$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft File: 7afbb48a-7a41-422c-a27b-4b92e0907153.mft (raw, json) Hash identifier: TWCeaq9rr/OVbSvyNqu3WpJuEcWzsgr4640ICECw8NQ= Subject key identifier: 59:52:78:BE:CE:AE:FD:49:21:50:FA:3C:2D:9D:59:6E:51:04:B4:F1 Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E Certificate issuer: /CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Certificate serial: 010D0C9F4328584BC1462D8F6B815DE37531EF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft Manifest number: 010D0C9F432858496EA47549D85836F893509699 Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (hash: 0zNDEexc/e5gaxHmpQonKCDMux4i+Zq9RVj2jtJ/Apc=) 2: 7afbb48a-7a41-422c-a27b-4b92e0907153.crl (hash: A1+b0BIBWy90Ke9FUsFXGYV89bkiSLIWX/5fBKR5rTA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2d:8f:6b:81:5d:e3:75:31:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=4bc5373b-ca93-4975-a0f1-1516a03d6fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:c8:04:e0:ef:01:13:53:b0:39:a1:ac:8a: fc:e3:18:15:d7:99:c6:c4:35:33:fa:4a:4d:05:10: 9d:e4:36:5c:26:78:59:c7:12:ed:88:b6:f9:af:ac: 58:14:b2:b7:36:bf:4f:73:04:9c:99:17:e3:64:be: a0:83:f1:c9:e1:40:77:8f:eb:19:4b:7c:ce:04:ad: 2a:2e:67:e5:74:55:4f:69:b8:39:49:7c:10:fa:58: 22:cc:38:dd:c5:3c:3a:d8:e9:bb:5f:07:95:90:e4: 44:a4:a4:a4:e2:e5:17:10:75:b5:31:50:76:06:1e: 2f:be:1c:da:04:b7:fe:95:09:23:a3:48:fa:c2:80: e3:99:bc:64:a3:ab:36:90:59:af:66:73:12:e6:27: 0a:49:2e:d4:b8:a9:97:6f:36:1e:77:dd:a7:30:ca: fe:37:83:da:2d:6c:f8:88:b1:48:e4:be:58:f7:e0: fc:3b:d9:43:b3:51:57:11:ba:ce:fd:8c:01:d6:1a: 4b:96:16:50:70:bd:39:a7:be:6b:ad:f2:4e:54:de: d9:d3:91:71:2e:41:9c:17:ae:9f:c8:ec:6f:4a:4f: 2e:68:6a:f3:26:f2:a0:06:8a:e8:3f:74:e1:cf:c4: cb:83:cb:9b:39:3d:b9:0d:50:d2:8e:67:07:b3:c5: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:78:BE:CE:AE:FD:49:21:50:FA:3C:2D:9D:59:6E:51:04:B4:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl X509v3 Authority Key Identifier: keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:76:12:9b:71:58:fa:2c:c6:33:ac:08:a8:26:ab:f7:fe:f3: a2:d9:ad:ba:40:e0:90:1c:8d:ad:56:e4:7a:fb:48:01:17:65: a4:4b:bc:c8:2c:ee:e2:13:08:ce:08:87:aa:3b:7a:bf:be:5c: 80:f5:81:2f:78:1f:35:5b:aa:e6:ee:5f:33:ad:1b:d7:33:ab: 27:86:32:9b:4c:eb:7e:f9:46:37:7a:3a:62:12:b1:c1:92:1b: 1b:15:36:8e:ab:47:af:60:43:7a:6d:11:a1:fb:6e:c0:5e:ce: 56:56:23:58:36:5e:13:cb:68:33:71:50:61:31:63:c2:17:76: 3b:99:56:aa:01:fa:60:a7:c3:9d:5a:37:2e:f2:fb:e5:38:46: d4:0c:61:b9:17:dd:ac:0f:0f:28:1b:9a:35:33:07:09:84:86: e5:7a:3e:b9:f2:03:c9:44:6b:d5:86:bd:43:fe:65:59:4e:c0: bc:00:44:02:77:8e:e5:26:c0:92:49:81:59:57:ef:6a:c2:21: d6:98:bb:1d:36:76:22:aa:67:e7:90:50:e1:16:38:55:d4:ed: 14:90:1b:6d:0f:6b:c5:f4:8f:0c:a3:65:a1:2e:6b:60:18:c9: 71:9a:c3:72:2d:c8:30:92:1d:35:ef:83:f1:af:3b:55:cd:34: 03:10:21:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRi2Pa4Fd43Ux70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3 MTUzMB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk NGJjNTM3M2ItY2E5My00OTc1LWEwZjEtMTUxNmEwM2Q2ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpzIBODvARNTsDmhrIr84xgV15nGxDUz+kpN BRCd5DZcJnhZxxLtiLb5r6xYFLK3Nr9PcwScmRfjZL6gg/HJ4UB3j+sZS3zOBK0q LmfldFVPabg5SXwQ+lgizDjdxTw62Om7XweVkOREpKSk4uUXEHW1MVB2Bh4vvhza BLf+lQkjo0j6woDjmbxko6s2kFmvZnMS5icKSS7UuKmXbzYed92nMMr+N4PaLWz4 iLFI5L5Y9+D8O9lDs1FXEbrO/YwB1hpLlhZQcL05p75rrfJOVN7Z05FxLkGcF66f yOxvSk8uaGrzJvKgBoroP3Thz8TLg8ubOT25DVDSjmcHs8XUTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFlSeL7Orv1JIVD6PC2dWW5RBLTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvN2FmYmI0OGEtN2E0MS00 MjJjLWEyN2ItNGI5MmUwOTA3MTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky ZTA5MDcxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2dhKbcVj6LMYzrAioJqv3 /vOi2a26QOCQHI2tVuR6+0gBF2WkS7zILO7iEwjOCIeqO3q/vlyA9YEveB81W6rm 7l8zrRvXM6snhjKbTOt++UY3ejpiErHBkhsbFTaOq0evYEN6bRGh+27AXs5WViNY Nl4Ty2gzcVBhMWPCF3Y7mVaqAfpgp8OdWjcu8vvlOEbUDGG5F92sDw8oG5o1MwcJ hIblej658gPJRGvVhr1D/mVZTsC8AEQCd47lJsCSSYFZV+9qwiHWmLsdNnYiqmfn kFDhFjhV1O0UkBttD2vF9I8Mo2WhLmtgGMlxmsNyLcgwkh0174PxrztVzTQDECFI -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:51 2025 by rpki-client