$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft File: 5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft (raw, json) Hash identifier: tIUdOb4kyoe7FLwUq4kskDCzGaDbkpnijHlwDguWqxk= Subject key identifier: 2C:D0:9A:7C:6F:3B:31:3A:34:AC:3D:82:D7:D8:F5:2E:E0:EB:D9:F1 Authority key identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Certificate issuer: /CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Certificate serial: 010D0C9F4328584BBE7B8021A778635C2FE39800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft Manifest number: 010D0C9F4328584B75FA95FD17C9A91A7358E0DC Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 5370d318-ff79-3160-88d0-fc2272824d2f.roa (hash: aPWKdUmnJBgPsGrVaU5FiPBtVT7iElHARmjokZLsE7o=) 2: 5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl (hash: UfHC6qy3ULLlqvJYkVkHKUUBDnPGeguZS5uVqu5qC0s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:80:21:a7:78:63:5c:2f:e3:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=99a238e0-7254-43fd-ae4e-b05ec7169206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:26:a3:a5:e9:e6:33:9b:81:83:d5:95:b1: 7f:cd:a6:65:52:7a:6e:54:1c:5d:aa:86:93:e4:8e: aa:b5:6c:22:51:e6:ec:6e:af:2f:e1:ef:5e:07:e9: 37:e4:f1:20:a6:d6:32:90:7a:e0:e1:93:06:90:c2: a0:93:80:42:95:cb:97:02:a1:7e:17:a5:8c:02:ed: 0f:3f:4f:01:3e:8c:9a:41:31:88:fa:6a:83:cc:cc: c2:e8:42:b1:cc:d7:58:45:e9:a0:67:df:e7:7f:4c: 18:25:b2:52:9d:84:5f:6d:c0:de:95:90:8e:1b:25: 47:42:7c:4e:7b:4d:4a:41:50:d1:72:0a:a0:b0:a7: 4d:e6:25:c5:bf:0a:9c:81:4d:49:20:73:1c:07:19: cd:65:c7:d2:68:6a:85:9c:d2:b9:c8:b5:42:db:73: 01:5e:df:91:2f:68:fa:26:40:e2:61:cd:43:4e:53: d8:5d:da:34:35:f6:5a:de:b4:ab:77:61:4c:14:a1: c3:cf:2b:69:ab:f1:42:62:c8:53:a5:8f:4f:eb:86: 9a:1c:98:45:98:6f:81:aa:3b:93:2c:68:29:86:49: 94:ce:98:ee:83:d4:bf:e4:59:dc:b1:cc:b0:0b:64: e2:8b:e8:3d:5d:77:6a:33:f6:30:94:d7:82:93:f0: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D0:9A:7C:6F:3B:31:3A:34:AC:3D:82:D7:D8:F5:2E:E0:EB:D9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl X509v3 Authority Key Identifier: keyid:B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ea:3b:b6:db:e2:02:e5:e4:ca:e4:7a:5c:35:d3:bb:3e:be: fc:5a:7d:3f:c6:a0:aa:63:bd:9c:38:93:d5:15:ab:4c:c9:b2: b4:e2:d9:41:f6:88:2e:1b:9a:1f:1c:75:dc:16:a3:7b:e1:55: 1c:b9:ae:c4:32:72:f7:2d:5f:f3:de:df:28:68:e5:76:3d:6e: b3:31:2d:bc:da:79:59:0d:bd:11:1b:cc:c8:80:cd:ba:46:14: 82:75:4f:73:c2:e3:1f:82:15:15:52:ab:dc:54:04:39:a8:c8: 8d:b1:90:38:10:f2:66:52:98:c5:0d:f7:49:99:d0:27:df:2e: 82:57:fb:ba:e2:93:b4:c6:2a:0a:12:ab:d6:e5:c4:d3:66:68: d2:80:7c:87:39:93:c2:8d:55:b4:49:ac:54:2d:7d:50:65:fb: 14:0c:d7:22:8f:82:6f:4a:ad:a5:a0:5d:cb:af:1a:6c:b7:b6: 59:51:ce:33:73:83:a1:30:5f:a5:b0:8b:58:a7:14:2c:1d:bd: 5e:45:e2:ff:13:36:a2:c3:ea:2e:d9:d9:d6:de:bd:b7:54:21: e5:f6:61:86:7b:49:a0:c6:6b:04:dd:1a:02:88:be:42:ae:14: 93:f1:0e:56:26:01:27:6a:b0:eb:77:76:24:bc:a6:25:4b:68: b7:b1:08:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e4Ahp3hjXC/jmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViMjViNmItOGZkZi00OWFhLThiODMtNTk1YTk0ZjQ0 ZjdlMB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk OTlhMjM4ZTAtNzI1NC00M2ZkLWFlNGUtYjA1ZWM3MTY5MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Emo6Xp5jObgYPVlbF/zaZlUnpuVBxdqoaT 5I6qtWwiUebsbq8v4e9eB+k35PEgptYykHrg4ZMGkMKgk4BClcuXAqF+F6WMAu0P P08BPoyaQTGI+mqDzMzC6EKxzNdYRemgZ9/nf0wYJbJSnYRfbcDelZCOGyVHQnxO e01KQVDRcgqgsKdN5iXFvwqcgU1JIHMcBxnNZcfSaGqFnNK5yLVC23MBXt+RL2j6 JkDiYc1DTlPYXdo0NfZa3rSrd2FMFKHDzytpq/FCYshTpY9P64aaHJhFmG+BqjuT LGgphkmUzpjug9S/5FncscywC2Tii+g9XXdqM/YwlNeCk/AgaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCzQmnxvOzE6NKw9gtfY9S7g69nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIy NWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRmNDRmN2UvNWViMjViNmItOGZkZi00 OWFhLThiODMtNTk1YTk0ZjQ0ZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWViMjViNmItOGZkZi00OWFhLThi ODMtNTk1YTk0ZjQ0ZjdlLzVlYjI1YjZiLThmZGYtNDlhYS04YjgzLTU5NWE5NGY0 NGY3ZS5jcmwwHwYDVR0jBBgwFoAUs7NzOmM6yq38yGjeXShecKySNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVh OTRmNDRmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK6ju22+IC5eTK5HpcNdO7 Pr78Wn0/xqCqY72cOJPVFatMybK04tlB9oguG5ofHHXcFqN74VUcua7EMnL3LV/z 3t8oaOV2PW6zMS282nlZDb0RG8zIgM26RhSCdU9zwuMfghUVUqvcVAQ5qMiNsZA4 EPJmUpjFDfdJmdAn3y6CV/u64pO0xioKEqvW5cTTZmjSgHyHOZPCjVW0SaxULX1Q ZfsUDNcij4JvSq2loF3Lrxpst7ZZUc4zc4OhMF+lsItYpxQsHb1eReL/Ezaiw+ou 2dnW3r23VCHl9mGGe0mgxmsE3RoCiL5CrhST8Q5WJgEnarDrd3YkvKYlS2i3sQjs -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:58 2025 by rpki-client