$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: xxWPHQUtngzrQ4JP6TDX0T3A/zF0nFrJlmrReMubg9k= Subject key identifier: 22:57:FD:A3:54:95:A7:2D:57:08:28:3B:23:AE:89:4A:DC:72:7C:75 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584BC1BD572E454E70404BE81390 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43EAE Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: j0c0UtB+MelJXNrh2Rr58Pu+leZ4mX64VTJgoyWH09w=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: FNhn8EeQkxvzbthm034xoy11xKV1e5y7PNd3BGX5WQs=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: FDvOgOBbWU45sGop4gnVk4h4l4HSZvj1DNvKiNAMIvU=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: XlWgSCZ46gCWeaJbUoNW/DlKeSJtC5vPHgUEK0pXJ+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:57:2e:45:4e:70:40:4b:e8:13:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=1b950dc1-dcb3-45e1-afce-a909070351ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:92:98:49:ff:dd:17:55:ce:29:21:23:f0: 74:19:85:c3:3e:8b:d6:e1:a7:25:1e:a4:74:64:f4: db:41:20:1f:d4:3c:35:44:50:7a:cf:fd:ea:70:96: e3:a6:bd:a8:6d:9b:3a:62:e6:f8:f8:81:58:3c:c6: 95:e1:70:ad:bc:e5:e4:d4:72:23:35:c2:44:c3:5d: e8:02:d4:f0:15:b5:78:38:b1:e3:82:3f:59:d2:d9: 50:48:df:04:52:c6:77:42:24:85:88:4e:87:cf:39: cd:6e:25:4c:64:05:b4:fb:21:5f:19:b4:18:7d:6a: 5d:c4:1e:d0:79:ca:d3:9d:ae:3f:63:01:21:41:fc: b2:c8:77:b4:3d:83:37:1c:22:85:c2:90:1d:af:c3: b0:b7:3f:72:4d:dc:d3:0b:37:0f:61:0b:69:e6:34: 99:c5:30:e0:66:cd:8d:92:77:40:f7:a1:6d:e6:81: 86:94:e2:12:e3:a2:26:4d:c8:be:0f:c0:d3:c2:16: 14:d0:19:09:d2:e8:9b:16:aa:a8:1e:f9:cc:8a:88: de:e3:d0:76:2b:6c:c7:8f:de:c1:d8:23:a8:58:8f: 0c:4a:43:15:b5:08:06:73:ac:b2:4f:19:02:e3:7b: 21:ba:eb:b6:3d:25:7d:dc:9f:fc:35:2f:54:82:25: 5f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:57:FD:A3:54:95:A7:2D:57:08:28:3B:23:AE:89:4A:DC:72:7C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:42:4e:36:81:36:8e:38:84:bf:34:d8:da:68:d1:82:81:61: 62:6a:f2:67:a9:18:ab:93:c8:4d:1e:1f:ab:fe:f0:0b:34:60: 25:5b:fe:32:28:57:67:ca:40:45:18:69:0b:05:0e:f2:85:7f: 8d:30:ba:72:2d:e2:0d:38:34:07:92:5f:9b:47:e8:c6:29:db: 07:3f:b6:28:8f:f7:6f:a1:29:8b:a3:3f:5d:34:2a:a2:d7:c7: d7:dc:92:8f:df:1c:1e:4a:9c:d4:39:b1:9a:3b:d0:4d:dc:5c: 92:c5:59:95:cb:35:b1:a0:6a:d4:b7:75:a4:7a:21:b9:08:be: fa:56:da:ac:33:3d:1a:d2:9c:bf:4a:55:86:b6:6f:2e:d6:20: 93:09:88:de:6d:ad:b6:b1:c3:a4:88:f3:da:e2:07:7b:3e:fe: ee:b5:1e:0f:9d:ef:3e:98:44:b0:f6:fb:76:95:be:e0:6a:12: c9:62:1c:10:b2:1f:3d:b9:7d:d3:51:df:2d:b2:0d:15:5e:c2: d6:aa:74:81:42:8d:d8:52:c2:f2:46:fb:00:e7:ee:38:c3:4c: a1:17:66:6b:25:6b:ff:f2:a5:b0:1d:64:8d:74:cc:2f:ab:fe: 6c:56:0a:ef:dc:53:83:ec:e8:a1:7f:11:20:ee:5d:eb:24:d8: 51:b7:58:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVcuRU5wQEvoE5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk MWI5NTBkYzEtZGNiMy00NWUxLWFmY2UtYTkwOTA3MDM1MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEySmEn/3RdVzikhI/B0GYXDPovW4aclHqR0 ZPTbQSAf1Dw1RFB6z/3qcJbjpr2obZs6Yub4+IFYPMaV4XCtvOXk1HIjNcJEw13o AtTwFbV4OLHjgj9Z0tlQSN8EUsZ3QiSFiE6HzznNbiVMZAW0+yFfGbQYfWpdxB7Q ecrTna4/YwEhQfyyyHe0PYM3HCKFwpAdr8Owtz9yTdzTCzcPYQtp5jSZxTDgZs2N kndA96Ft5oGGlOIS46ImTci+D8DTwhYU0BkJ0uibFqqoHvnMioje49B2K2zHj97B 2COoWI8MSkMVtQgGc6yyTxkC43shuuu2PSV93J/8NS9UgiVfFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJX/aNUlactVwgoOyOuiUrccnx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGQk42gTaOOIS/NNjaaNGC gWFiavJnqRirk8hNHh+r/vALNGAlW/4yKFdnykBFGGkLBQ7yhX+NMLpyLeINODQH kl+bR+jGKdsHP7Yoj/dvoSmLoz9dNCqi18fX3JKP3xweSpzUObGaO9BN3FySxVmV yzWxoGrUt3WkeiG5CL76VtqsMz0a0py/SlWGtm8u1iCTCYjeba22scOkiPPa4gd7 Pv7utR4Pne8+mESw9vt2lb7gahLJYhwQsh89uX3TUd8tsg0VXsLWqnSBQo3YUsLy RvsA5+44w0yhF2ZrJWv/8qWwHWSNdMwvq/5sVgrv3FOD7OihfxEg7l3rJNhRt1jP -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:23 2025 by rpki-client