$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft File: 1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft (raw, json) Hash identifier: T4H6/9ZE0wnPdIrXhr145HUOK5NMO5i/zJ91Lt9Odw4= Subject key identifier: 38:97:E1:37:5E:59:D1:7D:3C:91:25:70:63:CF:C7:4E:E1:12:01:FB Authority key identifier: F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1 Certificate issuer: /CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f Certificate serial: 010D0C9F4328584B947D826530F97AF989FEDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft Manifest number: 010D0C9F4328584073A83B252534683489560054 Signing time: Mon 20 Oct 2025 03:00:09 +0000 Manifest this update: Mon 20 Oct 2025 03:00:09 +0000 Manifest next update: Thu 23 Oct 2025 03:00:00 +0000 Files and hashes: 1: 1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl (hash: zf3numdo4Wlu+UmEPiqJAFuujaOf/MrGg7o4ciTdN4o=) 2: f88ad909-af6e-3c19-97ea-abc7c4271328.roa (hash: dB8iSL19J1rYczaYHSZOahGLGQy+Tj9dLISjO41D9+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:7d:82:65:30:f9:7a:f9:89:fe:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f Validity Not Before: Oct 20 03:00:09 2025 GMT Not After : Oct 23 03:00:00 2025 GMT Subject: CN=3a1f6336-c494-4189-9493-a0192a0a05f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:ac:4d:91:86:5c:59:a4:cd:8f:bd:86:74: 2c:af:bd:33:30:ae:08:ea:2d:59:1e:b7:36:af:1f: 98:68:ed:a4:1c:76:76:c9:7c:83:46:f8:93:73:00: bf:7c:be:13:51:13:ab:12:d5:31:0b:17:4a:f1:cc: 3c:64:87:f8:0c:87:2f:19:d1:71:88:53:6e:79:4b: a2:bf:77:3a:89:c5:86:79:ff:ca:85:ce:84:df:f8: ec:75:c6:40:fa:89:f2:61:72:b5:0a:60:68:c8:ca: 8f:c9:eb:0b:39:06:54:b3:97:99:e5:81:b3:d1:59: 06:b6:6b:b2:f6:5c:eb:de:2f:aa:13:14:39:ac:c9: 54:6e:80:bf:a1:42:d6:fd:13:cd:38:28:9f:16:86: d9:23:1d:a0:68:7e:e3:b9:38:21:1f:c0:67:3b:65: 0a:b4:37:b5:a0:70:8a:45:23:da:9d:cc:3f:58:03: 5d:98:dd:81:7a:b1:6f:9e:3f:bc:b7:6a:47:24:81: 0d:78:22:95:8a:45:86:e8:86:f5:8e:cf:ea:52:91: 9b:5e:7c:31:3a:e6:19:66:7a:78:45:e2:a7:54:72: 21:e8:28:a2:d3:16:8d:1b:b6:e8:21:bc:7f:7e:38: 8d:18:37:43:ed:c0:18:55:12:53:28:c3:a8:e8:20: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:E1:37:5E:59:D1:7D:3C:91:25:70:63:CF:C7:4E:E1:12:01:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl X509v3 Authority Key Identifier: keyid:F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2e:9e:fc:7f:c9:40:d7:76:88:c3:80:c0:17:51:9c:ef:dd: c6:11:c3:3d:97:fe:56:42:a6:62:45:ed:46:0e:82:e6:73:b4: dd:ac:90:73:e8:d9:bc:f2:93:db:b4:bb:46:b6:7c:7e:0d:70: 48:dd:db:bb:2e:b0:3c:b8:1a:80:d9:4d:9d:de:d2:c4:e5:5f: 4d:94:40:67:59:b2:ce:bd:a7:17:31:5e:a4:e5:3d:39:d3:e6: 61:43:31:19:5f:00:b7:da:1e:89:ee:d3:27:d5:5c:54:98:af: 3d:94:b8:de:f5:2d:57:d7:15:23:08:6c:d9:2c:70:3a:2c:36: de:05:9c:4c:ba:6a:33:eb:c9:48:71:39:b5:db:d1:48:bb:d7: 2b:bd:f5:e8:93:8d:a2:fc:9a:50:6c:b1:71:52:2c:d4:1e:45: a1:23:5a:54:1b:4a:5c:12:f0:d0:1a:8f:08:07:77:12:5f:8d: 7a:d6:5b:20:fe:7b:48:82:d7:02:ba:47:1b:88:ad:5f:b9:92: 84:50:bc:3b:b2:52:5f:18:9b:50:c0:ae:40:0a:99:af:ab:7c: 99:65:a0:f7:bc:f9:f8:c6:b9:82:0e:71:00:63:3d:2d:b6:a7: b9:e9:6c:f3:9e:71:99:2a:af:b9:36:54:c7:29:93:3a:d3:c9: f5:8b:74:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUfYJlMPl6+Yn+34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4ZWMwMTAtZDJjMi00MzVmLTk4MjYtOWEwM2MyYWI5 NDlmMB4XDTI1MTAyMDAzMDAwOVoXDTI1MTAyMzAzMDAwMFowLzEtMCsGA1UEAxMk M2ExZjYzMzYtYzQ5NC00MTg5LTk0OTMtYTAxOTJhMGEwNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVSsTZGGXFmkzY+9hnQsr70zMK4I6i1ZHrc2 rx+YaO2kHHZ2yXyDRviTcwC/fL4TUROrEtUxCxdK8cw8ZIf4DIcvGdFxiFNueUui v3c6icWGef/Khc6E3/jsdcZA+onyYXK1CmBoyMqPyesLOQZUs5eZ5YGz0VkGtmuy 9lzr3i+qExQ5rMlUboC/oULW/RPNOCifFobZIx2gaH7juTghH8BnO2UKtDe1oHCK RSPancw/WANdmN2BerFvnj+8t2pHJIENeCKVikWG6Ib1js/qUpGbXnwxOuYZZnp4 ReKnVHIh6Cii0xaNG7boIbx/fjiNGDdD7cAYVRJTKMOo6CA97QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDiX4TdeWdF9PJElcGPPx07hEgH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDhl YzAxMC1kMmMyLTQzNWYtOTgyNi05YTAzYzJhYjk0OWYvMWQ4ZWMwMTAtZDJjMi00 MzVmLTk4MjYtOWEwM2MyYWI5NDlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ4ZWMwMTAtZDJjMi00MzVmLTk4 MjYtOWEwM2MyYWI5NDlmLzFkOGVjMDEwLWQyYzItNDM1Zi05ODI2LTlhMDNjMmFi OTQ5Zi5jcmwwHwYDVR0jBBgwFoAU8wth3/xzPm3vmxlFScU+kcB2BqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDhlYzAxMC1kMmMyLTQzNWYtOTgyNi05YTAz YzJhYjk0OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASLp78f8lA13aIw4DAF1Gc 793GEcM9l/5WQqZiRe1GDoLmc7TdrJBz6Nm88pPbtLtGtnx+DXBI3du7LrA8uBqA 2U2d3tLE5V9NlEBnWbLOvacXMV6k5T050+ZhQzEZXwC32h6J7tMn1VxUmK89lLje 9S1X1xUjCGzZLHA6LDbeBZxMumoz68lIcTm129FIu9crvfXok42i/JpQbLFxUizU HkWhI1pUG0pcEvDQGo8IB3cSX4161lsg/ntIgtcCukcbiK1fuZKEULw7slJfGJtQ wK5ACpmvq3yZZaD3vPn4xrmCDnEAYz0ttqe56WzznnGZKq+5NlTHKZM608n1i3SL -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:28 2025 by rpki-client