$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json) Hash identifier: 1WV/oGsFZ2kizk6IbyRw9WQB4BaZdpQrtIvVfQxk7pw= Subject key identifier: 2F:4E:45:00:FD:95:EA:F0:FB:05:E2:D3:83:28:81:99:8A:D8:15:59 Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584B93717F824DFD7A174CD2D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA715E8 Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: 9PGeFsYibX29C3wfUdQsfTmef7O/acT9BGVn8Vo3y2w=) 2: d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer (hash: bnVHlc58Mg0wx2o7yA+CGPNLwczsDsJN9VQkzHBuGPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7f:82:4d:fd:7a:17:4c:d2:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=a0ebc532-c06d-47b0-8cc1-ba4b0b11bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:4e:34:47:93:17:6e:1c:2a:6e:15:b3:60: 65:b7:0a:85:a9:08:75:1e:ed:35:0a:f5:de:3a:43: 65:9d:e3:99:65:ab:fb:c1:0c:12:ee:bd:96:66:82: f9:95:95:03:7e:6a:b5:83:97:9f:1d:a0:ee:f1:58: 7b:af:b1:c3:47:52:67:15:b0:fe:d9:04:3d:a1:c8: d9:b7:cb:a3:c6:eb:20:fb:59:40:11:91:f4:b5:b5: 0f:20:e1:91:2c:5c:1c:37:66:f2:44:ba:df:e9:85: 88:d9:6b:4d:77:e1:b9:35:33:bd:7a:54:8d:27:b3: fa:93:7b:7a:75:83:f3:e6:68:1b:98:e7:39:76:88: 8c:65:42:e4:46:b4:0c:3e:d8:eb:be:13:aa:6e:84: cb:d2:5d:a3:e1:f0:02:1e:0c:86:26:d4:c1:54:28: 94:f9:a9:86:8f:80:02:64:0e:97:5a:4e:b1:b9:4d: 1e:60:27:64:8c:bb:16:33:1b:51:33:d2:ec:7c:c5: 44:f9:6b:9c:97:57:b9:0a:22:2e:ae:65:69:6d:40: 1d:1d:c1:b0:6d:a5:13:3f:74:b8:39:aa:b8:23:01: c8:35:89:96:40:fa:6e:e9:2b:69:36:15:f8:5d:96: 0f:17:b0:b8:f3:32:c2:da:bd:1a:fc:ba:bc:f2:a9: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:45:00:FD:95:EA:F0:FB:05:E2:D3:83:28:81:99:8A:D8:15:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:44:47:e9:65:da:b7:75:25:8f:84:ca:80:95:13:57:1d:3a: 20:72:73:1a:fd:1c:6d:b9:7f:1d:4f:77:fd:40:9c:a8:bd:4b: f4:d4:e0:14:d6:4b:58:2a:59:62:46:93:f8:bb:b0:14:0b:46: 61:34:00:7a:1f:01:1d:12:9a:f6:d9:05:0a:dc:a9:c7:ac:63: 26:86:5d:05:80:21:e6:25:5a:41:14:71:cf:e3:9b:8c:f2:67: 64:7a:a9:6d:33:6d:3a:73:d0:18:5d:fc:68:60:15:d1:89:2a: b2:b9:36:82:e5:89:e8:9f:d2:7d:b8:77:0c:ac:81:86:9d:ce: 12:11:56:0a:79:fe:09:be:d4:99:28:c2:fd:7c:fc:e1:1d:9f: e4:32:a8:b8:18:77:f8:f3:d4:f5:dc:45:fd:47:64:0b:a2:f5: a3:27:6e:f6:97:42:1e:ca:d7:f6:76:a3:41:7c:1a:d2:bc:3f: e7:58:c4:e0:be:03:d6:4b:9f:b5:0f:2d:3d:f5:41:21:6e:d5: 9f:c1:f7:fc:7a:af:5a:11:94:6a:45:9c:41:ca:af:f2:98:c0: 9a:bf:aa:4c:d7:90:b0:8f:f3:90:46:64:e6:43:72:6e:62:f4: ab:b1:ab:05:ab:95:e0:b0:74:ce:1f:17:9b:a8:08:ff:88:6e: dd:04:38:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcX+CTf16F0zS0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk YTBlYmM1MzItYzA2ZC00N2IwLThjYzEtYmE0YjBiMTFiZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktNONEeTF24cKm4Vs2BltwqFqQh1Hu01CvXe OkNlneOZZav7wQwS7r2WZoL5lZUDfmq1g5efHaDu8Vh7r7HDR1JnFbD+2QQ9ocjZ t8ujxusg+1lAEZH0tbUPIOGRLFwcN2byRLrf6YWI2WtNd+G5NTO9elSNJ7P6k3t6 dYPz5mgbmOc5doiMZULkRrQMPtjrvhOqboTL0l2j4fACHgyGJtTBVCiU+amGj4AC ZA6XWk6xuU0eYCdkjLsWMxtRM9LsfMVE+Wucl1e5CiIurmVpbUAdHcGwbaUTP3S4 Oaq4IwHINYmWQPpu6StpNhX4XZYPF7C48zLC2r0a/Lq88qlNkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC9ORQD9lerw+wXi04MogZmK2BVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00 YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1 ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0 MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdREfpZdq3dSWPhMqAlRNX HTogcnMa/RxtuX8dT3f9QJyovUv01OAU1ktYKlliRpP4u7AUC0ZhNAB6HwEdEpr2 2QUK3KnHrGMmhl0FgCHmJVpBFHHP45uM8mdkeqltM206c9AYXfxoYBXRiSqyuTaC 5Ynon9J9uHcMrIGGnc4SEVYKef4JvtSZKML9fPzhHZ/kMqi4GHf489T13EX9R2QL ovWjJ272l0Ieytf2dqNBfBrSvD/nWMTgvgPWS5+1Dy099UEhbtWfwff8eq9aEZRq RZxByq/ymMCav6pM15Cwj/OQRmTmQ3JuYvSrsasFq5XgsHTOHxebqAj/iG7dBDiL -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:59 2025 by rpki-client