$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft File: 23e8b687-5694-47a8-8a0b-d3828a99b77a.mft (raw, json) Hash identifier: XWHpxOdN4WHyJvqTtat9pjx5DCxK/LFEzur38SV5jWQ= Subject key identifier: 80:DB:09:F7:9E:F1:B6:69:41:E6:24:CD:38:8A:2C:3A:1B:BC:3E:84 Authority key identifier: ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44 Certificate issuer: /CN=23e8b687-5694-47a8-8a0b-d3828a99b77a Certificate serial: 010D0C9F4328584BC0ECE48D4A494F033ABB4EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft Manifest number: 010D0C9F4328584BA23C46C43B984A02BE8B160D Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Fri 07 Nov 2025 01:00:00 +0000 Files and hashes: 1: 23e8b687-5694-47a8-8a0b-d3828a99b77a.crl (hash: RpqRTMyI7TFvK7bLp3cZCyYocjsF0JFSpcvAu8Gdx+4=) 2: 45feef33-2302-3307-b683-e71a4c30155c.roa (hash: qladQeWQ6AbM+le72KdQA7Qj6PIcz3FsLFbMtnPR5Uo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e4:8d:4a:49:4f:03:3a:bb:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e8b687-5694-47a8-8a0b-d3828a99b77a Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 7 01:00:00 2025 GMT Subject: CN=62d14488-abbb-405f-b647-6cf8c4642dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:25:ba:2c:4c:28:b8:4e:64:91:56:44:10: 75:11:72:a1:bc:d6:e5:78:89:8a:e3:4c:57:8b:c8: 3a:81:af:e3:6a:39:62:5b:61:d1:59:7b:40:fb:77: 80:72:53:ec:d0:b5:ba:7a:6c:ca:d1:9d:21:af:50: e4:84:f2:89:ce:9d:eb:ad:d1:60:47:8e:50:aa:6f: 4d:03:99:0d:d0:86:df:fa:b9:bc:87:40:d1:a5:42: 4f:d4:3c:cb:86:4a:1b:e0:26:6c:a9:e3:4f:cf:4e: c6:e3:1d:61:83:ec:bc:6e:c2:46:9b:3e:2f:32:4d: 53:57:a4:16:bf:a1:30:1b:11:a7:11:8f:3e:25:70: b8:c7:e4:5c:f6:b5:b1:68:ed:b7:c8:dc:2c:7f:d0: 23:09:9d:9e:d7:35:38:b1:a2:b2:00:ae:de:a3:20: 96:80:0a:e8:80:cf:9d:a3:96:a6:30:08:f5:a5:db: 44:b7:e2:00:65:a8:17:45:82:d8:cf:01:ba:46:d7: d5:9c:78:c6:3c:58:1c:36:10:7c:20:75:e9:95:f9: 04:88:3f:9d:48:e8:a1:aa:f1:8c:3a:85:5d:e5:e2: 94:91:47:d2:22:2f:bf:d5:68:36:38:39:42:72:86: e9:57:ce:af:dd:38:9c:1a:a5:c7:bd:10:f8:21:26: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DB:09:F7:9E:F1:B6:69:41:E6:24:CD:38:8A:2C:3A:1B:BC:3E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a/23e8b687-5694-47a8-8a0b-d3828a99b77a.crl X509v3 Authority Key Identifier: keyid:ED:73:21:DD:47:64:1D:F3:7C:BF:2E:0A:28:35:8E:5C:32:FD:D8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23e8b687-5694-47a8-8a0b-d3828a99b77a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:de:30:fb:3d:76:f5:3d:74:c7:57:35:97:13:c6:e3:74:3e: 