$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft File: 03d20efd-729c-46b2-b268-510d1f9f7dd3.mft (raw, json) Hash identifier: 8tWR0qkKN0I0I4NfHDR3A6L23WuoltqSIGLZ1HhmbeI= Subject key identifier: 80:08:B1:A0:3E:01:03:7B:23:D2:AE:DF:03:1C:42:7D:6C:32:C9:F5 Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Certificate serial: 010D0C9F4328584BC10A9F1D9192CC8CB53C2080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft Manifest number: 010D0C9F4328584073A838975DA0D9C400391C52 Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Sat 08 Nov 2025 02:00:00 +0000 Files and hashes: 1: 03d20efd-729c-46b2-b268-510d1f9f7dd3.crl (hash: ERn9EPNe4ZrbYjDfsGQrlY5WAOGceHZyMVzVepz1pag=) 2: a8d95147-2bf2-381a-b436-c637c0802b79.roa (hash: pwcQJJLrgwzEDZqDXy0/2kW19cC7BM+VlzdlbIGqj90=) 3: c80cb437-d2fa-350c-bced-7fddd2666acd.roa (hash: /QTFDnyQPGOrB0cjRRrjXGFO4ebJrV68TrQN+Ceq2AA=) 4: d5ccba6c-e48a-34dc-9989-d340928eb37f.roa (hash: 2LZK7FNI8RzDITw9m8pUb1KT/R8SvafDwe23qX2gg34=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9f:1d:91:92:cc:8c:b5:3c:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 8 02:00:00 2025 GMT Subject: CN=63b26cc1-755d-475b-9767-d63676360ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:4d:a1:ca:d2:f8:4b:40:2a:b8:fe:fd:aa: 38:c2:20:62:b7:3a:c7:dd:0a:04:c0:56:20:69:dc: df:8a:cc:45:a8:80:1b:42:b5:f8:d1:fd:5c:a6:7e: 33:13:89:92:93:79:26:f0:d2:a3:8b:c8:99:94:f5: cf:de:32:99:8b:75:87:f0:b5:54:f4:92:13:5c:b3: f4:7a:ef:66:81:64:6c:41:cb:ea:a8:04:9b:87:ea: dd:c0:8a:21:1e:89:39:98:b7:9b:c9:21:d3:8f:05: ba:44:5d:17:03:d9:03:13:d4:e1:0c:47:f9:c1:02: 57:d3:2c:0e:d8:a3:fb:06:01:29:9f:eb:c6:4f:70: 00:95:d9:f7:8d:4e:83:8f:6a:88:a9:46:60:b6:9c: 17:ce:6a:5a:b5:15:a2:a7:43:95:20:c6:da:3e:5b: 91:5e:10:a9:bc:5d:51:67:70:73:5d:a6:0e:e4:ad: ac:f3:b7:e6:cf:3f:95:3b:b6:ec:2f:a5:71:4b:4e: 9c:0e:a4:57:23:03:57:ab:da:b0:a1:b4:89:46:56: 6f:39:4a:2e:d9:e1:21:b5:74:79:cd:b2:62:1a:84: 55:57:90:b6:b1:70:c9:3e:07:11:23:36:93:92:ab: ae:36:8a:e7:4a:e6:cf:68:12:f1:64:58:b6:41:42: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:B1:A0:3E:01:03:7B:23:D2:AE:DF:03:1C:42:7D:6C:32:C9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl X509v3 Authority Key Identifier: keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f3:92:82:79:ad:73:f2:a1:a4:b1:35:e2:de:ef:c3:60:6c: e3:2e:29:45:a9:d4:07:61:30:24:6b:dd:0c:50:78:1f:c2:91: