$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.mft (raw, json) Hash identifier: tbBSbr1W91q8pp96GrC6084y0QbnV59B54wl8VOJqJQ= Subject key identifier: 79:03:5E:12:F6:15:D1:9F:FB:A0:DD:31:72:77:7A:AD:E8:1E:FA:D1 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584B94F492C97BADE6CF11AF4880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft Manifest number: 010D0C9F4328584073A843E7CFB37A94E46CACED Signing time: Mon 20 Oct 2025 07:00:03 +0000 Manifest this update: Mon 20 Oct 2025 07:00:03 +0000 Manifest next update: Thu 23 Oct 2025 07:00:00 +0000 Files and hashes: 1: 1a8794d9-eb16-4b3c-b869-96971b72a93b.crl (hash: Mo2qTRn5UXTrtt09Cje5WX39waTgOartDgx1az1URPo=) 2: 67aa11e0-08b1-3729-8732-afed74543a62.roa (hash: 5Uusffg/UiiqogW6/WuexfBJi//x6Pvv8gO46WjB5is=) 3: b529d2af-47b9-3c02-92c0-0e879bd78302.roa (hash: QMtQhXrw3DdJ+o5EDeIAL6T8k8X8dOmScQKW6uUX2Lo=) 4: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (hash: aSQjNRGEo7oFfERSF7joyay7m2e4FMGJuiicY3gN4Pw=) 5: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (hash: swN5En91W6Mxmr4eA/Pv4IfnlGQ9jv989w3ba9jLLNc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:f4:92:c9:7b:ad:e6:cf:11:af:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Oct 20 07:00:03 2025 GMT Not After : Oct 23 07:00:00 2025 GMT Subject: CN=bb31e82b-4747-428b-8fd3-6c588dd97775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:25:92:d7:b0:a6:e9:da:b2:ef:cd:3f:11: a0:62:ee:67:a4:19:7d:f1:2f:23:f1:f1:5a:c5:3f: 3b:59:76:3a:5b:be:a6:57:38:81:9c:35:db:1e:60: 46:15:01:a6:fa:d4:16:6e:dd:e1:76:3b:39:3f:50: cb:0c:1b:ef:5d:00:fa:41:d5:8c:1b:f7:7d:de:2e: 73:2e:cf:af:26:64:4b:6f:39:c0:6a:16:1b:91:9c: 04:99:4c:bd:46:36:eb:18:78:a1:9f:8b:4e:21:41: 48:1e:cf:9c:25:88:fe:d2:c8:8d:f1:38:4f:e1:df: c8:95:71:aa:6f:93:ad:b0:c3:3f:1e:14:e7:2d:b0: 18:b4:6c:f8:21:81:00:46:aa:29:f2:60:12:33:db: 32:a2:59:a5:ca:65:35:60:37:19:c7:1e:0b:c3:f4: 8b:1f:0a:a0:8e:7e:fb:af:91:5e:d6:2b:70:c7:d5: 65:92:16:b2:d9:9c:d8:b2:5e:f7:fb:bf:15:8a:83: b0:97:6c:f3:93:72:55:d4:bb:3a:e3:bf:e8:d4:d9: cb:60:05:9b:c6:89:6b:1b:37:41:b9:98:2e:42:85: 3c:f6:32:91:ae:3f:d2:bd:f1:0b:23:e7:ba:22:24: b5:7e:8c:b5:ff:92:bd:54:a6:31:f9:a8:f0:8e:f9: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:03:5E:12:F6:15:D1:9F:FB:A0:DD:31:72:77:7A:AD:E8:1E:FA:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e4:02:24:90:28:cc:65:6d:5a:00:7b:d7:11:13:f1:87:ea: 26:c1:2d:28:64:b1:01:a8:96:5f:79:95:73:83:46:60:c1:85: ac:8b:1b:82:fe:fe:ac:f2:07:c6:e1:1f:ae:c2:85:2c:48:5d: b5:56:3e:16:c2:14:36:ec:8a:53:14:c1:34:b8:be:18:d2:ca: 2d:11:72:ed:1a:1f:43:34:37:9d:4f:18:11:9a:45:56:16:99: 07:24:01:16:01:18:62:5d:5e:4a:a1:6e:9f:df:02:c1:b0:bd: 69:c2:48:3d:61:bb:9c:ec:ca:14:57:33:35:31:f1:5f:f5:46: cf:4b:ac:2c:7a:b2:5e:18:a8:c3:78:de:a0:74:b9:27:3c:ad: ed:3d:af:90:31:14:07:e0:38:83:cd:13:20:d9:58:f9:df:ff: c9:e7:33:76:52:e2:4d:7c:fa:1d:9e:f3:24:e4:3e:bf:92:af: 01:0f:a5:3e:35:3a:38:9d:50:06:e7:14:d5:74:12:2f:d9:a3: 38:d0:6b:d2:0e:c4:ed:75:74:ae:3d:2c:d0:78:2b:00:5d:86: 23:f6:dd:25:22:62:fc:84:7d:41:46:c1:b9:19:97:b5:e7:8e: 1a:d2:80:61:4e:62:a7:a5:13:eb:2e:57:2e:bf:eb:0e:f1:64: ff:4a:f0:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU9JLJe63mzxGvSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MTAyMDA3MDAwM1oXDTI1MTAyMzA3MDAwMFowLzEtMCsGA1UEAxMk YmIzMWU4MmItNDc0Ny00MjhiLThmZDMtNmM1ODhkZDk3Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPwlktewpunasu/NPxGgYu5npBl98S8j8fFa xT87WXY6W76mVziBnDXbHmBGFQGm+tQWbt3hdjs5P1DLDBvvXQD6QdWMG/d93i5z Ls+vJmRLbznAahYbkZwEmUy9RjbrGHihn4tOIUFIHs+cJYj+0siN8ThP4d/IlXGq b5OtsMM/HhTnLbAYtGz4IYEARqop8mASM9syolmlymU1YDcZxx4Lw/SLHwqgjn77 r5Fe1itwx9Vlkhay2ZzYsl73+78VioOwl2zzk3JV1Ls647/o1NnLYAWbxolrGzdB uZguQoU89jKRrj/SvfELI+e6IiS1foy1/5K9VKYx+ajwjvmSowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHkDXhL2FdGf+6DdMXJ3eq3oHvrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMWE4Nzk0ZDktZWIxNi00 YjNjLWI4NjktOTY5NzFiNzJhOTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr5AIkkCjMZW1aAHvXERPx h+omwS0oZLEBqJZfeZVzg0ZgwYWsixuC/v6s8gfG4R+uwoUsSF21Vj4WwhQ27IpT FME0uL4Y0sotEXLtGh9DNDedTxgRmkVWFpkHJAEWARhiXV5KoW6f3wLBsL1pwkg9 Ybuc7MoUVzM1MfFf9UbPS6wserJeGKjDeN6gdLknPK3tPa+QMRQH4DiDzRMg2Vj5 3//J5zN2UuJNfPodnvMk5D6/kq8BD6U+NTo4nVAG5xTVdBIv2aM40GvSDsTtdXSu PSzQeCsAXYYj9t0lImL8hH1BRsG5GZe1544a0oBhTmKnpRPrLlcuv+sO8WT/SvC7 -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:50 2025 by rpki-client