$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.mft (raw, json) Hash identifier: tkP+xVBZrzH7To1K4GrI+fvYWKqodWYitUvYzkCIWsk= Subject key identifier: 62:6A:3B:1B:19:10:A7:2F:9A:79:64:9A:6A:34:0D:AD:29:19:43:23 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584B91EE53374497AD436D985C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft Manifest number: 010D0C9F4328584073A83E3481BD656300FDCE13 Signing time: Sun 19 Oct 2025 05:00:03 +0000 Manifest this update: Sun 19 Oct 2025 05:00:03 +0000 Manifest next update: Tue 21 Oct 2025 05:00:00 +0000 Files and hashes: 1: 47727e8f-5ea0-4ad7-a853-5cade93acd74.crl (hash: krmP0O0q+Jwy++dchcm8/Bxtwo0Yxvz6WKwd3f+2TME=) 2: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (hash: nnprOlrl9dXtDeT07gXTlIaNE7CGw5E7tsC90dVQdh4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:ee:53:37:44:97:ad:43:6d:98:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Oct 19 05:00:03 2025 GMT Not After : Oct 21 05:00:00 2025 GMT Subject: CN=f13d911e-81a6-49ef-a1f1-21e1ad742544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:d0:06:60:8a:aa:eb:08:41:10:f6:6a:c9: 62:af:eb:fc:fa:61:b9:c3:39:16:fe:4f:cb:bf:22: ad:89:39:f0:3c:4e:a1:0d:c6:af:9a:02:70:8b:95: 95:2a:53:e1:95:7f:a4:7c:84:79:85:0e:75:ff:4d: e2:9e:81:21:6e:61:f7:e9:7d:75:96:4f:f2:1f:68: 78:0f:73:2a:b2:75:66:99:54:82:5a:20:8e:38:97: 65:e1:b8:d8:77:d0:26:5d:dd:1c:36:a3:97:01:31: 40:56:73:cb:e1:8b:5f:4d:e4:d3:03:98:08:fd:3e: 84:70:3b:c1:27:7f:69:60:c6:61:c9:ab:50:b9:1e: f6:f4:05:df:3d:f4:27:32:a6:0b:02:10:4a:e2:29: c1:fa:9c:d4:21:82:8a:60:ab:6b:0e:43:4d:e6:b3: 2e:3e:a8:80:9b:96:0f:d5:f6:3d:19:74:2e:30:84: 5e:ab:21:fe:16:42:2a:96:4f:e2:61:d8:92:ca:63: 2a:77:19:8c:67:3e:4f:95:a4:8c:7f:5f:d8:51:49: 21:b1:7c:10:3f:60:b2:86:70:d7:f3:10:19:28:6a: 45:d6:89:d9:38:6c:87:26:1b:eb:dc:81:2c:d9:48: 69:49:76:e0:b5:af:ee:70:40:8c:79:ba:ea:90:29: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:3B:1B:19:10:A7:2F:9A:79:64:9A:6A:34:0D:AD:29:19:43:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ea:f0:3f:ce:44:b6:9f:9c:d1:c5:0d:9d:6b:b7:25:10:69: e4:bb:3c:9f:5a:0b:89:51:54:33:54:2a:c7:e2:3f:c2:85:66: d3:e4:fc:b6:f5:13:39:6f:8f:4e:38:6d:87:14:0e:1a:18:03: ab:7c:ab:2d:34:34:91:2f:5d:a0:9f:6b:3d:9d:3a:5f:f4:47: 0e:ef:0c:28:54:45:7b:b8:a4:ec:b5:0f:d9:6e:a4:ed:f2:e9: 77:56:1a:ba:58:ca:61:f6:80:e4:9e:29:8d:e3:f8:98:eb:f9: c4:f2:ba:26:10:e0:28:de:eb:74:24:90:23:14:9a:97:70:a0: 0d:34:c6:2e:9e:8a:92:98:9b:2b:7b:fe:54:11:f2:5e:cc:c8: 5d:9f:5a:7b:57:9c:29:6e:2e:4b:c3:bb:56:6e:c0:a6:45:f0: 41:a0:e5:8b:54:db:9e:88:c3:98:3e:98:ef:a9:9e:89:fc:ed: ac:86:2d:fb:e0:38:44:e4:24:b9:bf:a8:29:db:fd:e6:9b:1c: ce:a3:30:25:17:74:fd:13:78:0d:65:d2:e4:39:c1:92:8a:62: b6:94:02:4e:3b:20:f3:6e:2c:00:65:65:97:82:03:95:e3:1f: 12:49:59:ff:db:74:48:3a:0e:71:7a:10:28:b1:ea:ff:92:10: 05:d3:7e:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuR7lM3RJetQ22YXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MTAxOTA1MDAwM1oXDTI1MTAyMTA1MDAwMFowLzEtMCsGA1UEAxMk ZjEzZDkxMWUtODFhNi00OWVmLWExZjEtMjFlMWFkNzQyNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMHQBmCKqusIQRD2aslir+v8+mG5wzkW/k/L vyKtiTnwPE6hDcavmgJwi5WVKlPhlX+kfIR5hQ51/03inoEhbmH36X11lk/yH2h4 D3MqsnVmmVSCWiCOOJdl4bjYd9AmXd0cNqOXATFAVnPL4YtfTeTTA5gI/T6EcDvB J39pYMZhyatQuR729AXfPfQnMqYLAhBK4inB+pzUIYKKYKtrDkNN5rMuPqiAm5YP 1fY9GXQuMIReqyH+FkIqlk/iYdiSymMqdxmMZz5PlaSMf1/YUUkhsXwQP2CyhnDX 8xAZKGpF1onZOGyHJhvr3IEs2UhpSXbgta/ucECMebrqkCnn9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGJqOxsZEKcvmnlkmmo0Da0pGUMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvNDc3MjdlOGYtNWVhMC00 YWQ3LWE4NTMtNWNhZGU5M2FjZDc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV6vA/zkS2n5zRxQ2da7cl EGnkuzyfWguJUVQzVCrH4j/ChWbT5Py29RM5b49OOG2HFA4aGAOrfKstNDSRL12g n2s9nTpf9EcO7wwoVEV7uKTstQ/ZbqTt8ul3Vhq6WMph9oDknimN4/iY6/nE8rom EOAo3ut0JJAjFJqXcKANNMYunoqSmJsre/5UEfJezMhdn1p7V5wpbi5Lw7tWbsCm RfBBoOWLVNueiMOYPpjvqZ6J/O2shi374DhE5CS5v6gp2/3mmxzOozAlF3T9E3gN ZdLkOcGSimK2lAJOOyDzbiwAZWWXggOV4x8SSVn/23RIOg5xehAoser/khAF034u -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:56 2025 by rpki-client