$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft File: b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft (raw, json) Hash identifier: iDoNzjjgHvDUKNhyX7VC/BAIkmFjOXgJ3jockE8+Q14= Subject key identifier: 2D:F8:61:BF:5C:7A:9D:57:17:D4:28:11:8D:21:00:35:E2:34:07:6B Authority key identifier: F0:3C:8A:97:43:E3:47:44:2E:B4:5E:02:C2:40:63:DE:6B:68:DF:62 Certificate issuer: /CN=b1fcade6-52c4-4b28-8707-cdf7e885f0a5 Certificate serial: 010D0C9F4328584BC1F8D880C89387F0F37EDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft Manifest number: 010D0C9F4328584A571DC8850074D505F3B8E984 Signing time: Wed 05 Nov 2025 10:00:03 +0000 Manifest this update: Wed 05 Nov 2025 10:00:03 +0000 Manifest next update: Sat 08 Nov 2025 10:00:00 +0000 Files and hashes: 1: b1fcade6-52c4-4b28-8707-cdf7e885f0a5.crl (hash: JAG54NHBm7YwJd3tyq3grer9ElcMsA0XxWvy6eU7G8k=) 2: f8c60b6e-ce8a-3741-ac0f-6d73351ca60e.roa (hash: f91J/pTcZE6xxdaBZ2rz3FKWRep1mD8thrrOGwpC89s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:f8:d8:80:c8:93:87:f0:f3:7e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1fcade6-52c4-4b28-8707-cdf7e885f0a5 Validity Not Before: Nov 5 10:00:03 2025 GMT Not After : Nov 8 10:00:00 2025 GMT Subject: CN=f5afb5b3-50b1-425b-93bb-4c858e80ae83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:a0:f0:c1:96:b3:f9:a8:5f:15:27:e4:e6: fc:fb:af:d9:20:3a:55:4d:ba:df:9a:e4:b6:b4:94: dd:22:de:17:70:0d:36:ea:8f:9a:2a:0f:b5:bc:b0: 65:94:69:80:10:e7:c2:da:f4:07:a3:47:6f:ef:fb: 55:91:eb:47:f0:50:bc:f5:db:cf:50:15:4b:21:74: 31:a7:84:80:5f:3d:4b:44:63:5f:8c:be:a7:bb:de: 79:70:37:fb:ae:3a:6e:23:98:81:ee:f1:0a:da:68: ca:a7:86:97:34:88:63:79:cc:42:1f:95:d8:ae:86: 4d:56:aa:58:6c:86:e8:8c:77:68:a9:b5:86:2f:a5: 65:cb:1c:f8:b1:9c:0a:2f:cf:d2:35:30:fd:3d:30: 9f:28:bd:92:4f:5d:bf:e0:7b:b0:2b:68:03:08:45: cb:d0:c5:4c:f4:50:cf:08:3b:c9:e7:f0:d1:64:60: 95:7a:97:2d:f9:2f:3d:c1:14:37:87:af:93:6d:06: 2d:48:e6:a1:10:29:1a:64:23:8e:a0:8a:93:80:22: 19:22:25:a5:77:0e:d2:f7:2c:a3:db:3f:1e:23:a3: 92:df:0b:48:3b:05:e2:f4:58:82:e3:44:92:64:66: bb:f6:c4:3d:8d:45:be:4b:7f:64:2b:fe:46:f1:d2: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:61:BF:5C:7A:9D:57:17:D4:28:11:8D:21:00:35:E2:34:07:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.crl X509v3 Authority Key Identifier: keyid:F0:3C:8A:97:43:E3:47:44:2E:B4:5E:02:C2:40:63:DE:6B:68:DF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:41:cc:70:a9:04:ae:76:c0:f2:cb:1a:24:d6:f8:1e:26:c3: 