$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft File: 207c40f4-33c4-478b-ae61-d3f51358881b.mft (raw, json) Hash identifier: 1mhm/b4jEw5HepYTUTVXscdVHW/4ZBWf3hK+SBJvIUs= Subject key identifier: 74:97:4A:84:19:C5:27:ED:F8:39:F9:CC:67:00:56:6D:39:60:D1:A1 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584B911DEED24D3E86D733A7BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft Manifest number: 010D0C9F4328584073A82D4189108E20C31E2492 Signing time: Sat 18 Oct 2025 22:00:08 +0000 Manifest this update: Sat 18 Oct 2025 22:00:08 +0000 Manifest next update: Mon 20 Oct 2025 22:00:00 +0000 Files and hashes: 1: 207c40f4-33c4-478b-ae61-d3f51358881b.crl (hash: 7AsON+ngTEgpKHMdXbFutYIShNcT2LxSaxe+ggdHeXM=) 2: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (hash: rXrnEYSHb1F82UosPo1xBLjNerf83VGKScmVhnb65Jo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:1d:ee:d2:4d:3e:86:d7:33:a7:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Oct 18 22:00:08 2025 GMT Not After : Oct 20 22:00:00 2025 GMT Subject: CN=6d24db0b-db31-4cc7-9ac9-b36fe4568dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:de:57:8b:d3:26:d6:80:85:a6:52:0c:2c: b7:f6:be:89:35:4d:77:ba:e8:6f:5e:31:d7:04:28: 66:57:ba:06:81:b8:13:ba:16:60:ec:e2:53:2d:d7: 58:6d:05:db:85:43:9a:47:99:a5:26:a9:d1:90:af: 1a:6f:3f:e8:76:86:57:29:c5:c9:3a:6d:2c:f9:d5: d5:a1:a2:80:77:18:80:23:d2:e8:dd:e2:36:81:ba: 0e:38:bc:a4:be:a8:c0:55:ee:bb:15:8a:c2:5c:2a: 6f:6c:45:26:f4:dc:82:83:a4:b9:4d:cd:15:e5:9a: 07:b4:09:66:5f:4a:4e:24:1a:8a:6e:5b:0b:0b:db: 17:8e:77:12:46:e4:61:2d:5d:57:de:e2:90:58:5d: dc:7b:3b:89:03:3d:e6:1a:f6:ae:d5:f9:bb:96:64: 0b:7e:3e:3e:f4:f3:ed:07:8b:2e:e0:a4:5b:4b:65: 4c:98:75:5b:e7:5b:8e:8d:fe:4e:c4:bb:1a:c4:e6: 46:c2:b3:ba:ab:9c:43:8e:71:27:07:34:77:5f:48: b9:ed:ec:ed:1c:b9:7c:ec:c7:e7:63:7f:54:b1:c4: d5:04:34:b9:db:9a:d4:bf:0a:01:7d:8c:9b:5c:e8: 8b:20:b2:ef:8a:76:4c:fd:d5:fe:f5:7c:93:67:57: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:97:4A:84:19:C5:27:ED:F8:39:F9:CC:67:00:56:6D:39:60:D1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3c:6a:af:59:c1:2d:55:90:f8:22:48:05:23:01:7a:c4:cc: 40:12:39:83:fe:48:21:75:98:d9:44:cb:3d:30:f0:29:4f:2c: bf:58:a1:36:f8:51:05:a9:be:85:7c:89:a6:d4:de:f5:13:2c: ff:e9:aa:1e:70:39:6e:99:b2:1a:51:58:e4:67:19:2b:fe:88: cf:34:75:47:d7:1e:52:2b:f9:a1:98:06:79:f9:67:cd:dc:ad: 08:d5:b0:f2:fc:0c:d1:a4:39:8d:86:72:4b:ca:d0:a4:5d:3f: ef:02:72:0f:67:5d:04:81:12:9d:c7:f5:ee:84:b5:ca:d6:92: 4a:eb:58:a3:83:ce:08:20:fa:1e:b8:d0:b1:8f:b3:d1:48:d3: 70:af:32:f4:80:bb:8f:91:bf:88:5b:2c:22:58:2c:77:e5:11: 02:23:d2:82:b5:bb:ee:85:e1:af:ed:5f:0d:91:fc:88:62:b0: 8b:40:d6:a2:ce:ba:77:7a:56:c0:39:43:6d:73:8e:06:5c:cb: 85:96:9d:58:e4:30:30:9e:7e:66:aa:b9:1a:b1:5f:58:b5:76: a1:80:fe:f5:6a:9f:83:87:c9:82:e2:0b:c8:17:e5:d0:b7:bb: 40:4f:e3:9c:31:2f:69:6f:28:63:3b:59:1e:cd:c8:98:25:e1: 2b:ae:5c:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRHe7STT6G1zOnvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI1MTAxODIyMDAwOFoXDTI1MTAyMDIyMDAwMFowLzEtMCsGA1UEAxMk NmQyNGRiMGItZGIzMS00Y2M3LTlhYzktYjM2ZmU0NTY4ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3eV4vTJtaAhaZSDCy39r6JNU13uuhvXjHX BChmV7oGgbgTuhZg7OJTLddYbQXbhUOaR5mlJqnRkK8abz/odoZXKcXJOm0s+dXV oaKAdxiAI9Lo3eI2gboOOLykvqjAVe67FYrCXCpvbEUm9NyCg6S5Tc0V5ZoHtAlm X0pOJBqKblsLC9sXjncSRuRhLV1X3uKQWF3cezuJAz3mGvau1fm7lmQLfj4+9PPt B4su4KRbS2VMmHVb51uOjf5OxLsaxOZGwrO6q5xDjnEnBzR3X0i57eztHLl87Mfn Y39UscTVBDS525rUvwoBfYybXOiLILLvinZM/dX+9XyTZ1f/TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHSXSoQZxSft+Dn5zGcAVm05YNGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMjA3YzQwZjQtMzNjNC00 NzhiLWFlNjEtZDNmNTEzNTg4ODFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmPGqvWcEtVZD4IkgFIwF6 xMxAEjmD/kghdZjZRMs9MPApTyy/WKE2+FEFqb6FfImm1N71Eyz/6aoecDlumbIa UVjkZxkr/ojPNHVH1x5SK/mhmAZ5+WfN3K0I1bDy/AzRpDmNhnJLytCkXT/vAnIP Z10EgRKdx/XuhLXK1pJK61ijg84IIPoeuNCxj7PRSNNwrzL0gLuPkb+IWywiWCx3 5RECI9KCtbvuheGv7V8NkfyIYrCLQNaizrp3elbAOUNtc44GXMuFlp1Y5DAwnn5m qrkasV9YtXahgP71ap+Dh8mC4gvIF+XQt7tAT+OcMS9pbyhjO1kezciYJeErrly2 -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:39 2025 by rpki-client