$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft File: 4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft (raw, json) Hash identifier: XvkGvOHVLC8eWXjlMLwsjfzk5MNMkwrxOzAE+03n2kM= Subject key identifier: 05:CA:95:F2:B9:E8:C5:9D:FC:1C:29:56:51:CA:9B:ED:25:4F:2A:9A Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584BC0B1476F3AFF92EFA69AD500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft Manifest number: 010D0C9F4328584073A82EA37D3E0DA96C76C2AA Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (hash: w+Mp8UWh+XhWdG0WelbZoziW69qFfKqJT46L6ky54QM=) 2: 2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa (hash: t+I8o0SpqEETOiEk3v2oRxuxS5ETVBPIud9RnkUSdAk=) 3: 4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl (hash: XqVjQOsVai+D/KQ2XSCV/xz5mx5L6EEJFU++PM5I3uQ=) 4: 89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa (hash: r/DVC7tklhfKy0yGJpuXuaITx6UOCGUbHnHZuaQH5Nw=) 5: d981ed21-a25a-3b01-91c0-905497dccc91.roa (hash: CkbWkg+ZqvMrMxRro4mQ2cGswg/71E24QKeGJAx0De0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:47:6f:3a:ff:92:ef:a6:9a:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=f25c5b53-97bf-4825-bd18-1091bd0e510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:45:4d:0a:0d:e9:11:d6:d3:31:66:5a:bf: ea:ee:7b:67:61:1f:30:f0:40:ca:2f:b9:d3:fc:7d: 6b:96:26:be:23:d2:b0:eb:ba:c2:23:ff:5b:16:19: a5:70:e4:0e:82:bc:a1:23:ad:93:04:3e:0a:ca:51: cc:fe:c9:c4:77:e0:55:70:52:93:9c:a9:80:97:98: 26:f4:c7:07:40:66:26:6e:5a:2f:ec:50:91:8c:f1: d5:ee:ee:bb:27:09:6c:e2:e9:05:e0:d8:f8:41:14: 8a:7d:3f:7c:ba:f9:2f:53:d8:cc:9d:93:0f:dd:58: 8a:c9:db:21:e7:d9:56:c5:5e:24:9d:f4:85:f1:cd: b9:6e:89:7d:b9:a5:9c:ff:56:84:28:a4:37:4f:5d: 41:3a:11:b7:bb:77:82:b0:f3:b1:af:0d:97:c2:e4: e9:6f:32:6b:d9:62:b5:b2:0a:22:60:88:b3:2c:db: 02:c9:bc:ff:63:fc:97:5c:77:82:1c:73:28:e8:4a: 42:15:13:c8:22:65:06:39:06:55:37:01:20:91:8b: b4:5a:98:07:7b:7c:e2:9e:24:4e:88:c8:fd:49:99: 21:48:81:d2:37:33:1a:a9:51:51:60:19:cb:62:9b: d8:e5:86:82:c5:ae:a4:3a:61:84:71:7e:b0:bf:57: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:95:F2:B9:E8:C5:9D:FC:1C:29:56:51:CA:9B:ED:25:4F:2A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c9:dc:82:a9:7f:ab:7b:fa:bd:be:ac:cc:20:e8:8a:c3:01: 36:4c:85:a6:2b:95:ec:80:02:84:ea:d2:e0:3b:d6:55:be:4c: 46:b0:5d:f8:ba:63:5f:a0:d4:b6:ba:e7:50:5c:59:e6:93:1d: 68:6c:fe:37:6a:42:9b:b3:40:18:f5:ad:8f:90:46:22:db:76: 92:f7:a4:57:a2:b9:98:c1:7a:72:43:ce:e0:8a:4c:2a:21:00: f4:0c:a6:f7:64:e9:95:81:4c:94:96:8c:e8:ac:9d:ff:1a:8b: 34:18:27:78:89:7b:38:c3:64:cb:54:be:1c:88:da:19:a3:48: a6:8c:65:e6:19:47:aa:cf:f7:18:42:22:0e:86:b2:62:1f:25: 99:18:8e:e2:d3:78:93:ee:cc:20:76:41:69:7b:3b:2c:ba:eb: c5:3a:01:d9:f9:fb:48:c4:7f:61:2a:a7:e3:33:fa:15:38:28: 3f:16:6e:82:9c:29:ef:19:68:8c:ec:21:2e:8b:3d:a1:95:2b: bc:d9:a5:ac:d4:1b:19:5c:d1:80:40:5f:b2:b6:18:c8:b3:9b: 7a:6d:9e:ba:88:1c:8f:06:99:60:4a:0c:d8:3b:b1:d5:9d:d9: 29:8b:13:ff:d3:43:80:0f:89:6f:3f:0f:da:67:6f:29:5d:f4: 26:ea:47:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUdvOv+S76aa1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk ZjI1YzViNTMtOTdiZi00ODI1LWJkMTgtMTA5MWJkMGU1MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCZFTQoN6RHW0zFmWr/q7ntnYR8w8EDKL7nT /H1rlia+I9Kw67rCI/9bFhmlcOQOgryhI62TBD4KylHM/snEd+BVcFKTnKmAl5gm 9McHQGYmblov7FCRjPHV7u67Jwls4ukF4Nj4QRSKfT98uvkvU9jMnZMP3ViKydsh 59lWxV4knfSF8c25bol9uaWc/1aEKKQ3T11BOhG3u3eCsPOxrw2XwuTpbzJr2WK1 sgoiYIizLNsCybz/Y/yXXHeCHHMo6EpCFRPIImUGOQZVNwEgkYu0WpgHe3ziniRO iMj9SZkhSIHSNzMaqVFRYBnLYpvY5YaCxa6kOmGEcX6wv1fJ8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAXKlfK56MWd/BwpVlHKm+0lTyqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvNGFkNWJkMjUtOGFmYS00 ZTUwLWJiMDItZjYzMTdlYWM3ZTA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKydyCqX+re/q9vqzMIOiK wwE2TIWmK5XsgAKE6tLgO9ZVvkxGsF34umNfoNS2uudQXFnmkx1obP43akKbs0AY 9a2PkEYi23aS96RXormYwXpyQ87gikwqIQD0DKb3ZOmVgUyUlozorJ3/Gos0GCd4 iXs4w2TLVL4ciNoZo0imjGXmGUeqz/cYQiIOhrJiHyWZGI7i03iT7swgdkFpezss uuvFOgHZ+ftIxH9hKqfjM/oVOCg/Fm6CnCnvGWiM7CEuiz2hlSu82aWs1BsZXNGA QF+ythjIs5t6bZ66iByPBplgSgzYO7HVndkpixP/00OAD4lvPw/aZ28pXfQm6kce -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:58 2025 by rpki-client