$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft File: 0b689f43-cae9-48ce-aef4-680ca5613c03.mft (raw, json) Hash identifier: BFK08YbKVig7alQpq2YcG8wKitq8uoorF35wK/1a0v4= Subject key identifier: 1E:B3:2C:5A:35:67:33:DC:D8:1B:2A:C6:3E:D8:E8:E5:CF:6B:F8:46 Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 Certificate issuer: /CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Certificate serial: 010D0C9F4328584B95C506BE5D08DD149BD3B700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft Manifest number: 010D0C9F43285841822CFCCF87820EC23EBD41D3 Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 0b689f43-cae9-48ce-aef4-680ca5613c03.crl (hash: LwI6ykfkeT0Zch/eL8xcqlmLjmAKkqvfxuWgk8UwboI=) 2: e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (hash: TCakHkdOrq2qaV2KYBtj7D/8vnTiRaeP37V8SiGfVpE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:06:be:5d:08:dd:14:9b:d3:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=a7624eb5-bd89-4f73-8eb9-e8e29836b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:2a:e8:23:95:76:9c:38:c2:81:d7:f6:5f: 7b:6b:0f:27:1f:ae:64:e1:b6:fb:3e:d9:98:a0:d2: aa:36:c6:ab:a9:13:81:1f:20:11:dd:8f:44:55:db: be:f4:e3:db:9b:23:c3:78:93:2c:e9:16:05:73:a3: 29:40:ef:f3:ae:77:0c:bd:8a:e5:3b:e8:60:ad:e9: 51:0d:e3:c7:6f:87:3f:39:12:46:a2:69:89:9f:6c: 0c:17:55:fd:db:24:6f:05:59:06:6c:91:35:39:67: 12:4a:79:34:29:f2:9d:07:98:25:9a:ff:ff:1a:66: c6:ce:01:53:78:46:58:1e:f3:4e:88:0b:c9:e4:98: ca:de:5c:7f:21:ac:c7:4a:a0:fe:2a:1d:40:60:99: 6f:bf:fd:48:e9:73:77:08:aa:6c:75:e4:c7:db:0a: 7f:31:54:dc:95:3a:48:b1:36:86:b3:b7:21:43:f0: 35:b3:13:57:30:89:95:73:d3:98:8f:1f:5c:b8:91: 6e:36:af:e9:03:e7:ee:c5:da:c7:40:a9:f0:44:dc: 6c:f9:b8:50:93:fc:f0:d8:22:12:df:78:10:78:68: 16:cb:96:69:18:e5:21:5a:39:04:b3:86:62:d6:b9: c0:0d:f1:4d:ac:f1:04:c9:d1:57:b2:e7:2b:a7:8b: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:2C:5A:35:67:33:DC:D8:1B:2A:C6:3E:D8:E8:E5:CF:6B:F8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl X509v3 Authority Key Identifier: keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6d:8d:14:e6:70:f6:fd:57:da:11:c2:34:56:e4:cb:31:ff: bf:23:2f:95:62:a5:6d:c7:93:5f:5a:d4:1e:05:ec:7f:c4:47: f4:93:8f:51:db:32:db:b7:46:55:32:0d:aa:60:69:17:28:a9: 96:18:23:44:9a:b3:b2:ac:db:c3:ab:64:fc:51:fb:60:62:34: ef:79:6f:eb:0e:31:4b:03:27:b4:1a:fe:61:3e:11:3e:d5:ad: 1d:79:4b:c8:31:28:6b:de:7e:d1:dd:51:4c:56:fe:e0:82:37: e4:bb:ee:37:7e:39:f3:7b:c3:9c:db:1b:98:26:61:b1:57:e6: 7d:2d:f8:4a:cd:5d:50:2d:cd:7a:78:e5:c8:46:3d:72:f4:1d: 33:3c:78:82:93:e5:3b:4d:78:06:75:50:9d:53:cc:27:d2:b2: e3:b0:77:8f:29:cd:ba:89:bc:40:6c:25:9e:f1:39:42:48:d5: d9:a8:f5:5f:7e:2e:f8:87:60:02:05:7c:5e:22:ac:2d:61:69: 7c:c9:5e:b7:b1:c9:92:87:c6:01:21:e3:e8:b4:ed:9f:f3:e1: a7:be:83:eb:a6:34:c2:6d:32:a3:57:b8:85:cb:8f:04:fd:d7: b4:bb:27:70:de:a0:96:a2:69:5a:44:7a:23:71:25:c9:ae:60: b2:6a:41:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQa+XQjdFJvTtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2ODlmNDMtY2FlOS00OGNlLWFlZjQtNjgwY2E1NjEz YzAzMB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk YTc2MjRlYjUtYmQ4OS00ZjczLThlYjktZThlMjk4MzZiMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxMq6COVdpw4woHX9l97aw8nH65k4bb7PtmY oNKqNsarqROBHyAR3Y9EVdu+9OPbmyPDeJMs6RYFc6MpQO/zrncMvYrlO+hgrelR DePHb4c/ORJGommJn2wMF1X92yRvBVkGbJE1OWcSSnk0KfKdB5glmv//GmbGzgFT eEZYHvNOiAvJ5JjK3lx/IazHSqD+Kh1AYJlvv/1I6XN3CKpsdeTH2wp/MVTclTpI sTaGs7chQ/A1sxNXMImVc9OYjx9cuJFuNq/pA+fuxdrHQKnwRNxs+bhQk/zw2CIS 33gQeGgWy5ZpGOUhWjkEs4Zi1rnADfFNrPEEydFXsucrp4sczQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB6zLFo1ZzPc2Bsqxj7Y6OXPa/hGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4 OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBjYTU2MTNjMDMvMGI2ODlmNDMtY2FlOS00 OGNlLWFlZjQtNjgwY2E1NjEzYzAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGI2ODlmNDMtY2FlOS00OGNlLWFl ZjQtNjgwY2E1NjEzYzAzLzBiNjg5ZjQzLWNhZTktNDhjZS1hZWY0LTY4MGNhNTYx M2MwMy5jcmwwHwYDVR0jBBgwFoAUzRRR5j5SiuodyrEPvWB0YXZZsaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBj YTU2MTNjMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZbY0U5nD2/VfaEcI0VuTL Mf+/Iy+VYqVtx5NfWtQeBex/xEf0k49R2zLbt0ZVMg2qYGkXKKmWGCNEmrOyrNvD q2T8UftgYjTveW/rDjFLAye0Gv5hPhE+1a0deUvIMShr3n7R3VFMVv7ggjfku+43 fjnze8Oc2xuYJmGxV+Z9LfhKzV1QLc16eOXIRj1y9B0zPHiCk+U7TXgGdVCdU8wn 0rLjsHePKc26ibxAbCWe8TlCSNXZqPVffi74h2ACBXxeIqwtYWl8yV63scmSh8YB IePotO2f8+GnvoPrpjTCbTKjV7iFy48E/de0uydw3qCWomlaRHojcSXJrmCyakGt -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:39 2025 by rpki-client