$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft File: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft (raw, json) Hash identifier: yHnmVu/YZa/6RJM0TW6RSMhG+V6xX+r1aNCU43+t61M= Subject key identifier: 03:3E:0D:62:53:40:DE:FC:B6:12:AD:DB:D6:E6:C1:77:12:57:3E:24 Authority key identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 Certificate issuer: /CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Certificate serial: 010D0C9F4328584BBFC312527D2955F82FA07760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft Manifest number: 010D0C9F4328584A8CC4A9824E40400F2C2AA251 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa (hash: e/uNI5LXyk/ZQUvHsIOEIi+2SriizihYcMYpt/jdM2k=) 2: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl (hash: hBv0nu0U6LWypjn3BSQjbw3GLrhRAuXqJbm9Px6ZdSM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:12:52:7d:29:55:f8:2f:a0:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=39b2bb6c-9853-4f3b-be23-6acecb6e2f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:49:87:9e:6f:3d:5f:c7:05:76:64:97:64: 90:4b:cb:7d:81:c0:cd:fe:d6:0f:98:73:27:be:4a: d6:c6:27:03:02:82:3d:ff:4d:71:67:aa:33:d1:ed: 33:1c:e3:45:f6:6c:37:5b:1d:f9:d0:05:33:b5:9a: 34:c7:14:a3:b3:e9:59:9a:b8:1c:8d:49:46:d0:af: d3:57:48:34:3f:a9:41:30:4d:d9:99:d1:5f:9a:40: 8a:7a:33:d6:9a:74:3c:80:ce:82:c6:cb:3b:ba:06: d2:02:8b:99:a6:10:3e:53:ca:63:11:60:99:e0:3f: 9a:52:04:23:a4:12:12:60:6a:92:c5:6a:24:cd:d2: 72:fd:5d:1d:aa:2b:94:22:d0:c5:34:13:13:29:74: 16:85:83:54:a2:40:01:04:f0:36:2e:1a:23:81:61: 75:3d:9b:af:56:a1:3b:17:b1:2a:97:ba:d8:75:36: eb:9c:24:ac:89:17:22:2b:70:a9:1c:0a:75:c1:59: 87:1a:de:b2:51:fd:46:31:57:ba:fe:af:1b:ce:41: 36:71:5f:9b:e0:34:03:22:6a:4e:9a:35:0e:eb:55: 47:03:88:60:bd:9c:c3:2d:5c:3a:be:8f:cb:bd:46: 3d:f0:ef:20:ce:6c:fb:f9:57:ae:a0:ce:e5:31:e9: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3E:0D:62:53:40:DE:FC:B6:12:AD:DB:D6:E6:C1:77:12:57:3E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl X509v3 Authority Key Identifier: keyid:0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a4:8a:eb:3e:fe:12:62:d1:ad:ef:d5:9b:dd:8b:42:98:e3: 25:58:5d:74:dd:8d:cc:93:93:de:64:c8:b9:b0:db:f3:39:3b: df:d2:da:c3:fe:9f:4e:af:b7:98:c3:55:ab:2a:9b:be:41:cf: 28:5e:e3:fc:ec:2a:7e:e3:1e:8b:1f:f0:0f:76:3c:70:10:e7: d0:7f:fe:f5:4a:17:b3:dd:27:dc:e9:f1:3d:3e:27:dd:99:72: 70:0d:50:29:aa:9d:45:d5:01:e7:89:15:39:67:bb:78:69:61: e4:2c:c5:8e:21:24:87:80:f3:59:34:7b:7e:4a:1b:c6:b3:e4: 48:c1:f6:80:67:dc:04:e7:65:c4:de:05:57:f6:66:18:72:bd: ef:8c:c0:b9:8c:ef:ef:2b:99:91:6d:49:da:21:d3:3a:c7:af: d1:d7:52:4f:a3:ee:0c:8d:c7:d8:e3:a1:12:e5:82:7d:18:77: d0:40:6b:fc:9b:d0:4e:22:2b:0f:c4:0e:31:66:fa:92:76:16: 2f:22:b5:42:0c:4a:1b:ff:9e:e1:f8:13:b0:f7:52:30:fb:63: 7b:74:a0:5d:97:75:24:bf:ca:8d:66:c6:30:aa:8a:fd:17:d3: 79:29:6d:0c:bc:1e:df:ac:77:8b:90:07:af:66:c4:6f:41:23: 91:60:10:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxJSfSlV+C+gd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZhOTk0NTAtOTRiOC00YTBlLWJlNTMtOGNlN2Y4OGQ1 MWRiMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk MzliMmJiNmMtOTg1My00ZjNiLWJlMjMtNmFjZWNiNmUyZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogFJh55vPV/HBXZkl2SQS8t9gcDN/tYPmHMn vkrWxicDAoI9/01xZ6oz0e0zHONF9mw3Wx350AUztZo0xxSjs+lZmrgcjUlG0K/T V0g0P6lBME3ZmdFfmkCKejPWmnQ8gM6Cxss7ugbSAouZphA+U8pjEWCZ4D+aUgQj pBISYGqSxWokzdJy/V0dqiuUItDFNBMTKXQWhYNUokABBPA2LhojgWF1PZuvVqE7 F7Eql7rYdTbrnCSsiRciK3CpHAp1wVmHGt6yUf1GMVe6/q8bzkE2cV+b4DQDImpO mjUO61VHA4hgvZzDLVw6vo/LvUY98O8gzmz7+VeuoM7lMel7qwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAM+DWJTQN78thKt29bmwXcSVz4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5 OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3Zjg4ZDUxZGIvMmZhOTk0NTAtOTRiOC00 YTBlLWJlNTMtOGNlN2Y4OGQ1MWRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmZhOTk0NTAtOTRiOC00YTBlLWJl NTMtOGNlN2Y4OGQ1MWRiLzJmYTk5NDUwLTk0YjgtNGEwZS1iZTUzLThjZTdmODhk NTFkYi5jcmwwHwYDVR0jBBgwFoAUDemiOjwZFwjumwlBKWaBcMviDzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3 Zjg4ZDUxZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfpIrrPv4SYtGt79Wb3YtC mOMlWF103Y3Mk5PeZMi5sNvzOTvf0trD/p9Or7eYw1WrKpu+Qc8oXuP87Cp+4x6L H/APdjxwEOfQf/71Shez3Sfc6fE9PifdmXJwDVApqp1F1QHniRU5Z7t4aWHkLMWO ISSHgPNZNHt+ShvGs+RIwfaAZ9wE52XE3gVX9mYYcr3vjMC5jO/vK5mRbUnaIdM6 x6/R11JPo+4MjcfY46ES5YJ9GHfQQGv8m9BOIisPxA4xZvqSdhYvIrVCDEob/57h +BOw91Iw+2N7dKBdl3Ukv8qNZsYwqor9F9N5KW0MvB7frHeLkAevZsRvQSORYBDE -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:08 2025 by rpki-client