b5:14:aa:7b:62:34:f8:bd:67:c5:24:94:43:bb:51:72:17:c2: 71:cd:3b:f7:9f:ea:75:a5:6a:8c:b6:c4:e4:ab:19:8c:36:1e: 6a:98:ed:18:02:40:48:52:51:da:96:36:66:25:46:b7:1b:5d: 5d:3c:55:2c:4c:33:1f:60:b6:cb:b2:bc:12:82:7d:8d:2d:af: 06:86:a3:10:6c:5e:3e:96:99:ed:4e:68:37:ff:74:9b:25:ef: 56:75:22:3b:60:f3:a7:0d:37:6e:14:4a:c7:e1:cd:e5:a4:8c: 27:07:53:b0:91:ed:3d:dd:0b:5e:84:4c:fa:e3:6f:18:99:b8: ab:dd:e8:23:04:45:78:b8:c6:aa:63:0c:37:ae:b5:46:99:98: a9:40:15:f5:3c:d9:1c:eb:df:a0:cd:5f:49:5f:53:ea:e9:23: 38:a1:1d:4d:e0:8f:0b:eb:79:46:be:15:3b:b6:76:57:34:d8: b4:f0:eb:dc:af:49:c0:de:c9:92:06:1c:72:24:03:a8:00:10: 18:5c:a7:2c:de:cd:e8:30:69:b6:c4:87:26:d3:45:c2:c5:8f: 67:f7:6e:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp8dkZLMjLU8IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNkMjBlZmQtNzI5Yy00NmIyLWIyNjgtNTEwZDFmOWY3 ZGQzMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwODAyMDAwMFowLzEtMCsGA1UEAxMk NjNiMjZjYzEtNzU1ZC00NzViLTk3NjctZDYzNjc2MzYwZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmJNocrS+EtAKrj+/ao4wiBitzrH3QoEwFYg adzfisxFqIAbQrX40f1cpn4zE4mSk3km8NKji8iZlPXP3jKZi3WH8LVU9JITXLP0 eu9mgWRsQcvqqASbh+rdwIohHok5mLebySHTjwW6RF0XA9kDE9ThDEf5wQJX0ywO 2KP7BgEpn+vGT3AAldn3jU6Dj2qIqUZgtpwXzmpatRWip0OVIMbaPluRXhCpvF1R Z3BzXaYO5K2s87fmzz+VO7bsL6VxS06cDqRXIwNXq9qwobSJRlZvOUou2eEhtXR5 zbJiGoRVV5C2sXDJPgcRIzaTkquuNornSubPaBLxZFi2QULdYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIAIsaA+AQN7I9Ku3wMcQn1sMsn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Qy MGVmZC03MjljLTQ2YjItYjI2OC01MTBkMWY5ZjdkZDMvMDNkMjBlZmQtNzI5Yy00 NmIyLWIyNjgtNTEwZDFmOWY3ZGQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNkMjBlZmQtNzI5Yy00NmIyLWIy NjgtNTEwZDFmOWY3ZGQzLzAzZDIwZWZkLTcyOWMtNDZiMi1iMjY4LTUxMGQxZjlm N2RkMy5jcmwwHwYDVR0jBBgwFoAU7igQcfxLoYlblvWnORaycggT39QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2QyMGVmZC03MjljLTQ2YjItYjI2OC01MTBk MWY5ZjdkZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo85KCea1z8qGksTXi3u/D YGzjLilFqdQHYTAka90MUHgfwpG1FKp7YjT4vWfFJJRDu1FyF8JxzTv3n+p1pWqM tsTkqxmMNh5qmO0YAkBIUlHaljZmJUa3G11dPFUsTDMfYLbLsrwSgn2NLa8GhqMQ bF4+lpntTmg3/3SbJe9WdSI7YPOnDTduFErH4c3lpIwnB1Owke093QtehEz6428Y mbir3egjBEV4uMaqYww3rrVGmZipQBX1PNkc69+gzV9JX1Pq6SM4oR1N4I8L63lG vhU7tnZXNNi08Ovcr0nA3smSBhxyJAOoABAYXKcs3s3oMGm2xIcm00XCxY9n927F -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:16 2025 by rpki-client