$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft File: 7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft (raw, json) Hash identifier: 4SKJV2Mqt6R55K0y68Z+MKPb+BVnnVU40cF+tkpj+I8= Subject key identifier: B9:AB:FD:7A:9E:3B:39:EC:86:59:86:2C:C2:7C:EA:A2:FA:0F:97:3B Authority key identifier: FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90 Certificate issuer: /CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb Certificate serial: 010D0C9F4328584B94242B21181E83AADE92DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft Manifest number: 010D0C9F4328584AD384F0FCB1A5D65E2925B849 Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Wed 22 Oct 2025 00:00:00 +0000 Files and hashes: 1: 201265b1-4951-3820-8e93-60eae579759f.roa (hash: BMLXG9G+K51IbX0TLGkHkARuX5/T2Pru/cbIxU/J6as=) 2: 7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl (hash: kvlv31Z/+hWHWnCrhQVYvbkvAxh0VMK/557c82bBHlY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2b:21:18:1e:83:aa:de:92:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 22 00:00:00 2025 GMT Subject: CN=afff408b-0dae-46c1-a497-b2efedf23452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:24:3e:39:f4:03:6c:0e:ab:87:24:71:fa:0d: c3:5c:61:1d:2d:6f:55:99:d2:18:0f:02:3a:ad:1d: 51:05:0f:9c:b6:e1:5f:42:ef:42:ef:99:ff:95:7d: 64:a5:b6:99:bd:f4:1d:89:ee:3c:91:6f:d9:77:33: d4:6b:6d:bc:a8:41:d6:3c:8d:0b:a3:c7:02:15:6d: 28:dc:1c:25:c7:c2:e7:cf:0e:5e:04:6b:c4:65:99: 54:e3:f3:ba:9a:c4:d3:8f:df:3a:8b:50:17:79:e2: 52:8a:b3:95:99:2c:18:7f:40:6d:2d:16:d0:21:da: dd:9e:c9:4a:f6:3d:05:8d:35:bf:41:60:58:c4:79: dc:a4:65:b8:9d:38:64:29:2a:ae:8e:2f:40:02:a9: a3:70:5e:e4:26:69:7a:aa:db:49:74:94:f6:cd:51: 27:71:e3:de:c3:c8:a3:cd:8e:f2:65:70:05:b2:7d: 70:58:03:d1:cd:e7:88:41:4c:b7:e3:4e:ee:0b:7d: ae:81:13:2d:89:5c:46:d9:03:13:51:98:7e:bd:d2: 68:89:4d:d7:cf:74:77:2f:c5:fc:46:71:6b:4c:0a: 6a:94:6a:ea:6c:f1:df:42:09:1b:be:81:db:94:2e: 99:96:32:f8:65:5e:17:be:fc:5f:09:98:07:10:52: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:FD:7A:9E:3B:39:EC:86:59:86:2C:C2:7C:EA:A2:FA:0F:97:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl X509v3 Authority Key Identifier: keyid:FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2c:bc:a0:f3:28:60:63:eb:75:70:99:7e:d6:1b:93:cf:61: a6:32:38:f0:e0:8b:42:d6:b3:a7:28:03:53:c8:08:8a:95:c0: 3a:02:cd:12:43:83:5c:bf:ef:ea:97:77:7d:1c:7c:77:99:c0: d7:db:52:e3:d3:d1:08:25:e8:1a:e7:eb:f4:b5:93:87:04:c1: e0:27:1e:49:9a:31:6e:ad:35:ab:07:2a:7e:fb:69:85:b0:c4: 46:27:b2:b0:e4:80:7b:ba:da:74:61:c2:c8:3d:83:9d:93:96: a1:c8:28:20:4f:a5:e1:09:7d:62:de:71:45:f6:81:e8:e2:e4: b9:7a:21:69:fa:ed:ad:fb:dd:81:fc:76:1d:24:8b:46:76:e6: 3e:c7:6b:7d:b4:6e:86:f1:f7:67:4c:a7:1d:76:5e:9a:0b:ad: f2:c8:92:d6:17:e1:4e:76:cd:41:12:36:e1:20:b8:16:b6:c7: da:cb:e2:27:cf:84:de:c2:b9:53:3b:11:d5:5b:cf:08:bd:28: 7b:54:f4:d1:3f:dd:a1:8c:1b:e2:f7:1f:b3:db:00:2c:ec:ba: 2b:13:7f:8b:8b:14:f1:69:59:fa:d4:e5:bf:e8:14:4b:ed:0a: 99:4c:e1:d3:a2:69:56:51:49:2e:d9:6a:19:6d:33:8d:c7:de: ad:dd:b6:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCshGB6Dqt6S2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RjNTdiZDItNzQ4MS00MGJjLTkxN2ItZGJmM2FhNDlk MGZiMB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMjAwMDAwMFowLzEtMCsGA1UEAxMk YWZmZjQwOGItMGRhZS00NmMxLWE0OTctYjJlZmVkZjIzNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSQ+OfQDbA6rhyRx+g3DXGEdLW9VmdIYDwI6 rR1RBQ+ctuFfQu9C75n/lX1kpbaZvfQdie48kW/ZdzPUa228qEHWPI0Lo8cCFW0o 3Bwlx8Lnzw5eBGvEZZlU4/O6msTTj986i1AXeeJSirOVmSwYf0BtLRbQIdrdnslK 9j0FjTW/QWBYxHncpGW4nThkKSquji9AAqmjcF7kJml6qttJdJT2zVEncePew8ij zY7yZXAFsn1wWAPRzeeIQUy3407uC32ugRMtiVxG2QMTUZh+vdJoiU3Xz3R3L8X8 RnFrTApqlGrqbPHfQgkbvoHblC6ZljL4ZV4XvvxfCZgHEFIIuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLmr/XqeOznshlmGLMJ86qL6D5c7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1 N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYzYWE0OWQwZmIvN2RjNTdiZDItNzQ4MS00 MGJjLTkxN2ItZGJmM2FhNDlkMGZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2RjNTdiZDItNzQ4MS00MGJjLTkx N2ItZGJmM2FhNDlkMGZiLzdkYzU3YmQyLTc0ODEtNDBiYy05MTdiLWRiZjNhYTQ5 ZDBmYi5jcmwwHwYDVR0jBBgwFoAU/DbxZB0S6tZLC8lWmLfsU0unQ5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYz YWE0OWQwZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNLLyg8yhgY+t1cJl+1huT z2GmMjjw4ItC1rOnKANTyAiKlcA6As0SQ4Ncv+/ql3d9HHx3mcDX21Lj09EIJega 5+v0tZOHBMHgJx5JmjFurTWrByp++2mFsMRGJ7Kw5IB7utp0YcLIPYOdk5ahyCgg T6XhCX1i3nFF9oHo4uS5eiFp+u2t+92B/HYdJItGduY+x2t9tG6G8fdnTKcddl6a C63yyJLWF+FOds1BEjbhILgWtsfay+Inz4TewrlTOxHVW88IvSh7VPTRP92hjBvi 9x+z2wAs7LorE3+LixTxaVn61OW/6BRL7QqZTOHTomlWUUku2WoZbTONx96t3bZC -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:43 2025 by rpki-client