$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft File: 161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft (raw, json) Hash identifier: fAT7palJtVWbqK+lS9J56OiHqRZZtl8GkNwd5+N7ZgE= Subject key identifier: B0:FE:06:04:06:43:E3:C6:1A:BE:30:95:3A:5A:FD:67:DF:3C:7B:BD Authority key identifier: 3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 Certificate issuer: /CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Certificate serial: 010D0C9F4328584BBF69B6417B23C6622A6DAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft Manifest number: 010D0C9F43285847282F95059FE4211372E35C2F Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl (hash: fNykTWMZn1dsc85iSHnbJg30HtGutVfPlkYNkZ9ELrE=) 2: c4eecb44-9468-327d-a4e0-79328177a32f.roa (hash: dz0n0Ac3E2Pnok1Glw+5+t5/e6I2wOQHigDpYVAVPg8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b6:41:7b:23:c6:62:2a:6d:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=87d918d7-244d-4b30-915c-cbe3bf7bf20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:64:a0:37:8a:23:a5:fb:fe:9f:55:a5:77: f1:ef:0b:c0:e2:35:61:1e:33:c0:cf:1d:8f:ae:ab: 53:70:d8:cc:95:94:0f:c7:39:6b:f5:1b:78:d1:ea: a5:73:15:30:e8:09:47:e3:fc:0b:78:15:75:8e:df: 9e:1f:cb:e6:31:7c:66:b8:dd:40:e0:89:15:b4:20: c0:22:ad:60:69:eb:54:f3:28:ad:71:7d:6b:e2:0e: 81:c3:dc:e4:72:05:8f:5b:53:9e:d0:ae:87:db:7a: 79:0b:79:ab:cc:67:9a:00:97:68:d3:ea:72:7a:67: 8c:aa:6d:ae:63:07:de:04:c7:a5:fc:b8:a3:74:44: 0c:c6:d3:9f:42:1b:51:60:a8:4c:ed:67:47:af:7d: ff:9f:8f:6a:b9:7c:ff:82:26:cf:c6:f1:c1:85:f0: 02:f9:e0:c2:90:b6:b4:be:08:f7:36:f3:46:d3:6e: fd:57:44:f7:68:61:28:98:fc:13:06:03:fd:58:fe: dd:6a:20:34:97:d2:b3:96:ff:d4:84:97:0e:6d:ae: 36:86:90:84:0e:b3:24:63:39:c2:98:c4:bd:78:bc: ba:2b:bb:64:fc:60:9b:b2:31:53:e1:b0:20:9d:88: c7:7f:e5:22:f5:64:ad:ef:1b:36:0f:1c:79:0b:b4: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:06:04:06:43:E3:C6:1A:BE:30:95:3A:5A:FD:67:DF:3C:7B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl X509v3 Authority Key Identifier: keyid:3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:84:70:26:65:57:38:41:ea:20:88:62:4d:9b:0b:7e:ce:47: 4d:65:ec:6b:71:3d:af:b7:9a:b4:8e:96:3b:64:b4:a5:55:01: 96:53:ce:79:1a:6a:f4:05:86:24:a6:8b:ce:cc:85:31:53:79: 68:f5:0a:a5:91:fd:6b:b9:d9:f5:91:13:02:03:ba:50:57:83: 05:29:13:ce:2f:e0:ab:ec:3e:16:ba:74:65:79:f9:1d:d7:28: 1b:94:3f:6c:5a:46:2c:01:a8:d1:c4:b8:6e:3d:9f:5e:bb:13: bb:2c:c0:d3:e2:d1:7d:87:dd:9a:61:57:f0:45:a3:af:39:43: af:97:04:68:47:ee:da:75:ae:3c:07:3f:7c:65:c8:fe:25:47: f5:c8:00:dc:0f:3b:3e:ab:7c:2b:5b:95:e3:e6:77:f3:64:41: 77:ee:1f:e6:e5:1a:66:0e:fd:e3:42:e5:3a:55:d1:e7:42:85: a6:af:0b:e0:63:e9:26:04:a2:a4:3e:68:72:57:71:4f:c9:85: 00:42:48:d4:48:c0:e0:87:f7:5b:99:5c:30:0e:53:94:82:64: ce:70:f2:d9:63:c1:21:59:2f:7e:6e:4d:c9:c1:70:e7:b6:ba: d2:4b:02:64:97:c0:b9:e1:6d:0c:19:93:6d:07:96:51:28:55: dd:9c:b7:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abZBeyPGYiptqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxYjhiMjctN2M1ZS00ZjA3LTk5MDMtYjQyNWVlOWVh MWEzMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk ODdkOTE4ZDctMjQ0ZC00YjMwLTkxNWMtY2JlM2JmN2JmMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkstkoDeKI6X7/p9VpXfx7wvA4jVhHjPAzx2P rqtTcNjMlZQPxzlr9Rt40eqlcxUw6AlH4/wLeBV1jt+eH8vmMXxmuN1A4IkVtCDA Iq1gaetU8yitcX1r4g6Bw9zkcgWPW1Oe0K6H23p5C3mrzGeaAJdo0+pyemeMqm2u YwfeBMel/LijdEQMxtOfQhtRYKhM7WdHr33/n49quXz/gibPxvHBhfAC+eDCkLa0 vgj3NvNG0279V0T3aGEomPwTBgP9WP7daiA0l9Kzlv/UhJcOba42hpCEDrMkYznC mMS9eLy6K7tk/GCbsjFT4bAgnYjHf+Ui9WSt7xs2Dxx5C7RFdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLD+BgQGQ+PGGr4wlTpa/WffPHu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFi OGIyNy03YzVlLTRmMDctOTkwMy1iNDI1ZWU5ZWExYTMvMTYxYjhiMjctN2M1ZS00 ZjA3LTk5MDMtYjQyNWVlOWVhMWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTYxYjhiMjctN2M1ZS00ZjA3LTk5 MDMtYjQyNWVlOWVhMWEzLzE2MWI4YjI3LTdjNWUtNGYwNy05OTAzLWI0MjVlZTll YTFhMy5jcmwwHwYDVR0jBBgwFoAUO2tLi+c+KqDXWvN+ilZy2VtYaZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFiOGIyNy03YzVlLTRmMDctOTkwMy1iNDI1 ZWU5ZWExYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAhHAmZVc4QeogiGJNmwt+ zkdNZexrcT2vt5q0jpY7ZLSlVQGWU855Gmr0BYYkpovOzIUxU3lo9Qqlkf1rudn1 kRMCA7pQV4MFKRPOL+Cr7D4WunRlefkd1ygblD9sWkYsAajRxLhuPZ9euxO7LMDT 4tF9h92aYVfwRaOvOUOvlwRoR+7ada48Bz98Zcj+JUf1yADcDzs+q3wrW5Xj5nfz ZEF37h/m5RpmDv3jQuU6VdHnQoWmrwvgY+kmBKKkPmhyV3FPyYUAQkjUSMDgh/db mVwwDlOUgmTOcPLZY8EhWS9+bk3JwXDntrrSSwJkl8C54W0MGZNtB5ZRKFXdnLcT -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:12 2025 by rpki-client