$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft (raw, json) Hash identifier: Poh0sHHPtqraTHbIKVuHMN4gogfMbWfkbdale2o4Nr0= Subject key identifier: 13:A9:64:3C:BA:61:C2:13:31:AC:0B:11:30:EE:F3:4D:36:41:91:BD Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584B37C80965E649512D0489E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft Manifest number: 010D0C9F4328584482DE472669570C80318247F6 Signing time: Tue 16 Sep 2025 22:00:08 +0000 Manifest this update: Tue 16 Sep 2025 22:00:08 +0000 Manifest next update: Thu 18 Sep 2025 22:00:00 +0000 Files and hashes: 1: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl (hash: boKe18/U8GRRxtru434cyPID14r29VFUUoLCA61eIvo=) 2: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (hash: fzzEMiUoBHbITpsax4SfdBRTcW0SXUUu9A/DEGhK0Xg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:c8:09:65:e6:49:51:2d:04:89:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Sep 16 22:00:08 2025 GMT Not After : Sep 18 22:00:00 2025 GMT Subject: CN=5d52e03c-9b41-4a90-bec4-8281c72ac771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:d2:ca:a2:38:bb:8e:4a:05:54:f8:b0:7b: 99:be:65:be:3d:e5:04:4e:8b:75:30:72:b5:03:27: 1b:a1:49:db:21:ec:00:3f:0c:c6:3f:fd:44:26:00: 49:8f:08:77:22:59:8d:b0:8b:ce:f4:06:25:a2:67: 63:ef:fb:3f:06:2d:45:5c:43:b0:87:f7:29:1f:20: 07:85:03:7e:b9:de:d6:27:32:4a:41:f7:bb:b9:f4: 09:83:91:82:69:f2:b4:bc:e7:d8:5e:a6:f3:eb:a7: 70:e7:74:24:5c:36:6c:ec:ea:0f:6a:3c:ee:2f:5f: 15:92:cc:e0:00:a0:e6:2a:30:c0:28:d9:dc:6b:e3: a4:95:a8:c3:f6:5b:b3:36:fc:a7:00:eb:b2:0f:c3: 04:82:9a:5b:00:57:b2:ab:61:ce:cd:34:c1:56:ee: f2:50:88:d5:bb:39:57:e4:16:2e:7a:e5:86:81:ae: ed:d3:15:77:be:cc:d1:3d:df:01:5f:2c:98:70:91: e0:de:98:bf:96:a0:e9:c6:e8:f0:0e:19:8d:8e:ed: 4b:8c:3a:64:b9:ca:d6:41:ee:bb:0f:b0:ce:70:66: 89:b9:dd:5d:5d:05:82:f5:cf:05:4d:61:ae:06:54: 5d:7a:4e:cb:0d:84:65:a6:8f:34:16:c9:45:10:6e: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:64:3C:BA:61:C2:13:31:AC:0B:11:30:EE:F3:4D:36:41:91:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f0:17:c1:10:35:96:d3:16:4b:55:85:61:54:89:1e:e6:7c: f4:4e:cb:51:94:d9:35:99:21:a7:fd:2b:c7:96:90:52:58:55: ac:1b:d7:ad:cf:9c:fb:e4:a0:69:45:c6:62:56:d2:40:64:e0: 3a:a0:6a:ec:67:30:d7:c3:66:10:e9:7f:51:2d:b4:39:57:7c: d2:79:32:3d:19:c9:e3:bc:73:bb:7f:1b:82:3f:c0:c4:9a:cd: 6a:6b:84:f1:29:8e:10:33:59:10:b8:7e:16:5b:0d:04:90:76: 9a:6d:48:63:a1:b9:bd:17:ab:4e:2b:ef:ad:c0:38:d0:75:77: 72:d5:bb:46:1c:bd:1c:c3:cb:22:f6:46:38:cd:0b:9e:26:b3: 29:df:91:53:01:95:21:d6:02:f2:ad:e7:d2:3a:99:bc:77:36: eb:01:63:ac:1b:76:ed:11:fb:83:e3:a0:10:aa:47:c9:78:65: 2c:95:b3:94:d9:37:3b:e0:c7:4e:c4:f5:a7:02:17:ee:f8:23: 48:68:7c:d6:59:40:b5:d8:47:2d:7a:01:10:68:70:c6:0c:fb: 4a:9d:99:dd:0b:4f:f6:6a:c9:45:cb:9d:ac:1a:d7:10:d0:98: 81:75:68:e1:6d:38:82:ae:43:2c:d7:bf:b1:b9:ea:82:d9:c0: 9c:7e:09:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs3yAll5klRLQSJ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI1MDkxNjIyMDAwOFoXDTI1MDkxODIyMDAwMFowLzEtMCsGA1UEAxMk NWQ1MmUwM2MtOWI0MS00YTkwLWJlYzQtODI4MWM3MmFjNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAjSyqI4u45KBVT4sHuZvmW+PeUETot1MHK1 AycboUnbIewAPwzGP/1EJgBJjwh3IlmNsIvO9AYlomdj7/s/Bi1FXEOwh/cpHyAH hQN+ud7WJzJKQfe7ufQJg5GCafK0vOfYXqbz66dw53QkXDZs7OoPajzuL18Vkszg AKDmKjDAKNnca+OklajD9luzNvynAOuyD8MEgppbAFeyq2HOzTTBVu7yUIjVuzlX 5BYueuWGga7t0xV3vszRPd8BXyyYcJHg3pi/lqDpxujwDhmNju1LjDpkucrWQe67 D7DOcGaJud1dXQWC9c8FTWGuBlRdek7LDYRlpo80FslFEG7oPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBOpZDy6YcITMawLETDu8002QZG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvOGQ5NThjNDctYzE4Zi00 NmUyLWEzYzMtZWQ0YmEyOWUxYzk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe8BfBEDWW0xZLVYVhVIke 5nz0TstRlNk1mSGn/SvHlpBSWFWsG9etz5z75KBpRcZiVtJAZOA6oGrsZzDXw2YQ 6X9RLbQ5V3zSeTI9GcnjvHO7fxuCP8DEms1qa4TxKY4QM1kQuH4WWw0EkHaabUhj obm9F6tOK++twDjQdXdy1btGHL0cw8si9kY4zQueJrMp35FTAZUh1gLyrefSOpm8 dzbrAWOsG3btEfuD46AQqkfJeGUslbOU2Tc74MdOxPWnAhfu+CNIaHzWWUC12Ect egEQaHDGDPtKnZndC0/2aslFy52sGtcQ0JiBdWjhbTiCrkMs17+xueqC2cCcfgm8 -----END CERTIFICATE-----Generated at Wed Sep 17 19:11:58 2025 by rpki-client