$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft File: 2f9d1f23-406d-4b24-98df-682f42315db5.mft (raw, json) Hash identifier: jGvVJzPNsqXnGYdu3v4KLxc1ZmB9divEC2fP9CEJz9c= Subject key identifier: 0E:CD:55:4B:4B:13:89:7B:67:7C:ED:EA:98:FC:E2:32:13:BB:20:45 Authority key identifier: DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B Certificate issuer: /CN=2f9d1f23-406d-4b24-98df-682f42315db5 Certificate serial: 010D0C9F4328584B92DC8BDC310C32133A269D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft Manifest number: 010D0C9F4328584961B916AD0D664FA33A9E89CE Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 0d5b4427-5549-34ab-8c4b-f2571d399c35.roa (hash: +CXGvgOFpc1PaiaZTV2y/3JdAG8G6B3ZhAnykCSh4T8=) 2: 2f9d1f23-406d-4b24-98df-682f42315db5.crl (hash: Uu37ODDUmwYuPvmfCQcdZir92qOb2KZm5gvK9shJH4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8b:dc:31:0c:32:13:3a:26:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9d1f23-406d-4b24-98df-682f42315db5 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=aa1ced2b-6cfc-42d4-834b-d0dbc7f7c980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:5d:c3:6b:f3:34:c6:7a:54:c9:07:89:d5: 22:dd:57:c9:2c:27:39:14:90:e5:ad:97:db:db:ea: d8:f2:b2:34:6e:97:08:31:74:4c:56:b0:58:68:92: f5:8f:f1:3f:e9:89:65:47:b8:ff:f2:a8:03:de:0e: dc:a1:db:00:f3:48:26:46:f8:8a:76:74:20:59:aa: 09:df:87:7d:f7:c5:c2:e8:b6:9c:4d:cf:34:78:ad: 96:19:67:03:e8:0e:fc:52:ab:42:2d:40:6e:39:d3: 6a:62:c4:e3:1d:d3:d3:95:0f:24:7c:29:34:93:21: 21:13:bb:1f:fb:f9:26:03:95:35:b5:30:7c:09:fb: aa:25:c2:94:05:47:46:a5:23:44:90:af:32:d2:b3: 8c:6b:62:25:04:11:ee:17:ca:2d:ee:00:2b:ab:ec: 7f:59:7c:f8:be:71:3b:fd:51:f3:fd:96:44:c6:08: 83:ff:57:ba:05:09:c9:89:40:1a:a5:73:ae:b9:90: 46:88:8b:76:d8:bf:de:ea:56:f0:d1:69:bd:3b:5c: e8:3a:3e:08:e8:e6:e0:45:65:a2:eb:2d:30:57:34: 5e:61:99:fd:8d:f2:c3:cd:37:03:c6:1c:e8:50:21: e8:2b:c0:a9:3d:da:99:b9:19:be:53:a5:15:46:84: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:55:4B:4B:13:89:7B:67:7C:ED:EA:98:FC:E2:32:13:BB:20:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.crl X509v3 Authority Key Identifier: keyid:DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:66:d5:3a:4b:da:08:46:92:be:fb:fe:6c:a6:78:99:18:eb: 41:4c:3e:5b:c1:d0:9d:5f:a0:65:f4:54:d2:ec:fb:5b:1d:03: fe:cf:00:f8:51:92:93:6c:f1:b7:79:da:e0:c4:ac:65:ba:ed: 03:95:74:d6:01:00:c2:1b:f8:14:6a:09:68:a0:2b:5d:9e:1e: b3:be:0b:10:2a:eb:e8:98:1a:df:22:4b:4c:ac:3a:be:e2:a8: a5:83:14:20:ea:bb:e8:3f:13:5f:16:9c:7a:84:7c:56:ed:07: da:5c:01:30:aa:bf:84:8a:12:12:e6:c2:b8:2e:35:5d:3a:0e: 7f:d5:a2:74:14:e7:29:f5:84:21:cf:a2:f2:72:a1:bc:1d:b7: ce:a5:fc:df:b6:fb:38:b2:2e:b6:ba:6a:79:0e:c2:21:cc:39: 56:e6:43:4c:ca:11:7d:f7:08:57:79:4a:1e:9b:5a:19:2c:7b: 83:72:69:66:7f:ae:90:06:9d:b8:fe:dd:8b:99:b1:6c:48:42: d7:6a:b9:f5:52:c1:a8:24:64:e2:07:44:c8:64:53:c1:44:47: b6:3d:c8:20:e4:67:b8:0a:2f:c6:79:34:70:3f:1b:ed:a5:75: a4:f6:0a:0e:b4:37:3e:0d:7a:4f:f3:d4:6b:af:e0:c1:43:c4: ac:0a:ec:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3IvcMQwyEzomnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5ZDFmMjMtNDA2ZC00YjI0LTk4ZGYtNjgyZjQyMzE1 ZGI1MB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk YWExY2VkMmItNmNmYy00MmQ0LTgzNGItZDBkYmM3ZjdjOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIRdw2vzNMZ6VMkHidUi3VfJLCc5FJDlrZfb 2+rY8rI0bpcIMXRMVrBYaJL1j/E/6YllR7j/8qgD3g7codsA80gmRviKdnQgWaoJ 34d998XC6LacTc80eK2WGWcD6A78UqtCLUBuOdNqYsTjHdPTlQ8kfCk0kyEhE7sf +/kmA5U1tTB8CfuqJcKUBUdGpSNEkK8y0rOMa2IlBBHuF8ot7gArq+x/WXz4vnE7 /VHz/ZZExgiD/1e6BQnJiUAapXOuuZBGiIt22L/e6lbw0Wm9O1zoOj4I6ObgRWWi 6y0wVzReYZn9jfLDzTcDxhzoUCHoK8CpPdqZuRm+U6UVRoS02wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA7NVUtLE4l7Z3zt6pj84jITuyBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZjlk MWYyMy00MDZkLTRiMjQtOThkZi02ODJmNDIzMTVkYjUvMmY5ZDFmMjMtNDA2ZC00 YjI0LTk4ZGYtNjgyZjQyMzE1ZGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmY5ZDFmMjMtNDA2ZC00YjI0LTk4 ZGYtNjgyZjQyMzE1ZGI1LzJmOWQxZjIzLTQwNmQtNGIyNC05OGRmLTY4MmY0MjMx NWRiNS5jcmwwHwYDVR0jBBgwFoAU27tujMtV8a6iQ1CCW434KD5bQRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZjlkMWYyMy00MDZkLTRiMjQtOThkZi02ODJm NDIzMTVkYjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARZtU6S9oIRpK++/5spniZ GOtBTD5bwdCdX6Bl9FTS7PtbHQP+zwD4UZKTbPG3edrgxKxluu0DlXTWAQDCG/gU aglooCtdnh6zvgsQKuvomBrfIktMrDq+4qilgxQg6rvoPxNfFpx6hHxW7QfaXAEw qr+EihIS5sK4LjVdOg5/1aJ0FOcp9YQhz6LycqG8HbfOpfzftvs4si62ump5DsIh zDlW5kNMyhF99whXeUoem1oZLHuDcmlmf66QBp24/t2LmbFsSELXarn1UsGoJGTi B0TIZFPBREe2Pcgg5Ge4Ci/GeTRwPxvtpXWk9goOtDc+DXpP89Rrr+DBQ8SsCuxJ -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:48 2025 by rpki-client