$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft File: 3d17c017-30b5-444a-aa30-048cc30971e3.mft (raw, json) Hash identifier: E7v3tH05IzV/LYmbJRP7W0lqtk8ttbE1SeIpESVlEXY= Subject key identifier: 83:43:33:0A:76:37:5C:14:71:0B:26:48:B0:14:9B:10:7D:70:31:7F Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584BC01C635E71ED31EC85942540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft Manifest number: 010D0C9F4328584AEEBB1810A11CCF289AF9B70E Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 3d17c017-30b5-444a-aa30-048cc30971e3.crl (hash: rk9Dpb0fmSXCWCg74uOvavxWiFCQuOA+pKLGJegD4Rk=) 2: a45363ac-38b7-3765-9fd2-71955777f847.roa (hash: 1anl831tVkJswkthf/3+Syju5s69S5ProUY0fqq/m1Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:5e:71:ed:31:ec:85:94:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=4b3fb367-1c72-4bc1-aa92-09e1497c9dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:d5:52:29:e4:7f:f3:81:52:4f:95:d9:ce: b0:69:df:90:2c:ed:12:11:b9:10:b3:d2:e6:75:3a: 70:3d:3f:49:67:4a:c3:ee:b5:fb:60:dd:49:4d:ac: 95:64:df:b7:b6:dd:bd:b4:d5:94:e9:44:85:99:74: 1c:1b:ff:f1:22:d4:d1:f3:76:37:14:f0:12:21:f3: f5:f7:01:44:35:a1:d0:7a:51:5c:83:ea:c6:f9:c0: ad:8f:f0:02:06:9b:58:bd:92:f6:d6:ff:76:15:bb: 48:f9:96:8d:c3:62:6c:8f:e4:42:41:de:1d:52:ee: 4a:3c:0f:30:86:c7:1d:89:30:67:5d:38:a5:bb:35: 71:7c:6a:aa:e0:5f:a2:f6:96:74:d1:7d:e9:92:e9: 73:0a:c8:c4:25:46:af:53:a3:f4:17:ef:68:9c:e1: b6:da:1f:2d:3d:9f:10:b3:94:16:21:8b:95:81:3b: 31:bb:0a:ff:2a:0e:16:e3:92:50:37:d0:a9:88:1a: dc:7c:8e:fc:e4:aa:72:37:0f:21:38:07:4e:20:c7: 78:05:af:f4:74:53:4c:12:eb:9e:54:64:67:d2:49: 5a:da:6b:79:59:18:e6:70:5c:e1:e8:59:7c:29:6a: 37:ad:56:e2:6d:d5:59:6e:c9:e2:35:f7:36:99:e2: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:33:0A:76:37:5C:14:71:0B:26:48:B0:14:9B:10:7D:70:31:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:00:44:77:f8:59:a9:2d:66:f8:16:d2:4f:31:da:e8:97:aa: c4:9f:40:d6:08:55:af:22:08:f0:54:e6:aa:fe:bd:07:c9:aa: 1b:26:bd:92:9a:04:6f:17:0c:a0:52:76:a5:a1:71:c3:b2:2a: b3:c0:25:26:03:f6:7b:73:38:27:57:67:d3:8b:a6:e2:16:9c: 75:f6:51:df:22:aa:5e:40:b3:d6:25:dc:9e:e7:ee:fc:e4:d3: 8e:5e:c9:d8:d0:20:5b:b5:46:2a:ca:bc:b7:6d:d6:a7:80:0b: 68:9c:0a:b5:98:51:bc:ef:3b:4b:56:28:26:5b:98:2a:4e:93: f8:cd:bb:ac:1c:a7:2a:8d:8a:a1:70:98:b7:ab:a3:5e:cc:ba: 4e:66:fc:c8:86:3a:c6:dd:b8:dc:dc:b0:37:21:0f:f9:f8:df: 3c:f1:53:67:e5:2b:b4:3d:1c:ee:7f:09:39:6b:ea:bf:33:9f: 12:c5:9a:3b:58:29:93:80:03:9b:2f:4e:92:fb:0e:3e:29:be: d9:3d:84:a4:a3:46:2e:8e:e6:5b:52:ed:4f:ed:42:5b:35:5d: 20:ac:ae:d7:ef:a4:2c:22:be:a7:af:22:3f:ac:34:dd:80:17: 2b:e9:f6:3f:cc:94:8b:5f:b0:24:9c:f8:4b:8c:82:ee:83:ca: 87:aa:d8:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGNece0x7IWUJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk NGIzZmIzNjctMWM3Mi00YmMxLWFhOTItMDllMTQ5N2M5ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzjVUinkf/OBUk+V2c6wad+QLO0SEbkQs9Lm dTpwPT9JZ0rD7rX7YN1JTayVZN+3tt29tNWU6USFmXQcG//xItTR83Y3FPASIfP1 9wFENaHQelFcg+rG+cCtj/ACBptYvZL21v92FbtI+ZaNw2Jsj+RCQd4dUu5KPA8w hscdiTBnXTiluzVxfGqq4F+i9pZ00X3pkulzCsjEJUavU6P0F+9onOG22h8tPZ8Q s5QWIYuVgTsxuwr/Kg4W45JQN9CpiBrcfI785KpyNw8hOAdOIMd4Ba/0dFNMEuue VGRn0kla2mt5WRjmcFzh6Fl8KWo3rVbibdVZbsniNfc2meIi1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFINDMwp2N1wUcQsmSLAUmxB9cDF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvM2QxN2MwMTctMzBiNS00 NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsAER3+FmpLWb4FtJPMdro l6rEn0DWCFWvIgjwVOaq/r0HyaobJr2SmgRvFwygUnaloXHDsiqzwCUmA/Z7czgn V2fTi6biFpx19lHfIqpeQLPWJdye5+785NOOXsnY0CBbtUYqyry3bdangAtonAq1 mFG87ztLVigmW5gqTpP4zbusHKcqjYqhcJi3q6NezLpOZvzIhjrG3bjc3LA3IQ/5 +N888VNn5Su0PRzufwk5a+q/M58SxZo7WCmTgAObL06S+w4+Kb7ZPYSko0YujuZb Uu1P7UJbNV0grK7X76QsIr6nryI/rDTdgBcr6fY/zJSLX7AknPhLjILug8qHqthL -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:30 2025 by rpki-client