$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft File: d455139a-f627-4743-8284-7fbd2f76dd8b.mft (raw, json) Hash identifier: bT7KvXKQdwsbuXD/BDRCi+qB3Rn3IVNcgnuXIS0zgpo= Subject key identifier: BE:43:C7:0C:D8:2C:EE:C5:E8:B7:83:B6:49:AC:E0:BC:E8:D2:05:B1 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584B91B2D1A9B2E6ECB6B7ECD140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft Manifest number: 010D0C9F4328584073A83A583C0DF001CA2A8476 Signing time: Sun 19 Oct 2025 03:00:08 +0000 Manifest this update: Sun 19 Oct 2025 03:00:08 +0000 Manifest next update: Tue 21 Oct 2025 03:00:00 +0000 Files and hashes: 1: 58c14212-20fe-398a-92cb-4c98613dce46.roa (hash: edZX2jDVQ0OJNk1bmls2Ow4OZNwraJ/SWI6n1XMszW8=) 2: 6c142cb8-b620-3745-8e33-abb1772dfd03.roa (hash: +aam0R/r+NMV7GJ2AnY5MlPOSVcI1dFOyiFScw7MElw=) 3: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (hash: ZlrzMOqE8Q7rQ5wQXISrOcZnltvLQNeoJkmBQXTQC+c=) 4: a474ef21-5145-3424-b8cb-6fe09836be86.roa (hash: TtkkbOKcywND6g2frhZfOeUJeaSeqXOfCUzxDLURGGA=) 5: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (hash: +2v1NgDmZdXA5AmTHlEvdolAG7Ul4enWjnhpj1VxwR4=) 6: d455139a-f627-4743-8284-7fbd2f76dd8b.crl (hash: x2RpX1Li20YkVTfBwqAdVwtUPpZwCSGf4D0yTMROnkM=) 7: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (hash: pusPmFVRFv7mRBCdrnrIoX2cLo+6OfiqkhFEffszf0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:b2:d1:a9:b2:e6:ec:b6:b7:ec:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Oct 19 03:00:08 2025 GMT Not After : Oct 21 03:00:00 2025 GMT Subject: CN=14588510-1f29-4bf4-af65-55183449694c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:fa:89:37:f4:e2:84:d5:89:06:cc:7d:28: 71:33:4b:ed:08:ec:3a:4c:f2:fe:56:28:94:21:5b: 41:fa:c8:13:f9:bf:99:33:06:62:c3:fb:9c:b0:b0: ee:cb:31:25:12:20:44:8a:2c:fc:e7:70:32:f6:70: 9a:a5:94:0c:2b:16:f6:95:6f:59:1a:26:1e:38:6f: 79:de:d7:a6:b4:c3:1c:9c:52:2f:18:b1:78:f1:6c: fa:8d:3e:a9:2b:35:3b:8a:af:36:c6:eb:0a:3c:2a: 59:58:48:c2:e6:54:23:d5:8e:b9:c4:b7:76:48:e0: 13:c1:66:be:da:1a:c0:5e:ee:78:33:4a:16:cf:47: d9:42:4a:3b:35:d1:e0:e3:17:b7:6a:1d:64:80:04: 20:85:22:4e:53:29:8b:72:22:c3:23:7a:e8:13:2b: 05:97:e1:01:7e:c5:d4:5c:83:fd:e5:27:34:0f:6e: 74:ec:a9:c0:85:83:a4:61:13:a1:17:a2:3a:7a:7e: b1:cf:63:fc:6f:11:89:ca:8f:b2:b6:40:29:46:0c: a0:0d:cf:f4:fa:8d:df:ef:aa:25:33:a3:75:82:46: