$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft File: caa8771d-81d7-474e-8d02-b2c215e51102.mft (raw, json) Hash identifier: 0+gcVj4aDXXe6Bz6b8BWK3it4hGEIQ0bFhhwF6hTpAg= Subject key identifier: F3:30:F8:54:81:7C:D2:28:00:61:88:07:8E:DC:57:D1:28:C3:70:28 Authority key identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Certificate issuer: /CN=caa8771d-81d7-474e-8d02-b2c215e51102 Certificate serial: 010D0C9F4328584B799E9D2BB5527394E5DA5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft Manifest number: 010D0C9F4328584073A85231683698E27AB79D79 Signing time: Fri 10 Oct 2025 12:00:03 +0000 Manifest this update: Fri 10 Oct 2025 12:00:03 +0000 Manifest next update: Mon 13 Oct 2025 12:00:00 +0000 Files and hashes: 1: caa8771d-81d7-474e-8d02-b2c215e51102.crl (hash: RsGg1kI2qfc4OK0RQmkhC6ZNSH0MSNA3vWdoMcqdeWg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:9d:2b:b5:52:73:94:e5:da:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caa8771d-81d7-474e-8d02-b2c215e51102 Validity Not Before: Oct 10 12:00:03 2025 GMT Not After : Oct 13 12:00:00 2025 GMT Subject: CN=6d22d898-f771-4672-99a4-58905fa57da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:72:2b:db:50:4c:37:f9:80:21:1a:00:0a: 8f:cd:25:d6:39:cd:b9:8d:be:7e:45:6c:e3:ec:af: ea:3d:dc:c8:01:48:ba:c6:86:ed:4c:13:13:70:2f: db:da:a6:40:cc:98:37:63:d6:c2:2f:b0:66:2e:6f: 39:44:27:11:4a:21:05:aa:de:b0:34:34:90:4b:0b: b2:96:2d:22:27:bf:91:c4:38:18:48:16:b6:3a:df: f3:66:a4:61:93:7a:62:13:a6:4b:da:02:7f:96:d4: a1:f0:ff:0a:f9:f2:9c:19:cb:e4:9f:10:40:ac:c0: a4:fc:54:32:12:50:c9:b7:3e:50:17:e7:bf:e3:53: a9:00:07:1f:bd:02:a6:18:a6:d6:de:fb:89:86:6c: 46:87:33:dc:09:37:3e:12:c0:35:cc:0b:c4:2b:8b: fd:b9:ca:54:68:ce:fa:8a:0a:8c:74:98:58:8e:3c: fa:2e:bd:d8:1c:60:d0:40:d0:68:2b:5d:02:2b:68: 78:7f:29:32:42:e1:59:fd:9f:19:a1:f1:92:d3:40: 20:58:c7:b1:3a:49:97:f2:29:f6:fa:1b:dc:0d:2f: 61:2a:5f:ac:8f:1c:96:7a:c1:43:4f:ae:56:24:06: b5:65:d5:d4:0a:5e:a3:3a:cd:03:14:fa:88:db:f6: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:30:F8:54:81:7C:D2:28:00:61:88:07:8E:DC:57:D1:28:C3:70:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl X509v3 Authority Key Identifier: keyid:5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1d:f6:e5:55:e3:90:fb:2a:4e:ba:23:a4:90:4e:91:04:a6: 1c:91:c8:ed:83:40:5d:fb:1d:49:f5:05:41:31:b6:62:d2:87: ac:e4:93:31:be:8d:de:c8:5a:f7:ec:23:a9:e8:75:70:46:c4: 1f:81:1a:42:e8:8a:94:b3:62:fc:5d:2c:28:d4:6c:dc:9a:8b: ad:c4:14:49:16:8f:03:de:98:85:64:94:79:e5:69:d1:b6:01: 25:47:c8:96:71:84:ba:23:a9:d4:ef:2c:64:de:e7:49:39:47: e1:20:1e:72:d1:89:17:a2:d5:da:bf:4b:33:d6:3c:a6:ae:39: d6:03:3f:bf:d0:ec:d8:45:35:51:e2:60:95:ab:17:83:2c:8a: 1c:8b:1d:63:e5:da:d1:52:cf:0a:c5:11:07:6d:2c:f0:a8:36: 55:b2:47:01:99:47:0e:13:4b:18:5a:0b:97:57:6c:5b:0f:d3: 34:51:76:cd:24:5d:f7:ab:46:d6:79:15:86:a3:4c:58:81:d4: 04:73:98:76:d8:d4:dd:3c:74:c2:2e:37:4c:56:62:d8:bc:c0: fb:d5:c3:b4:39:75:97:26:98:bb:40:44:ba:6e:ea:c2:e7:b8: b7:a2:de:2f:47:cf:1e:cb:af:52:ea:cc:df:3f:48:4b:72:79: 34:37:e0:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5np0rtVJzlOXaWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FhODc3MWQtODFkNy00NzRlLThkMDItYjJjMjE1ZTUx MTAyMB4XDTI1MTAxMDEyMDAwM1oXDTI1MTAxMzEyMDAwMFowLzEtMCsGA1UEAxMk NmQyMmQ4OTgtZjc3MS00NjcyLTk5YTQtNTg5MDVmYTU3ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmpyK9tQTDf5gCEaAAqPzSXWOc25jb5+RWzj 7K/qPdzIAUi6xobtTBMTcC/b2qZAzJg3Y9bCL7BmLm85RCcRSiEFqt6wNDSQSwuy li0iJ7+RxDgYSBa2Ot/zZqRhk3piE6ZL2gJ/ltSh8P8K+fKcGcvknxBArMCk/FQy ElDJtz5QF+e/41OpAAcfvQKmGKbW3vuJhmxGhzPcCTc+EsA1zAvEK4v9ucpUaM76 igqMdJhYjjz6Lr3YHGDQQNBoK10CK2h4fykyQuFZ/Z8ZofGS00AgWMexOkmX8in2 +hvcDS9hKl+sjxyWesFDT65WJAa1ZdXUCl6jOs0DFPqI2/Z1fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPMw+FSBfNIoAGGIB47cV9Eow3AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4 NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVlNTExMDIvY2FhODc3MWQtODFkNy00 NzRlLThkMDItYjJjMjE1ZTUxMTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FhODc3MWQtODFkNy00NzRlLThk MDItYjJjMjE1ZTUxMTAyL2NhYTg3NzFkLTgxZDctNDc0ZS04ZDAyLWIyYzIxNWU1 MTEwMi5jcmwwHwYDVR0jBBgwFoAUWvsWnlpwW/ChpwXjWloJB6t5gnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMy MTVlNTExMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcHfblVeOQ+ypOuiOkkE6R BKYckcjtg0Bd+x1J9QVBMbZi0oes5JMxvo3eyFr37COp6HVwRsQfgRpC6IqUs2L8 XSwo1GzcmoutxBRJFo8D3piFZJR55WnRtgElR8iWcYS6I6nU7yxk3udJOUfhIB5y 0YkXotXav0sz1jymrjnWAz+/0OzYRTVR4mCVqxeDLIocix1j5drRUs8KxREHbSzw qDZVskcBmUcOE0sYWguXV2xbD9M0UXbNJF33q0bWeRWGo0xYgdQEc5h22NTdPHTC LjdMVmLYvMD71cO0OXWXJpi7QES6burC57i3ot4vR88ey69S6szfP0hLcnk0N+CE -----END CERTIFICATE-----Generated at Sat Oct 11 02:38:18 2025 by rpki-client