$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft File: 3d17c017-30b5-444a-aa30-048cc30971e3.mft (raw, json) Hash identifier: azX8Y0t0YOnYtyXpOQZdN3btivFS0i+Vy/7hDIyziKE= Subject key identifier: E6:22:E6:5A:4B:0D:56:C2:33:FB:6A:A8:C7:0A:89:81:00:F8:47:4F Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584B71F145F72A42EF3922B50200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft Manifest number: 010D0C9F4328584AEEBB1810A11CCF289AF9B6F2 Signing time: Tue 07 Oct 2025 18:00:08 +0000 Manifest this update: Tue 07 Oct 2025 18:00:08 +0000 Manifest next update: Thu 09 Oct 2025 18:00:00 +0000 Files and hashes: 1: 3d17c017-30b5-444a-aa30-048cc30971e3.crl (hash: eZispXpx6/QZBS3ROjhHJpZIWRe6aP5svsSP2nEfkIs=) 2: a45363ac-38b7-3765-9fd2-71955777f847.roa (hash: 1anl831tVkJswkthf/3+Syju5s69S5ProUY0fqq/m1Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:f1:45:f7:2a:42:ef:39:22:b5:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Oct 7 18:00:08 2025 GMT Not After : Oct 9 18:00:00 2025 GMT Subject: CN=9b73d350-fe4b-4948-93eb-25822dc4e57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:d1:dc:20:00:fc:4d:17:cc:96:38:60:97: ea:ec:7e:0d:f3:38:b2:e4:a3:32:94:a7:4f:69:bb: d3:bd:12:b5:eb:15:c2:0a:74:f2:33:2a:28:11:75: 47:06:a9:22:bc:38:13:d0:6b:c1:79:c5:7a:13:68: 67:0c:33:ec:03:3d:f2:25:4c:e0:50:34:a3:74:eb: a4:97:76:58:66:ba:77:c6:b1:0f:c9:f0:26:4f:f9: 24:12:a1:6c:48:ab:7e:3a:df:12:6a:c3:d0:b6:1d: bf:f8:88:0c:91:a2:b0:70:b2:a6:73:91:23:7a:f9: c5:f3:70:d4:41:c8:03:94:57:9a:95:05:58:cd:49: 38:d3:b5:25:17:a8:59:8b:7a:2b:a1:74:21:8f:8c: 74:3d:e6:a7:6e:36:ad:4d:fb:56:40:71:98:06:1f: 3f:a7:8c:da:d9:27:48:01:d3:01:80:ea:c4:11:7a: a6:bb:ce:fc:87:86:cb:ef:85:9c:6c:53:ac:d6:69: 08:0d:47:5b:01:52:76:61:09:a4:a6:a0:53:a3:a8: 49:35:c6:87:36:49:99:5e:11:56:08:f3:3b:36:f6: f6:c5:92:c7:9d:38:0e:2f:dc:a1:e6:93:2d:28:a5: 40:7c:68:8f:83:98:79:09:60:50:22:9c:55:af:05: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:22:E6:5A:4B:0D:56:C2:33:FB:6A:A8:C7:0A:89:81:00:F8:47:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:84:af:84:16:a3:4d:9a:24:77:d2:de:69:86:0c:ff:b4:5f: 45:d7:21:0f:17:fd:eb:74:e5:0b:6e:6d:7e:9b:59:5b:a8:67: e6:9d:b6:fe:9c:1f:5b:8e:cc:b1:e3:6f:c3:55:da:a7:8f:7b: 44:3e:93:d1:ba:e0:eb:89:c4:8b:3c:f9:a3:98:0a:3e:83:34: a7:46:48:78:9b:2c:84:07:cf:b9:52:40:af:13:e1:78:67:83: e2:98:93:dc:87:02:8d:0e:b3:5e:bc:24:ac:eb:e0:aa:c3:07: 47:65:eb:4a:e2:78:58:d2:54:1e:61:af:67:ba:5e:c2:c0:8d: ad:68:7f:94:c5:d8:77:1d:6d:92:15:2b:bc:da:ab:85:dd:ca: 25:96:b8:ad:be:70:f0:e3:a2:98:54:7b:f2:22:89:a1:a3:c9: 76:56:55:71:47:43:f0:4a:c9:28:cd:b0:89:77:4a:d7:aa:55: a9:8e:66:51:0b:a4:73:42:b6:ee:ed:7f:49:98:2f:a7:68:76: 83:f8:12:ec:61:7f:0d:73:7a:26:bf:93:74:1d:25:26:27:b1: bb:2e:d6:4d:99:e9:79:3b:94:6d:95:49:2e:3a:93:97:5a:ec: 5a:06:97:76:e0:e9:32:9d:65:8e:7a:bd:cc:75:aa:8d:f2:a6: 64:ac:a6:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx8UX3KkLvOSK1AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI1MTAwNzE4MDAwOFoXDTI1MTAwOTE4MDAwMFowLzEtMCsGA1UEAxMk OWI3M2QzNTAtZmU0Yi00OTQ4LTkzZWItMjU4MjJkYzRlNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTzR3CAA/E0XzJY4YJfq7H4N8ziy5KMylKdP abvTvRK16xXCCnTyMyooEXVHBqkivDgT0GvBecV6E2hnDDPsAz3yJUzgUDSjdOuk l3ZYZrp3xrEPyfAmT/kkEqFsSKt+Ot8SasPQth2/+IgMkaKwcLKmc5EjevnF83DU QcgDlFealQVYzUk407UlF6hZi3oroXQhj4x0PeanbjatTftWQHGYBh8/p4za2SdI AdMBgOrEEXqmu878h4bL74WcbFOs1mkIDUdbAVJ2YQmkpqBTo6hJNcaHNkmZXhFW CPM7Nvb2xZLHnTgOL9yh5pMtKKVAfGiPg5h5CWBQIpxVrwVawwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOYi5lpLDVbCM/tqqMcKiYEA+EdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvM2QxN2MwMTctMzBiNS00 NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzhK+EFqNNmiR30t5phgz/ tF9F1yEPF/3rdOULbm1+m1lbqGfmnbb+nB9bjsyx42/DVdqnj3tEPpPRuuDricSL PPmjmAo+gzSnRkh4myyEB8+5UkCvE+F4Z4PimJPchwKNDrNevCSs6+CqwwdHZetK 4nhY0lQeYa9nul7CwI2taH+Uxdh3HW2SFSu82quF3collritvnDw46KYVHvyIomh o8l2VlVxR0PwSskozbCJd0rXqlWpjmZRC6RzQrbu7X9JmC+naHaD+BLsYX8Nc3om v5N0HSUmJ7G7LtZNmel5O5RtlUkuOpOXWuxaBpd24OkynWWOer3MdaqN8qZkrKZW -----END CERTIFICATE-----Generated at Wed Oct 8 17:19:45 2025 by rpki-client