$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft File: 9fa1f513-7800-4b16-b8c2-e28305418287.mft (raw, json) Hash identifier: Os8uA0kZLlc8ngJSmCsS7CnHjI9k8UCOxzSROKdfziU= Subject key identifier: F8:D6:BF:26:3B:52:70:F4:50:A8:3A:9D:57:35:0D:D6:44:2D:CE:D4 Authority key identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Certificate issuer: /CN=9fa1f513-7800-4b16-b8c2-e28305418287 Certificate serial: 010D0C9F4328584BC01C63D9807675DF36CC0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft Manifest number: 010D0C9F43285849CC6EE70D380ACBD271DDA238 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 9fa1f513-7800-4b16-b8c2-e28305418287.crl (hash: +h1q6Okm8tii47F2L628HO8JCKnAfcUniSWuQktrnBM=) 2: af2f829b-0e8b-37ab-9952-c4e11edc9d3b.roa (hash: fJ2H5uQZ1spVVeqEspzTX16+Inl/QCtFTSlUWFmZ9cg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:d9:80:76:75:df:36:cc:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa1f513-7800-4b16-b8c2-e28305418287 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=d55c9bc6-dcbb-48a7-9de7-7326d49a1315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:8f:7c:25:43:b4:b7:1d:1d:e5:a2:71:2d: 8d:45:78:78:92:c0:3a:03:5c:09:8d:48:28:8a:8f: b8:4d:4e:0f:19:e6:ca:6a:ac:d0:db:0f:61:8d:f3: 3d:d1:9f:3c:e1:05:f7:88:90:3d:8d:39:de:99:8a: 10:90:e8:bb:bb:55:b6:0a:a2:6a:04:03:19:62:83: 07:90:4a:73:6c:87:07:f1:30:45:b1:53:b0:3c:88: e7:f8:ae:42:ff:67:29:59:a1:7c:94:09:f4:52:33: 45:c4:76:f0:eb:e9:a1:b6:28:d9:21:dd:f0:56:fd: cc:52:94:26:f2:59:29:51:66:65:9b:ea:b1:f0:37: 39:4f:78:0d:d4:6e:9c:e8:e4:58:0d:18:2d:8e:ee: 03:57:bf:9a:c4:8d:fd:b9:b1:d7:79:9c:58:27:dd: 28:42:c6:ea:48:ef:c5:cd:09:68:aa:ff:05:33:91: 99:d8:d6:e7:95:3b:fe:20:05:82:91:ea:f9:9f:bb: 21:5f:2d:f2:a3:99:ec:1c:f6:e2:fa:21:c9:c6:2b: 97:9c:46:e5:69:9f:6e:13:f0:3d:69:a9:d2:bf:8b: f4:2e:4e:e4:b2:dc:ea:48:06:d0:05:dc:30:d4:49: 01:fb:96:71:4f:1a:62:e7:15:15:0e:59:b0:38:d0: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:BF:26:3B:52:70:F4:50:A8:3A:9D:57:35:0D:D6:44:2D:CE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.crl X509v3 Authority Key Identifier: keyid:34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a7:3c:e2:1a:f4:75:b1:33:3e:5d:3f:93:70:2a:68:77:2a: 2d:b3:10:b7:4b:ce:92:db:b2:75:d7:67:b9:89:b9:c9:43:d6: d0:60:56:4b:4e:c2:42:87:01:f8:da:ef:8b:b7:d6:f7:19:a0: 18:b3:15:ca:49:b9:ec:73:a3:04:7c:ba:04:8a:3c:93:ca:a8: db:6d:e9:2d:55:97:f4:c8:50:4a:27:ca:67:d6:f1:21:6d:ed: a3:70:33:b9:6c:4f:32:98:74:42:9e:3f:a6:29:2b:96:f6:6d: 46:1a:d9:61:49:a5:70:99:f4:75:f1:b7:06:d3:bc:bd:94:98: 8e:a0:51:05:b6:c2:3f:bf:69:68:de:69:77:e3:ca:b7:e8:20: ee:74:d2:28:d5:57:3d:78:ec:d1:7a:12:03:13:15:67:ec:ef: bb:bb:5f:aa:19:df:02:44:a8:f4:d2:49:ad:58:43:be:25:53: 1f:64:75:d1:aa:ce:45:df:bd:5e:c2:cb:c9:7b:30:e4:11:4d: ee:c4:ae:d2:54:a2:ec:09:a1:e7:d1:18:1a:8a:5c:d5:8e:e1: 9d:47:69:0f:38:fc:89:69:0a:4b:4e:b0:68:4a:85:5c:3f:b0: 1e:04:b4:c3:a4:a0:45:7e:b1:e6:4b:9e:20:13:81:9f:5f:40: cc:a7:2c:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGPZgHZ13zbMBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhMWY1MTMtNzgwMC00YjE2LWI4YzItZTI4MzA1NDE4 Mjg3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZDU1YzliYzYtZGNiYi00OGE3LTlkZTctNzMyNmQ0OWExMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXePfCVDtLcdHeWicS2NRXh4ksA6A1wJjUgo io+4TU4PGebKaqzQ2w9hjfM90Z884QX3iJA9jTnemYoQkOi7u1W2CqJqBAMZYoMH kEpzbIcH8TBFsVOwPIjn+K5C/2cpWaF8lAn0UjNFxHbw6+mhtijZId3wVv3MUpQm 8lkpUWZlm+qx8Dc5T3gN1G6c6ORYDRgtju4DV7+axI39ubHXeZxYJ90oQsbqSO/F zQloqv8FM5GZ2NbnlTv+IAWCker5n7shXy3yo5nsHPbi+iHJxiuXnEblaZ9uE/A9 aanSv4v0Lk7kstzqSAbQBdww1EkB+5ZxTxpi5xUVDlmwONBT6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPjWvyY7UnD0UKg6nVc1DdZELc7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ZmEx ZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0MTgyODcvOWZhMWY1MTMtNzgwMC00 YjE2LWI4YzItZTI4MzA1NDE4Mjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWZhMWY1MTMtNzgwMC00YjE2LWI4 YzItZTI4MzA1NDE4Mjg3LzlmYTFmNTEzLTc4MDAtNGIxNi1iOGMyLWUyODMwNTQx ODI4Ny5jcmwwHwYDVR0jBBgwFoAUNIgLH6ejayb6DQRO0Zmy3TQTKocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgz MDU0MTgyODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxpzziGvR1sTM+XT+TcCpo dyotsxC3S86S27J112e5ibnJQ9bQYFZLTsJChwH42u+Lt9b3GaAYsxXKSbnsc6ME fLoEijyTyqjbbektVZf0yFBKJ8pn1vEhbe2jcDO5bE8ymHRCnj+mKSuW9m1GGtlh SaVwmfR18bcG07y9lJiOoFEFtsI/v2lo3ml348q36CDudNIo1Vc9eOzRehIDExVn 7O+7u1+qGd8CRKj00kmtWEO+JVMfZHXRqs5F371ewsvJezDkEU3uxK7SVKLsCaHn 0RgailzVjuGdR2kPOPyJaQpLTrBoSoVcP7AeBLTDpKBFfrHmS54gE4GfX0DMpyzz -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:16 2025 by rpki-client