$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft File: be8c0be8-820f-49cc-b759-a1cd0b68028b.mft (raw, json) Hash identifier: VJtZ9irfQsNlNO/DA5Q4S7qPjuI0qWrT2ZoLZltBMRc= Subject key identifier: 78:B2:DF:43:21:08:29:A0:F9:27:B0:A6:9D:3D:00:05:B9:C2:19:C9 Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 Certificate issuer: /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Certificate serial: 010D0C9F4328584B93718063C897EE009E82C560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft Manifest number: 010D0C9F43285843F9AB868D8ED2EC70F8C5E5C9 Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: be8c0be8-820f-49cc-b759-a1cd0b68028b.crl (hash: T3mfbTsj1mpLqBDfo6otZ9pLb7i24Pa4GLHCcKrT58s=) 2: ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (hash: wE4VapD7myKIn8I24pHpWmBJ53TdS94thE4PpymGFrE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:80:63:c8:97:ee:00:9e:82:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=8db5ad19-60a6-4729-8cdc-25477125933e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:f5:e4:66:bf:5b:2a:8a:8a:f7:04:2f:d2: e5:b6:29:08:ef:bc:d1:2e:bc:7c:a0:b7:82:f5:92: 53:17:b8:f3:4b:f9:98:5c:20:4f:23:d1:41:dc:75: 52:fe:e8:ba:8e:96:b4:2b:74:f5:38:ea:bb:ac:af: 04:46:06:2f:6e:33:f1:6a:da:2e:1f:c5:cb:68:f4: 42:92:8e:dc:62:60:11:c7:b3:20:36:62:ee:49:60: 36:da:74:f2:81:34:a8:4e:8f:a4:36:83:e1:86:f4: c6:9e:e4:cd:ef:8a:c7:75:84:d0:ca:63:0c:fd:8a: 56:fb:ea:03:08:60:6b:b8:00:4e:8c:00:2a:27:c5: 63:aa:11:60:ee:79:df:2a:de:38:8c:fc:d0:a7:53: 11:99:ca:cc:a5:78:a8:84:33:06:26:a4:41:b4:90: 82:20:76:b5:1a:d4:5c:05:98:cb:15:a7:92:8c:83: 00:1a:f3:c6:70:44:a0:69:18:28:a1:be:b7:27:ad: a9:05:4a:ac:d4:46:d9:0a:de:54:51:18:79:07:17: ae:50:02:dc:2b:ee:9b:0c:e1:a1:74:99:b7:6d:89: c6:36:26:ea:41:d5:72:c6:37:42:23:ff:52:b3:5a: 04:05:6f:5b:49:e6:21:83:2c:3e:11:03:06:cc:de: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B2:DF:43:21:08:29:A0:F9:27:B0:A6:9D:3D:00:05:B9:C2:19:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl X509v3 Authority Key Identifier: keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f4:e5:ea:3c:5f:ed:ff:cc:7f:5c:b8:e0:ac:e1:9b:eb:03: 51:9e:f8:ef:1f:65:67:ff:e0:7a:b5:42:5a:c7:31:fa:4a:9a: 69:3d:03:f6:7a:50:85:e7:68:45:e6:c1:9e:53:15:53:45:ee: 9a:bd:3b:a2:f3:a1:06:b4:3a:49:09:af:79:fc:c5:0b:13:dd: 05:eb:8a:17:7a:85:58:f9:27:69:08:de:98:a4:f6:fb:42:3e: 9a:e5:32:71:a4:48:da:b6:1e:8c:d1:2b:de:79:4c:e0:c2:49: b9:46:9c:28:b7:ac:17:32:94:14:3c:15:fb:e9:13:5a:84:75: 86:19:79:57:12:c0:91:e4:a7:fc:0b:5a:22:76:86:ef:75:38: f3:51:17:6b:4d:25:33:fb:11:89:a8:4c:cb:27:9d:f0:68:dc: fe:30:58:7f:c4:53:13:db:9e:b6:e0:34:d4:42:e8:34:e3:99: a9:4b:18:a2:14:5a:20:c8:a7:83:52:40:c1:b1:66:d1:94:43: e3:c7:18:14:7b:b7:6d:50:6c:1b:e8:8b:16:00:35:2d:d1:86: 8b:9f:78:f5:e2:ec:f4:64:07:f4:0a:89:09:54:47:99:19:c7: 3a:87:21:eb:f7:2a:cb:4a:07:3d:bc:06:3d:b0:e6:4e:6d:62: 43:90:f0:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYBjyJfuAJ6CxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU4YzBiZTgtODIwZi00OWNjLWI3NTktYTFjZDBiNjgw MjhiMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk OGRiNWFkMTktNjBhNi00NzI5LThjZGMtMjU0NzcxMjU5MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvv15Ga/WyqKivcEL9LltikI77zRLrx8oLeC 9ZJTF7jzS/mYXCBPI9FB3HVS/ui6jpa0K3T1OOq7rK8ERgYvbjPxatouH8XLaPRC ko7cYmARx7MgNmLuSWA22nTygTSoTo+kNoPhhvTGnuTN74rHdYTQymMM/YpW++oD CGBruABOjAAqJ8VjqhFg7nnfKt44jPzQp1MRmcrMpXiohDMGJqRBtJCCIHa1GtRc BZjLFaeSjIMAGvPGcESgaRgoob63J62pBUqs1EbZCt5UURh5BxeuUALcK+6bDOGh dJm3bYnGNibqQdVyxjdCI/9Ss1oEBW9bSeYhgyw+EQMGzN4ppwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHiy30MhCCmg+Sewpp09AAW5whnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThj MGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNkMGI2ODAyOGIvYmU4YzBiZTgtODIwZi00 OWNjLWI3NTktYTFjZDBiNjgwMjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU4YzBiZTgtODIwZi00OWNjLWI3 NTktYTFjZDBiNjgwMjhiL2JlOGMwYmU4LTgyMGYtNDljYy1iNzU5LWExY2QwYjY4 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUIfqVdHsML5CwxNcFkg/RWmP2cQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThjMGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNk MGI2ODAyOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl9OXqPF/t/8x/XLjgrOGb 6wNRnvjvH2Vn/+B6tUJaxzH6SpppPQP2elCF52hF5sGeUxVTRe6avTui86EGtDpJ Ca95/MULE90F64oXeoVY+SdpCN6YpPb7Qj6a5TJxpEjath6M0SveeUzgwkm5Rpwo t6wXMpQUPBX76RNahHWGGXlXEsCR5Kf8C1oidobvdTjzURdrTSUz+xGJqEzLJ53w aNz+MFh/xFMT25624DTUQug045mpSxiiFFogyKeDUkDBsWbRlEPjxxgUe7dtUGwb 6IsWADUt0YaLn3j14uz0ZAf0CokJVEeZGcc6hyHr9yrLSgc9vAY9sOZObWJDkPDB -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:37 2025 by rpki-client