$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft File: 153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft (raw, json) Hash identifier: Hq1BqoYKUrXSbn+bqj5SyyH4/ryOmi/jMGY7xvqG6Qg= Subject key identifier: DF:66:7B:50:CF:4E:FE:44:91:F6:80:5F:C9:66:24:E4:1C:54:B8:07 Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Certificate serial: 010D0C9F4328584B9335F09A3CF6620E94B14380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft Manifest number: 010D0C9F4328584073A81B65F56BDA1E553388C9 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl (hash: kT/WfacHRFdCBhH3kOWVHDsphbXv8uf4NpRAiM2R6Yg=) 2: 4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa (hash: hsm66+2jh/SGdug/P5TRCIk1/SlbYidGRlubWfMeS0s=) 3: d833a937-fd68-3b12-a552-2d99af1447a0.roa (hash: 0ziXN+JCNmyPlXatt981F893JYsUHKKGWnlzAqJwav0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:f0:9a:3c:f6:62:0e:94:b1:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=0a43b971-28f4-4301-8b97-8e4d2cc23c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:89:a1:45:2e:85:8f:c5:44:6a:16:71:58: b7:f7:40:d3:48:7b:aa:75:79:77:6b:2f:41:70:f5: 1b:ad:b1:f6:7a:99:5d:0f:be:82:59:5b:ac:9d:3e: 3a:81:97:c6:0d:df:a4:fe:ef:22:73:32:c7:1d:ed: ce:a7:91:4c:10:f2:56:91:a6:0a:3a:ea:50:77:97: c3:9e:3c:3d:16:1e:74:25:36:32:96:4d:bf:2d:05: 8b:32:f3:61:34:36:59:98:67:d8:2c:f5:46:99:1b: a1:db:f2:70:62:c5:60:03:fd:73:bd:cf:bc:ab:56: a7:91:92:49:ab:37:fa:bf:a9:23:18:54:cb:72:63: eb:24:02:1e:c9:5a:36:6f:71:16:09:a7:89:ee:3c: e0:4b:e7:d6:04:63:c5:1a:88:c5:76:2e:fd:74:92: c7:f1:05:65:e2:7f:7e:bb:4c:4e:b9:96:56:c1:b5: 86:6f:13:53:66:12:2e:1b:ec:b6:3d:e8:3b:52:70: f7:7f:e5:66:f5:d1:5b:24:51:26:4a:b5:01:d6:fc: 1f:4a:9b:8f:af:4e:9d:c3:54:0a:53:97:47:db:df: ed:c6:49:16:56:a8:5f:94:82:9e:bf:52:2d:b8:06: 29:8b:bb:59:69:27:ed:0d:24:76:99:c9:a5:5d:99: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:66:7B:50:CF:4E:FE:44:91:F6:80:5F:C9:66:24:E4:1C:54:B8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl X509v3 Authority Key Identifier: keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:75:78:f3:09:ae:27:26:d8:b6:52:40:5c:9b:ec:e8:68:f5: 2c:80:cf:9a:2c:6b:66:7c:f9:3b:93:5c:ba:80:be:f6:98:11: cb:bb:0a:e6:b4:2f:79:fd:dc:1c:fd:91:b0:d8:37:9f:87:57: 8c:1a:35:55:9b:48:ef:31:53:20:29:6e:7d:b8:a6:7e:07:d5: 2d:c9:0a:b8:c5:1b:12:9e:28:43:fb:b7:1c:2c:a5:9f:7d:0f: 80:a1:84:88:a2:3d:8e:d4:6e:3b:b7:df:61:01:34:b8:d2:a6: 0a:41:ce:60:3c:03:4b:5f:28:dc:91:ad:76:0c:46:43:e8:5a: da:2b:52:71:37:2c:7b:80:0a:35:c8:97:2d:8f:07:b4:56:5c: cf:52:9c:44:88:83:48:6c:3c:7e:03:1f:4b:7d:a0:69:ba:c5: 13:19:1d:ea:40:4a:a3:7a:bd:86:91:75:48:d5:6f:dc:7e:c9: 75:ad:c6:57:54:29:a3:07:ee:61:35:7c:59:c3:19:eb:a8:7e: fc:4b:c0:38:8b:1d:f2:7d:12:12:26:32:09:f2:aa:d4:0c:ed: 62:0d:0a:9e:f1:48:08:ff:22:07:2e:f3:2d:22:20:fb:62:4c: 37:ad:ce:d3:02:7f:2d:f5:17:d0:14:81:f6:58:8a:71:4c:ce: f8:24:7f:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNfCaPPZiDpSxQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUzYjFiMjAtMDg1OS00YjFiLTlmZmUtMzdlOTAwNDFh OGNjMB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk MGE0M2I5NzEtMjhmNC00MzAxLThiOTctOGU0ZDJjYzIzYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0naJoUUuhY/FRGoWcVi390DTSHuqdXl3ay9B cPUbrbH2epldD76CWVusnT46gZfGDd+k/u8iczLHHe3Op5FMEPJWkaYKOupQd5fD njw9Fh50JTYylk2/LQWLMvNhNDZZmGfYLPVGmRuh2/JwYsVgA/1zvc+8q1ankZJJ qzf6v6kjGFTLcmPrJAIeyVo2b3EWCaeJ7jzgS+fWBGPFGojFdi79dJLH8QVl4n9+ u0xOuZZWwbWGbxNTZhIuG+y2Peg7UnD3f+Vm9dFbJFEmSrUB1vwfSpuPr06dw1QK U5dH29/txkkWVqhflIKev1ItuAYpi7tZaSftDSR2mcmlXZnE6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN9me1DPTv5EkfaAX8lmJOQcVLgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNi MWIyMC0wODU5LTRiMWItOWZmZS0zN2U5MDA0MWE4Y2MvMTUzYjFiMjAtMDg1OS00 YjFiLTlmZmUtMzdlOTAwNDFhOGNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTUzYjFiMjAtMDg1OS00YjFiLTlm ZmUtMzdlOTAwNDFhOGNjLzE1M2IxYjIwLTA4NTktNGIxYi05ZmZlLTM3ZTkwMDQx YThjYy5jcmwwHwYDVR0jBBgwFoAUpfwsrNFV8Pf+yRnJtvPfULKMdvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNiMWIyMC0wODU5LTRiMWItOWZmZS0zN2U5 MDA0MWE4Y2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpdXjzCa4nJti2UkBcm+zo aPUsgM+aLGtmfPk7k1y6gL72mBHLuwrmtC95/dwc/ZGw2Defh1eMGjVVm0jvMVMg KW59uKZ+B9UtyQq4xRsSnihD+7ccLKWffQ+AoYSIoj2O1G47t99hATS40qYKQc5g PANLXyjcka12DEZD6FraK1JxNyx7gAo1yJctjwe0VlzPUpxEiINIbDx+Ax9LfaBp usUTGR3qQEqjer2GkXVI1W/cfsl1rcZXVCmjB+5hNXxZwxnrqH78S8A4ix3yfRIS JjIJ8qrUDO1iDQqe8UgI/yIHLvMtIiD7Ykw3rc7TAn8t9RfQFIH2WIpxTM74JH96 -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:44 2025 by rpki-client