$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft File: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft (raw, json) Hash identifier: PSuKKSgiSn1s2JusajZZxidozjh9bnjpK3HVjSLhU/8= Subject key identifier: E8:4F:01:BC:C9:EA:90:B0:3F:FB:19:E1:62:10:CB:AC:1F:72:35:66 Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584BABA369B9566761C4485AFE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft Manifest number: 010D0C9F4328584073A84E30D430488252D8631C Signing time: Tue 28 Oct 2025 10:00:09 +0000 Manifest this update: Tue 28 Oct 2025 10:00:09 +0000 Manifest next update: Fri 31 Oct 2025 10:00:00 +0000 Files and hashes: 1: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl (hash: ETs7KrRD6bEftrkEX5pjl3yWH7rN9CfJNmvlln6y1kk=) 2: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (hash: 2FE+W0Zho1ltZGVo0cTR7h/f1XgZ5XAGjCpLIqwg5VE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:a3:69:b9:56:67:61:c4:48:5a:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Oct 28 10:00:09 2025 GMT Not After : Oct 31 10:00:00 2025 GMT Subject: CN=8d4dae27-c3a9-4368-a1d3-6173e85ace19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:26:b5:c3:0e:ea:f7:05:aa:33:dd:26:a1:8b: 58:18:f3:30:3c:73:e4:3b:10:ca:83:a7:e4:2e:41: ee:ff:ba:7e:de:ad:4f:d4:c5:21:5f:13:6b:a5:86: 74:7e:d0:11:94:0e:bd:2b:1e:4e:a9:10:1f:e7:12: 73:f9:aa:06:e3:4a:fd:13:eb:77:bb:f1:10:07:d9: c7:62:f1:6c:50:3e:63:02:fa:42:6d:13:63:da:6f: 5a:2a:7b:ea:d6:4b:fc:05:0a:f0:3f:00:ed:f0:85: 1f:87:f2:76:70:08:63:62:32:3b:35:95:13:23:c8: bf:d2:84:99:ec:d2:18:f5:5a:bb:f2:3b:9f:19:07: aa:5d:e8:dc:36:75:2b:cc:63:f9:67:42:46:a9:40: 10:b0:fb:33:b1:40:ee:41:3c:cb:d8:5b:0c:ae:e0: 01:db:a3:77:5e:48:7d:4e:89:8f:72:2b:f6:9c:43: 2e:7f:be:f1:eb:7e:5d:97:76:d7:89:75:94:5b:ee: 26:db:ea:75:49:2d:24:db:09:63:9c:7f:c8:d6:25: 33:02:a4:4b:7a:ee:4d:ef:14:bf:6d:c1:74:b5:1f: 9f:bb:f1:6f:eb:b4:64:6b:6e:b5:de:bb:49:b9:2b: 5b:e5:3b:4b:e1:d6:f6:d9:5b:bf:6e:27:fa:91:b9: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:01:BC:C9:EA:90:B0:3F:FB:19:E1:62:10:CB:AC:1F:72:35:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:f9:c0:67:f1:26:99:d8:53:9e:17:0c:b0:f0:24:38:91: 42:cd:93:29:92:2a:d2:00:81:cd:1e:96:04:69:6c:78:a2:a6: 9e:95:25:9b:d1:2c:be:2e:f9:be:2f:f6:e9:f4:4f:a3:9e:68: 62:d5:f6:77:77:81:86:43:95:a3:5b:46:c2:6f:e9:85:4f:4f: 30:a1:f4:62:a7:40:f4:d1:e9:26:2b:e9:38:63:dd:30:41:8c: 48:6b:39:a8:f2:cb:64:05:8f:e8:81:1d:9e:d0:5f:8b:79:c2: d1:4a:0f:97:14:2b:9d:43:36:76:74:d5:a0:bb:6e:5d:1c:19: 27:7e:d4:07:e2:a8:56:23:0a:5e:81:ef:29:f7:75:85:7a:b3: 98:aa:b7:da:9d:7a:8f:6a:5a:0c:76:8b:68:2d:a4:96:46:67: dd:49:ff:60:e8:ea:6b:90:ca:d1:72:af:6f:22:91:5a:4c:c9: e2:87:c4:bc:3f:1c:30:3c:63:b8:c0:14:e9:72:29:54:3f:2e: 26:d2:3b:a8:c8:14:fb:90:17:d6:1c:ed:0b:fb:dd:e8:9f:8c: 9d:a4:82:30:9c:84:77:ee:a2:43:04:a3:3a:c7:bb:33:3c:25: bc:e1:4d:6f:fa:a6:f3:90:3f:23:2e:f7:c9:9b:9c:3f:60:a1: 81:4f:c0:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuro2m5VmdhxEha/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MTAyODEwMDAwOVoXDTI1MTAzMTEwMDAwMFowLzEtMCsGA1UEAxMk OGQ0ZGFlMjctYzNhOS00MzY4LWExZDMtNjE3M2U4NWFjZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSa1ww7q9wWqM90moYtYGPMwPHPkOxDKg6fk LkHu/7p+3q1P1MUhXxNrpYZ0ftARlA69Kx5OqRAf5xJz+aoG40r9E+t3u/EQB9nH YvFsUD5jAvpCbRNj2m9aKnvq1kv8BQrwPwDt8IUfh/J2cAhjYjI7NZUTI8i/0oSZ 7NIY9Vq78jufGQeqXejcNnUrzGP5Z0JGqUAQsPszsUDuQTzL2FsMruAB26N3Xkh9 TomPciv2nEMuf77x635dl3bXiXWUW+4m2+p1SS0k2wljnH/I1iUzAqRLeu5N7xS/ bcF0tR+fu/Fv67Rka2613rtJuStb5TtL4db22Vu/bif6kbkh9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOhPAbzJ6pCwP/sZ4WIQy6wfcjVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvMWU1ZjhmZjgtNzdhMC00 N2U5LWJhNzktY2NhZjE0N2EyMDcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUJfnAZ/EmmdhTnhcMsPAk OJFCzZMpkirSAIHNHpYEaWx4oqaelSWb0Sy+Lvm+L/bp9E+jnmhi1fZ3d4GGQ5Wj W0bCb+mFT08wofRip0D00ekmK+k4Y90wQYxIazmo8stkBY/ogR2e0F+LecLRSg+X FCudQzZ2dNWgu25dHBknftQH4qhWIwpege8p93WFerOYqrfanXqPaloMdotoLaSW RmfdSf9g6OprkMrRcq9vIpFaTMnih8S8PxwwPGO4wBTpcilUPy4m0juoyBT7kBfW HO0L+93on4ydpIIwnIR37qJDBKM6x7szPCW84U1v+qbzkD8jLvfJm5w/YKGBT8BH -----END CERTIFICATE-----Generated at Tue Oct 28 21:49:32 2025 by rpki-client