$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: ppzbjaqgorW95Qtd2eOa473To9Vm3sJY3scExehZxVA= Subject key identifier: 55:95:74:66:A0:4D:82:CE:95:03:4D:EF:6C:D0:7A:B2:9F:46:E1:23 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584B9229E0953872BA563A3FD040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3393 Signing time: Sun 19 Oct 2025 07:00:03 +0000 Manifest this update: Sun 19 Oct 2025 07:00:03 +0000 Manifest next update: Tue 21 Oct 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: +HumoP+y1kRF/KbtKLXmgaKsyGkfY1ADuS5c+aY+Rf8=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: FO5mMujbhFzt4qbgXqiWIN1/v6mGTR0z5mvh4I9AyJY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:29:e0:95:38:72:ba:56:3a:3f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Oct 19 07:00:03 2025 GMT Not After : Oct 21 07:00:00 2025 GMT Subject: CN=b13cc2ec-b099-4ebd-8dab-870c884c8a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:1c:f6:31:25:f2:06:d2:d5:d8:de:49:ff: ae:53:19:37:0e:00:64:3e:a6:ff:b2:16:aa:37:4a: 89:54:f0:57:84:2c:eb:1e:55:86:43:64:1d:d0:f2: 41:b7:44:7f:4d:a0:99:3b:ff:d1:2e:98:44:f4:47: 07:9a:1e:7a:86:f8:00:41:28:5f:79:99:c4:31:29: d4:3b:c3:30:a9:f1:5d:d6:b5:22:f6:a4:44:b3:98: 4d:12:5b:f0:cf:e3:3e:4a:cb:ee:67:18:8b:38:2b: 58:9c:b2:37:a3:d1:ba:91:80:7f:44:2b:33:fa:15: 1a:ff:51:c6:07:db:98:74:db:3e:d1:28:75:3a:64: ec:bf:24:71:e2:79:5d:6f:43:81:69:4f:88:90:98: 59:5a:13:95:02:17:cc:e1:82:f1:f8:c6:b2:d9:2d: a0:f3:e9:2d:6a:93:90:be:cc:24:9a:c6:60:43:72: ff:1e:30:09:72:ff:16:38:89:1e:67:f9:44:7d:b1: 78:c1:25:2d:5b:66:64:ab:b9:f1:54:29:1c:b3:0d: e9:ec:fa:d6:49:0a:48:31:ab:95:f7:c6:86:39:d5: 39:46:32:ca:39:1d:e2:f2:f1:b2:51:7b:d2:83:9a: 10:5f:d7:58:60:6b:a2:65:89:13:7d:f5:77:f6:68: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:95:74:66:A0:4D:82:CE:95:03:4D:EF:6C:D0:7A:B2:9F:46:E1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f4:d3:1c:cb:82:d8:d9:29:26:9e:aa:05:d3:cf:89:45:4b: ab:ab:3c:9e:42:b1:72:ed:d4:d5:cb:22:36:f9:c8:ca:b1:60: b1:c6:21:e9:88:ed:58:6b:60:a1:88:0f:c2:91:be:eb:d3:ee: 73:48:0a:06:ca:57:28:a8:4c:9e:ea:7c:57:e3:9b:0f:99:a2: 1a:c2:a8:8c:7b:0a:a5:81:07:d0:44:19:58:c7:63:e0:5c:da: 5f:77:a1:ab:9a:13:1b:fe:c5:56:b0:e2:74:2b:56:72:65:74: 90:d7:0d:d1:1a:2d:5b:72:b1:5c:eb:66:25:46:dc:d9:c2:27: 28:1c:44:df:af:67:49:ed:b9:36:40:d0:b9:72:25:89:73:20: 6e:4b:46:94:71:80:c8:7e:eb:b1:83:26:ac:94:4c:9e:31:2a: 87:cd:3b:fa:2b:fc:d7:a8:d5:2e:af:1f:fa:67:41:d0:e9:db: 1e:e4:cb:a0:59:98:77:cf:bb:32:0f:09:a3:e9:67:36:b6:32: 2e:cf:7c:2e:d1:f9:32:df:28:f3:53:c0:cd:70:d8:73:15:1a: a3:d7:9b:a4:08:dd:82:65:6a:3d:6f:3c:9b:7c:b8:a4:18:e5: 41:7b:c3:03:06:71:e5:9f:4e:a1:57:10:52:b4:3e:ef:37:27: 88:b1:0b:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSKeCVOHK6Vjo/0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MTAxOTA3MDAwM1oXDTI1MTAyMTA3MDAwMFowLzEtMCsGA1UEAxMk YjEzY2MyZWMtYjA5OS00ZWJkLThkYWItODcwYzg4NGM4YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyQc9jEl8gbS1djeSf+uUxk3DgBkPqb/shaq N0qJVPBXhCzrHlWGQ2Qd0PJBt0R/TaCZO//RLphE9EcHmh56hvgAQShfeZnEMSnU O8MwqfFd1rUi9qREs5hNElvwz+M+SsvuZxiLOCtYnLI3o9G6kYB/RCsz+hUa/1HG B9uYdNs+0Sh1OmTsvyRx4nldb0OBaU+IkJhZWhOVAhfM4YLx+May2S2g8+ktapOQ vswkmsZgQ3L/HjAJcv8WOIkeZ/lEfbF4wSUtW2Zkq7nxVCkcsw3p7PrWSQpIMauV 98aGOdU5RjLKOR3i8vGyUXvSg5oQX9dYYGuiZYkTffV39mhtRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFWVdGagTYLOlQNN72zQerKfRuEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9NMcy4LY2SkmnqoF08+J RUurqzyeQrFy7dTVyyI2+cjKsWCxxiHpiO1Ya2ChiA/Ckb7r0+5zSAoGylcoqEye 6nxX45sPmaIawqiMewqlgQfQRBlYx2PgXNpfd6GrmhMb/sVWsOJ0K1ZyZXSQ1w3R Gi1bcrFc62YlRtzZwicoHETfr2dJ7bk2QNC5ciWJcyBuS0aUcYDIfuuxgyaslEye MSqHzTv6K/zXqNUurx/6Z0HQ6dse5MugWZh3z7syDwmj6Wc2tjIuz3wu0fky3yjz U8DNcNhzFRqj15ukCN2CZWo9bzybfLikGOVBe8MDBnHln06hVxBStD7vNyeIsQsG -----END CERTIFICATE-----Generated at Mon Oct 20 04:12:08 2025 by rpki-client