$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft File: f0ba84c0-5d44-4547-a368-e574b20611e4.mft (raw, json) Hash identifier: z1330ysCgjq5iVmIIPCEQleGxUDcOov19snvZt8Youo= Subject key identifier: 5C:F6:19:C7:1C:8C:9F:7F:D5:F0:81:4D:DE:1C:5F:76:32:94:0D:BF Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584B9265700F9D8C0691AE7F079E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft Manifest number: 010D0C9F4328584073A84A8F170EC439FD54A282 Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Tue 21 Oct 2025 09:00:00 +0000 Files and hashes: 1: f0ba84c0-5d44-4547-a368-e574b20611e4.crl (hash: 5gJGlf1444cnXpYb4fCAwnkCpQJxBF2tADQN9NMf/5E=) 2: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (hash: DslSFJUg7vk3v0aMzu3qZl2hhGbTuFny1xA00Kf7ogU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:70:0f:9d:8c:06:91:ae:7f:07:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 21 09:00:00 2025 GMT Subject: CN=0950bee4-f20e-4d0b-b572-4e8bad3fdc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:ae:aa:8e:05:f1:9b:62:5b:a1:79:a5:84: d1:24:a0:fb:5c:c0:ec:e6:83:b8:4c:34:c1:ee:21: 59:23:0d:99:80:3b:43:bb:62:7a:34:77:ed:85:10: bd:ea:13:69:12:e6:b4:83:16:c9:51:c3:38:75:df: cd:bb:d3:9c:85:33:71:e6:cf:5f:e3:df:b0:73:4a: a3:37:a4:4a:63:76:13:1b:89:48:6b:a0:0a:38:cf: e1:d0:1a:a4:2b:4a:d8:fd:7a:96:83:47:dc:e8:89: 67:6d:ee:6c:02:26:87:c0:08:9b:33:73:cb:9e:a6: ae:bb:5e:93:f2:5a:0e:dd:e4:ed:3c:e2:bf:53:53: 89:f3:cc:15:c5:a2:14:a4:5c:b1:47:ee:c4:7f:86: f2:01:2b:47:28:9f:a3:03:bc:45:90:0f:18:87:7e: 28:44:23:ac:0f:ff:aa:8a:f5:a8:25:ac:1f:81:b8: bf:f6:56:fe:bf:90:f6:30:18:ef:42:4d:4f:22:5d: 09:60:2a:0b:d9:44:58:f6:ee:a2:aa:9a:38:8f:c8: 22:5c:c2:47:cd:1f:a5:2a:96:46:7f:fc:47:d3:bb: f3:94:a0:37:48:fd:6c:e5:fc:96:db:af:63:f3:c9: 3e:27:7b:a6:78:99:10:79:9a:b2:37:1e:5a:99:59: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:19:C7:1C:8C:9F:7F:D5:F0:81:4D:DE:1C:5F:76:32:94:0D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f5:6e:00:72:17:40:d3:2f:5b:fd:3a:d2:e9:b0:04:92:39: 4b:18:09:69:8e:ec:99:1a:34:27:76:b3:84:32:e1:3e:8f:b2: df:8d:53:5c:ac:93:c7:22:56:06:20:02:be:cb:11:3a:e2:82: 7f:3a:93:46:41:7e:6c:c3:99:18:68:e4:ea:77:23:3d:64:25: 0e:79:55:54:e3:39:16:5d:61:d4:6d:c4:92:a4:58:25:2c:02: 1d:4b:c5:3a:c7:17:e3:76:46:63:d6:87:6d:9c:c7:18:a7:fa: 94:d5:99:fc:76:4a:3a:2e:3b:9e:56:a7:85:7f:db:a6:ea:d4: 82:b1:43:c1:29:b3:a9:9e:87:8a:a7:f5:d6:88:65:41:6e:a4: ce:48:92:3d:1a:ab:0e:58:1b:0f:9c:f9:79:d2:18:be:f1:a2: db:6b:e2:66:57:8c:76:16:87:68:09:03:92:54:a6:90:1a:b2: ad:73:cf:9f:27:20:96:7c:8f:24:10:99:8c:29:e5:dd:19:0b: 1f:77:3f:df:0b:50:ce:ac:78:0c:94:6d:74:63:a3:79:3d:92: 19:31:a3:d0:1b:63:96:43:2d:3e:8a:84:38:60:c8:f3:3d:4a: aa:30:68:96:00:da:37:4e:41:4b:3f:59:1c:55:69:24:f6:bc: 10:9b:78:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZXAPnYwGka5/B54wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMTA5MDAwMFowLzEtMCsGA1UEAxMk MDk1MGJlZTQtZjIwZS00ZDBiLWI1NzItNGU4YmFkM2ZkYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+uuqo4F8ZtiW6F5pYTRJKD7XMDs5oO4TDTB 7iFZIw2ZgDtDu2J6NHfthRC96hNpEua0gxbJUcM4dd/Nu9OchTNx5s9f49+wc0qj N6RKY3YTG4lIa6AKOM/h0BqkK0rY/XqWg0fc6Ilnbe5sAiaHwAibM3PLnqauu16T 8loO3eTtPOK/U1OJ88wVxaIUpFyxR+7Ef4byAStHKJ+jA7xFkA8Yh34oRCOsD/+q ivWoJawfgbi/9lb+v5D2MBjvQk1PIl0JYCoL2URY9u6iqpo4j8giXMJHzR+lKpZG f/xH07vzlKA3SP1s5fyW269j88k+J3umeJkQeZqyNx5amVn8+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFz2GcccjJ9/1fCBTd4cX3YylA2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjBiYTg0YzAtNWQ0NC00 NTQ3LWEzNjgtZTU3NGIyMDYxMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA79W4AchdA0y9b/TrS6bAE kjlLGAlpjuyZGjQndrOEMuE+j7LfjVNcrJPHIlYGIAK+yxE64oJ/OpNGQX5sw5kY aOTqdyM9ZCUOeVVU4zkWXWHUbcSSpFglLAIdS8U6xxfjdkZj1odtnMcYp/qU1Zn8 dko6LjueVqeFf9um6tSCsUPBKbOpnoeKp/XWiGVBbqTOSJI9GqsOWBsPnPl50hi+ 8aLba+JmV4x2FodoCQOSVKaQGrKtc8+fJyCWfI8kEJmMKeXdGQsfdz/fC1DOrHgM lG10Y6N5PZIZMaPQG2OWQy0+ioQ4YMjzPUqqMGiWANo3TkFLP1kcVWkk9rwQm3i4 -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:28 2025 by rpki-client