$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft File: d886f3a2-7325-4b74-8802-19528a9f380c.mft (raw, json) Hash identifier: dEoATNfeYipLQ6sOnoZFK86W+AUwxXJGu9nkKKq1F8I= Subject key identifier: 16:9E:F9:48:08:42:67:4F:63:E2:33:10:88:EB:FD:F2:6C:E4:84:CD Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584B92FA55015C57220668F4A440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft Manifest number: 010D0C9F432858421E942BC6BDF40AE91C1CC083 Signing time: Sun 19 Oct 2025 14:00:03 +0000 Manifest this update: Sun 19 Oct 2025 14:00:03 +0000 Manifest next update: Tue 21 Oct 2025 14:00:00 +0000 Files and hashes: 1: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (hash: nCLN3kRfwP86etwGlLMWmamL4d4cQSbpfOog8U3enp0=) 2: d886f3a2-7325-4b74-8802-19528a9f380c.crl (hash: br9Y+HFSoz0V8Yom2n8VuGJVRdVq2sJ6RnPE3msU3OU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:fa:55:01:5c:57:22:06:68:f4:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Oct 19 14:00:03 2025 GMT Not After : Oct 21 14:00:00 2025 GMT Subject: CN=e348535e-c0de-41ac-8e85-23824fdd2612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:fc:60:01:01:f7:f9:db:4f:ee:ba:01:f2: 07:e6:e1:01:2f:c9:c0:8f:3e:a4:e8:2b:16:f7:9a: ff:13:e7:0e:96:de:e9:94:f9:ef:f7:35:f8:30:80: 11:fd:68:db:02:5d:2f:f2:88:0f:e3:bb:98:2b:d0: 57:92:39:02:fe:3a:52:97:3b:90:1a:1a:b2:5f:2a: c6:96:a3:21:cf:ee:94:bd:30:98:e9:9d:21:d1:07: 22:40:69:c9:71:68:c5:f0:7b:8c:16:0a:f6:dd:b8: c2:25:29:88:fa:ea:9c:0a:ca:1d:73:d9:ab:ad:fb: b1:54:b8:74:95:38:67:82:b2:05:b2:82:6d:f1:db: 79:3b:77:cc:ad:e9:25:6d:6c:56:2c:d2:b8:90:b4: a1:83:9c:d2:98:4d:df:6d:f4:3e:d3:0c:95:37:3e: db:0f:38:7a:57:d8:3b:74:89:8d:90:8b:dc:b1:71: fd:52:e7:0e:b6:07:b0:95:70:65:2a:d8:2f:c9:9b: b7:da:d2:29:42:f2:3e:0e:3d:5e:46:82:6c:61:60: 04:4d:b5:7a:c3:ad:f5:55:57:8e:fd:b9:7a:ba:38: 87:5c:fd:94:38:df:5c:c0:15:0f:8e:a1:34:a8:28: 4c:96:b8:b3:70:eb:8d:8c:4a:13:be:47:7d:d1:e6: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:F9:48:08:42:67:4F:63:E2:33:10:88:EB:FD:F2:6C:E4:84:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9e:0c:48:2d:00:09:14:a8:25:a2:04:0b:b9:b2:f2:ed:98: 3f:e6:04:88:a7:0b:8b:ff:67:4b:b5:57:63:d1:40:b6:ef:7f: a6:69:a3:30:6c:f4:46:6a:80:f0:e3:e0:4f:ea:ea:4d:27:06: 42:9a:4b:6c:57:84:32:5c:28:bd:65:59:ec:e1:5a:ab:49:2e: 58:b9:5a:27:9b:ad:8b:6a:17:85:c3:6d:2c:1f:c2:48:1a:8e: 9b:30:42:ed:95:55:12:3e:50:70:34:95:df:b5:73:53:a8:23: 9a:80:3f:83:80:e1:75:e0:c4:46:5c:69:dd:da:d8:4e:8b:6e: 71:8a:7d:dc:fb:52:3a:a7:4e:1d:cd:24:b1:d0:07:da:c5:9a: 0e:9c:ba:ca:e5:a9:9e:65:33:10:80:fb:97:bd:36:8f:f4:e5: 2c:ec:d3:c7:37:d4:32:6d:51:b0:ec:4c:ab:b0:a9:2d:5d:71: 0a:d7:c4:06:ee:dc:78:ea:89:40:d3:09:d3:ea:82:3c:47:ac: 6a:e1:dd:3e:db:90:31:31:78:00:73:1f:1c:4c:39:b9:88:d2: 3d:c9:a2:cb:89:e3:b7:f0:e9:d0:a2:e0:8b:fa:1f:f8:71:5a: e5:af:fa:43:b0:95:ee:8f:89:5b:a6:d1:89:46:9d:42:4a:46: 94:dd:1f:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS+lUBXFciBmj0pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI1MTAxOTE0MDAwM1oXDTI1MTAyMTE0MDAwMFowLzEtMCsGA1UEAxMk ZTM0ODUzNWUtYzBkZS00MWFjLThlODUtMjM4MjRmZGQyNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBH8YAEB9/nbT+66AfIH5uEBL8nAjz6k6CsW 95r/E+cOlt7plPnv9zX4MIAR/WjbAl0v8ogP47uYK9BXkjkC/jpSlzuQGhqyXyrG lqMhz+6UvTCY6Z0h0QciQGnJcWjF8HuMFgr23bjCJSmI+uqcCsodc9mrrfuxVLh0 lThngrIFsoJt8dt5O3fMreklbWxWLNK4kLShg5zSmE3fbfQ+0wyVNz7bDzh6V9g7 dImNkIvcsXH9UucOtgewlXBlKtgvyZu32tIpQvI+Dj1eRoJsYWAETbV6w631VVeO /bl6ujiHXP2UON9cwBUPjqE0qChMlrizcOuNjEoTvkd90eaSwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBae+UgIQmdPY+IzEIjr/fJs5ITNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvZDg4NmYzYTItNzMyNS00 Yjc0LTg4MDItMTk1MjhhOWYzODBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGngxILQAJFKglogQLubLy 7Zg/5gSIpwuL/2dLtVdj0UC273+maaMwbPRGaoDw4+BP6upNJwZCmktsV4QyXCi9 ZVns4VqrSS5YuVonm62LaheFw20sH8JIGo6bMELtlVUSPlBwNJXftXNTqCOagD+D gOF14MRGXGnd2thOi25xin3c+1I6p04dzSSx0AfaxZoOnLrK5ameZTMQgPuXvTaP 9OUs7NPHN9QybVGw7EyrsKktXXEK18QG7tx46olA0wnT6oI8R6xq4d0+25AxMXgA cx8cTDm5iNI9yaLLieO38OnQouCL+h/4cVrlr/pDsJXuj4lbptGJRp1CSkaU3R91 -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:03 2025 by rpki-client