$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft File: 04c216c1-5924-4a66-9346-a1f215800ceb.mft (raw, json) Hash identifier: QKXHRb/rr3fYQNiod0JZhpyaP4twCfZyRn3WRrEVd10= Subject key identifier: 96:26:D9:68:0A:96:E5:C2:49:FC:37:89:25:52:BB:24:04:01:3C:37 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584B954DF229CC0960EB25D48500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft Manifest number: 010D0C9F432858415AC3099EB8CEE51DC161B206 Signing time: Mon 20 Oct 2025 10:00:09 +0000 Manifest this update: Mon 20 Oct 2025 10:00:09 +0000 Manifest next update: Thu 23 Oct 2025 10:00:00 +0000 Files and hashes: 1: 04c216c1-5924-4a66-9346-a1f215800ceb.crl (hash: MdT7XUIJG80DPSZ8/GjaPobh797mLI5dlbmyx1GcGso=) 2: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (hash: N7UNuaSl3IYm72/ZBaj7n9tk8crXY+D+uSh8byt+Twc=) 3: 6b6443a0-cb19-30e9-83ff-997349a7b259.roa (hash: SXifBSMAPIg/AzTFnscpSYS1/MWE9sENglbDeNsZwVE=) 4: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (hash: xwOJ7rghoZuePNIx5E3lHeUYXZgcwZOdIvIM8suJpWs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:4d:f2:29:cc:09:60:eb:25:d4:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Oct 20 10:00:09 2025 GMT Not After : Oct 23 10:00:00 2025 GMT Subject: CN=a08cd55e-cb42-4476-8664-c94e3001b711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:72:58:68:a9:a4:bf:c5:ea:6c:c4:b8:f1:ac: 3d:44:96:9f:48:40:2a:05:f9:92:7b:f2:bc:d0:e8: 86:ad:5e:15:c7:ba:8e:99:b5:e0:20:6e:cb:ff:dd: d8:50:ad:c7:ec:8b:3e:65:8d:96:58:85:53:33:50: b1:f1:03:c7:8f:14:b6:cf:6d:e3:4e:6d:bc:66:21: 21:53:53:18:3a:af:42:d6:6a:84:58:eb:7e:15:bd: 77:3a:87:87:81:a9:ff:57:22:7d:ea:a2:ae:86:3c: dc:73:6f:4b:d1:11:25:39:35:fa:0c:9a:14:73:96: 3e:91:0c:64:22:f6:24:0f:a7:c2:67:57:f7:2c:27: 9c:b6:54:22:84:5c:5e:d8:93:35:e5:2e:0a:48:fa: 30:4c:b6:21:37:4c:00:26:04:99:01:b7:da:de:69: 24:ed:a9:5e:61:bd:25:48:92:96:c1:72:e4:53:89: c4:c2:f0:80:31:f7:3c:8e:22:0c:36:c5:c6:e4:4b: 5b:69:ef:b5:94:9d:b4:86:a8:1c:9a:68:6f:75:d1: 6b:70:1a:31:44:d5:93:db:76:2e:74:a7:da:bf:71: 18:eb:77:c7:4c:d5:05:f9:80:8e:e4:e7:d4:89:1c: 2d:f2:03:14:50:b5:b1:82:ad:89:00:e6:56:47:37: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:D9:68:0A:96:E5:C2:49:FC:37:89:25:52:BB:24:04:01:3C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d8:aa:74:b8:d4:19:01:c0:eb:1f:a6:78:14:38:19:de:5b: 29:cc:a9:0c:e4:53:5b:be:61:bf:05:bc:fe:44:16:62:c9:e9: 5f:d2:ee:89:de:9d:6c:bf:da:c0:94:e1:42:be:22:ed:a5:8b: 43:57:42:91:9b:99:1a:16:fd:9b:37:f8:13:30:92:0d:03:f0: 48:88:21:f0:00:61:92:0b:e2:08:3d:e5:c6:ab:47:9c:29:26: 7c:24:63:f1:0a:1f:ba:bd:66:37:94:66:37:34:f8:85:81:7e: 38:10:82:86:69:a1:2e:40:a2:c6:57:5d:af:e8:1a:97:7f:87: 73:7c:89:ae:4f:2e:c4:09:a2:37:d4:df:1d:95:ab:fa:a6:d4: dc:98:a6:67:66:11:47:5d:5d:61:60:74:66:3b:00:ac:5c:38: 29:15:3b:a5:bd:55:75:aa:6e:40:22:bf:8c:95:10:2b:ff:ea: a4:dd:b5:2f:4b:3f:98:b1:e1:34:75:8a:ff:69:f4:98:bc:14: f7:92:8a:e4:f6:e7:31:56:07:1a:f5:b4:7d:22:ce:fc:5b:52: 31:1d:3d:6c:44:4f:97:7c:2c:7c:06:a6:1f:22:8f:95:8f:62: 81:fd:1a:98:63:4b:04:9d:f8:42:2f:b7:87:21:d9:9d:79:15: 62:89:bc:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVTfIpzAlg6yXUhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MTAyMDEwMDAwOVoXDTI1MTAyMzEwMDAwMFowLzEtMCsGA1UEAxMk YTA4Y2Q1NWUtY2I0Mi00NDc2LTg2NjQtYzk0ZTMwMDFiNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HJYaKmkv8XqbMS48aw9RJafSEAqBfmSe/K8 0OiGrV4Vx7qOmbXgIG7L/93YUK3H7Is+ZY2WWIVTM1Cx8QPHjxS2z23jTm28ZiEh U1MYOq9C1mqEWOt+Fb13OoeHgan/VyJ96qKuhjzcc29L0RElOTX6DJoUc5Y+kQxk IvYkD6fCZ1f3LCectlQihFxe2JM15S4KSPowTLYhN0wAJgSZAbfa3mkk7aleYb0l SJKWwXLkU4nEwvCAMfc8jiIMNsXG5Etbae+1lJ20hqgcmmhvddFrcBoxRNWT23Yu dKfav3EY63fHTNUF+YCO5OfUiRwt8gMUULWxgq2JAOZWRze0vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJYm2WgKluXCSfw3iSVSuyQEATw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvMDRjMjE2YzEtNTkyNC00 YTY2LTkzNDYtYTFmMjE1ODAwY2ViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT2Kp0uNQZAcDrH6Z4FDgZ 3lspzKkM5FNbvmG/Bbz+RBZiyelf0u6J3p1sv9rAlOFCviLtpYtDV0KRm5kaFv2b N/gTMJINA/BIiCHwAGGSC+IIPeXGq0ecKSZ8JGPxCh+6vWY3lGY3NPiFgX44EIKG aaEuQKLGV12v6BqXf4dzfImuTy7ECaI31N8dlav6ptTcmKZnZhFHXV1hYHRmOwCs XDgpFTulvVV1qm5AIr+MlRAr/+qk3bUvSz+YseE0dYr/afSYvBT3kork9ucxVgca 9bR9Is78W1IxHT1sRE+XfCx8BqYfIo+Vj2KB/RqYY0sEnfhCL7eHIdmdeRViibwL -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:40 2025 by rpki-client