$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft File: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft (raw, json) Hash identifier: +M5BURmTh9PZUbzRPLEq4QDoEgdskb6EaEle7eHnSwo= Subject key identifier: 5D:EE:D5:37:F7:4A:A7:81:E6:D8:08:67:95:25:B8:E8:B4:E9:19:60 Authority key identifier: CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 Certificate issuer: /CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Certificate serial: 010D0C9F4328584B7427150A3DB3B65801CB3550 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft Manifest number: 010D0C9F4328584AF0F7D2772C59CBCE8447BA2F Signing time: Wed 08 Oct 2025 13:00:09 +0000 Manifest this update: Wed 08 Oct 2025 13:00:09 +0000 Manifest next update: Fri 10 Oct 2025 13:00:00 +0000 Files and hashes: 1: 4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl (hash: H5ce/5KPZbI8SLp1G+8hzw6WcyS8r9rdXXio2JQLeYU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:15:0a:3d:b3:b6:58:01:cb:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa6b456-3cd5-457e-86f1-4280ea61f5b3 Validity Not Before: Oct 8 13:00:09 2025 GMT Not After : Oct 10 13:00:00 2025 GMT Subject: CN=8b9f4e94-1623-42a7-8a33-8667fe340b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:ef:8a:30:e4:d4:85:f6:fa:a6:8d:a9:71: 91:0d:50:60:dd:8c:9d:b5:a7:27:60:9e:ef:71:6b: 98:98:dd:00:7b:7e:c4:c8:c3:76:74:64:15:6d:0c: d8:fa:81:04:1b:15:ff:fe:3f:48:fd:9e:dc:c9:ff: 14:31:30:6d:88:4d:84:87:90:e0:7e:ac:4c:c2:15: 4f:21:ba:a5:3b:42:d2:94:50:d9:01:b3:a3:ee:2b: 4f:d2:82:63:fe:ef:f7:9d:75:0c:10:75:13:ff:5a: 1a:3a:a5:b8:67:87:c4:43:18:c1:3b:1d:0b:b5:80: b1:a0:a6:fe:f4:42:d5:39:ae:66:f2:97:b1:76:60: b6:d9:e1:79:32:5d:37:53:95:f6:0d:22:1a:5d:99: 89:11:d6:d1:42:0e:ab:a1:71:82:d1:94:39:51:5c: ab:6a:b8:f9:15:95:be:c9:4e:d4:85:4c:b4:67:0f: b0:82:0d:65:c6:58:1a:35:60:c6:86:c0:ff:b5:14: b9:72:d0:dd:e6:05:7b:2e:6e:f1:54:78:08:3a:9b: 38:f7:d5:29:4e:3d:a0:98:75:a6:82:12:1d:08:01: 14:d5:29:13:85:2e:28:67:ed:77:92:6a:05:a1:a5: 0d:3c:d2:69:58:79:5b:97:91:b4:49:bc:8c:d3:cb: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EE:D5:37:F7:4A:A7:81:E6:D8:08:67:95:25:B8:E8:B4:E9:19:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.crl X509v3 Authority Key Identifier: keyid:CC:17:B8:2A:75:9A:01:66:1F:59:1C:95:AC:1D:4F:EB:EB:75:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fa6b456-3cd5-457e-86f1-4280ea61f5b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:91:56:23:b0:9c:23:f1:30:85:86:2a:f8:f2:b6:a8:b1:2d: 