$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft File: e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft (raw, json) Hash identifier: GP1RTpCxTkj/LtQ2N6u9Unlc+c7bPZqrkaXhDsuTGPU= Subject key identifier: 1B:5A:D9:BC:71:3A:1D:3A:BC:0B:18:1F:E2:67:CF:18:53:2E:B5:79 Authority key identifier: 44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB Certificate issuer: /CN=e7a41e2a-3e61-430a-b260-195a50cc7fbd Certificate serial: 010D0C9F4328584BBF1060E3174C037B86C72140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft Manifest number: 010D0C9F4328584A384293B00B660AE2EE62DC12 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 5554e0d1-88ee-368b-8db9-8f2b7b23a697.roa (hash: LMC9WJ4+DSrWXaEwSS/VDOYeLxX9lW+1r+H0/ekn9z8=) 2: e7a41e2a-3e61-430a-b260-195a50cc7fbd.crl (hash: CBSzIfHB4XmFaQf3SZfPiitYHkLFFBJRVP0E1VD8Y3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:60:e3:17:4c:03:7b:86:c7:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a41e2a-3e61-430a-b260-195a50cc7fbd Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=57d591f8-b628-4f35-bc17-28ec17fc7550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:3e:bd:dc:c8:67:64:da:ef:8c:72:2e:75: 81:fa:65:80:d9:89:b2:05:fc:89:8b:51:92:4d:f0: 18:29:09:86:4d:d1:63:1a:eb:6b:ee:fd:d7:9d:9c: 2d:92:db:2f:fe:c4:f4:07:9c:55:6c:15:ce:b7:8a: 99:31:23:52:71:2e:5d:b4:6d:4c:52:0c:01:95:72: 44:61:dd:73:53:d5:d0:cc:58:4d:90:c3:5d:25:e9: c0:29:dc:10:f8:c4:f7:3c:27:20:7d:09:dc:88:6f: ce:b5:4b:07:d5:79:ca:99:b5:29:c8:39:3e:09:57: 6c:88:5c:ab:be:66:74:47:e1:79:de:51:3f:e3:19: 0a:68:b4:d4:f8:5c:f9:3f:bf:73:4f:4f:be:a0:e6: aa:26:a4:ed:18:1a:50:f7:79:f6:71:46:3d:b4:a7: e5:7a:9f:f3:ba:82:7d:b9:9a:7d:96:77:79:77:74: 10:89:5c:61:b3:8e:e4:b9:2e:7a:45:c0:67:99:9c: 64:0e:af:77:cf:96:f3:83:c9:40:d6:2a:80:74:d0: 1f:c5:96:44:54:47:49:d1:7b:d5:2e:fa:53:bd:a0: 3a:f5:b7:aa:e8:b2:3b:e1:f5:8e:83:66:c0:35:c2: b4:2d:cd:7b:f9:26:63:0a:34:e5:f7:38:2a:0b:14: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:D9:BC:71:3A:1D:3A:BC:0B:18:1F:E2:67:CF:18:53:2E:B5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.crl X509v3 Authority Key Identifier: keyid:44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:64:92:de:36:5b:dd:9b:6c:72:a6:15:e3:26:27:34:cc:7e: 0b:26:5c:61:f1:54:19:33:34:cc:f3:17:6c:cd:f7:47:9f:62: a0:51:3e:6e:6b:17:9b:33:6f:60:42:5d:36:0b:2e:b6:47:69: 18:6c:1f:b9:ea:6c:05:ed:19:14:9d:4a:f0:9b:23:0f:72:24: 01:cb:fc:26:96:ba:5b:76:1d:ca:41:d8:5d:10:e4:7c:21:8e: 7f:6b:86:5c:60:90:a6:b0:e2:c4:eb:5f:c2:d9:e5:44:48:b4: c4:c2:74:97:2b:6d:79:5e:28:4a:0f:ac:5e:25:f0:ef:bc:3c: c2:bf:7b:30:5f:05:07:8a:65:5a:4f:e1:05:75:e9:cf:bd:56: 07:ae:75:85:e2:f7:b8:9b:7e:18:3a:f9:06:d0:56:1f:97:ff: 4c:66:c6:62:4b:51:c9:fb:41:c2:ed:31:1a:ab:37:ae:1b:ca: 8f:18:a5:91:53:3a:0f:6e:6c:6c:f2:89:45:2d:9e:ea:f0:8a: f7:a4:c0:ec:e5:ca:08:9a:ae:23:48:8f:97:80:22:75:77:ae: d5:49:98:af:ea:23:ac:d2:ef:01:62:22:73:1c:de:45:b1:02: d4:2b:0e:e6:a3:bf:35:c8:00:56:68:e5:1f:d3:38:a6:00:27: 3c:35:91:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGDjF0wDe4bHIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdhNDFlMmEtM2U2MS00MzBhLWIyNjAtMTk1YTUwY2M3 ZmJkMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk NTdkNTkxZjgtYjYyOC00ZjM1LWJjMTctMjhlYzE3ZmM3NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU4+vdzIZ2Ta74xyLnWB+mWA2YmyBfyJi1GS TfAYKQmGTdFjGutr7v3XnZwtktsv/sT0B5xVbBXOt4qZMSNScS5dtG1MUgwBlXJE Yd1zU9XQzFhNkMNdJenAKdwQ+MT3PCcgfQnciG/OtUsH1XnKmbUpyDk+CVdsiFyr vmZ0R+F53lE/4xkKaLTU+Fz5P79zT0++oOaqJqTtGBpQ93n2cUY9tKflep/zuoJ9 uZp9lnd5d3QQiVxhs47kuS56RcBnmZxkDq93z5bzg8lA1iqAdNAfxZZEVEdJ0XvV LvpTvaA69beq6LI74fWOg2bANcK0Lc17+SZjCjTl9zgqCxSq8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBta2bxxOh06vAsYH+JnzxhTLrV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lN2E0 MWUyYS0zZTYxLTQzMGEtYjI2MC0xOTVhNTBjYzdmYmQvZTdhNDFlMmEtM2U2MS00 MzBhLWIyNjAtMTk1YTUwY2M3ZmJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTdhNDFlMmEtM2U2MS00MzBhLWIy NjAtMTk1YTUwY2M3ZmJkL2U3YTQxZTJhLTNlNjEtNDMwYS1iMjYwLTE5NWE1MGNj N2ZiZC5jcmwwHwYDVR0jBBgwFoAURMCoOhbkxemdRcVjtGMsJs9d67swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lN2E0MWUyYS0zZTYxLTQzMGEtYjI2MC0xOTVh NTBjYzdmYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtZJLeNlvdm2xyphXjJic0 zH4LJlxh8VQZMzTM8xdszfdHn2KgUT5uaxebM29gQl02Cy62R2kYbB+56mwF7RkU nUrwmyMPciQBy/wmlrpbdh3KQdhdEOR8IY5/a4ZcYJCmsOLE61/C2eVESLTEwnSX K215XihKD6xeJfDvvDzCv3swXwUHimVaT+EFdenPvVYHrnWF4ve4m34YOvkG0FYf l/9MZsZiS1HJ+0HC7TEaqzeuG8qPGKWRUzoPbmxs8olFLZ7q8Ir3pMDs5coImq4j SI+XgCJ1d67VSZiv6iOs0u8BYiJzHN5FsQLUKw7mo781yABWaOUf0zimACc8NZH0 -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:05 2025 by rpki-client