$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft File: 41d819be-21e8-4d68-8993-33ab237e51ae.mft (raw, json) Hash identifier: tWBIx/pcC07rh0+EUZfT6n6TN3Jz0X46zHhpvCZxW6k= Subject key identifier: D2:0C:E7:2E:DA:12:74:4F:F6:16:F4:20:B2:5B:C5:A6:76:7E:CB:E6 Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Certificate issuer: /CN=41d819be-21e8-4d68-8993-33ab237e51ae Certificate serial: 010D0C9F4328584B39C2395AA495454507121880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft Manifest number: 010D0C9F4328584590E815945FD707B52ABDC314 Signing time: Wed 17 Sep 2025 15:00:03 +0000 Manifest this update: Wed 17 Sep 2025 15:00:03 +0000 Manifest next update: Fri 19 Sep 2025 15:00:00 +0000 Files and hashes: 1: 41d819be-21e8-4d68-8993-33ab237e51ae.crl (hash: A9Cm+cbJCVxZT58QqA3XmqrKsKnjdnkQASSlnjnVQZg=) 2: 6757d0ec-3da9-362b-964a-6f6259402d74.roa (hash: Pz5MozgGtjPMMUDTk8Loz7mw9UKuW9sRJfoiCKsmPtQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:c2:39:5a:a4:95:45:45:07:12:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae Validity Not Before: Sep 17 15:00:03 2025 GMT Not After : Sep 19 15:00:00 2025 GMT Subject: CN=62fe677e-c2ad-48be-a2bf-3fbe4498f2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:bc:d0:e7:ff:5a:7f:25:e8:5e:ce:92:d3: 28:91:3c:24:fd:43:5d:6d:5c:b1:00:3d:3f:55:2e: 52:3d:dd:ba:c3:18:b3:6d:4c:68:dd:b5:c1:0b:30: d8:b9:90:84:4e:3d:29:9b:77:aa:37:e3:aa:72:1a: 29:c2:e9:81:28:d5:f0:e2:0c:5a:04:13:26:71:8b: f1:2c:f9:94:25:06:2c:8e:9d:af:fe:5a:91:5a:f1: 3c:54:16:5f:df:ab:ff:8e:94:10:df:bc:b1:d3:d2: 1a:1a:63:fa:60:4c:28:01:6b:70:01:1f:2b:b0:bc: 36:64:92:cd:fa:1d:27:4c:9b:b0:32:5d:65:93:dc: dc:b9:cf:a8:63:f8:8a:8a:8a:64:b7:7d:9f:09:37: 9c:35:d3:60:9a:d4:d2:40:35:04:5e:cb:40:b3:53: d3:a8:04:ba:41:1f:f7:3c:b2:3b:e9:b4:53:88:2f: 8b:2c:4d:65:2c:be:0b:bd:83:b4:4f:1b:8b:71:3d: 84:26:dd:4a:29:14:4a:67:0a:b8:8d:2e:97:0b:dd: 67:dc:8a:a7:15:dd:a3:7c:7a:b6:8c:83:0b:5c:51: 8d:56:be:51:5f:64:2e:86:20:4c:2e:94:e1:32:2b: d5:58:71:a4:70:11:61:f8:76:ba:71:ec:75:23:bc: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:E7:2E:DA:12:74:4F:F6:16:F4:20:B2:5B:C5:A6:76:7E:CB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl X509v3 Authority Key Identifier: keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:79:26:9e:0e:dc:10:cc:16:61:6f:9b:9f:73:56:a2:b6: