$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft File: dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft (raw, json) Hash identifier: yqu1hbN7+3DCPL6B1ymJAS74bpu2zkA5cVRE/05+y60= Subject key identifier: 2F:F2:18:21:CF:62:06:DE:78:DD:03:12:D4:54:4A:82:BE:03:4C:0D Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 Certificate issuer: /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Certificate serial: 010D0C9F4328584BBFE0D6233A9B0A54B8DC1800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft Manifest number: 010D0C9F432858413C6ECA503DB5BF15E31FED5D Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 381aa0d8-0713-3628-808e-2235213b6efc.roa (hash: 1MbWy6W3LsOGjtdJq2VWEPcxLF0lBHnUnIOE6IFHQuw=) 2: dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl (hash: siuOgb7M9tuk/32FB9nUx8hZP/57iE9ro0qLRIdU+08=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d6:23:3a:9b:0a:54:b8:dc:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=e6971088-eae4-4fdc-b6be-9c65fdbfa75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:52:dd:49:fb:e6:a5:5e:75:0d:30:16:5c: 70:53:b9:8b:1f:78:bb:b8:06:93:6c:20:42:2f:79: fc:64:5b:4c:44:af:d2:5f:e6:64:73:d3:a4:89:cc: 71:99:d3:4e:77:8b:f6:7c:ec:43:e5:2b:58:8f:28: 68:2a:d9:2d:60:ea:55:2e:e2:b6:69:cf:ca:cc:0a: 17:d1:f7:3e:09:e2:06:b5:a2:39:50:bf:43:fb:1c: 9f:d9:8a:d8:6d:27:42:cb:c2:1f:10:68:ff:00:79: 62:e0:fd:21:5b:56:a7:c6:bc:30:bf:71:46:16:30: ee:0a:34:81:99:cb:88:14:60:16:ed:44:d6:24:75: 26:aa:9c:78:07:2f:d1:f3:63:2c:6f:d2:36:42:1b: 93:16:78:52:d8:ea:74:01:81:fd:b8:7e:a2:01:5e: bd:9b:ba:50:47:16:ce:73:4d:e4:36:79:ac:70:ae: c1:33:8e:59:1a:5a:62:3e:61:7c:39:b0:bf:db:9b: 15:45:8b:01:60:21:c0:17:90:83:77:0b:ef:78:09: 49:ef:c6:52:2e:6f:f1:75:99:d8:5b:99:5f:d1:1e: 84:ce:99:f7:a1:1e:92:73:61:b6:a0:ae:0d:c8:e1: 97:2a:d8:71:1e:9b:ca:8f:b5:58:c4:75:64:80:ee: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:18:21:CF:62:06:DE:78:DD:03:12:D4:54:4A:82:BE:03:4C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl X509v3 Authority Key Identifier: keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6d:04:6d:e0:c5:f1:a7:43:96:2b:be:21:9a:b6:08:ab:6e: 7f:c0:33:98:81:7a:21:5f:31:c1:3c:23:f1:8e:fb:15:26:be: 82:92:3a:04:bf:fd:23:28:81:48:e4:cf:3f:4a:ad:f5:64:8c: 77:53:f0:24:79:69:f3:f0:c4:d0:83:49:c7:3a:56:8d:c5:4e: 87:d1:d9:9d:47:f1:b6:e3:c1:21:89:07:9a:28:df:29:91:a4: 65:a5:97:10:9a:d2:c9:db:f4:f5:5d:8b:b9:95:17:fc:25:4e: 94:8b:fe:9f:26:ea:f9:5e:b8:f9:aa:96:a8:3a:28:21:b2:38: 42:ef:7d:77:cb:e4:41:b6:05:d6:d9:76:22:2c:63:f8:13:3e: dc:2d:95:b7:d6:4f:e8:15:a3:b2:c9:8f:56:b0:0a:43:c4:33: 71:d3:d2:19:83:3d:bf:3d:75:d7:c1:ac:ac:37:9e:a3:6b:27: 4a:7c:d7:91:34:a9:d3:a1:8a:82:fd:32:2b:2a:f1:c2:6f:4f: 77:e9:67:1b:ad:d6:69:11:22:0d:fb:65:17:87:56:94:59:a6: c8:b1:49:a0:cc:3d:f3:95:96:2c:f8:4b:44:5d:80:ad:47:63: 85:8e:87:5b:3d:e2:01:c4:fb:bb:7b:2c:86:5c:1d:e8:ea:62: c1:1a:40:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NYjOpsKVLjcGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4M2UyOGEtZDM3Zi00YjdmLWJlNDktM2MyZTM1NTcw N2U3MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZTY5NzEwODgtZWFlNC00ZmRjLWI2YmUtOWM2NWZkYmZhNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj05S3Un75qVedQ0wFlxwU7mLH3i7uAaTbCBC L3n8ZFtMRK/SX+Zkc9OkicxxmdNOd4v2fOxD5StYjyhoKtktYOpVLuK2ac/KzAoX 0fc+CeIGtaI5UL9D+xyf2YrYbSdCy8IfEGj/AHli4P0hW1anxrwwv3FGFjDuCjSB mcuIFGAW7UTWJHUmqpx4By/R82Msb9I2QhuTFnhS2Op0AYH9uH6iAV69m7pQRxbO c03kNnmscK7BM45ZGlpiPmF8ObC/25sVRYsBYCHAF5CDdwvveAlJ78ZSLm/xdZnY W5lf0R6Ezpn3oR6Sc2G2oK4NyOGXKthxHpvKj7VYxHVkgO4zXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC/yGCHPYgbeeN0DEtRUSoK+A0wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYzgz ZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJlMzU1NzA3ZTcvZGM4M2UyOGEtZDM3Zi00 YjdmLWJlNDktM2MyZTM1NTcwN2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGM4M2UyOGEtZDM3Zi00YjdmLWJl NDktM2MyZTM1NTcwN2U3L2RjODNlMjhhLWQzN2YtNGI3Zi1iZTQ5LTNjMmUzNTU3 MDdlNy5jcmwwHwYDVR0jBBgwFoAUVoA8g5cCkprdAA37bl0MJQG6mBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYzgzZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJl MzU1NzA3ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqbQRt4MXxp0OWK74hmrYI q25/wDOYgXohXzHBPCPxjvsVJr6CkjoEv/0jKIFI5M8/Sq31ZIx3U/AkeWnz8MTQ g0nHOlaNxU6H0dmdR/G248EhiQeaKN8pkaRlpZcQmtLJ2/T1XYu5lRf8JU6Ui/6f Jur5Xrj5qpaoOighsjhC7313y+RBtgXW2XYiLGP4Ez7cLZW31k/oFaOyyY9WsApD xDNx09IZgz2/PXXXwaysN56jaydKfNeRNKnToYqC/TIrKvHCb0936WcbrdZpESIN +2UXh1aUWabIsUmgzD3zlZYs+EtEXYCtR2OFjodbPeIBxPu7eyyGXB3o6mLBGkC+ -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:08 2025 by rpki-client