$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft File: 2605899c-3814-40b2-905e-c31be23847a7.mft (raw, json) Hash identifier: KjXNFEaJR6djSecqWyW0NFqtyXJ9RCVNyzOfr8ZHYDI= Subject key identifier: 75:30:14:E9:43:7E:BE:CC:FF:F9:CD:7E:74:D2:33:D6:D1:15:74:DB Authority key identifier: 52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C Certificate issuer: /CN=2605899c-3814-40b2-905e-c31be23847a7 Certificate serial: 010D0C9F4328584B969583AD30019C33BDFFD740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft Manifest number: 010D0C9F4328584073A825E98897E82B2702C195 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 2605899c-3814-40b2-905e-c31be23847a7.crl (hash: SIBWVX9m6pgOd/SozLcYJcY4Bte+mbRfBovSVPtaRxs=) 2: e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa (hash: 1ZUsLDItpOMa3iyLsbtk5ZV/OT+PN1q0qzBPOEYutjs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:83:ad:30:01:9c:33:bd:ff:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2605899c-3814-40b2-905e-c31be23847a7 Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=9997083b-f0a4-4f3f-97cf-a1f9a5f72de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:8f:43:ca:44:8e:c8:bc:c3:be:48:b1:ea: 20:db:a0:00:ca:81:f7:bc:8e:51:aa:39:0e:f8:39: d7:2a:32:9a:82:dd:fe:b0:6b:b7:56:0e:64:82:b7: 0e:cb:c5:f0:b3:7d:0f:93:3d:4e:c9:12:da:3c:3a: 99:65:36:b9:ac:5b:af:12:5b:61:71:39:b9:20:c7: e8:0c:43:7c:89:50:0e:e0:99:98:3b:e9:63:b6:78: df:35:93:40:a6:a6:2f:7b:d6:a5:76:23:38:8b:21: 18:58:3e:69:2f:3c:14:8f:9f:f0:0f:a8:5c:37:46: 87:e9:1e:01:5c:67:99:a8:20:fa:8b:10:5d:d0:e4: e7:3f:25:a6:80:cf:52:75:a3:cb:cf:66:2c:c4:a9: e2:a0:2b:89:29:b4:1a:aa:3f:b3:d9:8b:cb:61:d6: 50:e7:a0:51:24:f9:e1:0f:7d:a0:2f:6c:89:56:b0: 44:65:1e:d9:a1:e6:5e:bc:44:2b:2a:22:c7:51:7d: 28:33:b0:2c:45:18:76:2b:9f:5b:58:39:ae:92:3b: 65:88:ed:6b:d6:9f:ce:f2:06:ae:1a:72:af:36:b9: ae:89:8a:6a:0b:74:ad:a1:42:2b:35:f2:9e:28:f3: 9d:a7:91:05:01:dd:46:1e:92:34:cb:96:20:be:6b: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:30:14:E9:43:7E:BE:CC:FF:F9:CD:7E:74:D2:33:D6:D1:15:74:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl X509v3 Authority Key Identifier: keyid:52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:58:1a:de:a9:45:fd:4c:e7:e0:b9:fb:19:13:7d:e0:87:b2: 49:07:53:2f:22:18:50:41:6c:a8:2d:51:aa:0c:38:20:41:74: 39:5f:e5:a8:58:71:a5:ff:43:71:c4:cb:8c:26:12:29:2e:84: da:94:96:79:13:25:69:7a:f6:e5:7e:e7:4d:39:94:6d:ed:8b: f2:d8:5a:94:ef:fb:c8:b1:88:62:24:24:ea:9d:d2:1f:33:4e: 51:9f:f2:ba:21:f5:50:ae:10:d8:21:75:19:16:aa:89:14:d0: ba:c7:6a:d8:4f:43:85:24:23:14:55:f2:4c:5a:fc:d4:d5:da: d8:ad:fa:1e:c3:ee:61:37:7a:73:c6:3f:22:f4:48:6d:c2:48: 31:c2:72:7f:6b:fb:90:34:96:03:c3:93:a9:6a:db:93:32:25: 62:c2:bc:d6:86:70:05:f7:7d:e4:96:9c:f9:1a:99:c4:a1:80: b4:e5:60:43:27:2b:e6:a7:8b:5d:07:a6:ed:b1:21:17:ae:ad: ab:83:79:45:f6:50:b8:3f:54:c9:b9:76:a3:e1:94:63:32:25: 66:ec:56:a0:1f:1b:4c:a8:06:72:09:db:08:b2:43:f1:10:cc: 16:e3:3f:c3:15:1a:0a:37:b0:fd:b3:c5:d6:ea:c2:d8:54:cd: 52:e5:1f:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYOtMAGcM73/10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwNTg5OWMtMzgxNC00MGIyLTkwNWUtYzMxYmUyMzg0 N2E3MB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk OTk5NzA4M2ItZjBhNC00ZjNmLTk3Y2YtYTFmOWE1ZjcyZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmPQ8pEjsi8w75Iseog26AAyoH3vI5RqjkO +DnXKjKagt3+sGu3Vg5kgrcOy8Xws30Pkz1OyRLaPDqZZTa5rFuvElthcTm5IMfo DEN8iVAO4JmYO+ljtnjfNZNApqYve9aldiM4iyEYWD5pLzwUj5/wD6hcN0aH6R4B XGeZqCD6ixBd0OTnPyWmgM9SdaPLz2YsxKnioCuJKbQaqj+z2YvLYdZQ56BRJPnh D32gL2yJVrBEZR7ZoeZevEQrKiLHUX0oM7AsRRh2K59bWDmukjtliO1r1p/O8gau GnKvNrmuiYpqC3StoUIrNfKeKPOdp5EFAd1GHpI0y5YgvmtyywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHUwFOlDfr7M//nNfnTSM9bRFXTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1 ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFiZTIzODQ3YTcvMjYwNTg5OWMtMzgxNC00 MGIyLTkwNWUtYzMxYmUyMzg0N2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjYwNTg5OWMtMzgxNC00MGIyLTkw NWUtYzMxYmUyMzg0N2E3LzI2MDU4OTljLTM4MTQtNDBiMi05MDVlLWMzMWJlMjM4 NDdhNy5jcmwwHwYDVR0jBBgwFoAUUmiG79q6Osjswbqf0mU5corS+mwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFi ZTIzODQ3YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjWBreqUX9TOfgufsZE33g h7JJB1MvIhhQQWyoLVGqDDggQXQ5X+WoWHGl/0NxxMuMJhIpLoTalJZ5EyVpevbl fudNOZRt7Yvy2FqU7/vIsYhiJCTqndIfM05Rn/K6IfVQrhDYIXUZFqqJFNC6x2rY T0OFJCMUVfJMWvzU1drYrfoew+5hN3pzxj8i9EhtwkgxwnJ/a/uQNJYDw5OpatuT MiViwrzWhnAF933klpz5GpnEoYC05WBDJyvmp4tdB6btsSEXrq2rg3lF9lC4P1TJ uXaj4ZRjMiVm7FagHxtMqAZyCdsIskPxEMwW4z/DFRoKN7D9s8XW6sLYVM1S5R8B -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:17 2025 by rpki-client