$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft File: b8e407d7-863a-439f-a4f2-335e5aac995d.mft (raw, json) Hash identifier: grEpl3nteEYBFnX8TzbmCuUuipCxzMhGpei+K3a69G0= Subject key identifier: C5:D8:E1:25:55:F6:32:05:FA:5E:B3:B9:55:EC:7E:7F:F5:AB:0F:8D Authority key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C Certificate issuer: /CN=b8e407d7-863a-439f-a4f2-335e5aac995d Certificate serial: 010D0C9F4328584BBF887E245563BD5BB22E7880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft Manifest number: 010D0C9F4328584B52B3B9163D8559A7CAD9B0A8 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 53328d6f-6f09-364a-837e-4b73e3ce96f9.roa (hash: 5MsIniMBCIWA7RDt0JzM6rJKVwvANbg02EAUHie2Z0Q=) 2: b8e407d7-863a-439f-a4f2-335e5aac995d.crl (hash: 4/DD21WOR+2br/MU9u4RDQRd4HxYdKTSc19wevnOt4E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7e:24:55:63:bd:5b:b2:2e:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e407d7-863a-439f-a4f2-335e5aac995d Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=19a1c9f3-5a47-4a58-8a3c-bd966d178e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:ba:47:ad:21:ed:ec:b0:57:41:5a:3d:bd: 90:53:a5:d3:d1:22:bb:db:52:b8:8b:d3:ca:a8:cf: a5:1c:cb:d1:b2:e8:c0:0c:25:70:82:d0:78:fe:42: af:11:e3:7e:c1:b0:91:a3:18:c0:23:86:98:0c:16: 79:ae:4a:85:f5:4c:89:28:da:36:79:73:9e:4e:82: b4:f0:2c:34:9a:4a:15:65:de:14:bf:9c:b0:db:44: a1:c8:30:03:38:77:29:4c:ef:1a:c1:7a:0d:c8:a1: a0:49:bc:0a:a6:73:fe:e5:0c:a0:3e:e4:5c:6e:15: 6d:79:e0:fa:a3:c4:71:35:f0:96:19:8d:77:50:83: b2:50:0f:78:42:8c:1c:07:71:b2:be:d0:23:a8:6e: 7b:ba:2b:e1:1f:28:21:dc:22:f3:a2:a8:b6:6d:6d: 49:84:67:68:eb:c4:19:c3:4b:f8:d1:4d:1e:3c:9b: de:6f:39:b2:41:b4:f7:54:77:79:c7:5d:9a:07:ae: f0:1d:e2:12:dc:a1:5e:4a:be:8d:bb:d3:53:e3:34: 9d:b8:d3:0b:9f:12:6f:c5:96:b9:29:cd:d0:56:93: 8b:cd:63:70:10:58:d1:10:36:2b:8f:7b:f6:24:c4: 28:f2:20:91:b7:a0:a7:90:a9:8e:34:39:90:b0:19: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:E1:25:55:F6:32:05:FA:5E:B3:B9:55:EC:7E:7F:F5:AB:0F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl X509v3 Authority Key Identifier: keyid:10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f2:ce:3e:e3:cc:c8:81:6b:37:e3:bc:df:f1:fd:a2:25:44: d3:a1:11:3a:39:80:42:48:0d:72:ac:3a:e6:de:24:b3:53:ca: d1:a6:29:eb:73:ff:5c:05:e3:51:63:2e:39:c3:62:c4:cf:7b: 63:36:cb:a4:93:00:db:aa:ef:b0:9d:94:55:da:50:6e:7d:b5: 0c:6f:15:90:78:f8:4b:95:8c:0f:9e:04:d7:77:40:6c:ba:00: 87:52:cb:61:71:7c:0c:36:a2:dd:f9:e4:06:60:1f:d3:f1:0f: 39:cb:00:b3:08:98:8c:a3:0f:4d:1e:e6:56:b6:27:e8:1b:16: 78:83:8c:52:34:ac:11:64:7e:92:d6:01:ce:47:9c:89:2a:05: 97:6a:38:2f:d7:40:b6:93:fd:e5:b0:49:44:79:23:72:4d:15: 1a:80:1e:d6:de:bd:f5:13:64:49:84:09:05:13:1f:be:38:4d: 1e:9f:5e:4a:ef:ab:4b:2b:bd:4c:32:bd:ec:f9:63:6d:8c:8f: fc:8c:85:98:30:d3:69:09:8d:ac:d4:f6:2b:bd:65:cf:cf:f6: 38:af:ad:8e:80:7d:d2:30:75:5f:5b:98:38:b1:14:aa:10:14: bd:be:0b:a9:2f:84:bd:f5:6a:d6:f8:db:39:6b:88:8f:6c:23: 62:4b:86:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH4kVWO9W7IueIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNDA3ZDctODYzYS00MzlmLWE0ZjItMzM1ZTVhYWM5 OTVkMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk MTlhMWM5ZjMtNWE0Ny00YTU4LThhM2MtYmQ5NjZkMTc4ZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aG6R60h7eywV0FaPb2QU6XT0SK721K4i9PK qM+lHMvRsujADCVwgtB4/kKvEeN+wbCRoxjAI4aYDBZ5rkqF9UyJKNo2eXOeToK0 8Cw0mkoVZd4Uv5yw20ShyDADOHcpTO8awXoNyKGgSbwKpnP+5QygPuRcbhVteeD6 o8RxNfCWGY13UIOyUA94QowcB3GyvtAjqG57uivhHygh3CLzoqi2bW1JhGdo68QZ w0v40U0ePJvebzmyQbT3VHd5x12aB67wHeIS3KFeSr6Nu9NT4zSduNMLnxJvxZa5 Kc3QVpOLzWNwEFjREDYrj3v2JMQo8iCRt6CnkKmONDmQsBlzgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMXY4SVV9jIF+l6zuVXsfn/1qw+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0 MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVlNWFhYzk5NWQvYjhlNDA3ZDctODYzYS00 MzlmLWE0ZjItMzM1ZTVhYWM5OTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjhlNDA3ZDctODYzYS00MzlmLWE0 ZjItMzM1ZTVhYWM5OTVkL2I4ZTQwN2Q3LTg2M2EtNDM5Zi1hNGYyLTMzNWU1YWFj OTk1ZC5jcmwwHwYDVR0jBBgwFoAUECkanr0AHGxz/iC1zNJsuybUBgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVl NWFhYzk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB88s4+48zIgWs347zf8f2i JUTToRE6OYBCSA1yrDrm3iSzU8rRpinrc/9cBeNRYy45w2LEz3tjNsukkwDbqu+w nZRV2lBufbUMbxWQePhLlYwPngTXd0BsugCHUsthcXwMNqLd+eQGYB/T8Q85ywCz CJiMow9NHuZWtifoGxZ4g4xSNKwRZH6S1gHOR5yJKgWXajgv10C2k/3lsElEeSNy TRUagB7W3r31E2RJhAkFEx++OE0en15K76tLK71MMr3s+WNtjI/8jIWYMNNpCY2s 1PYrvWXPz/Y4r62OgH3SMHVfW5g4sRSqEBS9vgupL4S99WrW+Ns5a4iPbCNiS4b9 -----END CERTIFICATE-----Generated at Wed Nov 5 08:45:11 2025 by rpki-client