c0:cc:11:29:97:c9:80:58:48:13:06:22:c0:e7:9d: 70:87:aa:87:f4:6a:8d:e0:c4:1e:c7:42:f3:9e:c3: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:C7:0C:D8:2C:EE:C5:E8:B7:83:B6:49:AC:E0:BC:E8:D2:05:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:87:ee:aa:3e:1a:7b:3e:0a:2e:58:b2:48:d9:f3:f9:7b:73: 3e:29:5c:84:c2:de:8c:5b:17:3b:2f:62:19:6b:a8:ad:f1:69: 5f:d8:26:1f:b4:68:b7:ee:3f:08:32:ac:20:18:45:26:c4:6e: 1c:43:a0:6e:dd:41:5e:f8:cf:42:0c:e7:69:e7:55:b2:07:9c: 5e:f3:8e:2d:29:0e:b7:f9:81:98:a4:fd:2f:d8:90:92:76:61: cd:22:51:c9:a4:a0:06:7a:f5:8f:16:76:a8:5d:f3:e9:f4:6e: 67:c8:83:47:c9:2c:1e:f2:29:55:20:2b:20:04:f6:96:75:1d: 2d:e8:80:39:30:16:e8:09:fc:c0:d6:ad:2f:4b:20:cb:39:32: 25:02:a0:81:1e:4d:ef:b1:3d:83:b6:81:90:c7:78:ec:cb:6b: 49:41:92:da:a1:12:e6:20:91:77:fb:8c:ba:c3:54:94:1c:a6: dc:83:c0:c4:c5:96:3c:23:73:f6:d9:53:c0:eb:de:2c:76:26: 4a:f9:82:66:af:6d:67:58:d7:26:a3:f6:c0:ad:a6:84:0a:9f: f8:15:f9:99:da:de:a7:35:08:0d:10:14:e6:94:c2:7d:82:01: f5:84:8d:d9:e2:66:97:36:d8:be:8d:74:04:f8:bf:8a:77:69: a2:12:db:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRstGpsubstrfs0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MTAxOTAzMDAwOFoXDTI1MTAyMTAzMDAwMFowLzEtMCsGA1UEAxMk MTQ1ODg1MTAtMWYyOS00YmY0LWFmNjUtNTUxODM0NDk2OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvD6iTf04oTViQbMfShxM0vtCOw6TPL+ViiU IVtB+sgT+b+ZMwZiw/ucsLDuyzElEiBEiiz853Ay9nCapZQMKxb2lW9ZGiYeOG95 3temtMMcnFIvGLF48Wz6jT6pKzU7iq82xusKPCpZWEjC5lQj1Y65xLd2SOATwWa+ 2hrAXu54M0oWz0fZQko7NdHg4xe3ah1kgAQghSJOUymLciLDI3roEysFl+EBfsXU XIP95Sc0D2507KnAhYOkYROhF6I6en6xz2P8bxGJyo+ytkApRgygDc/0+o3f76ol M6N1gkbAzBEpl8mAWEgTBiLA551wh6qH9GqN4MQex0LznsMAoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5DxwzYLO7F6LeDtkms4Lzo0gWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDQ1NTEzOWEtZjYyNy00 NzQzLTgyODQtN2ZiZDJmNzZkZDhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnh+6qPhp7PgouWLJI2fP5 e3M+KVyEwt6MWxc7L2IZa6it8Wlf2CYftGi37j8IMqwgGEUmxG4cQ6Bu3UFe+M9C DOdp51WyB5xe844tKQ63+YGYpP0v2JCSdmHNIlHJpKAGevWPFnaoXfPp9G5nyINH ySwe8ilVICsgBPaWdR0t6IA5MBboCfzA1q0vSyDLOTIlAqCBHk3vsT2DtoGQx3js y2tJQZLaoRLmIJF3+4y6w1SUHKbcg8DExZY8I3P22VPA694sdiZK+YJmr21nWNcm o/bAraaECp/4FfmZ2t6nNQgNEBTmlMJ9ggH1hI3Z4maXNti+jXQE+L+Kd2miEtup -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:27 2025 by rpki-client