$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft File: 2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft (raw, json) Hash identifier: /JbtARvswZql64/MQ+mp+tMfzyfSzGEOPkJkMPe+hXg= Subject key identifier: 4F:46:62:F3:4D:0E:AA:A8:50:5F:14:06:86:7D:E1:51:7E:E7:8A:70 Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584BC01C6261D242B6E4FEC370C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft Manifest number: 010D0C9F4328584163B5014B5945217EC16E29D0 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl (hash: sQOn+14F7teLOvv4tb9fKUlK1T5fZeMxch1ams5F6GY=) 2: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (hash: YQuCaphQp6MNlFffmZxWu2hX0EtneC6iPCXv3DeXkKk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:61:d2:42:b6:e4:fe:c3:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=faa1738e-e525-4a2b-96e5-481b8a1c7a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:8e:77:a2:9f:58:90:65:ce:fc:94:77:dc: c0:74:16:94:f3:6e:62:25:38:bb:07:c0:e0:de:3c: 7f:28:71:36:00:be:1f:1f:e3:45:9f:19:b6:11:f1: a5:25:0c:ce:89:72:bd:cd:81:d6:31:f1:e2:88:3b: 6f:78:4f:8f:92:c6:53:04:0f:fb:a0:8d:70:68:b5: 36:d4:37:62:81:af:21:4c:de:1b:eb:ed:2b:54:b4: 2f:c1:1c:dd:cb:3a:6c:8a:49:6c:0f:8b:9b:d8:e2: 2c:ce:51:40:a4:31:78:26:c6:9c:3d:94:ac:b0:a3: 8d:35:f0:ca:a0:13:4b:49:fe:26:75:0f:cb:c2:a0: 5f:5a:5a:c1:83:5d:4d:48:ab:a9:be:bf:e7:26:c3: 2e:6d:64:e4:21:c4:d5:1f:66:d8:a2:09:af:8a:45: 75:be:d4:da:12:56:a6:ad:22:2a:0e:a9:d3:e1:2c: 8f:87:4e:57:5a:c7:35:b6:32:fd:c5:d5:0d:2e:1f: ab:8e:7c:26:12:77:2f:6f:2a:65:98:93:c8:35:46: 7a:80:a9:8d:46:f1:22:7a:80:a5:22:01:79:cd:43: 67:3e:ce:f1:27:9e:6a:26:93:74:29:33:57:2b:21: eb:2a:88:00:a9:2e:a4:69:e4:5e:67:a9:6e:63:7e: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:62:F3:4D:0E:AA:A8:50:5F:14:06:86:7D:E1:51:7E:E7:8A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1b:c1:3d:1c:c6:ef:d7:a1:db:ad:c4:ad:dd:ea:97:28:16: e6:28:4a:25:4a:52:dd:06:63:2f:7e:db:c6:5f:bb:69:cb:f5: 62:1d:84:07:5f:bb:08:27:95:4e:7a:f5:0f:6a:d4:35:04:c5: 00:4b:14:ad:5a:b8:71:2b:a6:79:c2:7e:84:9d:e6:a6:eb:14: 09:30:69:99:11:1d:da:df:3e:4d:8d:a2:ac:bb:49:b9:10:93: 0c:f5:4f:46:1f:3f:9b:d8:72:b6:94:4d:cf:63:b9:03:cc:dc: 8c:ba:f4:c5:05:12:93:4b:aa:00:c2:db:78:ce:42:31:c6:25: 40:d0:1e:83:30:14:9c:28:9b:6b:35:0c:ba:48:77:c9:8e:a6: f2:13:a6:3d:cc:9e:72:a4:8a:92:81:4a:9c:bd:f8:20:f3:59: 02:31:f5:e3:5b:cc:7e:77:20:82:7f:b1:72:c3:85:80:8b:c7: 94:b0:dc:57:8a:3f:11:22:35:b2:6c:04:1e:e4:91:b3:fb:dd: 89:54:78:af:d0:41:72:91:1c:2c:88:17:1a:72:0d:4e:63:1d: 30:a0:26:b2:b4:71:ab:45:71:f0:be:e2:b8:53:5c:51:51:e2: e6:68:7b:04:82:86:3d:91:8a:c5:ab:88:2e:06:cd:5f:15:80: 51:55:94:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGJh0kK25P7DcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZmFhMTczOGUtZTUyNS00YTJiLTk2ZTUtNDgxYjhhMWM3YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqOd6KfWJBlzvyUd9zAdBaU825iJTi7B8Dg 3jx/KHE2AL4fH+NFnxm2EfGlJQzOiXK9zYHWMfHiiDtveE+PksZTBA/7oI1waLU2 1Ddiga8hTN4b6+0rVLQvwRzdyzpsiklsD4ub2OIszlFApDF4JsacPZSssKONNfDK oBNLSf4mdQ/LwqBfWlrBg11NSKupvr/nJsMubWTkIcTVH2bYogmvikV1vtTaElam rSIqDqnT4SyPh05XWsc1tjL9xdUNLh+rjnwmEncvbyplmJPINUZ6gKmNRvEieoCl IgF5zUNnPs7xJ55qJpN0KTNXKyHrKogAqS6kaeReZ6luY35AyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9GYvNNDqqoUF8UBoZ94VF+54pwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvMmNkNGY1MmYtNDA1My00 NWRiLWI4ZTAtYTdlMGUzYjg1ZmJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtG8E9HMbv16HbrcSt3eqX KBbmKEolSlLdBmMvftvGX7tpy/ViHYQHX7sIJ5VOevUPatQ1BMUASxStWrhxK6Z5 wn6Eneam6xQJMGmZER3a3z5NjaKsu0m5EJMM9U9GHz+b2HK2lE3PY7kDzNyMuvTF BRKTS6oAwtt4zkIxxiVA0B6DMBScKJtrNQy6SHfJjqbyE6Y9zJ5ypIqSgUqcvfgg 81kCMfXjW8x+dyCCf7Fyw4WAi8eUsNxXij8RIjWybAQe5JGz+92JVHiv0EFykRws iBcacg1OYx0woCaytHGrRXHwvuK4U1xRUeLmaHsEgoY9kYrFq4guBs1fFYBRVZTZ -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:22 2025 by rpki-client