$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft File: 4d96d9f0-6f14-41fe-bf49-eed930201a23.mft (raw, json) Hash identifier: nVJ55LLht5VvXAsoKme6/Ncj2n0J1YC/IidKD8xsid0= Subject key identifier: EB:C1:D3:88:28:AF:07:EE:38:EE:FE:1A:7A:51:C1:B2:96:62:2F:B0 Authority key identifier: 7F:ED:BD:AB:47:6F:A0:C0:D6:F0:38:9D:68:AE:98:EC:54:91:76:83 Certificate issuer: /CN=4d96d9f0-6f14-41fe-bf49-eed930201a23 Certificate serial: 010D0C9F4328584B94F48FDB35FA620350621580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft Manifest number: 010D0C9F43285849F509935DA576AD28F037D316 Signing time: Mon 20 Oct 2025 07:00:03 +0000 Manifest this update: Mon 20 Oct 2025 07:00:03 +0000 Manifest next update: Wed 22 Oct 2025 07:00:00 +0000 Files and hashes: 1: 4d96d9f0-6f14-41fe-bf49-eed930201a23.crl (hash: TvPgpGc7mklt0blUl5XiEMvbGuDyL8ZbTLZXc632gQU=) 2: 89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer (hash: xw3s/GRzCqg0AhjM2W0hJ1l9RHJ4DwsGAkbg1ND0QLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:f4:8f:db:35:fa:62:03:50:62:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d96d9f0-6f14-41fe-bf49-eed930201a23 Validity Not Before: Oct 20 07:00:03 2025 GMT Not After : Oct 22 07:00:00 2025 GMT Subject: CN=5163e85e-427e-456e-a698-9af43e9950ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:e3:90:4c:86:6e:7c:4e:0d:f9:ba:61:d3: 46:a4:d2:fa:52:a1:0e:b7:9a:e7:4e:b0:8c:9b:90: d0:0e:6d:7c:8d:c8:ee:ee:b2:da:7f:53:31:11:d1: a6:b0:45:62:51:a1:05:ad:ac:bd:f2:20:75:fd:e3: 70:26:d0:c3:7d:9c:22:18:03:85:0c:33:51:cb:7c: 6e:ca:bf:2b:7e:22:4f:e4:0b:b9:19:93:cc:19:ff: 71:4d:14:22:30:4f:af:68:13:3b:ce:a9:80:da:9e: da:b7:dc:7d:ca:9f:a9:59:3a:eb:7a:e2:a2:23:ab: d2:7b:35:db:75:0f:48:51:d1:db:26:4c:1a:b9:9d: d5:79:8e:4d:48:3e:6b:e4:a7:5a:eb:ed:08:4a:93: 23:81:b4:e6:22:3f:8c:3c:8b:21:bd:45:9a:d5:d8: 8a:e1:bb:e7:36:37:0f:1d:63:38:db:76:4d:7c:fe: 3d:b9:d1:b0:e0:3f:f7:f0:0b:f8:f4:c6:d5:3d:90: 09:bc:b2:dd:06:c8:24:9e:79:4d:cb:f6:3c:bd:ad: 0c:26:ee:9d:a6:04:2f:73:58:32:0b:24:8c:38:c0: f3:45:0c:70:38:b7:60:e1:2d:95:50:08:d5:8d:76: 73:5e:e8:a6:2f:4f:88:02:9e:29:0c:eb:fb:44:47: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C1:D3:88:28:AF:07:EE:38:EE:FE:1A:7A:51:C1:B2:96:62:2F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl X509v3 Authority Key Identifier: keyid:7F:ED:BD:AB:47:6F:A0:C0:D6:F0:38:9D:68:AE:98:EC:54:91:76:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b6:45:f5:64:6f:08:a7:c9:52:49:1a:e0:5e:df:63:93:2c: