$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft File: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft (raw, json) Hash identifier: XgKnq2y5xnLwMCJA7pMeOcNRh30fbsQ3cfRSoylvBBo= Subject key identifier: 54:46:8F:BE:6D:F8:EB:70:F8:32:0C:7A:95:E8:66:27:FD:C6:D3:36 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584B7444CD8A846FD27218B249C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft Manifest number: 010D0C9F4328584A89D8304CA4B246F3B41EE757 Signing time: Wed 08 Oct 2025 14:00:03 +0000 Manifest this update: Wed 08 Oct 2025 14:00:03 +0000 Manifest next update: Sat 11 Oct 2025 14:00:00 +0000 Files and hashes: 1: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (hash: BH4a7i2ieCiGXrJuj1rCoGQrExYQkj+mfTsg2Zjym3k=) 2: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl (hash: U4+osalekN7aXBUV4LqrMuNoKgCxSeqNcOUgghIXixQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:44:cd:8a:84:6f:d2:72:18:b2:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Oct 8 14:00:03 2025 GMT Not After : Oct 11 14:00:00 2025 GMT Subject: CN=8a322bf4-fd73-4c53-bec2-33add6cee80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:ac:66:7e:5d:b1:6a:63:b7:8e:80:c7:c1: ba:b1:82:78:36:db:2d:db:e8:70:bf:f1:ea:1b:50: 20:c7:82:82:5d:3d:51:10:e8:d1:7e:e2:18:3c:3b: ee:29:fa:99:5b:7d:06:b3:ea:6e:c5:ad:db:61:40: 8b:39:93:f6:d2:6c:e4:04:4b:d3:90:03:ee:2d:28: 06:76:06:37:8b:09:24:b4:de:be:fd:d3:89:5c:4d: 19:86:ca:d9:30:a7:ca:c8:1c:36:be:cc:c5:d0:ae: aa:4c:bc:17:f8:fe:6e:53:75:0c:04:4e:58:a4:50: 01:d8:5c:21:61:35:bf:0c:4d:c2:c3:85:1b:36:2f: d9:bd:0a:ec:a3:85:f9:b9:0d:f5:67:66:93:ad:cf: ab:e7:fb:4c:3a:bb:ee:91:d3:b0:95:3b:cf:c9:00: 11:c1:d7:ea:3d:14:1f:78:a2:2d:1c:a6:d9:6a:05: f0:cf:e7:0c:bc:b3:d2:f9:88:7f:64:39:f4:d6:88: b3:0e:bf:f9:c0:b9:b1:86:19:f0:9d:db:52:cb:79: d0:3e:9e:76:9f:fb:38:ce:8f:ca:39:a6:a2:56:f7: f0:32:cd:28:6d:f0:43:53:16:78:8c:71:c1:6f:cd: 85:2c:fe:54:47:c1:8a:d6:fd:be:ba:0a:96:b1:a0: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:8F:BE:6D:F8:EB:70:F8:32:0C:7A:95:E8:66:27:FD:C6:D3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:37:9e:d4:d4:67:3a:31:da:6b:a9:77:57:29:80:9b:90:0f: c0:75:18:7d:03:1e:29:b2:c8:18:70:7a:76:ed:ce:53:67:01: 34:59:3c:67:b0:38:5e:79:b4:d3:8d:a7:de:03:5c:6c:fc:f8: 4e:8c:cf:23:39:28:56:a8:42:41:7a:06:ea:ae:9d:a4:2d:9f: 1b:d0:76:bf:7b:bf:9e:df:60:6e:48:6a:fb:65:dd:f3:e8:49: df:34:cc:cb:45:fb:c4:37:bf:58:40:cb:e0:4c:71:79:30:a0: 09:78:8c:3f:33:ad:dd:1d:59:4d:cd:52:4b:cc:b4:47:e2:fc: f1:d8:f4:50:a9:fb:8b:75:c7:28:05:d6:df:73:a0:93:c0:c1: d5:5d:64:85:a6:dc:e2:cf:7e:da:f5:88:1c:e7:bc:ba:7c:fe: a6:45:be:2a:68:94:16:2d:0c:be:22:34:b7:db:97:56:cc:6e: 1c:a4:2f:b8:2c:28:93:89:b4:7a:06:12:be:cc:ab:0f:80:09: 16:b9:d4:64:f7:90:4f:50:ae:25:08:28:c0:ac:d9:85:16:76: 25:ee:81:25:c3:38:b5:11:ea:2f:db:11:4a:54:7b:8a:57:bf: a5:ec:fb:da:22:02:0b:a6:de:d3:e2:b9:1a:19:e8:b7:59:cd: 50:8f:66:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0RM2KhG/SchiyScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI1MTAwODE0MDAwM1oXDTI1MTAxMTE0MDAwMFowLzEtMCsGA1UEAxMk OGEzMjJiZjQtZmQ3My00YzUzLWJlYzItMzNhZGQ2Y2VlODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylOsZn5dsWpjt46Ax8G6sYJ4Ntst2+hwv/Hq G1Agx4KCXT1REOjRfuIYPDvuKfqZW30Gs+puxa3bYUCLOZP20mzkBEvTkAPuLSgG dgY3iwkktN6+/dOJXE0ZhsrZMKfKyBw2vszF0K6qTLwX+P5uU3UMBE5YpFAB2Fwh YTW/DE3Cw4UbNi/ZvQrso4X5uQ31Z2aTrc+r5/tMOrvukdOwlTvPyQARwdfqPRQf eKItHKbZagXwz+cMvLPS+Yh/ZDn01oizDr/5wLmxhhnwndtSy3nQPp52n/s4zo/K OaaiVvfwMs0obfBDUxZ4jHHBb82FLP5UR8GK1v2+ugqWsaDx4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFRGj75t+Otw+DIMepXoZif9xtM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvY2RiZTVkZDQtYjlmYS00 MDIxLTg3YTEtMzAwMmY4MGNjNDQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPN57U1Gc6MdprqXdXKYCb kA/AdRh9Ax4pssgYcHp27c5TZwE0WTxnsDheebTTjafeA1xs/PhOjM8jOShWqEJB egbqrp2kLZ8b0Ha/e7+e32BuSGr7Zd3z6EnfNMzLRfvEN79YQMvgTHF5MKAJeIw/ M63dHVlNzVJLzLRH4vzx2PRQqfuLdccoBdbfc6CTwMHVXWSFptziz37a9Ygc57y6 fP6mRb4qaJQWLQy+IjS325dWzG4cpC+4LCiTibR6BhK+zKsPgAkWudRk95BPUK4l CCjArNmFFnYl7oElwzi1Eeov2xFKVHuKV7+l7PvaIgILpt7T4rkaGei3Wc1Qj2Y9 -----END CERTIFICATE-----Generated at Wed Oct 8 17:29:02 2025 by rpki-client