$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft File: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft (raw, json) Hash identifier: buSdRFPlvbDOLTrbxo7nMHD5zGotrRZ8eHPvVLvykcI= Subject key identifier: DB:C0:06:53:59:EE:62:FC:D0:39:9B:E1:4E:F9:EF:80:42:70:92:D8 Authority key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Certificate issuer: /CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Certificate serial: 010D0C9F4328584BC0580213A3C78C0D5AE4EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft Manifest number: 010D0C9F43285843B9909726536085C0C7BE7CF2 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl (hash: eCDgN9chm+QnqIPV2y5En1NPeUZ+HNb0DsWd5GasoLw=) 2: 5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa (hash: xwpw/HVrQ/S+Pym8r920Iz6uPy3+IlH9dFoWkVSgu1A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:02:13:a3:c7:8c:0d:5a:e4:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=52d251fb-659a-47dc-9e96-fb0fee15393a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:82:a1:36:7b:c4:cb:54:1d:83:76:5b:24: 3a:07:38:88:1c:3b:74:66:d2:45:85:a8:7b:0e:4e: 8d:53:46:c1:e2:17:40:b4:47:4b:c3:1f:54:32:4d: 75:8d:c7:82:fe:15:b0:b4:d0:5f:6b:e8:53:8f:ee: 3b:f1:5c:e4:ca:bb:9e:06:5b:61:d2:9a:84:d3:57: d0:e9:22:28:61:54:7d:86:75:0b:11:30:e5:a2:a7: 12:ff:73:52:f0:51:28:2b:c6:22:f5:00:07:92:8d: b1:3f:ea:2a:24:f2:d3:41:72:64:0a:b8:0f:ce:0e: a1:04:9b:a3:21:c7:38:c2:d2:12:67:4a:af:ca:ef: f9:c1:8e:7c:df:cc:1f:ce:32:db:86:36:00:1a:33: 64:ea:ce:88:b7:98:b2:9e:e4:b0:4f:c8:d7:0b:6d: 3c:04:a2:f8:3a:13:1a:52:c4:b5:af:10:7a:54:df: 69:4f:d2:7e:26:45:9d:cf:20:99:7d:c8:04:d5:d9: 0c:58:40:37:53:fb:38:2c:65:dc:a3:bd:0f:a9:6f: ce:ba:bc:d6:30:1b:58:b9:43:72:31:e6:88:78:39: 04:81:75:cc:21:ac:c9:09:76:c3:88:8a:8c:0f:32: d6:9a:29:c1:aa:5b:52:59:0c:30:05:e6:fe:2b:11: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:06:53:59:EE:62:FC:D0:39:9B:E1:4E:F9:EF:80:42:70:92:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl X509v3 Authority Key Identifier: keyid:04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4f:9e:14:83:69:9d:ee:37:38:8a:53:a1:7f:4b:d5:c5:5d: 6b:31:0b:b5:92:f8:dc:94:12:86:8d:3d:b6:89:b9:55:29:c0: 1e:6a:e7:20:64:71:4f:95:10:ee:e8:a0:79:0b:86:ba:58:43: 30:83:92:ee:74:dd:7f:e5:b9:89:b9:9e:64:a3:a2:0c:e7:ef: 05:30:45:2d:b5:be:df:01:ef:68:5e:83:49:7c:d9:14:46:34: e6:ab:d2:16:5a:f0:b7:69:4f:d6:93:6b:ab:95:b2:1d:15:8d: 35:43:64:97:58:fb:de:e3:19:b4:72:ae:51:4c:09:07:f0:2c: 89:09:7b:b4:b7:90:17:7a:6d:4b:04:b4:68:f9:94:5c:05:0b: e6:b4:9c:7c:91:ca:d1:e5:ed:7d:ab:1b:2a:9b:dd:dd:56:30: b9:1a:de:02:83:90:72:7c:12:0c:43:77:81:4f:be:b1:c0:6c: 87:7b:98:47:2e:45:28:f4:3f:86:2c:4d:cd:e9:08:a5:f6:91: ad:6c:21:c2:e3:a0:49:7c:de:1b:c8:be:f0:77:cd:ee:d9:44: 8b:3e:6c:68:99:05:6e:cc:26:08:69:ae:58:49:e5:03:b9:10: 9a:e1:7a:f7:a2:db:c5:88:df:20:ad:f6:77:be:18:78:ea:4f: df:9c:3f:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAITo8eMDVrk6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNlZmZmOTktNWRiMS00ZDA5LWIwZGMtZjdmMmYwZmVk NGZkMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk NTJkMjUxZmItNjU5YS00N2RjLTllOTYtZmIwZmVlMTUzOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl+CoTZ7xMtUHYN2WyQ6BziIHDt0ZtJFhah7 Dk6NU0bB4hdAtEdLwx9UMk11jceC/hWwtNBfa+hTj+478VzkyrueBlth0pqE01fQ 6SIoYVR9hnULETDloqcS/3NS8FEoK8Yi9QAHko2xP+oqJPLTQXJkCrgPzg6hBJuj Icc4wtISZ0qvyu/5wY5838wfzjLbhjYAGjNk6s6It5iynuSwT8jXC208BKL4OhMa UsS1rxB6VN9pT9J+JkWdzyCZfcgE1dkMWEA3U/s4LGXco70PqW/OurzWMBtYuUNy MeaIeDkEgXXMIazJCXbDiIqMDzLWminBqltSWQwwBeb+KxHw2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNvABlNZ7mL80Dmb4U7574BCcJLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Vm ZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBmZWQ0ZmQvMjNlZmZmOTktNWRiMS00 ZDA5LWIwZGMtZjdmMmYwZmVkNGZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNlZmZmOTktNWRiMS00ZDA5LWIw ZGMtZjdmMmYwZmVkNGZkLzIzZWZmZjk5LTVkYjEtNGQwOS1iMGRjLWY3ZjJmMGZl ZDRmZC5jcmwwHwYDVR0jBBgwFoAUBDngqWaGeSdHLJ5j8YlI34hR55IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2Yy ZjBmZWQ0ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAST54Ug2md7jc4ilOhf0vV xV1rMQu1kvjclBKGjT22iblVKcAeaucgZHFPlRDu6KB5C4a6WEMwg5LudN1/5bmJ uZ5ko6IM5+8FMEUttb7fAe9oXoNJfNkURjTmq9IWWvC3aU/Wk2urlbIdFY01Q2SX WPve4xm0cq5RTAkH8CyJCXu0t5AXem1LBLRo+ZRcBQvmtJx8kcrR5e19qxsqm93d VjC5Gt4Cg5ByfBIMQ3eBT76xwGyHe5hHLkUo9D+GLE3N6Qil9pGtbCHC46BJfN4b yL7wd83u2USLPmxomQVuzCYIaa5YSeUDuRCa4Xr3otvFiN8grfZ3vhh46k/fnD9w -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:36 2025 by rpki-client