$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: Sguyw1Utb6QieQlKSob7gSwMpFa+hWCS7Ih7GVfN4fM= Subject key identifier: A0:A5:25:4C:90:A0:E1:99:51:21:01:B8:03:67:00:23:AB:90:6A:38 Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584B748068D5D83291E51818ABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E1FB Signing time: Wed 08 Oct 2025 16:00:08 +0000 Manifest this update: Wed 08 Oct 2025 16:00:08 +0000 Manifest next update: Sat 11 Oct 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: HWr/9hBoOEAkEpEzaN3J64F3sYLYzipRNRXhyDVnwwE=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: oOACxzOBF0UqkHFW4LYQDkrkpijdQUoGWEIwpBVT+o8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:80:68:d5:d8:32:91:e5:18:18:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Oct 8 16:00:08 2025 GMT Not After : Oct 11 16:00:00 2025 GMT Subject: CN=44b926a5-5c85-4c7f-ac53-d32fd1759c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:aa:82:3a:fc:c0:69:2a:70:e8:96:53:ee: 5e:bf:20:09:32:d1:71:2c:89:2c:d9:21:f9:1f:42: e7:d3:2e:ac:4c:27:5d:f4:a1:e9:cb:ab:13:de:e7: db:0e:ae:2b:d7:63:9c:bc:a0:8f:c3:9c:9a:f2:2c: b0:c6:e5:a1:5f:04:59:27:ca:09:ff:2c:19:8a:e4: c8:7a:45:bb:c0:9e:ea:e0:25:c3:9a:6f:28:db:53: a0:91:4c:16:a0:11:a4:a1:1e:45:04:cf:a0:3f:a9: 2b:71:a2:e3:2c:03:5a:14:e9:08:93:5f:af:18:2e: 81:e2:32:cc:eb:97:ae:74:ea:0c:f6:f4:20:f7:44: 7f:0c:10:ae:e4:09:3b:65:d6:f5:c2:4b:7d:96:77: ae:5b:3d:92:92:5f:6e:db:8d:49:80:1c:ba:2b:17: 8f:ba:32:23:b1:64:69:7a:bc:8c:7c:81:10:56:12: d5:18:f8:2f:6f:5b:ba:1e:2a:99:58:03:98:f0:51: 0d:da:ef:72:13:be:dc:02:18:a3:02:7d:d2:26:64: 6f:7a:cd:3f:28:44:56:dc:b9:8d:aa:b0:ed:05:db: fb:fa:f3:22:6c:4a:df:74:2a:24:9c:02:37:09:d0: 41:b6:b8:7c:f8:ec:7e:38:27:db:6e:44:9b:4a:9e: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:25:4C:90:A0:E1:99:51:21:01:B8:03:67:00:23:AB:90:6A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:01:d8:61:ea:4d:a8:80:ea:23:61:6c:d0:b4:4b:58:5f:79: e1:1b:bc:3d:7d:29:14:6b:ff:11:99:18:70:0a:ca:52:77:ee: c2:b6:05:d9:d4:24:89:9a:9c:26:40:89:fc:41:80:0b:77:f7: d0:27:93:9d:50:e7:5b:92:b0:8a:a0:fe:c1:48:a2:f7:98:42: 57:91:93:f0:cf:86:ea:c6:5b:ba:2d:7a:70:40:e5:1b:1e:81: 5f:fc:58:20:09:81:60:0d:53:34:4c:86:c6:26:4b:99:a7:fc: 70:5e:d0:ff:61:76:46:b3:10:82:75:3b:da:5a:72:cc:de:85: e9:27:79:bf:5f:6e:c4:16:04:24:6a:25:d4:24:93:bb:2f:69: 82:a3:50:a5:7e:34:86:89:68:a4:2f:fd:15:84:11:dc:0c:6a: 49:fa:ec:50:35:78:94:31:69:7b:8c:7a:0b:1b:7c:4e:24:03: 78:e6:76:e5:0f:f5:95:e3:ff:28:ca:0b:61:2a:56:ec:35:d9: 70:ea:72:88:81:6d:e3:23:c3:2f:ba:0d:65:c1:a5:36:fa:13: 14:31:32:7a:49:e8:b8:b1:c0:ca:f5:13:d4:5e:1c:b5:83:e5: 24:93:3e:1b:af:31:fd:76:d5:0f:34:1e:d1:bf:8e:25:b2:5a: 28:f2:2d:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0gGjV2DKR5RgYq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MTAwODE2MDAwOFoXDTI1MTAxMTE2MDAwMFowLzEtMCsGA1UEAxMk NDRiOTI2YTUtNWM4NS00YzdmLWFjNTMtZDMyZmQxNzU5YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnWqgjr8wGkqcOiWU+5evyAJMtFxLIks2SH5 H0Ln0y6sTCdd9KHpy6sT3ufbDq4r12OcvKCPw5ya8iywxuWhXwRZJ8oJ/ywZiuTI ekW7wJ7q4CXDmm8o21OgkUwWoBGkoR5FBM+gP6krcaLjLANaFOkIk1+vGC6B4jLM 65eudOoM9vQg90R/DBCu5Ak7Zdb1wkt9lneuWz2Skl9u241JgBy6KxePujIjsWRp eryMfIEQVhLVGPgvb1u6HiqZWAOY8FEN2u9yE77cAhijAn3SJmRves0/KERW3LmN qrDtBdv7+vMibErfdCoknAI3CdBBtrh8+Ox+OCfbbkSbSp4FjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKClJUyQoOGZUSEBuANnACOrkGo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7Adhh6k2ogOojYWzQtEtY X3nhG7w9fSkUa/8RmRhwCspSd+7CtgXZ1CSJmpwmQIn8QYALd/fQJ5OdUOdbkrCK oP7BSKL3mEJXkZPwz4bqxlu6LXpwQOUbHoFf/FggCYFgDVM0TIbGJkuZp/xwXtD/ YXZGsxCCdTvaWnLM3oXpJ3m/X27EFgQkaiXUJJO7L2mCo1ClfjSGiWikL/0VhBHc DGpJ+uxQNXiUMWl7jHoLG3xOJAN45nblD/WV4/8oygthKlbsNdlw6nKIgW3jI8Mv ug1lwaU2+hMUMTJ6Sei4scDK9RPUXhy1g+Ukkz4brzH9dtUPNB7Rv44lsloo8i3t -----END CERTIFICATE-----Generated at Wed Oct 8 17:25:54 2025 by rpki-client