$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: 9CyWKMd6RRfIXhQ0bYC3nS5DY/wdAXASJUoToSdEqvU= Subject key identifier: 9A:1E:E0:A6:96:AE:02:17:C5:39:25:AC:59:6B:01:EF:69:06:07:D3 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584BC0ECE3D9E3CAB22409D18780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684C4E Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Fri 07 Nov 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: KhTlQWYwDSbMvGpPH/wFOOs4Zzk9/TBvXLOPL3v5Skw=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: br/ZiABGEPD6NHRLSO2+HKXb1Euh54X23/oKXiH509s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e3:d9:e3:ca:b2:24:09:d1:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 7 01:00:00 2025 GMT Subject: CN=31250e61-a43f-4e8e-9dd9-8d1755a8368f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:48:aa:b7:b0:27:36:7b:d3:43:9c:01:e0: 51:3d:25:4e:1c:5e:cb:53:91:fb:61:7c:b0:dd:ee: 79:0d:f5:ae:c4:60:14:4e:8a:77:cf:f7:4c:04:24: 6c:ce:17:f4:88:a9:59:16:3a:b0:ba:1e:5f:45:14: 2a:cf:1a:c1:bc:e9:ca:49:2c:39:f8:99:da:65:a9: 5a:f4:a6:71:9c:d4:32:25:6f:df:20:86:26:d7:e2: 68:fe:a7:b4:be:fd:c9:75:5b:d7:d7:35:55:48:0f: f4:56:69:ba:80:e5:9f:13:b1:95:af:06:3d:c8:49: 44:1f:86:f4:9e:81:cb:5d:f5:7d:ea:5d:02:6c:b4: ed:0c:bc:88:3b:93:49:c3:db:da:0e:1c:76:c8:64: 32:53:4b:44:8f:71:a8:a1:6a:b3:35:39:a5:f4:32: c9:cc:cf:ff:fe:2c:c2:82:6f:54:b1:6a:40:67:07: a3:9a:c0:47:a8:65:71:78:82:e9:a1:6e:09:e8:5f: 16:db:d0:0d:76:08:82:ef:79:c5:6d:a9:2a:d5:b6: ec:75:dc:a0:ae:bc:f5:d4:06:b8:f3:44:e5:ec:f7: 65:a0:21:8d:a8:bb:82:45:a6:86:72:4d:fc:1e:7e: 69:16:8d:d3:00:85:d4:f7:23:2c:f9:48:52:0a:a6: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1E:E0:A6:96:AE:02:17:C5:39:25:AC:59:6B:01:EF:69:06:07:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6e:20:2f:9e:d3:69:44:7a:75:b6:4f:93:73:f1:b3:6d:b8: 86:d7:49:96:8d:ad:76:4e:3e:8d:b4:fc:b1:01:da:86:f9:9b: 31:fe:ed:1e:95:ce:46:24:46:9d:e7:86:e4:84:b7:f8:3b:2d: d5:35:cf:33:ea:26:19:25:c9:7f:8c:f5:21:53:5a:ab:60:24: 5c:5c:23:21:ef:a1:02:87:31:a3:af:0f:70:a7:eb:88:d7:8b: b2:d5:07:96:7c:42:89:93:33:c4:a4:15:a0:3e:3f:11:7d:5c: 72:fb:9c:97:c8:ca:74:f6:fa:9c:7c:62:28:62:23:12:fc:00: dd:8b:fe:da:34:4b:c1:d2:49:0d:f0:81:6a:ee:4d:79:b0:2b: c1:6f:4e:f1:7c:08:ee:c3:77:22:6a:1a:88:65:bc:bd:8c:69: a6:49:35:69:41:d7:8d:97:e0:31:ea:7f:18:a1:08:bc:0c:f1: 45:04:16:c9:22:10:36:0a:b1:df:be:a1:30:e2:23:40:29:8e: c7:22:5d:60:05:7b:78:4f:09:1a:06:a6:c9:43:ad:69:38:52: 5f:90:03:70:c5:e9:68:4b:54:83:1d:93:ca:36:97:f8:66:a3: a8:84:e8:f8:da:41:6a:db:a9:b8:86:76:c4:85:16:a9:d6:82: 64:34:7e:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OPZ48qyJAnRh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwNzAxMDAwMFowLzEtMCsGA1UEAxMk MzEyNTBlNjEtYTQzZi00ZThlLTlkZDktOGQxNzU1YTgzNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ZIqrewJzZ700OcAeBRPSVOHF7LU5H7YXyw 3e55DfWuxGAUTop3z/dMBCRszhf0iKlZFjqwuh5fRRQqzxrBvOnKSSw5+JnaZala 9KZxnNQyJW/fIIYm1+Jo/qe0vv3JdVvX1zVVSA/0Vmm6gOWfE7GVrwY9yElEH4b0 noHLXfV96l0CbLTtDLyIO5NJw9vaDhx2yGQyU0tEj3GooWqzNTml9DLJzM///izC gm9UsWpAZwejmsBHqGVxeILpoW4J6F8W29ANdgiC73nFbakq1bbsddygrrz11Aa4 80Tl7PdloCGNqLuCRaaGck38Hn5pFo3TAIXU9yMs+UhSCqZJPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJoe4KaWrgIXxTklrFlrAe9pBgfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6biAvntNpRHp1tk+Tc/Gz bbiG10mWja12Tj6NtPyxAdqG+Zsx/u0elc5GJEad54bkhLf4Oy3VNc8z6iYZJcl/ jPUhU1qrYCRcXCMh76EChzGjrw9wp+uI14uy1QeWfEKJkzPEpBWgPj8RfVxy+5yX yMp09vqcfGIoYiMS/ADdi/7aNEvB0kkN8IFq7k15sCvBb07xfAjuw3ciahqIZby9 jGmmSTVpQdeNl+Ax6n8YoQi8DPFFBBbJIhA2CrHfvqEw4iNAKY7HIl1gBXt4Twka BqbJQ61pOFJfkANwxeloS1SDHZPKNpf4ZqOohOj42kFq26m4hnbEhRap1oJkNH5q -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:34 2025 by rpki-client