2:1a:de:01:2a:06:5c:8d:7f:d7: 8c:03:c8:d6:fd:6a:2b:36:67:0e:cd:72:63:50:50: 61:b8:51:a7:d9:81:06:88:39:dd:1f:66:9d:6f:2e: 43:aa:b5:af:85:0b:4c:11:e9:9c:1e:fd:3e:f3:31: a5:cb:67:e8:07:c0:9a:35:db:c0:d2:88:07:12:fd: e4:20:21:13:b3:0e:f1:b0:ed:0d:9b:fc:e0:78:6d: 43:80:2f:33:a1:f7:22:4d:e1:e1:26:ec:6f:46:5c: 45:18:39:12:d0:23:03:2e:28:e2:80:6e:1f:f4:52: fb:eb:fd:6b:f4:15:e7:93:31:6d:fb:32:0d:b9:5b: 95:30:d9:dd:9f:79:ae:b4:cb:f6:61:e6:42:f7:c4: 9f:ab:48:63:81:42:81:34:af:8e:a5:7f:1e:8c:c8: 0f:ac:07:20:68:63:e6:13:2a:2c:69:a1:5b:f6:d3: ff:aa:b3:49:c7:2c:91:8b:13:36:c7:db:51:40:c3: 63:56:c4:f9:ae:25:2e:b1:ef:68:16:c5:26:ce:71: 34:23:ab:59:21:56:f8:6f:c7:98:e0:cf:ed:da:3c: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:97:D5:2B:00:BD:C7:06:0A:F0:04:A7:54:E7:C0:FA:54:E4:22:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl X509v3 Authority Key Identifier: keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:83:d9:3b:20:4a:97:06:9c:a1:e5:34:ea:e0:69:6a:86:7e: 34:e1:73:46:c6:24:10:35:7f:40:b5:d3:31:e6:b6:48:9f:50: 4e:cf:67:20:04:13:d0:8c:46:e2:23:28:71:82:00:7d:d1:1d: 68:45:f0:1e:06:f1:ab:7a:85:a0:10:65:e8:cd:8c:43:a5:1c: 47:77:7e:95:29:e8:db:65:71:ad:40:67:92:99:38:94:f9:a7: a0:13:2c:88:f8:c5:af:5c:86:d0:40:ca:25:de:a9:5b:fd:3c: 66:61:40:da:e2:ba:07:56:81:b0:94:54:f4:9e:6c:ed:b6:f3: 93:22:ad:dd:70:0a:1a:93:47:88:27:97:70:43:9f:44:58:86: fa:5d:16:cb:07:fe:b8:72:e2:03:1e:5c:1d:17:ca:31:35:15: d1:65:87:ac:2c:53:91:b8:ec:16:de:ae:e9:4c:3d:0c:c6:91: b6:c6:11:54:c8:f7:25:cb:d0:1c:da:80:b4:3b:4c:a0:6e:37: 1e:4a:0a:41:b3:87:7e:1c:62:1b:83:f5:14:1e:6c:ce:95:a3: 58:a7:7c:7c:46:05:4d:a8:3c:8e:84:3c:44:f3:f9:00:60:33: 95:36:12:3f:e2:6c:81:57:f1:ad:06:37:55:e7:d1:5f:fd:e9: 06:54:52:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRi2gOSuLHEhfEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhMDAyOTEtOTc5OC00YzQ2LWFkYzgtMGZlODVkOWU2 YzMxMB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk Y2EwMmU0YzMtYWM5MC00MmM4LWExOTQtZmNiNjk4Yjg1MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+e2hE9V+0DK6P4yW8bKGBJF1whaZvdItCG cieA9Uw8XvIa3gEqBlyNf9eMA8jW/WorNmcOzXJjUFBhuFGn2YEGiDndH2adby5D qrWvhQtMEemcHv0+8zGly2foB8CaNdvA0ogHEv3kICETsw7xsO0Nm/zgeG1DgC8z ofciTeHhJuxvRlxFGDkS0CMDLijigG4f9FL76/1r9BXnkzFt+zINuVuVMNndn3mu tMv2YeZC98Sfq0hjgUKBNK+OpX8ejMgPrAcgaGPmEyosaaFb9tP/qrNJxyyRixM2 x9tRQMNjVsT5riUuse9oFsUmznE0I6tZIVb4b8eY4M/t2jxhdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMiX1SsAvccGCvAEp1TnwPpU5CKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEw MDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4NWQ5ZTZjMzEvMmRhMDAyOTEtOTc5OC00 YzQ2LWFkYzgtMGZlODVkOWU2YzMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmRhMDAyOTEtOTc5OC00YzQ2LWFk YzgtMGZlODVkOWU2YzMxLzJkYTAwMjkxLTk3OTgtNGM0Ni1hZGM4LTBmZTg1ZDll NmMzMS5jcmwwHwYDVR0jBBgwFoAUpFg/KBRXul6NiGzj2f/Jnoj9Z80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yZGEwMDI5MS05Nzk4LTRjNDYtYWRjOC0wZmU4 NWQ5ZTZjMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARg9k7IEqXBpyh5TTq4Glq hn404XNGxiQQNX9AtdMx5rZIn1BOz2cgBBPQjEbiIyhxggB90R1oRfAeBvGreoWg EGXozYxDpRxHd36VKejbZXGtQGeSmTiU+aegEyyI+MWvXIbQQMol3qlb/TxmYUDa 4roHVoGwlFT0nmzttvOTIq3dcAoak0eIJ5dwQ59EWIb6XRbLB/64cuIDHlwdF8ox NRXRZYesLFORuOwW3q7pTD0MxpG2xhFUyPcly9Ac2oC0O0ygbjceSgpBs4d+HGIb g/UUHmzOlaNYp3x8RgVNqDyOhDxE8/kAYDOVNhI/4myBV/GtBjdV59Ff/ekGVFKS -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:23 2025 by rpki-client