$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft File: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft (raw, json) Hash identifier: 94sZmmMLmE9nA9iqxlKhj7ziLvLhk6OgXIX90TdFfhY= Subject key identifier: 11:34:DA:D8:E0:03:A8:A7:73:3A:84:68:E0:5A:22:15:01:F9:1F:B6 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584B95C50411A5C62D8B0741DC98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft Manifest number: 010D0C9F4328584A89D8304CA4B246F3B41EE766 Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (hash: BH4a7i2ieCiGXrJuj1rCoGQrExYQkj+mfTsg2Zjym3k=) 2: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl (hash: BPYzThSEdAC5X2vMwMyOd7moQTkHFDfvfeuYdNgaK9U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:04:11:a5:c6:2d:8b:07:41:dc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=e37c3b26-df06-4993-b2bc-c91d2f06d9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:ed:51:4b:4f:4c:05:d8:24:d7:01:52:f0: ce:5a:2f:94:af:8c:50:81:72:7a:4b:59:19:26:c0: 4c:6e:f9:77:ed:98:73:9e:bc:90:e4:43:2e:b4:7c: 8f:8c:d0:3d:b3:fd:78:0a:51:69:4c:a6:90:34:54: df:56:1a:c3:39:d1:a2:6a:2f:f5:26:b5:9a:16:5c: 1e:ce:7f:40:b3:76:ee:10:ef:52:23:9b:26:20:73: 8f:8d:46:74:51:c5:fd:ed:70:6b:3b:3a:88:4a:be: 03:81:ff:5c:36:8e:0e:a5:ad:b1:57:4f:d9:6c:f0: cc:6b:8e:3a:fd:fe:e2:e1:38:7f:7b:c8:70:66:e3: 91:b4:88:0e:e3:2c:27:79:e3:57:06:3b:f1:aa:7b: 2f:dc:dd:80:72:00:73:63:35:30:c0:bd:95:36:0f: ab:77:8d:8a:f1:e5:e0:d8:89:79:ac:8f:a9:67:3c: 8b:12:3a:96:e3:4b:13:b9:59:a9:7b:03:1c:e6:a1: 84:48:c3:44:b6:94:b7:62:b4:ed:f3:4f:d4:1e:2b: da:5d:45:7c:05:24:0e:5a:e0:64:2d:d1:28:ae:d8: 3d:0a:fa:cc:ed:6a:38:bf:b6:4f:07:f5:9a:b7:59: d6:7e:79:91:e9:94:02:b7:6b:c3:e1:48:6b:41:cd: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:DA:D8:E0:03:A8:A7:73:3A:84:68:E0:5A:22:15:01:F9:1F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:6c:50:a1:76:f2:2f:ea:11:7c:87:26:78:e6:ce:5d:d3:37: 03:4c:fa:2a:4b:68:8a:85:cd:a0:c7:a8:a3:e2:e4:92:87:b5: a9:32:4c:a9:3d:88:6d:10:00:62:e3:a1:4d:06:3b:f9:fe:20: b0:ce:4d:67:87:74:80:56:cb:68:70:d8:de:7d:d2:5c:37:c5: c1:52:fb:89:e7:b0:1d:82:89:f9:b8:02:60:48:97:6d:15:d8: 12:e1:cc:fd:57:eb:cd:d3:ca:d7:be:f9:45:25:1e:ff:9c:1e: 3d:16:b7:f1:86:92:17:72:e6:d8:c9:d5:e0:77:aa:24:ef:a4: b9:7b:8a:ac:4b:e9:c5:04:ab:c2:c0:e6:0e:0c:37:33:2e:c7: 96:18:d8:a2:46:e9:20:65:8b:a0:fd:06:db:bb:3e:97:a7:e3: 36:a9:ff:2f:9c:20:e3:74:23:ed:94:35:5d:8f:1a:09:d9:cd: 39:82:ad:68:c7:3d:69:b1:d2:ee:95:1d:de:27:9c:42:06:39: e6:51:8e:fc:ef:b6:ed:6f:09:80:7b:6c:b4:bd:c5:fd:ce:b6: 5b:18:ec:41:a1:e9:e9:54:70:7e:78:81:32:27:43:9b:3f:13: 67:59:18:6e:6d:2c:d4:8d:d4:e6:7a:1b:88:a0:cf:9a:1d:81: 59:e6:36:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQQRpcYtiwdB3JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZTM3YzNiMjYtZGYwNi00OTkzLWIyYmMtYzkxZDJmMDZkOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBXtUUtPTAXYJNcBUvDOWi+Ur4xQgXJ6S1kZ JsBMbvl37ZhznryQ5EMutHyPjNA9s/14ClFpTKaQNFTfVhrDOdGiai/1JrWaFlwe zn9As3buEO9SI5smIHOPjUZ0UcX97XBrOzqISr4Dgf9cNo4Opa2xV0/ZbPDMa446 /f7i4Th/e8hwZuORtIgO4ywneeNXBjvxqnsv3N2AcgBzYzUwwL2VNg+rd42K8eXg 2Il5rI+pZzyLEjqW40sTuVmpewMc5qGESMNEtpS3YrTt80/UHivaXUV8BSQOWuBk LdEortg9CvrM7Wo4v7ZPB/Wat1nWfnmR6ZQCt2vD4UhrQc1BSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBE02tjgA6inczqEaOBaIhUB+R+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvY2RiZTVkZDQtYjlmYS00 MDIxLTg3YTEtMzAwMmY4MGNjNDQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQbFChdvIv6hF8hyZ45s5d 0zcDTPoqS2iKhc2gx6ij4uSSh7WpMkypPYhtEABi46FNBjv5/iCwzk1nh3SAVsto cNjefdJcN8XBUvuJ57Adgon5uAJgSJdtFdgS4cz9V+vN08rXvvlFJR7/nB49Frfx hpIXcubYydXgd6ok76S5e4qsS+nFBKvCwOYODDczLseWGNiiRukgZYug/Qbbuz6X p+M2qf8vnCDjdCPtlDVdjxoJ2c05gq1oxz1psdLulR3eJ5xCBjnmUY7877btbwmA e2y0vcX9zrZbGOxBoenpVHB+eIEyJ0ObPxNnWRhubSzUjdTmehuIoM+aHYFZ5jZx -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:26 2025 by rpki-client