$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: m/JXjQYd1+9beGW7RiO3Sxo0YNQxvY0dQ+CAqWpDT+M= Subject key identifier: 23:7A:A4:3D:C4:B3:9C:5B:E8:71:D7:D4:08:5A:63:F1:80:AC:DE:45 Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584BBFA55274471CC21A7DB01200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A06C6 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: k5yN3RuWBrPPpohuRX3RNKagTKASYRrHgVq10Ta7Cb8=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: zQAYtHt3nQlk5151lVJQ+m4UXwLaXmW3n7dn5Httl1c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:52:74:47:1c:c2:1a:7d:b0:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=e31c40ac-da1c-4fb6-9842-65793f3337a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:03:8f:76:b7:9f:77:11:77:49:51:ab:1b: 7c:f0:41:d4:48:04:e1:56:29:4b:7f:83:5c:95:2d: 00:57:a9:43:06:66:18:30:f5:8d:86:cd:d8:2f:76: 2e:31:4e:4e:c3:2c:ea:76:a3:3a:b4:e5:0a:f2:f1: 1e:46:dc:a7:39:a3:52:2a:61:6a:b4:6b:86:20:28: f6:26:f1:1f:cf:1b:a8:32:ae:70:8b:f6:96:01:8b: 2b:97:5a:2f:3b:02:bf:53:27:49:90:aa:8e:e7:6b: c0:86:78:e8:f7:32:83:1c:bb:2f:5c:82:71:74:1f: de:54:4c:d9:70:99:5c:46:e3:2e:7c:6c:43:81:a9: 0e:a9:c0:7e:b4:96:fd:3c:03:d0:32:ce:b2:99:19: 11:a5:ca:76:18:aa:46:4a:05:22:cb:c8:90:ac:7b: b7:3a:8b:64:ed:26:16:35:9a:9f:a4:79:93:73:81: 58:21:f1:d7:ae:09:eb:da:93:8e:28:8a:4e:96:69: 8c:ed:1b:e9:ff:0d:ad:51:94:10:61:89:8b:35:66: 2f:c8:ae:27:1b:a4:aa:df:71:87:bf:95:ae:39:7d: 31:c0:2b:77:b7:58:1a:77:cd:72:e2:41:8c:34:86: 47:b9:f4:a7:7e:b7:ec:4f:67:e6:d6:db:cd:8b:8f: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7A:A4:3D:C4:B3:9C:5B:E8:71:D7:D4:08:5A:63:F1:80:AC:DE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fa:aa:c3:cb:7f:d9:a1:82:0c:ec:e3:b7:6f:36:26:29:75: cc:eb:62:a1:0a:14:b5:d8:b7:3c:ce:7f:79:d6:d4:40:b9:c7: a1:0d:03:64:98:fd:f2:b0:e4:f4:7a:bc:db:82:47:c3:27:32: fd:75:67:85:67:da:bd:41:be:19:b7:93:d9:2f:3e:63:8e:41: e7:a2:0a:d8:f9:8a:d6:68:d7:d1:1a:2a:35:d5:eb:8f:b4:e3: 84:00:7c:d9:43:7d:5e:33:98:d2:2e:19:5d:55:a6:d2:68:3f: ca:d3:b2:41:f9:1f:9f:b8:21:d8:24:4a:ec:79:53:9f:a4:18: 57:f5:69:39:09:52:54:26:cd:4a:2c:52:eb:a3:9f:4d:24:90: 79:7c:d5:87:ee:ea:f9:3a:f9:8f:c6:b4:5f:84:4f:dd:a4:d7: 45:ab:81:6e:7c:58:01:3a:09:5b:23:52:7d:a4:a4:42:61:d0: 3e:29:49:04:80:21:0b:99:24:f8:fd:b2:e4:26:11:9f:da:4f: 26:be:ef:41:af:47:2d:86:ce:cc:4f:fa:e7:82:16:81:0e:59: eb:4f:7f:c9:43:20:07:52:fc:a6:87:3b:92:d8:b5:9c:58:14: e4:34:69:56:91:38:03:cc:c6:e2:d5:32:d1:77:7b:2c:9b:7c: f5:35:8f:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVJ0RxzCGn2wEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk ZTMxYzQwYWMtZGExYy00ZmI2LTk4NDItNjU3OTNmMzMzN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNADj3a3n3cRd0lRqxt88EHUSAThVilLf4Nc lS0AV6lDBmYYMPWNhs3YL3YuMU5OwyzqdqM6tOUK8vEeRtynOaNSKmFqtGuGICj2 JvEfzxuoMq5wi/aWAYsrl1ovOwK/UydJkKqO52vAhnjo9zKDHLsvXIJxdB/eVEzZ cJlcRuMufGxDgakOqcB+tJb9PAPQMs6ymRkRpcp2GKpGSgUiy8iQrHu3Ootk7SYW NZqfpHmTc4FYIfHXrgnr2pOOKIpOlmmM7Rvp/w2tUZQQYYmLNWYvyK4nG6Sq33GH v5WuOX0xwCt3t1gad81y4kGMNIZHufSnfrfsT2fm1tvNi48WZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCN6pD3Es5xb6HHX1AhaY/GArN5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT+qrDy3/ZoYIM7OO3bzYm KXXM62KhChS12Lc8zn951tRAucehDQNkmP3ysOT0erzbgkfDJzL9dWeFZ9q9Qb4Z t5PZLz5jjkHnogrY+YrWaNfRGio11euPtOOEAHzZQ31eM5jSLhldVabSaD/K07JB +R+fuCHYJErseVOfpBhX9Wk5CVJUJs1KLFLro59NJJB5fNWH7ur5OvmPxrRfhE/d pNdFq4FufFgBOglbI1J9pKRCYdA+KUkEgCELmST4/bLkJhGf2k8mvu9Br0cths7M T/rnghaBDlnrT3/JQyAHUvymhzuS2LWcWBTkNGlWkTgDzMbi1TLRd3ssm3z1NY8x -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:55 2025 by rpki-client