$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: PxUIUhxbm89IOWJmYGU15LSrN51IlYZCnoc1EEEqm+4= Subject key identifier: 77:C2:BF:23:A3:4D:AE:90:3B:8A:C5:B4:9F:B7:54:84:D3:9E:31:72 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584B9441E3075CBA9053CE40A710 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684C3E Signing time: Mon 20 Oct 2025 01:00:03 +0000 Manifest this update: Mon 20 Oct 2025 01:00:03 +0000 Manifest next update: Wed 22 Oct 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: KhTlQWYwDSbMvGpPH/wFOOs4Zzk9/TBvXLOPL3v5Skw=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: DEnrsbBGM39v+GQ6UAaR9gXqa72DrJyookd/IdJ5zWE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:41:e3:07:5c:ba:90:53:ce:40:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Oct 20 01:00:03 2025 GMT Not After : Oct 22 01:00:00 2025 GMT Subject: CN=cc0fbe38-e678-4116-bc1a-27b7641bd693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:f2:53:b9:d1:11:bc:9b:8f:5a:6f:bd:f8: ad:c0:c4:88:02:c9:a6:3e:ce:a9:52:e6:58:61:a8: a7:e7:3d:1c:43:1e:21:47:12:5f:a8:4d:06:28:e0: 13:97:f6:8d:73:0e:44:25:e2:cc:96:55:c0:97:53: 05:e9:5b:99:a2:56:33:c2:ed:74:76:f0:6a:dd:df: a7:b6:59:69:17:cd:9d:2c:c9:20:50:6b:34:68:db: 5d:2c:55:55:54:92:ea:26:76:d0:e7:69:85:60:94: cc:e4:4c:3a:7d:77:7b:17:c9:d1:98:03:97:01:3c: 33:bd:ef:be:af:f6:19:4b:de:14:5f:59:ef:c9:38: 43:d0:02:50:a8:37:55:9b:42:1c:59:3f:63:e2:06: 09:d9:20:90:2f:05:21:0a:52:5d:05:35:f2:ce:ce: a1:e5:dd:87:b1:54:c5:55:65:45:3f:80:13:b1:08: 63:0f:e0:73:71:76:54:41:2a:7b:40:e0:f2:8f:0d: 9f:b2:75:f3:5a:e8:fa:29:e5:77:36:ca:21:4c:87: e2:8f:a7:51:2c:86:79:70:9e:c1:cc:45:fe:ff:dd: d1:25:f0:f0:ce:56:ca:db:96:51:76:20:da:d0:5f: d9:de:14:ce:70:9f:5d:b9:36:bc:00:7d:77:a0:c8: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C2:BF:23:A3:4D:AE:90:3B:8A:C5:B4:9F:B7:54:84:D3:9E:31:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:66:c6:b2:15:8e:ad:4e:cc:14:f7:35:2f:f6:e6:d6:e5:53: b2:c6:13:fa:da:e1:ad:73:20:9e:78:77:e0:18:7b:dc:70:66: ce:a2:ed:6b:e3:e8:8a:3f:4d:cd:71:f2:b5:82:b3:12:93:f9: fb:22:4d:ad:16:ed:59:8d:cc:4a:eb:f8:a5:db:64:1b:e8:e9: 43:04:99:33:4c:0e:e9:a2:91:6a:8b:f0:89:4d:56:76:3c:9d: 4c:3a:c6:7b:36:33:f7:f6:90:a8:68:72:9b:f2:5c:be:42:4e: 0b:40:f3:c5:95:2a:ff:38:31:4b:6a:d1:34:8c:52:8d:dc:51: 4c:f5:96:39:40:6f:01:ca:7e:77:bb:01:da:12:c2:77:86:b9: ba:7d:ae:ac:7c:11:71:f1:43:82:94:6b:fd:d5:e6:e7:a8:bb: 35:5b:91:71:30:5e:ed:24:5b:d5:b5:64:98:e2:36:5e:ec:35: 8f:ab:3a:04:db:91:44:28:3b:25:87:64:54:1d:cd:fa:d7:c2: 78:7c:d8:dd:01:8e:eb:01:21:b6:08:2f:e6:1a:53:a4:6a:db: 31:68:ee:94:76:4a:a8:f2:2b:41:47:6d:86:3a:2e:80:65:45: f1:10:4e:03:98:f6:07:5f:0d:9b:37:29:13:48:58:ed:56:9f: 6b:8a:3c:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUQeMHXLqQU85ApxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MTAyMDAxMDAwM1oXDTI1MTAyMjAxMDAwMFowLzEtMCsGA1UEAxMk Y2MwZmJlMzgtZTY3OC00MTE2LWJjMWEtMjdiNzY0MWJkNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAvyU7nREbybj1pvvfitwMSIAsmmPs6pUuZY Yain5z0cQx4hRxJfqE0GKOATl/aNcw5EJeLMllXAl1MF6VuZolYzwu10dvBq3d+n tllpF82dLMkgUGs0aNtdLFVVVJLqJnbQ52mFYJTM5Ew6fXd7F8nRmAOXATwzve++ r/YZS94UX1nvyThD0AJQqDdVm0IcWT9j4gYJ2SCQLwUhClJdBTXyzs6h5d2HsVTF VWVFP4ATsQhjD+BzcXZUQSp7QODyjw2fsnXzWuj6KeV3NsohTIfij6dRLIZ5cJ7B zEX+/93RJfDwzlbK25ZRdiDa0F/Z3hTOcJ9duTa8AH13oMjEfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHfCvyOjTa6QO4rFtJ+3VITTnjFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYZsayFY6tTswU9zUv9ubW 5VOyxhP62uGtcyCeeHfgGHvccGbOou1r4+iKP03NcfK1grMSk/n7Ik2tFu1ZjcxK 6/il22Qb6OlDBJkzTA7popFqi/CJTVZ2PJ1MOsZ7NjP39pCoaHKb8ly+Qk4LQPPF lSr/ODFLatE0jFKN3FFM9ZY5QG8Byn53uwHaEsJ3hrm6fa6sfBFx8UOClGv91ebn qLs1W5FxMF7tJFvVtWSY4jZe7DWPqzoE25FEKDslh2RUHc3618J4fNjdAY7rASG2 CC/mGlOkatsxaO6Udkqo8itBR22GOi6AZUXxEE4DmPYHXw2bNykTSFjtVp9rijx2 -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:29 2025 by rpki-client