$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft File: 10cf0e64-be53-4add-9414-d9b9f7f83aab.mft (raw, json) Hash identifier: UbmPn9JPjO4K6wWNvSleusEg0QgO/i9G04LehE6Cfb8= Subject key identifier: D8:29:E8:C2:E5:67:9F:AF:1B:0E:65:E2:60:6E:20:17:7D:BF:25:76 Authority key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Certificate issuer: /CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Certificate serial: 010D0C9F4328584B972A654556227EB6C6089800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft Manifest number: 010D0C9F43285844F8ADF1EA5257F31B16FA2DF3 Signing time: Tue 21 Oct 2025 02:00:08 +0000 Manifest this update: Tue 21 Oct 2025 02:00:08 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 10cf0e64-be53-4add-9414-d9b9f7f83aab.crl (hash: Xj5j8K9QlBWrcZ/LZz3QeOI1BD84i7gAnAovWTGXNu8=) 2: 70c26a25-b800-38fb-821f-aa7c442b84ad.roa (hash: /VIOb2TOhXKSaR3EnTSDqab/o902iOXN8oD+MfTd2X0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:2a:65:45:56:22:7e:b6:c6:08:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Validity Not Before: Oct 21 02:00:08 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=5ffb74a0-1014-49da-a9eb-c10c224e1de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:9e:f2:a7:f1:1f:01:44:b2:b6:43:e0:1a: 17:d4:a5:56:52:5e:16:23:1b:d5:91:f8:c3:31:26: 18:03:1c:34:62:9a:32:5a:6a:7b:b5:5a:ad:35:31: b6:89:02:1a:35:dd:9c:10:5c:0b:16:6a:9e:7d:9d: 9a:16:96:a5:dc:fe:67:10:f9:c8:79:d2:dd:d3:03: 07:d6:d1:3f:f9:c7:ef:e4:01:c7:95:22:79:49:b6: 32:cb:24:6f:b9:9a:51:4b:29:19:94:d7:21:1f:80: 42:24:94:cb:23:5b:db:3d:14:e7:3c:b9:52:c2:ba: b6:4f:54:90:c2:20:c3:93:35:da:3e:50:3f:6c:50: 8e:78:4c:5a:05:76:a3:19:14:48:69:a8:44:f8:67: 73:19:a8:fb:a1:97:db:cf:18:c2:26:a4:b6:3f:6c: c2:2c:cc:ac:5a:fb:fb:48:61:5d:d3:9c:a1:30:60: 06:3f:8e:4a:4f:ea:96:99:ae:57:49:c8:80:28:fe: 99:0d:39:ed:98:d9:48:e5:a8:99:d2:7a:f3:a4:e0: b5:41:6d:08:fc:09:bf:fb:ef:33:94:23:9d:53:02: 85:98:13:e3:12:d8:24:d7:53:00:56:91:d1:95:6a: 8e:b9:7e:67:bd:e0:10:38:e3:ae:a7:7f:b6:03:c8: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:E8:C2:E5:67:9F:AF:1B:0E:65:E2:60:6E:20:17:7D:BF:25:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl X509v3 Authority Key Identifier: keyid:19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:b7:f6:e6:b4:67:93:05:28:eb:61:7f:31:95:12:13:8e: e8:e6:01:f8:05:36:20:2c:1e:0f:21:72:47:6b:c9:99:49:00: f1:23:97:cc:66:7e:b5:46:d8:c8:21:a6:89:72:96:9f:29:2a: 52:1e:03:bd:9a:ab:8b:83:50:b6:c8:4a:8b:9b:eb:f0:8a:25: 03:16:0c:ea:67:27:7a:16:a5:e3:ea:97:e8:11:5b:b4:cd:7d: b3:88:46:06:e2:8e:1f:f5:76:22:f0:13:9a:07:6a:75:77:f4: 2e:79:f6:12:0a:bd:b1:31:b7:a5:d5:54:b0:ff:c1:f4:6b:a2: 5e:57:02:3f:75:24:37:c0:93:79:aa:57:c2:cd:8f:3a:1e:52: 86:d8:46:da:9e:11:96:2f:f6:1f:85:91:b0:a1:1a:29:7e:19: 38:cb:82:4d:a8:34:d3:f6:50:44:d8:37:38:07:79:cf:01:94: bd:0d:3b:ad:77:28:2e:23:1d:10:54:da:34:cd:c8:8d:5c:6d: 2b:91:a5:17:b6:8d:ea:17:e8:62:9a:e9:79:95:55:3d:74:ff: 85:fd:ef:97:19:17:eb:ac:3c:5e:88:c9:e6:94:a2:ef:8b:22: e3:57:4a:a8:20:b7:28:cc:b6:6c:13:31:b1:bd:56:08:07:16: da:87:fd:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXKmVFViJ+tsYImAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjZjBlNjQtYmU1My00YWRkLTk0MTQtZDliOWY3Zjgz YWFiMB4XDTI1MTAyMTAyMDAwOFoXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk NWZmYjc0YTAtMTAxNC00OWRhLWE5ZWItYzEwYzIyNGUxZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzue8qfxHwFEsrZD4BoX1KVWUl4WIxvVkfjD MSYYAxw0YpoyWmp7tVqtNTG2iQIaNd2cEFwLFmqefZ2aFpal3P5nEPnIedLd0wMH 1tE/+cfv5AHHlSJ5SbYyyyRvuZpRSykZlNchH4BCJJTLI1vbPRTnPLlSwrq2T1SQ wiDDkzXaPlA/bFCOeExaBXajGRRIaahE+GdzGaj7oZfbzxjCJqS2P2zCLMysWvv7 SGFd05yhMGAGP45KT+qWma5XSciAKP6ZDTntmNlI5aiZ0nrzpOC1QW0I/Am/++8z lCOdUwKFmBPjEtgk11MAVpHRlWqOuX5nveAQOOOup3+2A8iUYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNgp6MLlZ5+vGw5l4mBuIBd9vyV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xMGNm MGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5ZjdmODNhYWIvMTBjZjBlNjQtYmU1My00 YWRkLTk0MTQtZDliOWY3ZjgzYWFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTBjZjBlNjQtYmU1My00YWRkLTk0 MTQtZDliOWY3ZjgzYWFiLzEwY2YwZTY0LWJlNTMtNGFkZC05NDE0LWQ5YjlmN2Y4 M2FhYi5jcmwwHwYDVR0jBBgwFoAUGQoisuKanqnhrBB4DjW9Eq4KWD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xMGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5 ZjdmODNhYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxU7f25rRnkwUo62F/MZUS E47o5gH4BTYgLB4PIXJHa8mZSQDxI5fMZn61RtjIIaaJcpafKSpSHgO9mquLg1C2 yEqLm+vwiiUDFgzqZyd6FqXj6pfoEVu0zX2ziEYG4o4f9XYi8BOaB2p1d/QuefYS Cr2xMbel1VSw/8H0a6JeVwI/dSQ3wJN5qlfCzY86HlKG2EbanhGWL/YfhZGwoRop fhk4y4JNqDTT9lBE2Dc4B3nPAZS9DTutdyguIx0QVNo0zciNXG0rkaUXto3qF+hi mul5lVU9dP+F/e+XGRfrrDxeiMnmlKLviyLjV0qoILcozLZsEzGxvVYIBxbah/3x -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:50 2025 by rpki-client