$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft File: 71effefa-6381-4c3d-8487-95f07e37a7cf.mft (raw, json) Hash identifier: QG/5nfXjRwv9GxAVLwsyLd3nvQj2+Cg9iygi3UOo7Es= Subject key identifier: 28:8C:DF:56:27:5D:AA:9A:99:12:B0:C2:86:52:D0:AA:EE:E5:B7:2F Authority key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Certificate issuer: /CN=71effefa-6381-4c3d-8487-95f07e37a7cf Certificate serial: 010D0C9F4328584BBEF29A4C38D45789AF693C20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft Manifest number: 010D0C9F4328584073A84657CD0005EEFC67F30D Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 71effefa-6381-4c3d-8487-95f07e37a7cf.crl (hash: xJqMSyegN2rFjZJqDa7CSbGXYliAbhZ7IBwizV2KXIE=) 2: d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer (hash: MFx/Zq+SYIVCL/sxvVRDYD1z03EMN0j5Nry9JFEDSkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:4c:38:d4:57:89:af:69:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=2da8951e-2ca1-43e8-ad83-1eeb88e403a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:7b:7f:c6:cb:83:a6:8f:7b:b2:91:2d:94: cd:58:b2:53:4c:87:7d:ff:9b:49:4d:e1:d2:f7:7d: b0:23:0c:52:47:dc:c5:8a:87:4c:f9:ac:fa:6f:44: 1c:de:cb:c7:1d:aa:7b:b1:b6:a3:49:0b:be:07:59: 16:e8:bc:c3:31:8d:d4:a7:24:40:5d:9e:ed:52:a4: c6:7f:ca:d4:ad:ee:85:a8:bd:d8:8d:b2:e9:73:65: ab:95:4b:cc:78:73:7f:4f:c1:55:83:5a:ad:ad:e3: 50:5b:75:a5:58:ec:24:b1:61:b6:e1:e8:a3:75:7e: 8e:e1:67:a6:b5:21:b7:d0:8c:4d:04:38:b7:4f:f6: b0:e6:20:d6:94:57:41:ea:1c:5e:f6:85:b5:e4:61: e8:4c:8a:9a:c7:8d:03:78:66:78:32:58:36:8d:99: 55:a7:30:d3:dc:30:aa:4c:4e:2e:44:be:f8:49:19: 14:9c:90:59:cf:67:2c:05:a9:bc:25:4f:7e:b3:33: a5:b7:e4:11:18:ff:e5:2a:5c:85:aa:58:f9:b6:9c: 24:13:c4:9d:ff:10:80:a4:ca:eb:21:59:79:df:01: 36:f3:1e:07:d8:5d:3f:4d:ac:c4:b0:7b:23:eb:ac: d5:f7:a0:8b:9f:b4:d9:41:3f:b0:cb:a8:c5:70:ac: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:DF:56:27:5D:AA:9A:99:12:B0:C2:86:52:D0:AA:EE:E5:B7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl X509v3 Authority Key Identifier: keyid:CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3b:d8:82:d6:a0:45:98:85:59:ed:72:4a:27:50:98:c2:84: 75:e1:1f:67:c2:78:13:ce:08:86:e0:70:03:89:23:a6:d1:7d: 98:bf:09:55:f5:b7:7e:56:77:fc:82:92:1c:2b:06:d7:ce:3d: d6:0e:8f:e9:5b:27:5d:0e:2d:b4:49:cb:86:97:9a:2e:17:e4: db:c5:79:8d:6d:41:72:b6:93:fd:dd:f5:ae:16:d0:85:b1:6e: ee:95:be:61:08:00:25:00:23:e0:52:0a:e5:9c:72:ae:97:6c: ae:04:75:b8:7f:e3:4f:89:08:8d:ef:25:3d:d1:7d:35:1d:13: 3a:94:f3:34:d7:d0:ce:39:a9:07:a7:20:60:d8:5b:fe:d0:64: 01:9a:18:9a:c5:4a:26:e2:b6:c6:57:07:d9:0f:05:c0:19:ae: 6d:4f:6b:3d:be:c8:0e:17:55:7e:83:1a:f4:c8:c2:7f:dd:5b: 3e:9c:f0:ba:ea:ee:57:4d:78:c8:30:7b:dd:a1:9c:4a:1b:53: b8:55:f3:96:27:87:36:9d:91:4e:28:82:de:67:38:db:c8:3e: c7:a9:b5:3a:f3:f3:23:b0:91:35:47:c0:66:fd:ce:c2:7e:49: 5d:c7:1b:59:52:13:e3:cf:80:b3:95:4a:00:1c:a5:06:06:a8: 7f:91:04:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8ppMONRXia9pPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdh N2NmMB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk MmRhODk1MWUtMmNhMS00M2U4LWFkODMtMWVlYjg4ZTQwM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXh7f8bLg6aPe7KRLZTNWLJTTId9/5tJTeHS 932wIwxSR9zFiodM+az6b0Qc3svHHap7sbajSQu+B1kW6LzDMY3UpyRAXZ7tUqTG f8rUre6FqL3YjbLpc2WrlUvMeHN/T8FVg1qtreNQW3WlWOwksWG24eijdX6O4Wem tSG30IxNBDi3T/aw5iDWlFdB6hxe9oW15GHoTIqax40DeGZ4Mlg2jZlVpzDT3DCq TE4uRL74SRkUnJBZz2csBam8JU9+szOlt+QRGP/lKlyFqlj5tpwkE8Sd/xCApMrr IVl53wE28x4H2F0/TazEsHsj66zV96CLn7TZQT+wy6jFcKxQ0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCiM31YnXaqamRKwwoZS0Kru5bcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MWVm ZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvNzFlZmZlZmEtNjM4MS00 YzNkLTg0ODctOTVmMDdlMzdhN2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzFlZmZlZmEtNjM4MS00YzNkLTg0 ODctOTVmMDdlMzdhN2NmLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi5jcmwwHwYDVR0jBBgwFoAUzqZHU53go10NUniHlU3Mg/czf9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYw N2UzN2E3Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKO9iC1qBFmIVZ7XJKJ1CY woR14R9nwngTzgiG4HADiSOm0X2YvwlV9bd+Vnf8gpIcKwbXzj3WDo/pWyddDi20 ScuGl5ouF+TbxXmNbUFytpP93fWuFtCFsW7ulb5hCAAlACPgUgrlnHKul2yuBHW4 f+NPiQiN7yU90X01HRM6lPM019DOOakHpyBg2Fv+0GQBmhiaxUom4rbGVwfZDwXA Ga5tT2s9vsgOF1V+gxr0yMJ/3Vs+nPC66u5XTXjIMHvdoZxKG1O4VfOWJ4c2nZFO KILeZzjbyD7HqbU68/MjsJE1R8Bm/c7CfkldxxtZUhPjz4CzlUoAHKUGBqh/kQQO -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:58 2025 by rpki-client