$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: 1w4CxUuGKSLpha45NLVRT4SoLww7JFtLeFj6y7nqeuw= Subject key identifier: BF:E3:89:4D:F7:19:22:BD:36:68:9E:77:1E:12:70:B1:0B:EB:68:4D Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584B92DC8CEF109C7FC6B0FD6580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11BD3 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: 2We7IJCneOXj5JL9p8TCYLUbFpiXjNTcoP/GU1j1W/Y=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: SqFbnmlkAp8fA9rKCFmW4JR/pA+yC7Lkr0KoEunvYYI=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: QPdNWr3FiAhyNmcaU87JL/8SnojxpmKL3ltTU+tJmoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8c:ef:10:9c:7f:c6:b0:fd:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=0a749eae-3e74-4ba0-a62c-c635b5d758bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:a4:4f:db:10:8b:c7:80:5b:32:e2:ba:61: d3:f5:4d:83:58:0f:2c:3c:ef:a9:cc:d3:16:66:9f: 32:4f:c8:04:64:c7:1f:e7:77:50:c7:be:3d:e5:b5: 6e:25:a9:49:9f:34:09:c0:03:3b:50:0a:8b:0b:d7: 57:54:b4:94:a8:f5:4f:85:83:33:ac:f8:50:7e:91: 16:35:76:56:a8:64:f8:b4:67:14:b7:26:f4:91:2a: 6c:c0:80:83:63:07:72:c7:18:c7:70:30:bb:ca:3a: 07:58:74:6f:34:cd:a1:8f:19:26:99:81:7a:01:bc: 2b:e0:a4:98:65:13:0a:00:64:76:c9:3d:64:c3:c2: 4c:05:20:02:8e:c3:29:33:87:aa:6a:02:8e:50:91: d3:83:11:8b:cc:07:25:20:29:13:7f:d7:82:21:f2: af:e0:ae:55:35:cb:f0:3e:a4:2d:e2:4b:6d:68:e0: 1d:3e:62:19:e1:dd:d1:0a:b1:67:1c:0e:67:6d:bc: 38:84:8f:05:55:16:2e:37:55:f9:cb:7b:75:b9:39: 49:54:ad:f8:e1:c9:7b:86:43:ba:10:d4:5c:10:f2: e7:ff:e1:f8:7e:91:5f:e5:17:00:94:54:45:03:d3: 1d:81:7c:7f:24:ae:cf:d6:81:d0:b0:7f:6c:72:ae: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:89:4D:F7:19:22:BD:36:68:9E:77:1E:12:70:B1:0B:EB:68:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9f:c9:84:f4:c3:49:7d:1c:d6:a8:91:ac:21:fb:25:21:f8: 5f:e0:81:ba:2a:d8:0e:de:de:01:76:91:27:67:44:d8:52:1f: 74:c7:b7:76:9c:87:64:4c:1b:86:e0:1d:bf:ca:ee:80:e9:5e: e5:53:3c:32:42:a6:e2:11:c7:de:a2:02:aa:df:32:36:de:9e: b9:e8:bd:83:dc:bc:df:f2:12:ab:29:0c:9f:98:66:fb:69:d7: 0d:43:18:90:db:a7:33:53:88:48:67:0f:e2:cd:be:e3:97:4e: ce:43:6e:85:c5:b4:a3:0b:f4:3f:0c:79:72:22:71:b1:c1:ef: c5:58:57:86:7c:58:8e:3b:95:88:ad:84:b3:83:b4:78:d4:45: 1b:bb:2a:9b:7c:41:15:8f:9c:a5:1f:55:5e:0b:02:72:85:f4: 12:22:ee:df:21:2d:d7:5f:59:32:4c:a2:f4:cf:b6:76:5d:18: 4e:1d:8e:4f:30:6e:db:e4:4b:c9:3b:d1:97:25:83:cc:b1:39: c0:67:4a:4b:e1:44:ed:ed:c0:c4:ba:f0:59:53:e4:43:75:03: ce:c2:49:83:ef:e5:44:1e:b2:03:6c:98:c3:a8:27:2b:24:ad: 9b:55:74:f6:85:ad:a2:af:c1:95:e9:e7:13:eb:ee:a4:5b:9a: ad:88:01:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3IzvEJx/xrD9ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk MGE3NDllYWUtM2U3NC00YmEwLWE2MmMtYzYzNWI1ZDc1OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DmkT9sQi8eAWzLiumHT9U2DWA8sPO+pzNMW Zp8yT8gEZMcf53dQx7495bVuJalJnzQJwAM7UAqLC9dXVLSUqPVPhYMzrPhQfpEW NXZWqGT4tGcUtyb0kSpswICDYwdyxxjHcDC7yjoHWHRvNM2hjxkmmYF6Abwr4KSY ZRMKAGR2yT1kw8JMBSACjsMpM4eqagKOUJHTgxGLzAclICkTf9eCIfKv4K5VNcvw PqQt4kttaOAdPmIZ4d3RCrFnHA5nbbw4hI8FVRYuN1X5y3t1uTlJVK344cl7hkO6 ENRcEPLn/+H4fpFf5RcAlFRFA9MdgXx/JK7P1oHQsH9scq5tVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL/jiU33GSK9Nmiedx4ScLEL62hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBin8mE9MNJfRzWqJGsIfsl Ifhf4IG6KtgO3t4BdpEnZ0TYUh90x7d2nIdkTBuG4B2/yu6A6V7lUzwyQqbiEcfe ogKq3zI23p656L2D3Lzf8hKrKQyfmGb7adcNQxiQ26czU4hIZw/izb7jl07OQ26F xbSjC/Q/DHlyInGxwe/FWFeGfFiOO5WIrYSzg7R41EUbuyqbfEEVj5ylH1VeCwJy hfQSIu7fIS3XX1kyTKL0z7Z2XRhOHY5PMG7b5EvJO9GXJYPMsTnAZ0pL4UTt7cDE uvBZU+RDdQPOwkmD7+VEHrIDbJjDqCcrJK2bVXT2ha2ir8GV6ecT6+6kW5qtiAHu -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:38 2025 by rpki-client