$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft File: d41e310e-2b6f-4f90-9f70-bc303b64a823.mft (raw, json) Hash identifier: Kr1DTHLNM6yG6AC0LowACOjqbJTWSyB6TXjge+PolM8= Subject key identifier: 22:6E:D6:79:73:EB:94:4E:2F:C3:0F:00:9C:93:83:18:D4:A3:94:EC Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 Certificate issuer: /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Certificate serial: 010D0C9F4328584B920C19446D7DCB9076804740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft Manifest number: 010D0C9F4328584A914D069C4B436A480CA62327 Signing time: Sun 19 Oct 2025 06:00:03 +0000 Manifest this update: Sun 19 Oct 2025 06:00:03 +0000 Manifest next update: Wed 22 Oct 2025 06:00:00 +0000 Files and hashes: 1: 14fe8f30-8678-31d1-911f-18215dcdb7b3.roa (hash: 28CzCtTEQava1M1kEUEd0jmDCcggGuiuEbQJ1vPE6Ss=) 2: 833210ac-a67b-3a10-82ef-cb43c989ed93.roa (hash: I+33qdpQkDOHhWMqXUS6AftWoNmhyysupgq+Iq22voo=) 3: 87bc001e-190b-3e44-a051-4ca709f13cec.roa (hash: bJWU1Fy99VryRjrwEjWm8Xmgi5E0A6FZz7/VdodHozk=) 4: d41e310e-2b6f-4f90-9f70-bc303b64a823.crl (hash: BsLYEnOkzTDWwwdClG2UcrO3M1CBJirThoBwf2R8ii0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:0c:19:44:6d:7d:cb:90:76:80:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Validity Not Before: Oct 19 06:00:03 2025 GMT Not After : Oct 22 06:00:00 2025 GMT Subject: CN=6f58fde5-9097-4cdc-b4ad-b547bf271435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:09:3b:56:40:40:66:cc:ee:77:3e:1a:00: f6:2b:75:71:6a:b9:7a:84:64:9c:01:50:8d:3a:6a: d4:76:c4:fc:86:e4:9a:36:e6:0c:32:bd:c2:cc:88: 34:9b:39:91:cb:0a:ae:21:e1:dc:c7:f6:db:ad:c1: a6:69:25:d5:26:bc:77:0f:b5:99:68:3a:03:fb:d7: 19:e6:ef:d9:83:43:93:a5:06:84:af:45:2d:fb:21: af:f1:dd:4e:06:58:e0:f0:79:66:76:0e:5b:40:6e: 10:be:e2:c2:35:15:90:be:65:fd:27:34:8d:ad:d2: f1:b2:6d:aa:ac:75:be:73:6c:48:51:cd:24:b6:af: 79:d5:d5:be:d8:09:4a:7b:70:f7:76:47:81:6a:a8: 39:f4:5a:3a:35:eb:54:64:58:45:db:77:37:48:2a: 96:4b:88:81:f8:a9:be:7c:a5:f3:5d:b8:f0:33:ab: a1:54:6a:cd:df:03:99:6d:98:db:67:ab:5b:bf:e2: 8a:6d:8c:02:0f:dd:eb:0b:d3:f7:35:94:69:87:5f: 65:f4:2e:90:98:02:8e:bf:88:e1:4b:11:f9:c5:d7: cb:28:74:75:80:41:5d:b3:7e:1d:91:4e:1d:60:b9: 1b:83:43:11:e0:98:38:df:13:63:d9:4a:21:23:b9: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6E:D6:79:73:EB:94:4E:2F:C3:0F:00:9C:93:83:18:D4:A3:94:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl X509v3 Authority Key Identifier: keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:58:bd:8d:9a:a2:e5:0c:e5:76:a2:85:29:0d:79:6b:ac:57: a9:56:40:e5:4c:fb:8c:b0:4f:d2:56:94:86:48:a4:92:b6:aa: b0:4e:4d:db:08:c6:09:e3:3f:c6:03:2e:99:54:6f:aa:17:8f: 34:d2:96:66:ae:6d:84:ac:b9:8f:f7:d4:87:df:76:42:a9:08: 1f:86:57:66:2d:a7:b1:49:4a:b1:10:33:79:23:57:fe:cb:b4: 24:d1:10:3f:cc:cc:6f:24:79:5f:c0:9b:a7:36:db:a8:26:73: c4:24:c6:b3:e8:d6:e4:ff:a5:52:b6:56:c2:20:27:e2:da:15: 26:79:c7:21:1b:0e:37:69:39:71:5f:5e:4e:e2:20:aa:61:87: ce:24:b2:9b:21:58:86:11:08:39:b1:4b:be:cc:d0:3e:47:d5: 78:7c:f4:11:f9:1c:02:0b:e0:c2:25:b0:d2:b9:83:e0:27:c6: 85:13:ca:31:d3:11:77:e3:ed:9c:b9:49:7d:ab:84:14:2f:71: 60:ca:08:b8:57:fb:c1:80:f9:87:a7:56:a1:f2:12:7a:39:f9: 42:d8:e4:08:e8:a0:8e:f8:79:7b:5f:90:90:89:66:44:db:46: f4:05:67:c8:15:6b:39:24:16:16:39:1e:e5:ef:b3:f8:88:f4: fe:7e:70:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSDBlEbX3LkHaAR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh ODIzMB4XDTI1MTAxOTA2MDAwM1oXDTI1MTAyMjA2MDAwMFowLzEtMCsGA1UEAxMk NmY1OGZkZTUtOTA5Ny00Y2RjLWI0YWQtYjU0N2JmMjcxNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgJO1ZAQGbM7nc+GgD2K3Vxarl6hGScAVCN OmrUdsT8huSaNuYMMr3CzIg0mzmRywquIeHcx/bbrcGmaSXVJrx3D7WZaDoD+9cZ 5u/Zg0OTpQaEr0Ut+yGv8d1OBljg8Hlmdg5bQG4QvuLCNRWQvmX9JzSNrdLxsm2q rHW+c2xIUc0ktq951dW+2AlKe3D3dkeBaqg59Fo6NetUZFhF23c3SCqWS4iB+Km+ fKXzXbjwM6uhVGrN3wOZbZjbZ6tbv+KKbYwCD93rC9P3NZRph19l9C6QmAKOv4jh SxH5xdfLKHR1gEFds34dkU4dYLkbg0MR4Jg43xNj2UohI7nFbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJu1nlz65ROL8MPAJyTgxjUo5TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvZDQxZTMxMGUtMmI2Zi00 ZjkwLTlmNzAtYmMzMDNiNjRhODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0 YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw M2I2NGE4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhWL2NmqLlDOV2ooUpDXlr rFepVkDlTPuMsE/SVpSGSKSStqqwTk3bCMYJ4z/GAy6ZVG+qF4800pZmrm2ErLmP 99SH33ZCqQgfhldmLaexSUqxEDN5I1f+y7Qk0RA/zMxvJHlfwJunNtuoJnPEJMaz 6Nbk/6VStlbCICfi2hUmecchGw43aTlxX15O4iCqYYfOJLKbIViGEQg5sUu+zNA+ R9V4fPQR+RwCC+DCJbDSuYPgJ8aFE8ox0xF34+2cuUl9q4QUL3Fgygi4V/vBgPmH p1ah8hJ6OflC2OQI6KCO+Hl7X5CQiWZE20b0BWfIFWs5JBYWOR7l77P4iPT+fnBW -----END CERTIFICATE-----Generated at Mon Oct 20 01:40:50 2025 by rpki-client