5f:1a:9c:d7:62:94:cc:2a:ca:75:6a:69:99:f7:fa:46:87:30: 4e:3c:f3:36:9b:27:ba:3d:51:0e:14:b4:9e:f7:57:81:6e:c6: 7d:29:6a:19:36:a6:3f:d7:21:c0:03:56:3e:54:e1:7d:b9:9c: d4:2d:7c:15:e0:56:53:43:9e:b7:e8:e2:3e:a4:5c:24:a2:26: e2:34:36:dd:3f:93:95:cb:83:95:ac:bb:80:a7:df:80:3f:fa: a2:74:36:12:a5:f2:ce:1c:2d:99:62:4c:48:75:52:ca:76:56: 53:e4:c5:1b:f8:a8:77:18:89:ea:90:ca:05:c9:ac:2e:af:52: 5c:c8:cf:5a:54:fc:79:d9:5a:65:33:a0:ec:1c:87:ae:ca:15: c3:47:29:26:35:2f:ef:e1:cd:a7:91:a2:20:28:e7:51:cb:f8: c9:fd:e7:ca:35:c0:0f:0f:fd:e5:31:03:4c:41:93:57:c4:5b: 8a:9c:05:a2:04:62:3a:e9:34:c3:7a:f8:b6:0a:06:37:a0:b4: fd:29:a0:78:be:47:2a:05:b0:77:c3:7b:61:7f:6f:e0:d5:b2: 85:69:2a:a6:c4:01:e1:75:2d:67:0b:fa:72:d9:80:ab:da:8b: 63:47:4c:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OSNSklPAzq7TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNlOGI2ODctNTY5NC00N2E4LThhMGItZDM4MjhhOTli NzdhMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwNzAxMDAwMFowLzEtMCsGA1UEAxMk NjJkMTQ0ODgtYWJiYi00MDVmLWI2NDctNmNmOGM0NjQyZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbEluixMKLhOZJFWRBB1EXKhvNbleImK40xX i8g6ga/jajliW2HRWXtA+3eAclPs0LW6emzK0Z0hr1DkhPKJzp3rrdFgR45Qqm9N A5kN0Ibf+rm8h0DRpUJP1DzLhkob4CZsqeNPz07G4x1hg+y8bsJGmz4vMk1TV6QW v6EwGxGnEY8+JXC4x+Rc9rWxaO23yNwsf9AjCZ2e1zU4saKyAK7eoyCWgArogM+d o5amMAj1pdtEt+IAZagXRYLYzwG6RtfVnHjGPFgcNhB8IHXplfkEiD+dSOihqvGM OoVd5eKUkUfSIi+/1Wg2ODlCcobpV86v3TicGqXHvRD4ISbDtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIDbCfee8bZpQeYkzTiKLDobvD6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2U4 YjY4Ny01Njk0LTQ3YTgtOGEwYi1kMzgyOGE5OWI3N2EvMjNlOGI2ODctNTY5NC00 N2E4LThhMGItZDM4MjhhOTliNzdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNlOGI2ODctNTY5NC00N2E4LThh MGItZDM4MjhhOTliNzdhLzIzZThiNjg3LTU2OTQtNDdhOC04YTBiLWQzODI4YTk5 Yjc3YS5jcmwwHwYDVR0jBBgwFoAU7XMh3UdkHfN8vy4KKDWOXDL92EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2U4YjY4Ny01Njk0LTQ3YTgtOGEwYi1kMzgy OGE5OWI3N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3jD7PXb1PXTHVzWXE8bj dD5fGpzXYpTMKsp1ammZ9/pGhzBOPPM2mye6PVEOFLSe91eBbsZ9KWoZNqY/1yHA A1Y+VOF9uZzULXwV4FZTQ5636OI+pFwkoibiNDbdP5OVy4OVrLuAp9+AP/qidDYS pfLOHC2ZYkxIdVLKdlZT5MUb+Kh3GInqkMoFyawur1JcyM9aVPx52VplM6DsHIeu yhXDRykmNS/v4c2nkaIgKOdRy/jJ/efKNcAPD/3lMQNMQZNXxFuKnAWiBGI66TTD evi2CgY3oLT9KaB4vkcqBbB3w3thf2/g1bKFaSqmxAHhdS1nC/py2YCr2otjR0yh -----END CERTIFICATE-----Generated at Wed Nov 5 06:36:46 2025 by rpki-client