$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft File: 04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft (raw, json) Hash identifier: AthHs0RW8be4HJxIuxniYw/3Kz3jqaplzJDw1zF4qS8= Subject key identifier: 89:DB:19:C6:06:0B:7A:8A:A1:09:43:04:E3:14:D0:05:42:23:DB:46 Authority key identifier: 81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97 Certificate issuer: /CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35 Certificate serial: 010D0C9F4328584B94B90F08A161B0BE6FBFB140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft Manifest number: 010D0C9F4328584A61A8B59043664BF78E916E71 Signing time: Mon 20 Oct 2025 05:00:08 +0000 Manifest this update: Mon 20 Oct 2025 05:00:08 +0000 Manifest next update: Thu 23 Oct 2025 05:00:00 +0000 Files and hashes: 1: 04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl (hash: qm9Cb7cRl0J55dXXZSdndJ5qlVGTExM6ReBcDRseJ0M=) 2: 65c07aa6-3363-3bfe-90ce-1f77843ec006.roa (hash: tLAaqfMAlJHKtqVO0R1oqwg0Fml7ox7fBOZaGy97m7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:b9:0f:08:a1:61:b0:be:6f:bf:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35 Validity Not Before: Oct 20 05:00:08 2025 GMT Not After : Oct 23 05:00:00 2025 GMT Subject: CN=471d82fc-a02d-47fc-9727-3c9d61370d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:c9:e5:d0:2a:41:d6:9d:3f:6c:f9:80:16: 4b:94:bd:f5:29:6b:0f:ee:8d:d0:83:de:5f:c9:35: 92:f9:57:2d:e0:83:13:4b:fc:b1:f7:0a:dd:85:df: c9:bf:e8:d1:76:66:8b:e4:b0:77:a1:64:e6:8b:97: 83:df:49:68:78:3d:6b:6b:ac:14:35:ce:d8:3a:89: ae:97:7b:16:c4:56:2a:3e:24:cf:09:4f:cd:14:87: 09:ed:2c:3b:7f:79:b0:24:68:fc:3f:16:eb:a6:d4: b7:6e:10:5c:50:15:90:05:72:68:0a:ed:e3:ed:76: 35:af:6a:cd:1a:a9:f1:ed:79:28:80:34:66:f9:98: 79:63:c4:3e:53:b1:fa:78:26:90:8f:a1:13:0b:87: ac:ba:a9:55:cf:d7:e6:ae:fb:95:aa:66:73:a6:b1: 18:3f:2e:32:63:0f:47:93:f9:7c:d4:8b:d1:65:b8: cd:ff:60:64:b8:a9:ed:74:a4:6b:ae:e8:e3:e7:e8: d0:4f:42:42:f6:61:c7:72:11:3b:05:7e:2c:13:f2: 0f:5d:12:b2:5e:f9:24:cc:77:05:51:ae:b3:62:b6: 9b:c9:a3:05:fb:9d:fd:61:ab:01:b8:cd:39:61:15: 5b:d0:eb:b2:cd:ce:e6:29:b4:5b:5e:04:ad:45:ae: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DB:19:C6:06:0B:7A:8A:A1:09:43:04:E3:14:D0:05:42:23:DB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl X509v3 Authority Key Identifier: keyid:81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:72:13:4c:cc:2e:90:50:e3:17:56:bf:d9:95:34:d9:c0:74: fc:98:1e:8b:cc:bd:e3:b5:ae:ad:9b:42:a5:4c:19:b0:87:09: d4:06:f7:ab:b3:3c:a9:3d:c3:ee:98:40:5c:cf:35:2e:0a:b5: 7f:5a:34:8e:d2:47:cd:a5:d1:50:fc:f3:30:50:bb:e8:a6:ac: da:4d:85:c6:10:ce:7f:dd:3c:de:06:95:b4:03:fd:64:a1:59: 7f:ab:69:95:ab:54:4a:39:e2:f4:aa:db:09:e2:49:30:60:ed: 82:42:e6:12:49:d7:ae:62:02:7e:4d:7b:7e:4c:48:68:3f:cf: 08:79:1a:cd:b7:e5:13:cf:e5:2f:ca:ed:d2:12:ab:b3:e2:c9: 81:43:00:dd:b9:f0:84:70:8c:2f:1b:2f:bc:85:78:06:1c:aa: fe:d2:80:89:fa:8a:35:1d:d2:6d:b6:2a:96:08:bc:45:12:20: 09:0c:d4:17:d2:36:5d:2f:3e:76:ea:1c:50:9f:ea:81:9d:2c: dc:56:99:6c:80:5c:d8:21:6a:cb:ba:d1:81:ae:51:8e:9f:62: 09:21:5f:24:85:05:70:38:af:71:84:bf:44:b3:1b:e5:51:91: f4:41:e9:10:15:52:8a:d7:c1:cc:e5:c7:91:4e:50:f2:e8:d5: d9:fe:20:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUuQ8IoWGwvm+/sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiZGJmMjUtMWMzYS00NTMwLTkzNjQtNWZkYmYyYTZh YTM1MB4XDTI1MTAyMDA1MDAwOFoXDTI1MTAyMzA1MDAwMFowLzEtMCsGA1UEAxMk NDcxZDgyZmMtYTAyZC00N2ZjLTk3MjctM2M5ZDYxMzcwZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBbJ5dAqQdadP2z5gBZLlL31KWsP7o3Qg95f yTWS+Vct4IMTS/yx9wrdhd/Jv+jRdmaL5LB3oWTmi5eD30loeD1ra6wUNc7YOomu l3sWxFYqPiTPCU/NFIcJ7Sw7f3mwJGj8PxbrptS3bhBcUBWQBXJoCu3j7XY1r2rN Gqnx7XkogDRm+Zh5Y8Q+U7H6eCaQj6ETC4esuqlVz9fmrvuVqmZzprEYPy4yYw9H k/l81IvRZbjN/2BkuKntdKRrrujj5+jQT0JC9mHHchE7BX4sE/IPXRKyXvkkzHcF Ua6zYrabyaMF+539YasBuM05YRVb0Ouyzc7mKbRbXgStRa4GjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFInbGcYGC3qKoQlDBOMU0AVCI9tGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJk YmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRiZjJhNmFhMzUvMDRiZGJmMjUtMWMzYS00 NTMwLTkzNjQtNWZkYmYyYTZhYTM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDRiZGJmMjUtMWMzYS00NTMwLTkz NjQtNWZkYmYyYTZhYTM1LzA0YmRiZjI1LTFjM2EtNDUzMC05MzY0LTVmZGJmMmE2 YWEzNS5jcmwwHwYDVR0jBBgwFoAUgYsivkJykLWNl3btL9K1ghugsZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJkYmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRi ZjJhNmFhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC7chNMzC6QUOMXVr/ZlTTZ wHT8mB6LzL3jta6tm0KlTBmwhwnUBverszypPcPumEBczzUuCrV/WjSO0kfNpdFQ /PMwULvopqzaTYXGEM5/3TzeBpW0A/1koVl/q2mVq1RKOeL0qtsJ4kkwYO2CQuYS SdeuYgJ+TXt+TEhoP88IeRrNt+UTz+Uvyu3SEquz4smBQwDdufCEcIwvGy+8hXgG HKr+0oCJ+oo1HdJttiqWCLxFEiAJDNQX0jZdLz526hxQn+qBnSzcVplsgFzYIWrL utGBrlGOn2IJIV8khQVwOK9xhL9EsxvlUZH0QekQFVKK18HM5ceRTlDy6NXZ/iB5 -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:58 2025 by rpki-client