$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft File: ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft (raw, json) Hash identifier: g2RmGjsANmbpHMtt0ooUo7aUYn8ppYKK4zDeRHz0+Oc= Subject key identifier: 45:93:7C:1A:A8:03:19:68:4C:64:78:93:63:D5:B3:D7:DA:E6:C3:32 Authority key identifier: F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 Certificate issuer: /CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Certificate serial: 010D0C9F4328584BBFFEAAE178E828744B725580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft Manifest number: 010D0C9F4328584073A8202BE01C1A656D2DB50C Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl (hash: YloItZfBzEIHaFIRh25Tgz6EW5GKziqh6jtLRh4J03M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:aa:e1:78:e8:28:74:4b:72:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=9be468dc-d47e-405d-983c-726a714c28ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:74:17:aa:d2:13:0a:a4:dc:05:21:0f:71: 22:00:ee:8c:99:f3:82:fa:2e:ab:9b:1e:71:5f:d8: 66:09:29:1d:a1:16:5f:e3:0c:df:2c:3b:41:5c:35: a8:c9:ae:ff:4b:10:d1:0c:96:b7:f7:d9:aa:6d:3a: 04:98:37:52:59:ee:c1:df:48:73:0d:13:b7:b6:5f: ac:e4:5f:d3:ab:9d:62:9f:42:c7:72:98:bb:88:29: 3e:80:90:e6:54:1a:55:6b:ca:ae:9f:15:54:fd:42: b6:da:33:74:79:ea:f1:7b:f8:a1:92:34:82:a4:27: 6b:65:64:ba:3c:38:34:a7:ee:27:d1:5c:fc:ff:c5: 38:25:bc:1e:e5:ba:d4:4d:95:2f:a8:87:a7:2c:6e: ef:e3:96:2b:ec:bc:b4:95:e4:ff:7b:7f:39:46:06: dc:77:ba:d9:79:5a:5a:0b:a5:cd:ff:31:79:9d:02: 15:ae:df:0f:cc:5b:ff:9c:dc:a6:04:dd:7c:0c:f5: 24:31:02:01:26:d1:e1:e0:80:60:f8:05:5d:6c:7a: 34:ee:5c:a8:ad:f6:ed:f8:4b:19:78:61:99:29:ec: d9:02:3c:0c:6f:3b:7c:68:45:b2:0c:21:88:44:4f: 43:c8:88:82:c5:23:ac:50:61:fb:2c:50:7c:f1:e0: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:93:7C:1A:A8:03:19:68:4C:64:78:93:63:D5:B3:D7:DA:E6:C3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl X509v3 Authority Key Identifier: keyid:F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a7:7a:3d:51:97:8f:35:83:a3:de:7f:f7:d7:89:be:28:2b: b5:48:00:c5:7d:2a:1d:fb:fc:bc:cc:da:7f:35:e9:84:f0:c5: ff:9d:51:c8:26:49:75:99:d7:58:68:a6:14:5d:7c:4a:08:9b: d9:7a:07:05:75:8c:97:ce:af:95:4a:24:ac:a7:16:4d:49:eb: 42:e7:8f:58:56:e1:d1:50:b6:91:c2:e4:f3:70:6a:d4:11:b3: 11:20:44:51:18:95:02:47:39:05:7f:82:c8:c2:c9:15:16:17: 1f:5b:0c:78:26:8f:c6:97:77:48:86:33:0e:35:4c:fb:72:b9: a0:a8:a3:7f:18:98:c4:9f:08:f2:f8:ac:70:a7:b2:5c:6b:00: 17:3f:15:5d:f4:ff:67:42:91:b4:a1:71:3f:b1:d2:00:e5:9e: 1d:6d:8d:38:54:73:77:1a:dd:07:d2:5b:86:c8:bd:2f:49:7f: e7:20:f5:83:17:09:50:4e:ea:2a:18:76:a1:ac:4f:3f:0c:f7: 05:fc:5e:4f:4d:17:4a:ee:b7:05:1c:95:79:be:7e:97:e8:86: 94:b6:e0:e4:98:e2:c4:07:c8:c8:d9:0e:4a:70:e7:60:12:3c: a3:b1:9b:1c:64:22:7e:a9:82:4b:37:85:cd:fb:e4:2f:ad:d8: b9:8e:c5:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qrheOgodEtyVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMzQ3NWEtOWUxZS00MDI2LThlM2MtMGQ2NWQ0MGFi Y2E1MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk OWJlNDY4ZGMtZDQ3ZS00MDVkLTk4M2MtNzI2YTcxNGMyOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqF0F6rSEwqk3AUhD3EiAO6MmfOC+i6rmx5x X9hmCSkdoRZf4wzfLDtBXDWoya7/SxDRDJa399mqbToEmDdSWe7B30hzDRO3tl+s 5F/Tq51in0LHcpi7iCk+gJDmVBpVa8qunxVU/UK22jN0eerxe/ihkjSCpCdrZWS6 PDg0p+4n0Vz8/8U4Jbwe5brUTZUvqIenLG7v45Yr7Ly0leT/e385Rgbcd7rZeVpa C6XN/zF5nQIVrt8PzFv/nNymBN18DPUkMQIBJtHh4IBg+AVdbHo07lyorfbt+EsZ eGGZKezZAjwMbzt8aEWyDCGIRE9DyIiCxSOsUGH7LFB88eDJtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEWTfBqoAxloTGR4k2PVs9fa5sMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIz NDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1ZDQwYWJjYTUvZmYyMzQ3NWEtOWUxZS00 MDI2LThlM2MtMGQ2NWQ0MGFiY2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMzQ3NWEtOWUxZS00MDI2LThl M2MtMGQ2NWQ0MGFiY2E1L2ZmMjM0NzVhLTllMWUtNDAyNi04ZTNjLTBkNjVkNDBh YmNhNS5jcmwwHwYDVR0jBBgwFoAU8K3w/wznwUj0gCHCrC2Qh30OFgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIzNDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1 ZDQwYWJjYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAup3o9UZePNYOj3n/314m+ KCu1SADFfSod+/y8zNp/NemE8MX/nVHIJkl1mddYaKYUXXxKCJvZegcFdYyXzq+V SiSspxZNSetC549YVuHRULaRwuTzcGrUEbMRIERRGJUCRzkFf4LIwskVFhcfWwx4 Jo/Gl3dIhjMONUz7crmgqKN/GJjEnwjy+Kxwp7JcawAXPxVd9P9nQpG0oXE/sdIA 5Z4dbY04VHN3Gt0H0luGyL0vSX/nIPWDFwlQTuoqGHahrE8/DPcF/F5PTRdK7rcF HJV5vn6X6IaUtuDkmOLEB8jI2Q5KcOdgEjyjsZscZCJ+qYJLN4XN++Qvrdi5jsVt -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:09 2025 by rpki-client