$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft File: a8d70f86-b257-4225-9609-989938a4164f.mft (raw, json) Hash identifier: n4TWb9E6/I9nR31L/LJFJk3eW79HSADOU1VlvcvfxAA= Subject key identifier: 2B:18:24:A7:67:8F:8E:83:CA:D2:93:17:05:40:E2:D8:BD:E2:42:87 Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584BC19F811B0B460BC713CDFBE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft Manifest number: 010D0C9F4328584B816AC2FE5D272DDE15CA1A57 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Fri 07 Nov 2025 07:00:00 +0000 Files and hashes: 1: 7dd92ad1-f1cc-37bf-8270-6190c245e6fc.roa (hash: NlJlLaCiLw61n1eFQE3EUOoW/2UrrNKwWt71agPFOyE=) 2: a8d70f86-b257-4225-9609-989938a4164f.crl (hash: XG05v4BgZEBekaSA2mZn11vQE8UbN3wJj1UHpEoIEKs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:81:1b:0b:46:0b:c7:13:cd:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=5d262523-8704-41ea-922a-4fc747301e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:6d:34:19:bf:ef:2f:46:e2:85:f1:df:ba: 43:bb:10:68:ff:0d:fd:29:92:14:fd:34:78:11:83: b9:57:d1:4f:2b:8b:0e:dd:aa:24:f8:24:62:d8:5a: 09:2e:8c:29:d3:68:6b:af:89:4f:84:bf:2f:68:66: 3e:7e:d2:aa:2a:76:62:05:85:50:54:aa:84:7b:12: fb:46:7e:c9:af:aa:b8:8a:4f:84:a7:1e:38:03:9c: e4:c5:7c:c3:4b:23:89:0e:1b:d1:9b:71:5a:ff:f7: 34:02:c8:fc:4c:90:8a:d1:e5:f7:dc:89:e6:f6:05: 46:e2:86:04:68:0b:04:20:86:fe:2a:e1:ee:e9:4a: b6:b5:69:5a:50:f0:f8:46:97:3e:fe:7b:ef:bd:09: bd:ad:cc:90:07:be:5e:f6:82:e4:10:ea:09:db:a7: 90:32:9e:b7:50:25:ce:ce:1d:6d:da:48:8d:0b:d5: c1:ea:e3:6a:48:a1:60:fe:f0:7c:13:ba:b3:4f:64: b3:ca:5a:11:2d:8c:e0:d2:f9:9e:0d:1c:b0:32:c5: 32:f8:61:15:95:10:6d:2a:d7:98:58:84:8b:12:c6: 5c:d5:e3:91:50:0b:a5:8c:2e:aa:73:ae:94:59:79: 60:29:2e:b5:4d:92:84:11:70:34:f6:18:11:05:7d: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:24:A7:67:8F:8E:83:CA:D2:93:17:05:40:E2:D8:BD:E2:42:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:92:26:f3:ce:34:3e:11:84:6d:17:60:8d:e5:e1:1c:6e:de: c1:92:fa:eb:30:18:a0:0d:5e:1d:82:c5:33:72:ae:1e:f0:11: 10:e0:52:49:89:32:3b:8c:d1:5e:15:28:da:20:0a:05:cf:51: 5c:a7:55:8f:db:74:87:ef:28:4f:9e:b9:1a:0d:c1:fa:d0:6d: 4d:19:dd:35:88:81:64:b6:9a:6b:aa:c8:62:9f:48:ea:d5:16: b9:1e:bc:80:7a:49:be:5f:62:45:45:06:79:e3:9d:7a:69:61: d1:72:dc:fc:4d:ce:a6:a5:da:30:d4:b2:96:0b:63:58:8a:f0: c4:dd:fa:5e:03:ae:49:ac:58:ca:09:ec:bf:29:a3:4a:aa:b7: 24:76:95:ec:17:4c:5e:ea:60:8a:a3:d0:6e:de:40:9e:66:b2: 7c:90:2b:18:8f:f1:65:b5:8a:68:37:3e:de:75:56:51:6e:6a: 70:39:f8:bf:a3:db:05:a7:2e:2d:ec:d2:b7:34:f2:e1:39:d4: ad:26:bf:51:12:45:90:7e:89:08:90:4a:a7:a6:c5:b2:ce:9a: ed:11:11:b2:9e:50:72:07:26:98:d9:6f:88:ad:9f:46:a9:0f: 78:35:f7:c5:b4:07:6b:9d:44:50:75:d9:02:37:a5:41:0e:49: b1:bd:b2:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4EbC0YLxxPN++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwNzA3MDAwMFowLzEtMCsGA1UEAxMk NWQyNjI1MjMtODcwNC00MWVhLTkyMmEtNGZjNzQ3MzAxZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF5tNBm/7y9G4oXx37pDuxBo/w39KZIU/TR4 EYO5V9FPK4sO3aok+CRi2FoJLowp02hrr4lPhL8vaGY+ftKqKnZiBYVQVKqEexL7 Rn7Jr6q4ik+Epx44A5zkxXzDSyOJDhvRm3Fa//c0Asj8TJCK0eX33Inm9gVG4oYE aAsEIIb+KuHu6Uq2tWlaUPD4Rpc+/nvvvQm9rcyQB75e9oLkEOoJ26eQMp63UCXO zh1t2kiNC9XB6uNqSKFg/vB8E7qzT2SzyloRLYzg0vmeDRywMsUy+GEVlRBtKteY WISLEsZc1eORUAuljC6qc66UWXlgKS61TZKEEXA09hgRBX3t9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCsYJKdnj46DytKTFwVA4ti94kKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvYThkNzBmODYtYjI1Ny00 MjI1LTk2MDktOTg5OTM4YTQxNjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQkibzzjQ+EYRtF2CN5eEc bt7BkvrrMBigDV4dgsUzcq4e8BEQ4FJJiTI7jNFeFSjaIAoFz1Fcp1WP23SH7yhP nrkaDcH60G1NGd01iIFktpprqshin0jq1Ra5HryAekm+X2JFRQZ54516aWHRctz8 Tc6mpdow1LKWC2NYivDE3fpeA65JrFjKCey/KaNKqrckdpXsF0xe6mCKo9Bu3kCe ZrJ8kCsYj/FltYpoNz7edVZRbmpwOfi/o9sFpy4t7NK3NPLhOdStJr9REkWQfokI kEqnpsWyzprtERGynlByByaY2W+IrZ9GqQ94NffFtAdrnURQddkCN6VBDkmxvbI7 -----END CERTIFICATE-----Generated at Wed Nov 5 10:14:03 2025 by rpki-client