$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft File: e25d686e-0b40-4450-bc73-6a20b06135f1.mft (raw, json) Hash identifier: s22ySQFBz9l023CSbySnzggKyxHBqpFb4hfRC3P3NXo= Subject key identifier: 68:D1:EE:B9:64:63:12:6A:DD:C7:4C:C3:ED:B8:FA:4D:B2:7E:C7:B2 Authority key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45 Certificate issuer: /CN=e25d686e-0b40-4450-bc73-6a20b06135f1 Certificate serial: 010D0C9F4328584B9677B08D1C8ADADCB51061C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft Manifest number: 010D0C9F4328584073A826651FD430DABD4F8D1E Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 8461ce34-cf4c-3612-a529-a4a783652d59.roa (hash: akH7BPz7AGZn7TsNa6pD3q9/wYTJ8KpobaYikjdEoQU=) 2: e25d686e-0b40-4450-bc73-6a20b06135f1.crl (hash: 0kI1ZtKtKMFkhj/19iAK1gnmBDffcFPl1y9dEVySdzI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b0:8d:1c:8a:da:dc:b5:10:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e25d686e-0b40-4450-bc73-6a20b06135f1 Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=d4ded797-9436-451a-aedc-0df6a152552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:2a:ab:4e:eb:9f:37:00:5e:2c:8a:ce:37: 03:3c:95:1f:ce:fa:ff:e0:c3:42:2a:fc:d1:4d:f5: 5b:78:62:fe:93:57:aa:a0:62:05:a1:28:77:57:ae: 88:9e:23:c8:0d:18:02:69:63:bc:bf:a6:a3:f8:a5: a9:c4:cb:60:cd:e2:79:d1:04:a9:15:e2:2c:b0:95: ac:7d:e9:9e:4d:bf:df:f4:b5:3f:ad:64:e1:6a:0f: c9:db:77:bc:4d:0c:cb:64:94:e3:ea:46:36:c3:c4: 04:0c:60:a3:77:e9:7e:b5:61:22:ae:f6:36:90:79: df:80:fd:f0:49:06:7f:9b:4d:b5:36:2a:13:b4:7c: 61:7a:30:50:52:ae:b6:0b:ec:bc:b7:a9:0d:53:74: 2a:6f:ab:49:87:12:85:23:c8:ec:84:cf:7d:c2:ec: 4d:4f:a7:d6:78:88:d7:8a:0f:a9:1a:fd:08:d0:1e: c2:2e:6c:9e:ea:ee:c7:50:64:70:26:53:2e:09:44: 3a:f5:03:48:68:b5:1d:2b:b5:15:80:9e:be:e5:4f: 1b:a0:40:28:51:ad:11:52:48:96:7c:b2:2a:80:8b: 95:5d:14:8a:ec:ad:9c:90:c6:17:79:46:17:7d:f6: 9e:bf:75:0c:c3:71:32:11:a2:55:e5:c5:6d:e4:35: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:EE:B9:64:63:12:6A:DD:C7:4C:C3:ED:B8:FA:4D:B2:7E:C7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl X509v3 Authority Key Identifier: keyid:C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:20:68:74:0c:51:29:01:58:0e:82:b8:55:9f:49:c1:3d:57: a3:1e:94:76:0c:1c:a0:d4:25:45:5b:61:74:f8:ea:b6:9d:23: 11:e2:88:de:b2:93:f1:22:c7:41:29:0e:37:2c:ba:1e:30:8f: 5b:6b:a0:c6:ac:30:b6:47:49:3b:23:96:b9:85:e8:d6:63:ea: e2:03:25:87:34:24:7b:c1:ca:97:44:41:bb:05:22:48:89:a1: 93:ce:f8:d3:49:40:27:70:ab:8b:37:e9:2e:e5:e4:71:83:1a: 70:e5:ed:ac:e0:60:19:95:32:57:20:c7:3c:a9:0b:25:de:4a: 89:2c:46:4a:e4:d2:f2:44:ae:12:aa:91:84:cf:9a:49:ff:74: 3f:ab:db:ed:7d:08:93:b6:77:cc:98:88:51:fe:db:ab:bc:d3: 22:3c:be:c4:3d:02:54:67:9d:9d:0b:e3:67:5c:49:04:68:0c: b4:a9:b2:31:73:c7:8b:ad:1e:b4:d8:5f:59:c1:ad:2e:f7:ca: 18:9e:86:c0:ba:d0:fe:82:4c:90:f2:97:e1:8f:43:3a:f3:ea: e4:a5:c1:48:71:2c:44:20:74:cb:c9:aa:4e:4a:5b:65:f9:db: bf:84:56:65:06:2d:9e:49:87:42:eb:23:5a:41:aa:52:e9:00: 2c:39:f3:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7CNHIra3LUQYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTI1ZDY4NmUtMGI0MC00NDUwLWJjNzMtNmEyMGIwNjEz NWYxMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk ZDRkZWQ3OTctOTQzNi00NTFhLWFlZGMtMGRmNmExNTI1NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCcqq07rnzcAXiyKzjcDPJUfzvr/4MNCKvzR TfVbeGL+k1eqoGIFoSh3V66IniPIDRgCaWO8v6aj+KWpxMtgzeJ50QSpFeIssJWs femeTb/f9LU/rWThag/J23e8TQzLZJTj6kY2w8QEDGCjd+l+tWEirvY2kHnfgP3w SQZ/m021NioTtHxhejBQUq62C+y8t6kNU3Qqb6tJhxKFI8jshM99wuxNT6fWeIjX ig+pGv0I0B7CLmye6u7HUGRwJlMuCUQ69QNIaLUdK7UVgJ6+5U8boEAoUa0RUkiW fLIqgIuVXRSK7K2ckMYXeUYXffaev3UMw3EyEaJV5cVt5DWcdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGjR7rlkYxJq3cdMw+24+k2yfseyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjVk Njg2ZS0wYjQwLTQ0NTAtYmM3My02YTIwYjA2MTM1ZjEvZTI1ZDY4NmUtMGI0MC00 NDUwLWJjNzMtNmEyMGIwNjEzNWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTI1ZDY4NmUtMGI0MC00NDUwLWJj NzMtNmEyMGIwNjEzNWYxL2UyNWQ2ODZlLTBiNDAtNDQ1MC1iYzczLTZhMjBiMDYx MzVmMS5jcmwwHwYDVR0jBBgwFoAUyCb7B3Hd5j3W7xHiH43MhTc6zEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjVkNjg2ZS0wYjQwLTQ0NTAtYmM3My02YTIw YjA2MTM1ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4IGh0DFEpAVgOgrhVn0nB PVejHpR2DByg1CVFW2F0+Oq2nSMR4ojespPxIsdBKQ43LLoeMI9ba6DGrDC2R0k7 I5a5hejWY+riAyWHNCR7wcqXREG7BSJIiaGTzvjTSUAncKuLN+ku5eRxgxpw5e2s 4GAZlTJXIMc8qQsl3kqJLEZK5NLyRK4SqpGEz5pJ/3Q/q9vtfQiTtnfMmIhR/tur vNMiPL7EPQJUZ52dC+NnXEkEaAy0qbIxc8eLrR602F9Zwa0u98oYnobAutD+gkyQ 8pfhj0M68+rkpcFIcSxEIHTLyapOSltl+du/hFZlBi2eSYdC6yNaQapS6QAsOfOy -----END CERTIFICATE-----Generated at Tue Oct 21 15:46:35 2025 by rpki-client