$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: tsN6PPtadE5WqyPvK1URpfYwFMR+vlT9Cxx1KpQ+58k= Subject key identifier: A2:95:14:EC:62:F6:B3:16:10:7C:32:4D:C0:CC:20:D7:80:D6:76:D9 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584BC03A2C6E7C2F61054008F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A806 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Thu 06 Nov 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: Uc6onv0EF7Ri9hCCp79MsCvEZN+RrY+J+Lv84blAv4Y=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: BfcXiyJvkfh2KWhPimM56AZTNbJPEewK3tg9aEEsO5Q=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: sSncewOK4aaysbPuOQqZReOsPxeMNSr63PtbmP75HKk=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: X7x66fM9XsgcVUK8YIc80dzR1Puitz6owWbsNgUr8hM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2c:6e:7c:2f:61:05:40:08:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 6 19:00:00 2025 GMT Subject: CN=35a09294-41c9-40ba-95a2-7034644cae27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:6c:c3:eb:d8:71:5b:ba:7d:b5:d9:65:da: cf:dc:9f:5b:e4:49:03:de:be:a5:02:72:86:f2:96: 45:90:e6:c7:1f:3c:2e:88:7f:76:c2:f5:b6:0c:c4: e6:2c:07:69:eb:83:53:a0:ce:d7:8b:5a:da:96:94: 80:f5:8f:02:58:47:f5:91:04:ed:50:22:35:c5:5d: f9:44:07:8b:9c:61:a2:7f:b8:39:e3:8e:ba:f9:db: db:03:cb:0a:11:7b:3c:f5:30:ac:d8:5f:7f:d2:05: de:27:d8:8f:ad:69:ca:b3:29:ac:3e:d2:1b:aa:bc: 13:49:00:09:7c:55:37:cc:57:0a:1d:17:17:41:15: 97:97:5b:3f:c8:08:13:86:65:fd:6a:b5:3d:ec:13: 34:63:bc:cc:e5:6e:fd:91:86:7a:af:37:b9:27:48: 4c:2b:eb:99:ec:48:f4:08:9a:fe:08:d7:89:c9:9d: 31:59:ee:67:14:01:ea:03:94:17:28:6e:26:56:09: 07:9c:f7:a1:41:5a:8d:0e:77:0e:2d:52:c4:f4:42: 86:df:78:75:5e:50:40:ca:68:4f:c7:d2:32:5c:f1: 53:ce:ea:b1:e9:89:a4:f0:f6:26:aa:d5:40:ee:9d: 84:0a:4b:98:6a:34:26:0a:0f:3c:cd:7c:6c:84:08: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:14:EC:62:F6:B3:16:10:7C:32:4D:C0:CC:20:D7:80:D6:76:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:56:89:94:e7:6c:90:0d:c0:13:d0:91:18:58:48:0c:72:ca: 1c:1c:c1:76:cc:eb:1b:27:37:b6:10:c1:3c:f9:96:2e:ae:d0: 86:20:55:ad:60:49:09:f7:a0:de:00:ea:88:ad:1e:de:2d:3c: f1:d9:ac:62:b7:20:eb:83:34:f5:4d:25:2e:1c:17:a2:06:62: cc:a6:75:07:1d:cb:fc:a0:9f:9f:9b:dd:fa:61:24:cb:63:2d: 2c:e0:e6:8f:5c:be:98:05:a5:b5:96:9d:ff:e8:b6:d7:af:8b: 3f:b7:9b:b8:5d:f6:b7:60:9b:07:32:8d:70:b0:6f:5f:3c:30: a3:25:e4:6c:f9:3e:b1:45:ab:ff:5a:ec:bc:07:41:b7:08:1d: 7c:e2:83:1e:04:68:da:c9:22:2e:fc:36:0a:6c:d8:07:c1:50: 15:0d:f3:85:58:d7:28:49:08:ab:f3:23:1e:8f:1b:49:7b:e5: db:7a:55:e1:f0:be:9f:0b:f8:ed:b2:63:6e:3b:e6:f6:76:2e: ea:9c:c8:c7:79:6e:da:e3:62:81:f1:0a:c3:bd:d6:04:d0:a2: 26:b2:6d:cf:82:bd:d3:c5:04:b1:3f:c5:34:bb:f8:7b:d6:bf: 42:13:a6:a2:00:e0:f4:56:80:21:dc:9e:b9:c2:09:6a:ee:d6: 23:6f:3c:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOixufC9hBUAI8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk MzVhMDkyOTQtNDFjOS00MGJhLTk1YTItNzAzNDY0NGNhZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlsw+vYcVu6fbXZZdrP3J9b5EkD3r6lAnKG 8pZFkObHHzwuiH92wvW2DMTmLAdp64NToM7Xi1ralpSA9Y8CWEf1kQTtUCI1xV35 RAeLnGGif7g54466+dvbA8sKEXs89TCs2F9/0gXeJ9iPrWnKsymsPtIbqrwTSQAJ fFU3zFcKHRcXQRWXl1s/yAgThmX9arU97BM0Y7zM5W79kYZ6rze5J0hMK+uZ7Ej0 CJr+CNeJyZ0xWe5nFAHqA5QXKG4mVgkHnPehQVqNDncOLVLE9EKG33h1XlBAymhP x9IyXPFTzuqx6Ymk8PYmqtVA7p2ECkuYajQmCg88zXxshAiJowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKVFOxi9rMWEHwyTcDMINeA1nbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDVomU52yQDcAT0JEYWEgM csocHMF2zOsbJze2EME8+ZYurtCGIFWtYEkJ96DeAOqIrR7eLTzx2axityDrgzT1 TSUuHBeiBmLMpnUHHcv8oJ+fm936YSTLYy0s4OaPXL6YBaW1lp3/6LbXr4s/t5u4 Xfa3YJsHMo1wsG9fPDCjJeRs+T6xRav/Wuy8B0G3CB184oMeBGjaySIu/DYKbNgH wVAVDfOFWNcoSQir8yMejxtJe+XbelXh8L6fC/jtsmNuO+b2di7qnMjHeW7a42KB 8QrDvdYE0KImsm3Pgr3TxQSxP8U0u/h71r9CE6aiAOD0VoAh3J65wglq7tYjbzxe -----END CERTIFICATE-----Generated at Wed Nov 5 19:18:36 2025 by rpki-client