cb:f0:d0:66:c3:29:c0:72:a3:d7:77:28:66:a4:1c:ab:35:6f: d1:86:c4:d1:74:fe:c1:a7:2d:7c:e0:26:8c:6a:f1:65:59:d7: 56:4b:07:65:37:67:6d:a7:bd:3c:8b:c6:19:f4:f5:ec:7e:15: 0a:ea:4e:80:47:b6:3b:5a:62:8a:97:5c:8c:c6:68:ec:a7:a1: b7:cb:17:56:13:8f:42:20:79:e1:5a:49:c0:ab:ac:e5:1f:47: 6c:29:ee:5d:87:b9:90:eb:41:91:06:29:88:5c:2a:5f:dd:1e: 96:ee:e2:65:31:e4:9b:fe:51:ac:4a:78:05:92:a2:df:0d:8b: ac:bb:3a:d4:20:e4:25:0d:fe:f7:e3:8d:74:17:0c:b8:48:7f: ae:57:dd:95:52:60:30:94:96:d1:78:fa:39:bb:6a:56:fc:cf: f2:e3:b6:30:05:9e:3b:c9:ae:4a:25:87:6f:85:1e:38:95:a2: 55:b1:ab:45:bc:a2:59:4c:f8:3c:b4:7c:43:0f:77:eb:98:62: 33:67:9e:50:20:d5:8f:29:11:6f:60:da:a3:b0:e6:c5:7c:76: 7b:1d:a8:b8:9e:f5:b0:d0:ad:87:3e:3f:ec:63:7e:e9:47:b0: ca:23:c6:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs5wjlapJVFRQcSGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1 MWFlMB4XDTI1MDkxNzE1MDAwM1oXDTI1MDkxOTE1MDAwMFowLzEtMCsGA1UEAxMk NjJmZTY3N2UtYzJhZC00OGJlLWEyYmYtM2ZiZTQ0OThmMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoji80Of/Wn8l6F7OktMokTwk/UNdbVyxAD0/ VS5SPd26wxizbUxo3bXBCzDYuZCETj0pm3eqN+OqchopwumBKNXw4gxaBBMmcYvx LPmUJQYsjp2v/lqRWvE8VBZf36v/jpQQ37yx09IaGmP6YEwoAWtwAR8rsLw2ZJLN +h0nTJuwMl1lk9zcuc+oY/iKiopkt32fCTecNdNgmtTSQDUEXstAs1PTqAS6QR/3 PLI76bRTiC+LLE1lLL4LvYO0TxuLcT2EJt1KKRRKZwq4jS6XC91n3IqnFd2jfHq2 jIMLXFGNVr5RX2QuhiBMLpThMivVWHGkcBFh+Ha6cex1I7wOswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIM5y7aEnRP9hb0ILJbxaZ2fsvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MWQ4 MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvNDFkODE5YmUtMjFlOC00 ZDY4LTg5OTMtMzNhYjIzN2U1MWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDFkODE5YmUtMjFlOC00ZDY4LTg5 OTMtMzNhYjIzN2U1MWFlLzQxZDgxOWJlLTIxZTgtNGQ2OC04OTkzLTMzYWIyMzdl NTFhZS5jcmwwHwYDVR0jBBgwFoAUv/c82cpKMsf/C/3z5VQQQjzIl2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2Fi MjM3ZTUxYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6lXkmng7cEMwWYW+bn3NW orbL8NBmwynAcqPXdyhmpByrNW/RhsTRdP7Bpy184CaMavFlWddWSwdlN2dtp708 i8YZ9PXsfhUK6k6AR7Y7WmKKl1yMxmjsp6G3yxdWE49CIHnhWknAq6zlH0dsKe5d h7mQ60GRBimIXCpf3R6W7uJlMeSb/lGsSngFkqLfDYusuzrUIOQlDf734410Fwy4 SH+uV92VUmAwlJbRePo5u2pW/M/y47YwBZ47ya5KJYdvhR44laJVsatFvKJZTPg8 tHxDD3frmGIzZ55QINWPKRFvYNqjsObFfHZ7Hai4nvWw0K2HPj/sY37pR7DKI8a6 -----END CERTIFICATE-----Generated at Wed Sep 17 16:16:22 2025 by rpki-client