$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft File: c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft (raw, json) Hash identifier: lNG5/+Q0uG6wI2zk71ZpWrL5+ZLYfRSdnV1RRRBbXe4= Subject key identifier: F0:08:C4:26:20:AB:8E:98:D8:5F:54:6F:17:BD:B0:42:55:56:50:0D Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Certificate serial: 010D0C9F4328584B95E2CF10A18F8FC55AEE00C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft Manifest number: 010D0C9F432858413C6FC80677D648EA2F98F61B Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (hash: 8Ky9UcwEwGgIqwZRydiZ5dcXH7xN8+dFwPtqhluV2GM=) 2: c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl (hash: 6DnObOd030VmPPcz5SzEczw5K1xT7jp6nJkseoPnt/o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cf:10:a1:8f:8f:c5:5a:ee:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=58fb2ef2-62b1-4f03-a4b5-147eb42cd608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:c1:6e:1a:e4:3d:1b:ea:66:9e:3b:70:bd: ec:1a:ed:da:6e:fb:35:8c:2b:5c:40:2f:34:68:79: bc:10:2e:c6:c5:f7:3b:2c:bb:17:a9:12:8e:72:e6: b0:ac:76:c0:68:da:3a:27:67:9e:bb:fa:5b:83:44: 6d:f1:58:c5:7f:13:fe:9a:63:cf:bf:57:61:d7:57: b5:b6:db:00:f3:20:2e:b5:e7:d3:0b:ce:93:54:b9: ac:9d:68:88:93:47:2c:85:eb:a8:8c:6f:c7:5c:fb: 03:b7:64:f6:fd:81:9f:f3:8d:4b:e3:1d:09:03:2a: 4b:9f:c8:d6:23:01:2a:6f:ca:6e:69:d1:cd:a7:ff: 44:64:20:2d:de:5f:6a:08:7f:6a:bd:3a:c6:00:16: 2f:4a:bc:1a:e1:14:02:e0:38:e1:2b:53:50:1e:b3: f1:fb:bb:63:1a:71:0a:ae:0a:b0:d7:b6:62:46:bd: 9d:c9:56:2a:c2:8e:04:35:23:e9:79:53:77:75:f7: a0:06:7c:89:fd:93:b8:50:d9:7f:ca:d0:b0:5f:33: f6:c7:43:ad:34:4a:77:a8:3e:5c:16:4e:9f:a0:d1: 7b:3a:b8:95:8f:27:67:8f:50:58:f9:a0:6c:27:54: b3:fd:dd:1d:bd:7a:71:9c:68:5e:f9:3d:5e:24:4f: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:C4:26:20:AB:8E:98:D8:5F:54:6F:17:BD:B0:42:55:56:50:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl X509v3 Authority Key Identifier: keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5a:00:35:b5:09:51:0c:ad:8f:e0:4c:22:26:32:02:8f:8b: 69:e7:ea:54:19:f3:da:22:d5:04:9d:26:15:73:29:c1:08:5f: 73:f5:a7:ef:29:bd:47:44:b0:9c:15:2b:6c:22:61:85:8c:13: d4:17:dc:65:bd:b9:bf:3c:63:48:64:29:33:50:07:9d:8e:c0: f7:e6:8d:a1:12:e5:e9:4f:28:45:ed:3c:5b:09:97:76:ae:ee: d9:ef:29:14:39:d0:5a:52:7e:f6:de:89:94:e8:45:b8:30:1e: 78:2f:90:ba:1a:f7:1a:3b:35:65:44:af:0e:b3:c0:98:ff:ff: 7b:ec:3a:5f:9d:36:06:cc:24:67:0a:72:25:cd:52:40:38:9e: 93:2d:4d:04:5a:5f:ab:22:f2:0b:0d:bb:67:ce:e8:f2:c9:62: 14:f3:19:b2:7a:0d:14:64:dc:21:c2:68:41:c4:fa:7a:1f:cb: 24:d1:0f:d8:15:35:f2:fb:35:e8:b7:38:cb:bf:4b:aa:e4:81: 65:65:86:39:9b:09:71:9f:d3:1a:f0:45:9a:87:aa:89:fc:76: fb:98:fd:a1:3d:d6:72:8a:20:f9:19:36:57:d7:8b:ff:13:35: fe:54:82:91:bd:fa:ca:34:5f:2a:58:17:26:81:d1:4e:a2:e9: a9:85:4c:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s8QoY+PxVruAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdj ODM5MB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk NThmYjJlZjItNjJiMS00ZjAzLWE0YjUtMTQ3ZWI0MmNkNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWrBbhrkPRvqZp47cL3sGu3abvs1jCtcQC80 aHm8EC7Gxfc7LLsXqRKOcuawrHbAaNo6J2eeu/pbg0Rt8VjFfxP+mmPPv1dh11e1 ttsA8yAutefTC86TVLmsnWiIk0csheuojG/HXPsDt2T2/YGf841L4x0JAypLn8jW IwEqb8puadHNp/9EZCAt3l9qCH9qvTrGABYvSrwa4RQC4DjhK1NQHrPx+7tjGnEK rgqw17ZiRr2dyVYqwo4ENSPpeVN3dfegBnyJ/ZO4UNl/ytCwXzP2x0OtNEp3qD5c Fk6foNF7OriVjydnj1BY+aBsJ1Sz/d0dvXpxnGhe+T1eJE9T1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPAIxCYgq46Y2F9Ubxe9sEJVVlANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Nk NDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvYzNjZDQ2MjUtNjAzNC00 YjNiLTlkOGItNTQxN2NhOTdjODM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNjZDQ2MjUtNjAzNC00YjNiLTlk OGItNTQxN2NhOTdjODM5L2MzY2Q0NjI1LTYwMzQtNGIzYi05ZDhiLTU0MTdjYTk3 YzgzOS5jcmwwHwYDVR0jBBgwFoAUluTtbp4/i42uv7q7CCGjw5vRbtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3 Y2E5N2M4MzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxWgA1tQlRDK2P4EwiJjIC j4tp5+pUGfPaItUEnSYVcynBCF9z9afvKb1HRLCcFStsImGFjBPUF9xlvbm/PGNI ZCkzUAedjsD35o2hEuXpTyhF7TxbCZd2ru7Z7ykUOdBaUn723omU6EW4MB54L5C6 GvcaOzVlRK8Os8CY//977DpfnTYGzCRnCnIlzVJAOJ6TLU0EWl+rIvILDbtnzujy yWIU8xmyeg0UZNwhwmhBxPp6H8sk0Q/YFTXy+zXotzjLv0uq5IFlZYY5mwlxn9Ma 8EWah6qJ/Hb7mP2hPdZyiiD5GTZX14v/EzX+VIKRvfrKNF8qWBcmgdFOoumphUy0 -----END CERTIFICATE-----Generated at Tue Oct 21 15:22:59 2025 by rpki-client