$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft File: d6aca04b-8aac-451b-b19d-c3675177ed24.mft (raw, json) Hash identifier: Ml9i27n9uWT8FPLGCDGB5UhoVmWrwWAVR1TmJrIwLGI= Subject key identifier: 5F:01:EF:1B:3C:6A:F2:C4:22:E7:BA:89:5A:95:B9:D5:F6:24:AC:9A Authority key identifier: F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 Certificate issuer: /CN=d6aca04b-8aac-451b-b19d-c3675177ed24 Certificate serial: 010D0C9F4328584B9424290B2216CEBA29DAA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft Manifest number: 010D0C9F4328584B2CE0BF1247E487A7780EBA86 Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Wed 22 Oct 2025 00:00:00 +0000 Files and hashes: 1: ab896d97-33c9-3a23-be0e-51523a030893.roa (hash: ljyZUf3cSLpkVyAO2BIcJ5yGWxNdrg1PspJjA1Nh3zQ=) 2: d6aca04b-8aac-451b-b19d-c3675177ed24.crl (hash: JdqQTu3Jmv6vUSTrxpMDasFgFEOd5nGP77ZPI7gIiug=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:29:0b:22:16:ce:ba:29:da:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aca04b-8aac-451b-b19d-c3675177ed24 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 22 00:00:00 2025 GMT Subject: CN=e211825b-0dd0-4cc3-bc77-fc8fa5aed818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:a5:04:c3:e8:f4:77:d1:8f:04:d6:73:3f: f4:bc:e9:bd:d9:b6:b0:7e:7c:e6:ba:ee:f1:93:d9: 8c:80:e2:99:60:df:9c:be:65:35:bb:de:67:77:05: 30:f0:d1:de:ef:be:80:b4:e6:b1:a3:1b:8c:6e:e2: c3:97:5a:5b:b8:af:60:8d:d3:e7:1c:0c:4d:cb:50: 97:ad:ed:c8:e8:cf:e4:f4:1f:47:a0:74:a5:a7:a2: 24:b0:1d:d9:fd:df:f7:d5:37:9c:6b:4f:27:f2:47: 68:91:65:70:df:9a:9a:70:95:7b:d9:d9:e3:18:ec: 74:b5:1b:66:85:ff:cd:47:ab:7e:e6:db:c3:9d:10: 50:62:58:ce:c9:e3:49:1d:18:39:25:7a:92:46:7f: e6:da:18:6b:ac:64:ff:ff:40:c2:f9:b6:85:73:f1: cd:79:64:b0:d7:50:8b:19:ab:d0:38:49:af:22:05: a0:d3:8f:32:a4:fb:cb:8d:7f:e8:c0:d3:b0:53:f0: 97:9e:43:71:6d:5e:7d:d6:50:69:a5:f7:e6:ed:be: 51:95:20:e3:8f:06:41:a0:67:52:e5:68:d7:c1:41: 49:4f:43:60:b1:18:85:5e:4b:25:4b:bb:97:ac:1e: 4f:57:8d:59:08:d0:c9:cd:0f:2e:f9:ba:cb:f8:f8: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:01:EF:1B:3C:6A:F2:C4:22:E7:BA:89:5A:95:B9:D5:F6:24:AC:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.crl X509v3 Authority Key Identifier: keyid:F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:e2:fe:96:1d:2f:2a:b3:26:d2:dc:f7:ce:05:69:69:ee: 8f:02:1e:5e:9e:e9:68:cb:ed:29:64:cf:3e:98:67:6b:a7:09: 3a:74:ed:c5:24:42:3f:39:70:97:bf:b9:03:80:a0:d8:bc:fc: ad:9c:cc:13:d3:06:d7:27:9a:15:a7:78:d0:45:9e:5f:0f:db: 52:09:3e:67:6b:94:29:2d:f8:61:48:38:25:9e:e5:c5:0c:2e: 89:2e:46:77:a3:63:98:be:9f:09:4e:a5:5e:fe:61:6e:cc:b1: 3e:75:85:66:be:a7:a9:7b:ff:04:85:16:51:a7:77:c2:0d:9f: 6e:b2:b4:ca:9d:19:ab:6e:f9:83:93:9b:1f:cb:31:d4:70:42: 37:96:03:7f:e1:3b:0c:91:86:c7:18:1b:9b:a4:74:b4:97:76: b1:d3:b4:f9:9c:a2:91:e5:16:be:3a:37:db:f9:bc:a4:62:86: 03:3a:85:1b:99:c9:97:73:76:4a:8b:d6:ad:e4:82:1c:b2:61: e3:c3:0a:b4:fb:c0:62:0c:dc:9a:84:95:44:05:c7:5e:3a:77: f7:3b:45:25:d3:7d:77:6d:49:66:d4:32:52:5a:bb:20:59:6b: 84:fa:f9:85:7a:4d:90:d8:c3:17:98:bc:23:e7:36:23:1a:ff: dc:78:bc:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCkLIhbOuinaoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhY2EwNGItOGFhYy00NTFiLWIxOWQtYzM2NzUxNzdl ZDI0MB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMjAwMDAwMFowLzEtMCsGA1UEAxMk ZTIxMTgyNWItMGRkMC00Y2MzLWJjNzctZmM4ZmE1YWVkODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXGlBMPo9HfRjwTWcz/0vOm92bawfnzmuu7x k9mMgOKZYN+cvmU1u95ndwUw8NHe776AtOaxoxuMbuLDl1pbuK9gjdPnHAxNy1CX re3I6M/k9B9HoHSlp6IksB3Z/d/31Teca08n8kdokWVw35qacJV72dnjGOx0tRtm hf/NR6t+5tvDnRBQYljOyeNJHRg5JXqSRn/m2hhrrGT//0DC+baFc/HNeWSw11CL GavQOEmvIgWg048ypPvLjX/owNOwU/CXnkNxbV591lBppffm7b5RlSDjjwZBoGdS 5WjXwUFJT0NgsRiFXkslS7uXrB5PV41ZCNDJzQ8u+brL+PilXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF8B7xs8avLEIue6iVqVudX2JKyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNmFj YTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3NTE3N2VkMjQvZDZhY2EwNGItOGFhYy00 NTFiLWIxOWQtYzM2NzUxNzdlZDI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDZhY2EwNGItOGFhYy00NTFiLWIx OWQtYzM2NzUxNzdlZDI0L2Q2YWNhMDRiLThhYWMtNDUxYi1iMTlkLWMzNjc1MTc3 ZWQyNC5jcmwwHwYDVR0jBBgwFoAU9O1OlYMnnGFw9AbkJl7Zm7b44oQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNmFjYTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3 NTE3N2VkMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWrOL+lh0vKrMm0tz3zgVp ae6PAh5enuloy+0pZM8+mGdrpwk6dO3FJEI/OXCXv7kDgKDYvPytnMwT0wbXJ5oV p3jQRZ5fD9tSCT5na5QpLfhhSDglnuXFDC6JLkZ3o2OYvp8JTqVe/mFuzLE+dYVm vqepe/8EhRZRp3fCDZ9usrTKnRmrbvmDk5sfyzHUcEI3lgN/4TsMkYbHGBubpHS0 l3ax07T5nKKR5Ra+Ojfb+bykYoYDOoUbmcmXc3ZKi9at5IIcsmHjwwq0+8BiDNya hJVEBcdeOnf3O0Ul0313bUlm1DJSWrsgWWuE+vmFek2Q2MMXmLwj5zYjGv/ceLyp -----END CERTIFICATE-----Generated at Mon Oct 20 12:46:48 2025 by rpki-client