$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft File: b824dfb2-be33-4946-af95-2296acd823af.mft (raw, json) Hash identifier: wvrtSFcCUbYEOWNpCeYjPtg2Z9gcGmMuISSukoig4jc= Subject key identifier: 4B:E1:36:B4:BF:E1:56:99:37:BA:E6:33:73:34:94:FC:A8:29:32:03 Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE Certificate issuer: /CN=b824dfb2-be33-4946-af95-2296acd823af Certificate serial: 010D0C9F4328584BB86F0FEC264B7F46B5910572 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft Manifest number: 010D0C9F4328584589920CDF32DD6B1A6453CF44 Signing time: Sun 02 Nov 2025 00:00:08 +0000 Manifest this update: Sun 02 Nov 2025 00:00:08 +0000 Manifest next update: Tue 04 Nov 2025 00:00:00 +0000 Files and hashes: 1: 82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (hash: X1O3XIiEMb/1o1GATYFe/F/9JtL8A0pMvFUQWwvpjC0=) 2: b824dfb2-be33-4946-af95-2296acd823af.crl (hash: 9FhnmpnQ8v29yinUUL4TrlIj2ax5nPxw+ojBa2l96WE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:6f:0f:ec:26:4b:7f:46:b5:91:05:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af Validity Not Before: Nov 2 00:00:08 2025 GMT Not After : Nov 4 00:00:00 2025 GMT Subject: CN=3abcf397-157b-45dd-87f0-2ecc860ba357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:68:21:78:70:b0:ee:e4:85:68:8a:30:f9: 56:74:d0:60:2a:6f:3b:87:68:60:7b:c4:55:e5:32: 48:5f:ad:39:5d:55:23:a4:fd:a2:ae:dd:66:1e:9d: e0:cb:a8:41:16:19:96:47:70:cd:c9:af:96:fd:ba: e6:5e:62:2b:86:d4:dc:ef:f2:f5:7a:32:42:57:89: b2:47:0e:55:22:06:0d:2e:ce:29:c9:70:d3:36:9c: 11:8c:3b:58:7c:69:15:c6:c5:6d:17:51:48:8e:17: d8:b1:6f:45:99:38:75:6c:09:57:15:db:01:8c:10: 44:43:73:6b:07:49:5b:f8:8a:6b:47:98:2c:f8:a3: 13:be:f8:dd:13:dd:97:2b:a9:e1:58:62:a5:c7:a0: 2c:56:7f:74:43:e1:dc:9a:8f:07:8e:ed:db:e9:fe: 31:af:18:64:36:44:79:01:80:22:05:8b:83:c5:15: 98:a6:f7:b5:09:d0:ae:96:e0:a6:2c:16:81:34:91: 2f:6b:54:56:e6:f7:a9:e4:69:2f:1d:6c:8f:b5:b7: c8:b1:53:98:78:1c:b3:66:1c:b1:53:e4:32:85:39: 9e:b0:66:cf:bf:37:ce:6c:0a:1d:51:08:4e:6d:33: db:dc:13:0f:74:ea:e9:5e:88:52:11:7a:e8:3e:76: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:36:B4:BF:E1:56:99:37:BA:E6:33:73:34:94:FC:A8:29:32:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl X509v3 Authority Key Identifier: keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:15:aa:7d:53:e3:4b:6c:98:0e:89:69:6e:9c:82:79:7a: 0c:82:f2:c2:39:f0:26:bb:e8:e8:53:df:bb:dc:93:2e:a8:83: 3f:a7:5a:bc:1e:56:d0:9a:18:c3:39:63:da:65:ec:5f:1b:5d: e5:b0:2f:d2:c5:3e:06:92:a9:c1:5e:12:24:e4:fe:60:88:9f: 68:a0:ae:0e:f1:60:e3:99:79:87:93:ab:fd:0c:d5:c1:7e:18: 9d:ef:74:2f:4f:44:36:e6:92:61:f5:c9:58:b7:46:60:61:7a: 59:74:2b:aa:90:ae:41:de:bb:74:75:85:49:7b:cb:09:5a:1c: 30:8f:bb:39:30:fc:4a:d9:c0:6c:d1:36:11:ee:d2:62:92:97: ff:0f:c0:02:f0:84:40:61:82:21:0f:fa:64:1c:51:db:1a:47: 91:eb:85:83:a6:a9:a2:c8:b9:4d:47:01:89:a8:8a:1f:6f:fd: 99:11:a7:68:0e:d9:be:a6:7b:a3:8f:e5:fa:b7:ca:0c:27:28: a2:e9:cf:fd:42:42:07:4c:02:cc:7a:72:2a:3f:0f:ff:5d:60: 46:65:37:21:ef:7f:61:cb:34:05:83:65:b8:7d:8e:3d:33:3d: b9:a0:f2:81:5a:69:37:56:fd:21:28:46:e7:17:55:17:0d:5c: a8:d6:ab:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu4bw/sJkt/RrWRBXIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyNGRmYjItYmUzMy00OTQ2LWFmOTUtMjI5NmFjZDgy M2FmMB4XDTI1MTEwMjAwMDAwOFoXDTI1MTEwNDAwMDAwMFowLzEtMCsGA1UEAxMk M2FiY2YzOTctMTU3Yi00NWRkLTg3ZjAtMmVjYzg2MGJhMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBtoIXhwsO7khWiKMPlWdNBgKm87h2hge8RV 5TJIX605XVUjpP2irt1mHp3gy6hBFhmWR3DNya+W/brmXmIrhtTc7/L1ejJCV4my Rw5VIgYNLs4pyXDTNpwRjDtYfGkVxsVtF1FIjhfYsW9FmTh1bAlXFdsBjBBEQ3Nr B0lb+IprR5gs+KMTvvjdE92XK6nhWGKlx6AsVn90Q+Hcmo8Hju3b6f4xrxhkNkR5 AYAiBYuDxRWYpve1CdCuluCmLBaBNJEva1RW5vep5GkvHWyPtbfIsVOYeByzZhyx U+QyhTmesGbPvzfObAodUQhObTPb3BMPdOrpXohSEXroPnZOVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEvhNrS/4VaZN7rmM3M0lPyoKTIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iODI0 ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2YWNkODIzYWYvYjgyNGRmYjItYmUzMy00 OTQ2LWFmOTUtMjI5NmFjZDgyM2FmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjgyNGRmYjItYmUzMy00OTQ2LWFm OTUtMjI5NmFjZDgyM2FmL2I4MjRkZmIyLWJlMzMtNDk0Ni1hZjk1LTIyOTZhY2Q4 MjNhZi5jcmwwHwYDVR0jBBgwFoAUOdCRLv3hTPVRRiLykIJNF6Bsha4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iODI0ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2 YWNkODIzYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8YBWqfVPjS2yYDolpbpyC eXoMgvLCOfAmu+joU9+73JMuqIM/p1q8HlbQmhjDOWPaZexfG13lsC/SxT4GkqnB XhIk5P5giJ9ooK4O8WDjmXmHk6v9DNXBfhid73QvT0Q25pJh9clYt0ZgYXpZdCuq kK5B3rt0dYVJe8sJWhwwj7s5MPxK2cBs0TYR7tJikpf/D8AC8IRAYYIhD/pkHFHb GkeR64WDpqmiyLlNRwGJqIofb/2ZEadoDtm+pnujj+X6t8oMJyii6c/9QkIHTALM enIqPw//XWBGZTch739hyzQFg2W4fY49Mz25oPKBWmk3Vv0hKEbnF1UXDVyo1quW -----END CERTIFICATE-----Generated at Sun Nov 2 19:54:38 2025 by rpki-client