$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: sHKbRQnbrAqUjPLoT9hYM04EBO+dL9/HTxqeNTAJz3o= Subject key identifier: 2B:20:6D:E8:F1:24:1D:77:71:1E:4A:D4:8F:5C:22:5D:81:3A:6C:29 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584B91001A7629AD97A336DAEDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069C0D Signing time: Sat 18 Oct 2025 21:00:03 +0000 Manifest this update: Sat 18 Oct 2025 21:00:03 +0000 Manifest next update: Mon 20 Oct 2025 21:00:00 +0000 Files and hashes: 1: 86181317-6bc3-3829-8e82-a5679c723f33.roa (hash: kyiZynOEBW3gCGdNk/R/k+eXcyAxcqCfO/ZLQF9W91M=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: 1ou9d2k7Rwg09CE7D/BTnI9u7FHhfbN7W45IHo/0P3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:00:1a:76:29:ad:97:a3:36:da:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Oct 18 21:00:03 2025 GMT Not After : Oct 20 21:00:00 2025 GMT Subject: CN=69d806c5-4fbf-488d-9e2c-8ca80c617167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:44:95:ed:56:92:7d:3b:84:01:97:e7:eb: 7e:63:be:81:03:c1:a0:98:2e:30:e5:81:0a:6e:3e: 06:0b:84:76:9a:65:d7:e5:6c:74:3a:61:94:dc:df: e9:c2:1a:1a:11:4d:00:17:7c:a0:a6:4b:1d:d0:47: de:ef:c1:9e:17:8d:57:33:75:45:72:b8:67:24:f9: 57:05:15:ec:87:35:12:70:62:ed:46:86:48:bc:82: e6:13:fd:77:fa:4d:37:8d:af:21:2e:cd:29:20:47: ba:4e:6c:ff:c5:f1:9b:5a:41:6f:24:00:33:7c:64: 32:21:24:3e:02:8b:24:6b:9f:d7:b5:3d:c9:d6:13: 75:e2:ca:9b:59:03:48:88:b8:10:4d:65:7a:c8:e8: 4c:7e:07:1c:5f:4b:6b:82:6d:34:88:a2:80:1b:b5: fc:80:2c:52:b5:5e:22:4f:da:5c:1b:1d:12:17:64: 52:c5:07:61:fe:de:a6:6e:1d:cb:d4:ff:d5:60:47: fe:b8:c9:1f:66:94:27:66:2c:23:37:35:ab:32:37: 20:2d:6e:d1:b4:98:6c:d6:31:c9:58:ee:07:c9:38: ce:7a:49:44:3f:8d:89:43:7a:3d:cc:c2:0a:4c:84: 70:30:fc:3e:d3:f2:88:ae:b3:4d:db:4c:e8:7a:06: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:6D:E8:F1:24:1D:77:71:1E:4A:D4:8F:5C:22:5D:81:3A:6C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f8:83:36:69:d5:47:3d:c9:ac:ee:2c:ea:c5:1d:ac:e8:1b: 31:c0:3d:ba:f2:5f:4f:31:49:fb:7f:65:fa:4b:6d:55:22:4c: 31:4f:5e:be:08:76:d9:3f:c5:66:41:b9:79:10:ee:1e:c2:48: b0:8d:b5:46:8a:0b:12:b2:d7:7f:8f:8c:cf:3a:0f:51:d9:e9: 61:6f:0a:2b:b9:31:25:30:5a:34:11:fc:6b:36:ef:34:bd:09: c1:73:2a:7c:27:a9:ea:b3:ee:f9:de:6a:4c:86:30:1e:ac:c2: be:1d:ac:8c:79:28:b2:61:06:00:41:57:6a:02:b4:be:cf:dd: 50:2a:4c:55:26:b8:df:fe:31:30:a7:14:f2:65:94:eb:66:1c: c4:a2:a9:66:d3:79:bf:0f:48:eb:5d:14:6c:7f:bf:2b:f5:ec: 47:8a:bc:04:97:f2:66:7d:fe:fc:c1:45:73:97:f1:7c:df:bf: aa:4a:ed:7c:7f:8b:bb:39:74:6e:84:dd:06:4f:ff:6e:a2:07: 80:ff:ce:f9:30:5f:34:de:9a:cd:9c:ca:47:84:03:06:de:10: b3:34:22:d2:b2:8c:ae:d7:c3:29:d4:6e:25:a1:c3:7f:77:7f: ec:8e:4e:9f:ac:2f:ff:0e:60:ef:85:c6:0e:b6:d7:53:b0:f3: a9:fb:7e:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRABp2Ka2Xozba7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MTAxODIxMDAwM1oXDTI1MTAyMDIxMDAwMFowLzEtMCsGA1UEAxMk NjlkODA2YzUtNGZiZi00ODhkLTllMmMtOGNhODBjNjE3MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJEle1Wkn07hAGX5+t+Y76BA8GgmC4w5YEK bj4GC4R2mmXX5Wx0OmGU3N/pwhoaEU0AF3ygpksd0Efe78GeF41XM3VFcrhnJPlX BRXshzUScGLtRoZIvILmE/13+k03ja8hLs0pIEe6Tmz/xfGbWkFvJAAzfGQyISQ+ Aoska5/XtT3J1hN14sqbWQNIiLgQTWV6yOhMfgccX0trgm00iKKAG7X8gCxStV4i T9pcGx0SF2RSxQdh/t6mbh3L1P/VYEf+uMkfZpQnZiwjNzWrMjcgLW7RtJhs1jHJ WO4HyTjOeklEP42JQ3o9zMIKTIRwMPw+0/KIrrNN20zoegbBNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCsgbejxJB13cR5K1I9cIl2BOmwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP+IM2adVHPcms7izqxR2s 6BsxwD268l9PMUn7f2X6S21VIkwxT16+CHbZP8VmQbl5EO4ewkiwjbVGigsSstd/ j4zPOg9R2elhbworuTElMFo0EfxrNu80vQnBcyp8J6nqs+753mpMhjAerMK+HayM eSiyYQYAQVdqArS+z91QKkxVJrjf/jEwpxTyZZTrZhzEoqlm03m/D0jrXRRsf78r 9exHirwEl/Jmff78wUVzl/F837+qSu18f4u7OXRuhN0GT/9uogeA/875MF803prN nMpHhAMG3hCzNCLSsoyu18Mp1G4locN/d3/sjk6frC//DmDvhcYOttdTsPOp+360 -----END CERTIFICATE-----Generated at Sun Oct 19 17:29:44 2025 by rpki-client