$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft File: 2db44f79-e35b-441b-afb7-a18d6b001f54.mft (raw, json) Hash identifier: +fYAK5ry94VDsOT6by6ZSGZi2pYhduXa94Vyc1dlpco= Subject key identifier: 5F:54:5C:61:C7:C0:8D:A3:49:EC:B0:BE:57:25:E6:22:89:D7:6F:0E Authority key identifier: F6:10:14:67:EA:77:F1:58:86:7E:02:B8:CF:2A:99:21:A1:C7:1F:92 Certificate issuer: /CN=2db44f79-e35b-441b-afb7-a18d6b001f54 Certificate serial: 010D0C9F4328584BBFFEA6924271B3C4A2F7FBF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft Manifest number: 010D0C9F4328584A4F7E4D5DA8787595B74CCD37 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 2db44f79-e35b-441b-afb7-a18d6b001f54.crl (hash: Za1jo+k/cmNCtluo6N+e/x9ee/i+6/tnIk6rRCApsaQ=) 2: 3d457293-2df9-38bd-b7dd-af5950a413fc.roa (hash: YoAEsyvybJVfMxiz6zr9bWndARkhewpeEvY6YoImMCw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:92:42:71:b3:c4:a2:f7:fb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db44f79-e35b-441b-afb7-a18d6b001f54 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=0acad8a3-b873-48d0-ad5e-f83074f718c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:b6:0e:47:ee:5d:43:f0:7b:05:af:ce:18: 89:32:13:bc:74:17:0a:ab:4a:04:dd:53:03:98:9a: a0:6e:a3:f0:6a:a6:44:b7:d3:70:34:21:1e:05:0c: bc:b8:73:87:2b:06:1a:05:ef:df:a3:e6:6f:7c:fc: b6:e5:e8:ef:92:58:7a:65:b0:f9:9f:61:6d:11:ef: 6e:18:ec:4d:d2:72:58:1f:f0:67:bc:84:77:8d:6b: 01:89:a4:44:d9:b6:00:b2:b3:ef:2f:ad:6d:75:23: f3:58:c5:4c:82:10:c4:48:76:16:3d:d5:78:da:8d: f4:67:28:b1:46:22:57:15:7f:c7:5d:1c:e1:ea:7b: c3:5d:17:e0:e3:c0:51:03:fa:41:fc:c4:71:f1:7b: f1:64:64:47:7f:f6:94:34:a6:55:80:33:03:fd:3b: 6b:be:f0:77:4d:1a:68:69:d6:cb:9f:d1:87:2d:6d: eb:66:f4:3e:db:50:74:0d:03:ec:a7:73:9d:11:0e: 37:85:2e:ad:61:55:7c:a0:6a:0e:c8:81:58:da:53: b5:39:6a:7c:ed:96:41:78:2e:53:dd:6f:27:dd:91: 3f:a3:7f:41:3a:1b:70:80:54:9f:2a:0c:6d:15:43: 0d:65:1a:5b:d6:c0:3c:4a:34:da:07:da:0c:2e:72: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:54:5C:61:C7:C0:8D:A3:49:EC:B0:BE:57:25:E6:22:89:D7:6F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.crl X509v3 Authority Key Identifier: keyid:F6:10:14:67:EA:77:F1:58:86:7E:02:B8:CF:2A:99:21:A1:C7:1F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f5:3e:24:a3:19:66:0d:1e:6f:5b:05:ae:6d:df:84:c7:da: b0:dd:0d:4e:29:28:6e:db:e8:50:ee:33:e8:61:3c:12:fe:dd: d5:bf:c2:80:04:a8:f9:73:31:ab:dd:97:d1:b1:c4:05:a7:fd: f4:b3:89:0d:f1:8c:e7:08:a3:1c:62:74:6d:ba:3f:4b:ce:eb: 12:f6:a8:6c:b7:2e:bd:19:1f:2c:19:ee:20:1d:61:45:fb:66: 1b:3d:86:23:73:5a:cf:ce:e8:b5:57:0f:46:b2:9e:c9:f5:18: 96:f4:67:b9:da:d5:1c:e5:77:53:48:56:61:54:71:7b:87:da: 71:d4:b1:20:95:01:46:4c:f5:ef:69:48:8a:52:55:5f:79:9c: ba:6f:79:35:19:eb:0e:d0:9c:14:5c:ac:58:47:56:e1:0c:3a: b9:80:d0:d2:ce:b9:12:e9:50:ec:94:3d:a0:ca:6a:be:9c:83: 55:96:52:d5:6f:cc:b6:1e:2a:6f:f9:be:7b:f9:39:ea:70:4d: 5e:7f:2d:03:21:c4:e3:54:0f:7a:c8:70:e9:d4:eb:6c:4d:a1: cd:dc:5d:ee:eb:fb:d8:bf:61:b8:e4:77:86:c5:b5:bd:cf:e9: ac:7b:cd:7a:11:69:8f:9e:e4:9b:bd:fd:5b:d4:f4:c7:ea:bb: dd:97:85:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qaSQnGzxKL3+/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiNDRmNzktZTM1Yi00NDFiLWFmYjctYTE4ZDZiMDAx ZjU0MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MGFjYWQ4YTMtYjg3My00OGQwLWFkNWUtZjgzMDc0ZjcxOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bO2DkfuXUPwewWvzhiJMhO8dBcKq0oE3VMD mJqgbqPwaqZEt9NwNCEeBQy8uHOHKwYaBe/fo+ZvfPy25ejvklh6ZbD5n2FtEe9u GOxN0nJYH/BnvIR3jWsBiaRE2bYAsrPvL61tdSPzWMVMghDESHYWPdV42o30Zyix RiJXFX/HXRzh6nvDXRfg48BRA/pB/MRx8XvxZGRHf/aUNKZVgDMD/TtrvvB3TRpo adbLn9GHLW3rZvQ+21B0DQPsp3OdEQ43hS6tYVV8oGoOyIFY2lO1OWp87ZZBeC5T 3W8n3ZE/o39BOhtwgFSfKgxtFUMNZRpb1sA8SjTaB9oMLnK1nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF9UXGHHwI2jSeywvlcl5iKJ128OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZGI0 NGY3OS1lMzViLTQ0MWItYWZiNy1hMThkNmIwMDFmNTQvMmRiNDRmNzktZTM1Yi00 NDFiLWFmYjctYTE4ZDZiMDAxZjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmRiNDRmNzktZTM1Yi00NDFiLWFm YjctYTE4ZDZiMDAxZjU0LzJkYjQ0Zjc5LWUzNWItNDQxYi1hZmI3LWExOGQ2YjAw MWY1NC5jcmwwHwYDVR0jBBgwFoAU9hAUZ+p38ViGfgK4zyqZIaHHH5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZGI0NGY3OS1lMzViLTQ0MWItYWZiNy1hMThk NmIwMDFmNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN9T4koxlmDR5vWwWubd+E x9qw3Q1OKShu2+hQ7jPoYTwS/t3Vv8KABKj5czGr3ZfRscQFp/30s4kN8YznCKMc YnRtuj9LzusS9qhsty69GR8sGe4gHWFF+2YbPYYjc1rPzui1Vw9Gsp7J9RiW9Ge5 2tUc5XdTSFZhVHF7h9px1LEglQFGTPXvaUiKUlVfeZy6b3k1GesO0JwUXKxYR1bh DDq5gNDSzrkS6VDslD2gymq+nINVllLVb8y2Hipv+b57+TnqcE1efy0DIcTjVA96 yHDp1OtsTaHN3F3u6/vYv2G45HeGxbW9z+mse816EWmPnuSbvf1b1PTH6rvdl4Xc -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:41 2025 by rpki-client