$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft File: 2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft (raw, json) Hash identifier: Xpjs52acRYm5qWtAddBFymEqqmlfYjWmIYJ4sg4J1QI= Subject key identifier: 3A:53:47:7E:46:96:DA:81:75:9C:A7:25:02:9D:F3:51:76:D8:12:6F Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E Certificate issuer: /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c Certificate serial: 010D0C9F4328584B93181C874D24DB3EF7627800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft Manifest number: 010D0C9F43285840870142C2DFA716F6EA3A4490 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: 0397d616-845a-3a5d-9ca7-2d7583a9f252.roa (hash: ZlbQjyBjvRtFTIwCi+FFvLploUR78rOg3742a70Yhcc=) 2: 2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl (hash: JNT4XtlDWwwQ/D7UVIcmFmEb5rwiHSveYxhLcCUOjyM=) 3: 90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (hash: 5LWjLFtTBDhtmcJlW8neEpwyzHk0F10BeWeMxwKRxpE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1c:87:4d:24:db:3e:f7:62:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=f242bd05-ac62-43a4-9a04-54152b9cad95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:9a:26:7d:60:9e:2c:28:fd:2f:99:b1:00: 42:fd:17:67:0f:7d:73:ab:68:69:82:6b:3d:10:01: 5e:19:50:d2:49:b5:fc:19:de:90:0e:e3:7d:97:a0: 36:8d:b5:61:37:57:2a:24:d0:1f:eb:ec:87:59:23: 4f:1b:ba:ef:95:0a:01:61:27:7b:92:1b:cb:ed:09: c7:9a:84:be:ae:0d:e5:6a:d8:16:1e:de:d9:84:b6: 4d:ae:a8:ad:5b:58:5f:96:a7:ec:60:df:8c:25:e7: 15:ad:24:74:c9:0c:bc:c0:13:a8:86:be:31:52:64: 88:00:c5:19:a6:e0:d4:56:57:54:d5:4e:2a:d9:69: 46:14:13:b9:c4:1c:ec:d3:17:6e:b2:47:8c:06:ee: c2:94:98:b6:d9:ec:e5:52:c7:77:9d:e6:c6:ea:30: d7:31:72:08:37:4c:b3:87:50:ef:ee:89:54:7d:fd: eb:d3:8b:95:43:15:ed:14:1a:44:23:1f:66:a2:7a: e5:50:a8:8c:ec:80:2f:08:68:67:bf:95:24:91:2f: 67:58:ce:f8:2b:f1:d4:ef:61:6a:40:59:d2:63:41: a7:16:71:2c:46:93:1a:04:62:fe:3f:4f:24:68:97: f1:2b:a0:52:0a:87:b9:2a:7e:77:fe:c3:b6:5c:af: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:47:7E:46:96:DA:81:75:9C:A7:25:02:9D:F3:51:76:D8:12:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl X509v3 Authority Key Identifier: keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e2:0e:b4:c1:a0:31:8f:7e:b4:d1:e5:4c:8e:0a:de:b4:5a: bc:71:2f:e7:e5:cd:7f:e1:76:a7:03:3d:1f:a0:35:67:92:12: c7:bf:16:a9:43:9e:b2:a1:17:30:7c:5d:a7:d4:76:fa:58:17: 08:5c:97:46:76:f4:66:83:19:dc:cc:db:f9:63:cc:df:cf:d1: 36:af:9c:a2:cd:1f:3e:6e:bf:47:43:27:f7:53:74:6b:ac:85: f6:74:f6:b4:b3:8b:32:50:3d:12:50:3f:69:5b:1f:a7:b2:2d: 8b:4e:31:29:81:ea:13:46:a0:e8:47:aa:57:c7:5d:4f:3e:bc: 87:28:7b:5a:62:b4:40:46:68:56:4c:07:27:cc:b9:86:98:b7: 67:78:fa:0b:64:9e:0b:2a:d2:26:a6:15:67:fb:a4:69:94:bd: 58:b5:21:8d:00:c2:42:c5:53:54:13:4e:f7:38:19:75:52:46: 2e:9c:94:66:e6:cc:fd:ec:3c:b7:b3:57:af:e3:d9:75:d5:d6: b7:0d:0d:21:51:be:72:80:06:ff:d3:d3:ad:de:88:2a:81:e1: 92:9e:62:2f:2a:27:7c:3e:a7:70:86:ec:b9:02:f3:e5:de:df: d6:ae:07:fd:21:8e:17:0d:41:60:66:1a:98:3f:3d:9d:9f:49: d4:12:ee:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGByHTSTbPvdieAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkYzc0MzQtZTFjZC00ZGVlLWIwZmEtMWQ3MDk3MzA2 YjljMB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk ZjI0MmJkMDUtYWM2Mi00M2E0LTlhMDQtNTQxNTJiOWNhZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA6aJn1gniwo/S+ZsQBC/RdnD31zq2hpgms9 EAFeGVDSSbX8Gd6QDuN9l6A2jbVhN1cqJNAf6+yHWSNPG7rvlQoBYSd7khvL7QnH moS+rg3latgWHt7ZhLZNrqitW1hflqfsYN+MJecVrSR0yQy8wBOohr4xUmSIAMUZ puDUVldU1U4q2WlGFBO5xBzs0xduskeMBu7ClJi22ezlUsd3nebG6jDXMXIIN0yz h1Dv7olUff3r04uVQxXtFBpEIx9monrlUKiM7IAvCGhnv5UkkS9nWM74K/HU72Fq QFnSY0GnFnEsRpMaBGL+P08kaJfxK6BSCoe5Kn53/sO2XK85dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDpTR35GltqBdZynJQKd81F22BJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Rj NzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcwOTczMDZiOWMvMmNkYzc0MzQtZTFjZC00 ZGVlLWIwZmEtMWQ3MDk3MzA2YjljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNkYzc0MzQtZTFjZC00ZGVlLWIw ZmEtMWQ3MDk3MzA2YjljLzJjZGM3NDM0LWUxY2QtNGRlZS1iMGZhLTFkNzA5NzMw NmI5Yy5jcmwwHwYDVR0jBBgwFoAUb8qZKCmONhWahLmpDXaMB0Dx904wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2RjNzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcw OTczMDZiOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBB4g60waAxj3600eVMjgre tFq8cS/n5c1/4XanAz0foDVnkhLHvxapQ56yoRcwfF2n1Hb6WBcIXJdGdvRmgxnc zNv5Y8zfz9E2r5yizR8+br9HQyf3U3RrrIX2dPa0s4syUD0SUD9pWx+nsi2LTjEp geoTRqDoR6pXx11PPryHKHtaYrRARmhWTAcnzLmGmLdnePoLZJ4LKtImphVn+6Rp lL1YtSGNAMJCxVNUE073OBl1UkYunJRm5sz97Dy3s1ev49l11da3DQ0hUb5ygAb/ 09Ot3ogqgeGSnmIvKid8Pqdwhuy5AvPl3t/Wrgf9IY4XDUFgZhqYPz2dn0nUEu5l -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:45 2025 by rpki-client