$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft File: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft (raw, json) Hash identifier: 0jhlCVGUQLAUfLSBy0ADRiXTNI2F8pRDuDF8QBK8Fs0= Subject key identifier: BB:D9:D2:FE:F4:A3:61:F9:69:B9:9D:11:C8:C3:FC:FA:07:76:AB:4C Authority key identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB Certificate issuer: /CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Certificate serial: 010D0C9F4328584B972A6627ED2A89202C9CFCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft Manifest number: 010D0C9F4328584073A836D3D1AF117994886895 Signing time: Tue 21 Oct 2025 02:00:08 +0000 Manifest this update: Tue 21 Oct 2025 02:00:08 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 6377132b-c138-3ca8-903b-d7b5fbef607d.roa (hash: h7mG8oIF3b7Djy7mtwm/TGYhr5kCq3b+zfxQIffhMyE=) 2: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl (hash: I71OdwHIPuzvKtk7DKpDLjxOicgLqh2FwMX4qrzdcNg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:2a:66:27:ed:2a:89:20:2c:9c:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Validity Not Before: Oct 21 02:00:08 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=b21885fa-c508-4dc2-9c94-14ec3fe251fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:e3:36:17:6f:34:00:b5:d9:03:32:69:69: a5:21:b3:99:0d:d3:66:7b:bc:ce:25:47:d1:55:07: 8f:47:71:3e:df:57:8e:a8:75:d5:ec:4f:92:58:70: c7:67:58:a7:27:04:dc:ab:81:b1:e8:92:27:e0:3f: 9e:f5:4e:6d:19:b1:22:76:01:a4:00:f9:f6:a4:d7: 29:d1:1f:4b:d7:bb:f5:b0:4e:37:be:4d:e4:0a:d5: 7e:d9:45:7f:aa:81:d2:1a:90:8c:0b:5a:b8:0e:f0: 7d:0d:fd:75:76:28:85:85:6e:08:20:21:3e:7c:78: 8b:8e:11:06:28:ec:f7:00:40:aa:fc:a9:c9:e1:53: b8:5d:9d:42:34:ef:51:e4:72:05:59:f9:48:6d:a7: c1:a1:42:c9:db:8f:cf:18:6f:62:fe:17:8e:00:9e: 04:ba:e3:af:69:64:6f:82:bd:40:b3:92:3f:21:83: f9:80:10:18:ac:68:08:0c:34:41:54:0d:0e:73:4b: 06:9a:11:69:ca:a5:4b:56:50:8b:65:e0:ba:6e:09: 08:69:dc:fd:c0:43:30:72:1c:be:a3:08:52:9e:be: bd:ef:09:51:af:3a:f6:51:ed:78:a0:e2:8a:7d:9c: 11:89:f6:09:bb:47:e7:ef:ee:79:23:1d:26:9b:95: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D9:D2:FE:F4:A3:61:F9:69:B9:9D:11:C8:C3:FC:FA:07:76:AB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl X509v3 Authority Key Identifier: keyid:D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e8:86:c4:d3:53:04:70:b4:f5:ad:66:c0:2a:20:c9:d5:00: df:61:09:ef:90:6e:78:69:6a:8c:71:df:ab:9d:c5:7a:99:d5: f6:07:44:3a:70:bd:75:b3:bb:49:95:01:9b:c3:be:c9:bc:b7: 6f:d0:ab:9d:bd:aa:0a:82:fb:a1:09:7b:e4:ae:8e:93:67:c2: 9a:d1:57:be:42:32:c5:0c:07:05:db:39:f3:c3:e6:ac:d9:c2: ef:50:c5:72:d9:c7:b1:be:57:54:35:39:f6:0c:05:60:2b:50: f4:7f:aa:12:e6:1e:03:78:88:c9:e0:80:ff:9e:7f:b8:f7:ab: 30:98:2e:7b:38:f5:53:6b:b9:2c:3e:03:df:84:3f:64:13:9f: 67:59:b0:6b:30:71:82:c1:3f:4f:60:7a:57:d8:d7:d1:a8:05: d8:d0:31:e9:bf:06:8a:a4:0d:08:62:b9:b8:9b:3f:44:6f:fc: 0f:c8:ad:f6:02:80:a3:40:91:4e:14:7b:06:ce:d9:9c:08:49: 53:f5:b7:1b:28:df:f7:2c:a0:43:d4:83:f6:d3:7c:57:49:23: f6:b6:34:44:d9:da:b3:95:f4:72:fc:83:fe:e9:12:30:2b:fa: 37:2d:47:67:ba:3a:5d:ff:3f:d5:d0:89:6c:db:14:d3:10:fa: 6b:2a:19:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXKmYn7SqJICyc/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2M1YjUtM2Q4Yi00ZDZkLWFjZjEtNGI3Mjk5ZmJl NGNkMB4XDTI1MTAyMTAyMDAwOFoXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk YjIxODg1ZmEtYzUwOC00ZGMyLTljOTQtMTRlYzNmZTI1MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDrjNhdvNAC12QMyaWmlIbOZDdNme7zOJUfR VQePR3E+31eOqHXV7E+SWHDHZ1inJwTcq4Gx6JIn4D+e9U5tGbEidgGkAPn2pNcp 0R9L17v1sE43vk3kCtV+2UV/qoHSGpCMC1q4DvB9Df11diiFhW4IICE+fHiLjhEG KOz3AECq/KnJ4VO4XZ1CNO9R5HIFWflIbafBoULJ24/PGG9i/heOAJ4EuuOvaWRv gr1As5I/IYP5gBAYrGgIDDRBVA0Oc0sGmhFpyqVLVlCLZeC6bgkIadz9wEMwchy+ owhSnr697wlRrzr2Ue14oOKKfZwRifYJu0fn7+55Ix0mm5XiMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLvZ0v70o2H5abmdEcjD/PoHdqtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3 YzViNS0zZDhiLTRkNmQtYWNmMS00YjcyOTlmYmU0Y2QvYTFiN2M1YjUtM2Q4Yi00 ZDZkLWFjZjEtNGI3Mjk5ZmJlNGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFiN2M1YjUtM2Q4Yi00ZDZkLWFj ZjEtNGI3Mjk5ZmJlNGNkL2ExYjdjNWI1LTNkOGItNGQ2ZC1hY2YxLTRiNzI5OWZi ZTRjZC5jcmwwHwYDVR0jBBgwFoAU1TkV+d8EQOEfbyAEO9JOYLESA6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3YzViNS0zZDhiLTRkNmQtYWNmMS00Yjcy OTlmYmU0Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz6IbE01MEcLT1rWbAKiDJ 1QDfYQnvkG54aWqMcd+rncV6mdX2B0Q6cL11s7tJlQGbw77JvLdv0KudvaoKgvuh CXvkro6TZ8Ka0Ve+QjLFDAcF2znzw+as2cLvUMVy2cexvldUNTn2DAVgK1D0f6oS 5h4DeIjJ4ID/nn+496swmC57OPVTa7ksPgPfhD9kE59nWbBrMHGCwT9PYHpX2NfR qAXY0DHpvwaKpA0IYrm4mz9Eb/wPyK32AoCjQJFOFHsGztmcCElT9bcbKN/3LKBD 1IP203xXSSP2tjRE2dqzlfRy/IP+6RIwK/o3LUdnujpd/z/V0Ils2xTTEPprKhnq -----END CERTIFICATE-----Generated at Tue Oct 21 13:42:44 2025 by rpki-client