1d:48:d6:12:43:a5:ff:1f:e6:e8:f9:5a:3e:0d:85:bc:1a:55: 1d:22:26:40:74:a8:9c:a3:22:9e:08:2d:88:ae:96:b7:91:9e: 1e:d7:33:22:70:ba:2e:72:7a:7c:22:b4:2f:41:42:11:5a:2b: d8:63:db:06:03:31:07:55:e8:67:f1:89:93:df:28:7c:09:e6: 63:b2:99:4a:60:be:fc:a4:40:17:2a:2d:b7:a6:1b:8a:05:2f: 62:3f:6c:87:d1:56:a3:b4:76:f9:20:b4:df:01:c1:f2:ab:3e: b3:af:30:b1:b5:af:1f:a5:b4:9c:c0:7a:50:29:87:bc:87:2c: 3b:14:ec:b6:70:0e:f3:b2:b4:83:d8:9b:a5:52:45:d4:82:fc: de:88:98:17:e1:cf:90:c2:d1:b3:4b:41:7a:49:42:c7:53:e0: 02:ae:e3:eb:75:45:f4:cd:e1:a4:83:fe:c3:a8:cf:77:46:76: 4a:b3:77:cd:f2:3d:5e:d7:e7:8a:ff:7f:73:20:ca:c8:c9:dd: 76:15:7f:1b:60:d1:77:77:df:86:93:24:6b:33:67:f2:e3:e5: 99:f7:44:bb:cb:4b:ec:c7:69:0f:18:ea:9a:70:6a:3c:b9:92: 2e:ca:e5:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB+NiAyJOH8PN+34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFmY2FkZTYtNTJjNC00YjI4LTg3MDctY2RmN2U4ODVm MGE1MB4XDTI1MTEwNTEwMDAwM1oXDTI1MTEwODEwMDAwMFowLzEtMCsGA1UEAxMk ZjVhZmI1YjMtNTBiMS00MjViLTkzYmItNGM4NThlODBhZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhWg8MGWs/moXxUn5Ob8+6/ZIDpVTbrfmuS2 tJTdIt4XcA026o+aKg+1vLBllGmAEOfC2vQHo0dv7/tVketH8FC89dvPUBVLIXQx p4SAXz1LRGNfjL6nu955cDf7rjpuI5iB7vEK2mjKp4aXNIhjecxCH5XYroZNVqpY bIbojHdoqbWGL6Vlyxz4sZwKL8/SNTD9PTCfKL2ST12/4HuwK2gDCEXL0MVM9FDP CDvJ5/DRZGCVepct+S89wRQ3h6+TbQYtSOahECkaZCOOoIqTgCIZIiWldw7S9yyj 2z8eI6OS3wtIOwXi9FiC40SSZGa79sQ9jUW+S39kK/5G8dKgkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC34Yb9cep1XF9QoEY0hADXiNAdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMWZj YWRlNi01MmM0LTRiMjgtODcwNy1jZGY3ZTg4NWYwYTUvYjFmY2FkZTYtNTJjNC00 YjI4LTg3MDctY2RmN2U4ODVmMGE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjFmY2FkZTYtNTJjNC00YjI4LTg3 MDctY2RmN2U4ODVmMGE1L2IxZmNhZGU2LTUyYzQtNGIyOC04NzA3LWNkZjdlODg1 ZjBhNS5jcmwwHwYDVR0jBBgwFoAU8DyKl0PjR0QutF4CwkBj3mto32IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMWZjYWRlNi01MmM0LTRiMjgtODcwNy1jZGY3 ZTg4NWYwYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmQcxwqQSudsDyyxok1vge JsMdSNYSQ6X/H+bo+Vo+DYW8GlUdIiZAdKicoyKeCC2Irpa3kZ4e1zMicLoucnp8 IrQvQUIRWivYY9sGAzEHVehn8YmT3yh8CeZjsplKYL78pEAXKi23phuKBS9iP2yH 0VajtHb5ILTfAcHyqz6zrzCxta8fpbScwHpQKYe8hyw7FOy2cA7zsrSD2JulUkXU gvzeiJgX4c+QwtGzS0F6SULHU+ACruPrdUX0zeGkg/7DqM93RnZKs3fN8j1e1+eK /39zIMrIyd12FX8bYNF3d9+GkyRrM2fy4+WZ90S7y0vsx2kPGOqacGo8uZIuyuWM -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:56 2025 by rpki-client