b1:40:d1:be:28:d3:53:60:aa:3c:5b:26:77:49:20:c9:5d:4f: e8:08:95:b5:fc:46:e8:81:51:49:72:88:e9:1c:25:15:55:45: 1f:91:8c:9b:a0:3b:f7:67:a1:da:c2:3d:4c:fe:43:81:ab:e9: 19:5d:8e:76:8d:aa:4c:2b:5f:9f:be:93:04:ee:dd:3d:79:b4: 2f:3b:0a:96:fd:68:a1:2f:aa:3a:1c:08:4c:2b:e1:b8:dd:1c: 58:8c:46:d4:e6:20:10:c8:cb:87:fb:3e:d5:4e:46:7a:21:8b: 98:2a:1b:10:72:5d:4b:18:04:9d:50:ef:08:2d:62:8e:1c:b5: 33:e3:95:df:a5:f0:25:a9:4c:56:e0:c3:26:51:c9:9c:01:5e: 96:32:ac:28:95:a1:bd:10:3f:a2:9b:c1:52:28:7e:34:cf:a4: df:b4:7a:d1:34:7f:90:56:c7:dc:58:e5:c9:c0:80:4e:68:68: ee:d3:be:7f:ff:bd:ef:46:44:94:a6:a4:65:eb:d6:02:ea:3b: cc:ae:2c:9f:a3:5c:17:bb:3a:65:a5:88:ca:74:06:bb:f7:b0: 09:95:85:d1:4d:d9:0c:b6:68:5c:d8:fd:ef:45:da:ac:b6:7b: 84:10:14:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU9I/bNfpiA1BiFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5NmQ5ZjAtNmYxNC00MWZlLWJmNDktZWVkOTMwMjAx YTIzMB4XDTI1MTAyMDA3MDAwM1oXDTI1MTAyMjA3MDAwMFowLzEtMCsGA1UEAxMk NTE2M2U4NWUtNDI3ZS00NTZlLWE2OTgtOWFmNDNlOTk1MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9njkEyGbnxODfm6YdNGpNL6UqEOt5rnTrCM m5DQDm18jcju7rLaf1MxEdGmsEViUaEFray98iB1/eNwJtDDfZwiGAOFDDNRy3xu yr8rfiJP5Au5GZPMGf9xTRQiME+vaBM7zqmA2p7at9x9yp+pWTrreuKiI6vSezXb dQ9IUdHbJkwauZ3VeY5NSD5r5Kda6+0ISpMjgbTmIj+MPIshvUWa1diK4bvnNjcP HWM423ZNfP49udGw4D/38Av49MbVPZAJvLLdBsgknnlNy/Y8va0MJu6dpgQvc1gy CySMOMDzRQxwOLdg4S2VUAjVjXZzXuimL0+IAp4pDOv7REdujwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOvB04gorwfuOO7+GnpRwbKWYi+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZDk2 ZDlmMC02ZjE0LTQxZmUtYmY0OS1lZWQ5MzAyMDFhMjMvNGQ5NmQ5ZjAtNmYxNC00 MWZlLWJmNDktZWVkOTMwMjAxYTIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGQ5NmQ5ZjAtNmYxNC00MWZlLWJm NDktZWVkOTMwMjAxYTIzLzRkOTZkOWYwLTZmMTQtNDFmZS1iZjQ5LWVlZDkzMDIw MWEyMy5jcmwwHwYDVR0jBBgwFoAUf+29q0dvoMDW8DidaK6Y7FSRdoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZDk2ZDlmMC02ZjE0LTQxZmUtYmY0OS1lZWQ5 MzAyMDFhMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGtkX1ZG8Ip8lSSRrgXt9j kyyxQNG+KNNTYKo8WyZ3SSDJXU/oCJW1/EbogVFJcojpHCUVVUUfkYyboDv3Z6Ha wj1M/kOBq+kZXY52japMK1+fvpME7t09ebQvOwqW/WihL6o6HAhMK+G43RxYjEbU 5iAQyMuH+z7VTkZ6IYuYKhsQcl1LGASdUO8ILWKOHLUz45XfpfAlqUxW4MMmUcmc AV6WMqwolaG9ED+im8FSKH40z6TftHrRNH+QVsfcWOXJwIBOaGju075//73vRkSU pqRl69YC6jvMriyfo1wXuzplpYjKdAa797AJlYXRTdkMtmhc2P3vRdqstnuEEBRH -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:23 2025 by rpki-client