$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft File: 2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft (raw, json) Hash identifier: csLNJLbwm/gWYDvZ/yM8oHYyuQJyTTTLxjWAAml/oJo= Subject key identifier: 14:A9:F0:2F:DC:DB:99:A7:51:EA:7D:DA:C1:CE:00:A9:B1:A3:00:40 Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58 Certificate issuer: /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1 Certificate serial: 010D0C9F4328584B93717B9CD018DE1CF0018100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft Manifest number: 010D0C9F4328584701B9CEF460D395AD55B5165E Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: 2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl (hash: qEY7389CrUZqdH+umBadoGKRsDXTE9Nb1Zng+VZ69uI=) 2: b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (hash: jYt4YrxSd2LMSDam7ZYSrZEfDJEpfk4xAO/9oB+hoMM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7b:9c:d0:18:de:1c:f0:01:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=4ae2795a-dc1b-4790-b7af-055cbdb823ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d6:22:95:f8:8c:bb:15:c5:33:bd:26:30:71: 47:a6:e8:ce:44:ff:8c:79:b2:aa:13:56:c4:a1:0f: 48:5b:ef:99:5f:6f:5e:56:33:37:a6:03:6e:cb:eb: a9:16:8b:c7:a0:db:4d:3e:e1:8b:84:54:07:32:ad: 20:34:ce:53:c1:bf:71:16:cd:8d:0e:97:48:ce:ab: 13:11:17:1a:19:7e:60:c7:23:79:6e:93:bf:af:37: 9f:6b:88:ec:fb:a2:9b:6d:b3:28:37:be:a9:31:10: a8:c7:83:bc:3a:6a:fd:2e:12:eb:2d:4c:ac:b9:b9: eb:09:da:11:f2:29:96:68:b3:2e:f6:4b:b2:1e:0d: 7e:73:85:3a:3a:e9:84:1c:77:42:97:d1:c6:a2:df: e9:03:01:44:92:f8:e2:d1:d0:7b:58:40:4d:df:af: c3:80:1e:e3:33:82:19:89:22:42:dd:a2:37:ef:ce: 48:19:77:7b:77:48:4d:88:84:30:15:b5:c3:5a:00: 34:d0:d4:97:e1:72:dc:23:fd:12:7e:c2:cb:ea:42: 89:42:89:e2:f9:c7:6a:a7:c1:9f:fd:1d:3f:c2:24: 36:ff:81:14:8a:5f:5e:94:04:b7:ab:c3:46:9c:dd: 2c:fe:50:3e:3d:2f:d0:66:d3:b8:10:38:d9:b0:cf: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:F0:2F:DC:DB:99:A7:51:EA:7D:DA:C1:CE:00:A9:B1:A3:00:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl X509v3 Authority Key Identifier: keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c7:05:ab:e4:49:80:3e:c8:8a:d4:fd:82:70:e6:71:c3:59: 3b:bd:84:0a:a4:55:73:6b:d9:3b:5e:62:5a:ee:4e:30:94:6f: 0d:3b:d3:d8:e1:2b:b0:c4:3e:93:a2:fe:9c:e0:c7:4f:15:d1: cb:d1:28:ae:eb:97:98:20:03:b4:06:f5:71:6e:ef:3f:56:fa: 2e:28:31:0b:50:b2:55:a9:ab:7b:16:02:d6:a6:4c:4d:b0:64: 29:af:59:01:d3:32:2a:43:54:6a:15:4a:72:59:e2:5e:b4:1a: 82:7c:f2:83:63:8c:c2:a2:16:37:0f:92:9a:4e:9d:82:05:95: 8b:f4:de:44:da:70:7a:92:8d:ae:97:00:53:80:23:19:8c:95: 6c:30:3c:f1:a7:15:e6:55:28:3c:87:e3:96:4c:97:b1:24:18: b9:d2:64:e3:cb:23:db:7d:8f:44:ff:18:5a:65:4e:93:5b:fd: c1:66:47:3e:4b:c2:84:cb:cd:7d:9c:e6:57:61:70:e3:04:1b: 2c:e6:93:db:70:1b:ce:60:50:cb:50:30:c3:c0:9f:76:b0:8a: dd:6c:57:42:4a:a9:59:bf:a5:83:80:d8:09:74:de:70:61:9c: c7:ba:4d:45:c6:d9:9c:5f:53:ac:a0:d1:6b:0c:aa:0a:9d:4b: 7d:1d:51:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcXuc0BjeHPABgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc0NWU5Y2MtNjdmZC00NDAwLWExZDAtZDFjOTA1NjVh MGYxMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk NGFlMjc5NWEtZGMxYi00NzkwLWI3YWYtMDU1Y2JkYjgyM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NYilfiMuxXFM70mMHFHpujORP+MebKqE1bE oQ9IW++ZX29eVjM3pgNuy+upFovHoNtNPuGLhFQHMq0gNM5Twb9xFs2NDpdIzqsT ERcaGX5gxyN5bpO/rzefa4js+6KbbbMoN76pMRCox4O8Omr9LhLrLUysubnrCdoR 8imWaLMu9kuyHg1+c4U6OumEHHdCl9HGot/pAwFEkvji0dB7WEBN36/DgB7jM4IZ iSJC3aI3785IGXd7d0hNiIQwFbXDWgA00NSX4XLcI/0SfsLL6kKJQoni+cdqp8Gf /R0/wiQ2/4EUil9elAS3q8NGnN0s/lA+PS/QZtO4EDjZsM82iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSp8C/c25mnUep92sHOAKmxowBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1 ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5MDU2NWEwZjEvMjc0NWU5Y2MtNjdmZC00 NDAwLWExZDAtZDFjOTA1NjVhMGYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjc0NWU5Y2MtNjdmZC00NDAwLWEx ZDAtZDFjOTA1NjVhMGYxLzI3NDVlOWNjLTY3ZmQtNDQwMC1hMWQwLWQxYzkwNTY1 YTBmMS5jcmwwHwYDVR0jBBgwFoAUWj9DLKDBnO58oLQANKOiEe/3KVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5 MDU2NWEwZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSxwWr5EmAPsiK1P2CcOZx w1k7vYQKpFVza9k7XmJa7k4wlG8NO9PY4SuwxD6Tov6c4MdPFdHL0Siu65eYIAO0 BvVxbu8/VvouKDELULJVqat7FgLWpkxNsGQpr1kB0zIqQ1RqFUpyWeJetBqCfPKD Y4zCohY3D5KaTp2CBZWL9N5E2nB6ko2ulwBTgCMZjJVsMDzxpxXmVSg8h+OWTJex JBi50mTjyyPbfY9E/xhaZU6TW/3BZkc+S8KEy819nOZXYXDjBBss5pPbcBvOYFDL UDDDwJ92sIrdbFdCSqlZv6WDgNgJdN5wYZzHuk1FxtmcX1OsoNFrDKoKnUt9HVFn -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:13 2025 by rpki-client