$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft File: 1cf30977-73f6-4522-b061-66f0061f58dd.mft (raw, json) Hash identifier: trThuEMkG6AJath4bTKTP2SYUNNcRESIvfgpW8m3n8I= Subject key identifier: CD:55:83:AC:E9:57:D0:26:C2:34:F9:76:B2:E1:D9:5B:75:7C:C2:5E Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F4328584BBFFEAC378AC198143707E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft Manifest number: 010D0C9F432858435D3B68768372498573438314 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 1cf30977-73f6-4522-b061-66f0061f58dd.crl (hash: bk5yEVT9cYz96dS2wN7ZFSMVMNOta7/k/SmKvQ/SsZo=) 2: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (hash: IR1zt6XP8ZROFoc5eICGjUJaZ5SmJ3BL25I+Tl8BnLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:ac:37:8a:c1:98:14:37:07:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=345554c1-0121-4e4f-b313-a3880d1a4e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:1c:18:d0:67:43:0b:79:33:40:00:bb:71: 4b:08:ea:08:a6:8c:fc:b3:24:d0:16:f3:55:1d:c8: 95:d8:25:1a:cc:9d:21:23:ab:bc:a4:71:00:fa:c1: 7f:84:17:23:71:99:53:e8:63:ef:9f:70:38:11:3c: e9:86:8c:f6:3d:3e:fd:29:b7:7f:f2:7a:27:76:c9: 56:0c:02:5f:ae:2a:01:40:7b:a9:7d:73:26:42:ba: 94:4c:de:60:a5:b4:6d:35:b9:6d:71:7a:f6:3a:21: 3b:34:96:85:11:ae:be:3b:57:c9:22:a7:38:8c:c8: a3:d8:f4:de:35:cd:2e:10:c1:cd:66:55:36:88:d3: 3c:1e:ec:c4:ac:c1:33:76:16:83:40:01:c7:ec:b6: d0:a7:8c:03:73:1f:c1:7f:5c:40:d1:bf:de:05:f8: a7:ca:f4:66:99:21:3a:5c:f7:2d:6a:76:f3:91:60: 85:20:cf:6a:09:52:7a:95:4e:a6:de:f0:dc:1c:4d: 8e:20:e0:3c:63:26:ae:38:b3:9b:1f:94:6a:c8:18: 8a:0f:da:38:e8:fc:87:c8:bf:6f:aa:25:20:d4:e5: 4c:50:18:e1:9b:ae:97:6a:1f:16:82:a9:39:4d:97: 0e:f4:41:42:1e:a5:5b:92:f4:cb:00:b8:e7:7b:ab: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:83:AC:E9:57:D0:26:C2:34:F9:76:B2:E1:D9:5B:75:7C:C2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:ec:08:f6:7f:d4:aa:a9:03:58:0f:c4:0e:45:20:de:1d: e5:59:8e:7a:66:2f:ba:3b:9f:fe:57:6f:b2:a7:3c:76:18:a2: 0e:84:b9:06:ed:e1:f0:0c:00:7b:45:fc:b6:55:86:70:45:f3: a6:4d:af:ab:68:3a:37:f3:d0:bc:af:19:d5:18:ce:ef:74:7c: 45:ec:c6:0a:66:c1:25:85:ef:b0:02:74:8f:73:02:d4:e3:7a: 54:35:73:ce:5b:c1:fe:4d:a4:75:3e:15:ef:d2:f5:e0:f5:b9: c4:4e:71:37:1e:80:a7:c7:26:65:35:4e:e2:5c:18:53:03:9f: b0:84:37:a0:0a:8a:f0:89:2f:df:69:77:e6:7f:f3:f8:1a:55: 57:7b:94:04:66:27:99:92:9e:c9:31:f6:24:22:f0:3b:ec:61: 13:2e:af:19:8b:bc:c2:5a:79:29:1f:08:b4:a9:a0:f6:25:fa: 97:c2:06:71:35:ee:b6:b7:2b:36:55:f9:de:93:e5:df:10:68: e8:02:e7:50:dd:21:7d:59:15:8c:d1:aa:9c:b7:63:46:56:e1: c3:e3:2e:cd:a6:ce:68:4b:7a:c7:16:8d:6d:d1:56:17:dd:3c: 7d:5e:12:07:45:2c:8a:0e:21:6b:fb:ae:48:4c:ee:dc:ed:48: 24:d3:1f:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qw3isGYFDcH4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk MzQ1NTU0YzEtMDEyMS00ZTRmLWIzMTMtYTM4ODBkMWE0ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKwcGNBnQwt5M0AAu3FLCOoIpoz8syTQFvNV HciV2CUazJ0hI6u8pHEA+sF/hBcjcZlT6GPvn3A4ETzphoz2PT79Kbd/8nondslW DAJfrioBQHupfXMmQrqUTN5gpbRtNbltcXr2OiE7NJaFEa6+O1fJIqc4jMij2PTe Nc0uEMHNZlU2iNM8HuzErMEzdhaDQAHH7LbQp4wDcx/Bf1xA0b/eBfinyvRmmSE6 XPctanbzkWCFIM9qCVJ6lU6m3vDcHE2OIOA8YyauOLObH5RqyBiKD9o46PyHyL9v qiUg1OVMUBjhm66Xah8Wgqk5TZcO9EFCHqVbkvTLALjne6u4KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM1Vg6zpV9AmwjT5drLh2Vt1fMJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvMWNmMzA5NzctNzNmNi00 NTIyLWIwNjEtNjZmMDA2MWY1OGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1lewI9n/UqqkDWA/EDkUg 3h3lWY56Zi+6O5/+V2+ypzx2GKIOhLkG7eHwDAB7Rfy2VYZwRfOmTa+raDo389C8 rxnVGM7vdHxF7MYKZsElhe+wAnSPcwLU43pUNXPOW8H+TaR1PhXv0vXg9bnETnE3 HoCnxyZlNU7iXBhTA5+whDegCorwiS/faXfmf/P4GlVXe5QEZieZkp7JMfYkIvA7 7GETLq8Zi7zCWnkpHwi0qaD2JfqXwgZxNe62tys2Vfnek+XfEGjoAudQ3SF9WRWM 0aqct2NGVuHD4y7Nps5oS3rHFo1t0VYX3Tx9XhIHRSyKDiFr+65ITO7c7Ugk0x8y -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:37 2025 by rpki-client