$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: GbGDj6OKOkpbHnVbqnjRQHHbr7joKkyvPGBJBFyGNJs= Subject key identifier: 25:05:39:DD:2C:CA:DD:8B:04:97:45:FF:80:11:EC:9B:E3:22:70:21 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584BC03A2BBB923A58CEBD463C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B76C7 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: 76ySoNdOJ23Pf6A+ur24w2SnnaGyELQqJJDcci36xoo=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: qyvK3qaxDYB49+qT0oF9rU7CNsuedi/vUaiTFu839mw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2b:bb:92:3a:58:ce:bd:46:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=71a0e45b-f939-49e4-b962-d02c3c8bf70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:66:16:44:98:6e:03:72:d6:e7:6a:25:14: ba:87:63:ec:a2:3c:4d:60:19:b7:7e:30:94:09:88: 89:19:59:19:3f:ec:7a:d1:d2:bd:95:83:1d:c8:1b: 1b:3e:c2:c6:21:1b:2e:46:6e:33:76:96:80:7b:4d: 50:e4:fe:88:41:3b:f4:e3:c2:a4:bd:52:ac:a7:90: c0:20:4f:b7:35:62:32:35:1b:ff:f2:44:ab:02:8a: 7f:da:35:c7:78:74:f9:3c:9b:db:c2:a7:53:de:30: d7:c2:02:d9:1e:1f:c3:72:73:ea:5f:b5:30:bd:ba: d7:f5:e3:73:ce:b7:20:7a:02:54:13:cb:2c:98:f9: 11:bc:65:05:fc:31:a9:e0:07:05:46:7f:fd:48:5d: e9:85:46:4f:5d:d9:b7:63:dc:44:7f:12:d7:cb:8a: 64:d9:46:7b:42:2c:96:a1:fd:a2:a3:ae:de:59:ac: 38:44:b2:14:c5:a9:f4:f3:b9:32:b9:1d:ec:59:96: 83:94:23:e9:f0:e3:b6:9e:4a:08:23:05:07:32:7f: 7c:62:cc:86:9c:5f:e0:b7:6b:85:8b:f9:30:a5:3d: 4c:eb:46:85:fd:d3:7a:f1:88:b5:f0:0e:92:d3:c9: ac:c7:bf:9b:4b:d9:61:c0:77:21:53:9c:a9:3f:c5: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:39:DD:2C:CA:DD:8B:04:97:45:FF:80:11:EC:9B:E3:22:70:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b5:a6:c8:eb:fa:34:49:21:13:aa:30:7f:bc:fe:e8:dd:5e: 41:d2:fc:1e:d2:12:b7:5d:fa:57:6b:b6:7b:cb:e6:f7:5d:3d: 59:07:d3:28:61:9c:30:73:73:bb:87:61:c7:f7:6f:07:2f:01: 17:4f:c7:17:11:62:95:17:c2:8d:2b:48:49:d9:1e:5d:a6:82: 35:9f:1e:ac:d3:e1:bc:61:79:81:25:01:96:4a:f5:26:cf:a1: 8e:63:a3:3c:c8:00:8f:86:96:88:73:db:9f:3b:32:d0:69:2c: 60:ea:ec:d5:82:29:85:b7:dc:ef:eb:3b:87:44:75:7c:22:6a: 7d:4f:78:c9:90:78:ca:55:2d:2c:42:9c:45:0f:fe:7c:53:58: db:bc:42:7c:90:c1:dc:52:79:81:dd:22:c2:f1:99:8a:1d:4d: a8:50:7d:b2:63:c4:0e:50:f3:4d:42:2c:b4:be:83:4e:2d:b1: d1:9f:d3:c0:53:26:68:56:5e:c3:39:93:94:e9:c3:f8:c3:85: b2:a2:ef:3f:e8:d9:6d:11:ef:70:ec:2b:54:87:4f:7b:ea:57: ba:32:b0:ff:d6:30:56:82:b0:c9:3c:96:ff:63:4a:57:ea:8e: 7a:e5:84:6f:1c:81:ba:eb:36:ba:9c:e3:74:a3:d2:a1:02:c5: 8c:45:f0:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOiu7kjpYzr1GPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NzFhMGU0NWItZjkzOS00OWU0LWI5NjItZDAyYzNjOGJmNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhdmFkSYbgNy1udqJRS6h2PsojxNYBm3fjCU CYiJGVkZP+x60dK9lYMdyBsbPsLGIRsuRm4zdpaAe01Q5P6IQTv048KkvVKsp5DA IE+3NWIyNRv/8kSrAop/2jXHeHT5PJvbwqdT3jDXwgLZHh/DcnPqX7UwvbrX9eNz zrcgegJUE8ssmPkRvGUF/DGp4AcFRn/9SF3phUZPXdm3Y9xEfxLXy4pk2UZ7QiyW of2io67eWaw4RLIUxan087kyuR3sWZaDlCPp8OO2nkoIIwUHMn98YsyGnF/gt2uF i/kwpT1M60aF/dN68Yi18A6S08msx7+bS9lhwHchU5ypP8XcEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCUFOd0syt2LBJdF/4AR7JvjInAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWtabI6/o0SSETqjB/vP7o 3V5B0vwe0hK3XfpXa7Z7y+b3XT1ZB9MoYZwwc3O7h2HH928HLwEXT8cXEWKVF8KN K0hJ2R5dpoI1nx6s0+G8YXmBJQGWSvUmz6GOY6M8yACPhpaIc9ufOzLQaSxg6uzV gimFt9zv6zuHRHV8Imp9T3jJkHjKVS0sQpxFD/58U1jbvEJ8kMHcUnmB3SLC8ZmK HU2oUH2yY8QOUPNNQiy0voNOLbHRn9PAUyZoVl7DOZOU6cP4w4Wyou8/6NltEe9w 7CtUh0976le6MrD/1jBWgrDJPJb/Y0pX6o565YRvHIG66za6nON0o9KhAsWMRfBd -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:09 2025 by rpki-client