$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft File: c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft (raw, json) Hash identifier: DVUWTQS+j/qJ/l5pYrQk74KxWjNL5WS1UJgSbtwvVYs= Subject key identifier: 15:C0:A0:D8:0A:B0:09:14:DD:23:19:79:56:E0:CB:80:47:15:8F:C8 Authority key identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 Certificate issuer: /CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74 Certificate serial: 010D0C9F4328584BC05802A1B150D26FCC40AE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft Manifest number: 010D0C9F43285844E9F7F608890A231EE65E5F82 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa (hash: 72PjpkIVRy8yrg08VuJeNf+iLdjB8Nj2sPn57WJF/0E=) 2: c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl (hash: m4LWer93o5RemJwtldtflN+g3TTtLT+hfTjuFOZ+Tog=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:02:a1:b1:50:d2:6f:cc:40:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=8cc646ad-1c18-4fd1-990d-f4ccffb905ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:70:b8:f4:a3:e5:66:7b:9f:e8:b4:9f:19: 29:a2:d7:a3:29:7f:e1:fa:37:7d:34:d1:72:a2:5f: 06:43:6c:ed:0a:08:9a:12:31:52:8f:51:6d:c2:5d: 91:67:17:9f:1c:ed:f3:c2:85:f9:43:24:53:ea:98: 68:5e:eb:ad:6d:10:a3:43:6c:e4:f2:72:51:b3:6d: 99:42:20:61:ff:f7:09:1b:ed:3b:03:06:26:93:d7: 8f:1b:71:db:95:0c:78:93:08:39:78:2e:de:92:7b: d8:be:68:ee:a7:a3:f8:8f:7c:1a:11:f1:2a:f3:c4: a3:7a:6c:45:b4:bc:d6:a9:a3:e6:54:bb:69:dc:4a: 1a:3c:5d:14:a4:ed:45:d8:ae:4a:12:8c:f9:6f:93: 78:8d:88:ae:14:d5:d4:4f:8e:a4:e8:5c:21:c7:62: de:0f:aa:75:c9:b8:66:e7:a0:8d:fe:7f:9c:33:ae: bc:64:2e:95:2b:ee:83:5c:d5:50:74:97:4e:2d:cb: 1d:41:ad:7b:57:98:b3:a9:f1:f3:86:dc:6a:8f:5b: cb:82:88:d2:27:ae:ac:a3:a2:44:46:bb:76:d3:5c: af:47:dd:1f:d1:10:ce:1f:f5:97:03:32:90:ef:73: ee:ce:e4:1c:6e:ef:54:de:db:9d:65:b9:02:70:8d: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:A0:D8:0A:B0:09:14:DD:23:19:79:56:E0:CB:80:47:15:8F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl X509v3 Authority Key Identifier: keyid:64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a4:3f:28:3b:b5:86:b0:a8:eb:ef:13:71:92:19:1a:4e:da: 40:ff:a6:47:0a:d6:80:97:79:9b:1e:75:40:82:fb:bd:0b:18: 7a:54:c0:49:b8:67:f7:aa:b9:67:62:7b:f3:15:d1:35:d4:2c: bd:46:a9:00:7f:98:d0:8d:5d:87:cf:a7:7c:29:4d:91:7a:4a: 8b:bc:1e:1d:56:99:0a:d2:dd:89:9a:b7:a1:fd:7d:96:29:86: 82:d7:88:2a:b7:2c:e7:b1:b3:28:d3:e1:2e:06:4f:d6:68:83: f3:40:23:3d:a8:40:cb:dc:0d:08:48:37:b1:68:51:e6:2c:e8: da:86:44:53:d3:3e:d2:c4:59:af:ba:90:9e:7a:f7:d6:78:a1: 35:0e:3a:af:5c:5f:6a:31:31:6d:54:41:e1:25:9f:6a:dc:27: 8c:03:61:65:71:15:5f:3b:c2:94:26:b8:f0:3c:fd:e1:e8:bb: bf:ac:11:53:8c:17:e6:73:e7:c7:75:ee:3b:c6:fe:7e:ca:ba: 0e:a1:05:cf:ea:d8:19:ca:d1:7c:35:06:5f:17:af:70:14:c1: 43:61:43:9e:19:48:65:07:d4:0d:7c:e7:3c:79:11:f7:c6:d5: 8a:15:69:ee:0e:96:34:9b:71:48:31:ee:3f:fb:60:41:ef:95: e3:04:4d:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAKhsVDSb8xArkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBkMzIxN2QtOGYwNS00MGY1LThhNjMtMjNkNmVjOGM1 YTc0MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk OGNjNjQ2YWQtMWMxOC00ZmQxLTk5MGQtZjRjY2ZmYjkwNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFwuPSj5WZ7n+i0nxkpotejKX/h+jd9NNFy ol8GQ2ztCgiaEjFSj1Ftwl2RZxefHO3zwoX5QyRT6phoXuutbRCjQ2zk8nJRs22Z QiBh//cJG+07AwYmk9ePG3HblQx4kwg5eC7eknvYvmjup6P4j3waEfEq88SjemxF tLzWqaPmVLtp3EoaPF0UpO1F2K5KEoz5b5N4jYiuFNXUT46k6Fwhx2LeD6p1ybhm 56CN/n+cM668ZC6VK+6DXNVQdJdOLcsdQa17V5izqfHzhtxqj1vLgojSJ66so6JE Rrt201yvR90f0RDOH/WXAzKQ73PuzuQcbu9U3tudZbkCcI0pMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBXAoNgKsAkU3SMZeVbgy4BHFY/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMGQz MjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2ZWM4YzVhNzQvYzBkMzIxN2QtOGYwNS00 MGY1LThhNjMtMjNkNmVjOGM1YTc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzBkMzIxN2QtOGYwNS00MGY1LThh NjMtMjNkNmVjOGM1YTc0L2MwZDMyMTdkLThmMDUtNDBmNS04YTYzLTIzZDZlYzhj NWE3NC5jcmwwHwYDVR0jBBgwFoAUZDupuBtVGG/2+UPucDDj0xJ86yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMGQzMjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2 ZWM4YzVhNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfpD8oO7WGsKjr7xNxkhka TtpA/6ZHCtaAl3mbHnVAgvu9Cxh6VMBJuGf3qrlnYnvzFdE11Cy9RqkAf5jQjV2H z6d8KU2RekqLvB4dVpkK0t2Jmreh/X2WKYaC14gqtyznsbMo0+EuBk/WaIPzQCM9 qEDL3A0ISDexaFHmLOjahkRT0z7SxFmvupCeevfWeKE1DjqvXF9qMTFtVEHhJZ9q 3CeMA2FlcRVfO8KUJrjwPP3h6Lu/rBFTjBfmc+fHde47xv5+yroOoQXP6tgZytF8 NQZfF69wFMFDYUOeGUhlB9QNfOc8eRH3xtWKFWnuDpY0m3FIMe4/+2BB75XjBE2P -----END CERTIFICATE-----Generated at Wed Nov 5 04:20:23 2025 by rpki-client