67:2c:e8:3d:12:15:54:4e:6c:a1:1e:eb:4e:de:90:c4:5a:41: 67:63:37:2a:c7:4b:ec:47:14:17:32:f5:dd:43:c7:49:2a:d2: 6e:bb:02:47:06:c3:df:64:df:52:a3:4a:63:36:49:a5:6a:7a: 75:d1:26:73:0b:f4:10:91:78:b9:fb:01:09:b6:67:f1:e0:54: 96:97:ea:70:6a:92:13:b4:16:7f:c3:19:d1:b7:66:c5:44:0f: bc:9e:a1:e6:89:a8:28:bc:eb:5b:ff:bb:29:63:58:f2:88:be: 1b:cb:1f:b1:fd:93:5a:9d:90:0d:cb:12:05:0c:3a:f2:a4:9c: 7a:20:2f:d1:55:ad:cf:7c:84:19:96:33:b8:17:46:43:3b:92: c0:2d:a7:45:63:50:d8:24:a8:05:9c:24:a4:e9:c9:06:8d:ae: 8e:7c:ac:26:f7:7c:9c:a8:86:c3:5d:5a:9c:a0:7b:36:35:bd: 7f:48:46:8c:72:13:dc:f8:51:4c:57:ae:eb:73:69:98:5e:b7: 9f:78:24:6b:be:08:87:44:1c:fe:7e:fc:a3:68:8f:93:99:ae: e1:3a:59:a1:e8:91:02:26:3e:e8:1b:52:c8:2c:56:b0:a0:2e: e5:10:88:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0JxUKPbO2WAHLNVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZhNmI0NTYtM2NkNS00NTdlLTg2ZjEtNDI4MGVhNjFm NWIzMB4XDTI1MTAwODEzMDAwOVoXDTI1MTAxMDEzMDAwMFowLzEtMCsGA1UEAxMk OGI5ZjRlOTQtMTYyMy00MmE3LThhMzMtODY2N2ZlMzQwYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zTvijDk1IX2+qaNqXGRDVBg3YydtacnYJ7v cWuYmN0Ae37EyMN2dGQVbQzY+oEEGxX//j9I/Z7cyf8UMTBtiE2Eh5DgfqxMwhVP IbqlO0LSlFDZAbOj7itP0oJj/u/3nXUMEHUT/1oaOqW4Z4fEQxjBOx0LtYCxoKb+ 9ELVOa5m8pexdmC22eF5Ml03U5X2DSIaXZmJEdbRQg6roXGC0ZQ5UVyrarj5FZW+ yU7UhUy0Zw+wgg1lxlgaNWDGhsD/tRS5ctDd5gV7Lm7xVHgIOps499UpTj2gmHWm ghIdCAEU1SkThS4oZ+13kmoFoaUNPNJpWHlbl5G0SbyM08vOdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF3u1Tf3SqeB5tgIZ5UluOi06RlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2 YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00MjgwZWE2MWY1YjMvNGZhNmI0NTYtM2NkNS00 NTdlLTg2ZjEtNDI4MGVhNjFmNWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGZhNmI0NTYtM2NkNS00NTdlLTg2 ZjEtNDI4MGVhNjFmNWIzLzRmYTZiNDU2LTNjZDUtNDU3ZS04NmYxLTQyODBlYTYx ZjViMy5jcmwwHwYDVR0jBBgwFoAUzBe4KnWaAWYfWRyVrB1P6+t1kIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZmE2YjQ1Ni0zY2Q1LTQ1N2UtODZmMS00Mjgw ZWE2MWY1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkkVYjsJwj8TCFhir48rao sS1nLOg9EhVUTmyhHutO3pDEWkFnYzcqx0vsRxQXMvXdQ8dJKtJuuwJHBsPfZN9S o0pjNkmlanp10SZzC/QQkXi5+wEJtmfx4FSWl+pwapITtBZ/wxnRt2bFRA+8nqHm iagovOtb/7spY1jyiL4byx+x/ZNanZANyxIFDDrypJx6IC/RVa3PfIQZljO4F0ZD O5LALadFY1DYJKgFnCSk6ckGja6OfKwm93ycqIbDXVqcoHs2Nb1/SEaMchPc+FFM V67rc2mYXrefeCRrvgiHRBz+fvyjaI+Tma7hOlmh6JECJj7oG1LILFawoC7lEIjZ -----END CERTIFICATE-----Generated at Wed Oct 8 17:10:10 2025 by rpki-client