$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: apr9BywiOnhhc1yDjkkHARnZo3N3M7Osz49jzIXEcck= Subject key identifier: D0:A6:B3:B1:39:D0:61:A6:DF:96:20:BA:96:8F:5B:A8:B5:67:3E:17 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584B8AD5E44A54AB985DA1D18E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFF9DE Signing time: Thu 16 Oct 2025 16:00:08 +0000 Manifest this update: Thu 16 Oct 2025 16:00:08 +0000 Manifest next update: Sat 18 Oct 2025 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: 1fAz2KGWDpZyLl1V6R/u/2B7j1ktl/NhRQK+tR+f+70=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: 0jX04WBUxqdnPutou+ihkic8BVI7VclhwVJ+ZA90FkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:d5:e4:4a:54:ab:98:5d:a1:d1:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Oct 16 16:00:08 2025 GMT Not After : Oct 18 16:00:00 2025 GMT Subject: CN=cda957b8-79da-422c-9980-b037af21d719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:b2:03:49:c1:6f:38:6c:02:4d:0a:b5:26: d3:04:f7:fd:1e:0a:c3:8a:c4:1e:e9:f8:77:39:ee: b7:8d:cf:8a:27:95:7b:02:13:6d:67:5c:6c:f0:20: b0:c3:6b:5a:56:8f:70:be:e1:23:55:82:2d:db:01: 11:e0:df:f6:04:18:26:bc:92:56:03:1c:2b:33:32: e9:29:6b:a8:9b:27:e4:4c:72:11:85:92:0b:76:76: 84:e7:82:2f:40:34:9d:a6:66:d5:0f:3f:23:ec:3e: 2b:50:0f:48:0b:1f:71:77:37:cf:b8:fd:6c:79:6e: 4b:ec:ce:0f:b2:3f:b2:26:37:47:ad:bb:38:ab:2c: 1f:ad:89:95:50:e5:12:23:03:28:9a:84:fc:94:85: 2c:85:8f:df:88:79:83:0e:57:68:58:20:0f:8c:1f: 30:38:d1:8d:ce:57:12:68:b8:d5:ec:7b:1b:87:f6: ec:d5:8f:b4:da:d8:c1:43:26:7c:7f:dd:26:f1:cb: 70:b6:ac:0b:c6:f3:40:01:e3:f9:1a:f2:95:08:66: 9a:55:aa:38:ba:70:e5:7f:b6:ed:9a:3b:f8:db:31: c2:51:ad:24:74:7d:ce:73:87:4a:85:f5:0f:48:45: 42:02:fe:51:f4:fa:a7:fe:5f:e4:18:47:f1:d4:bc: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:B3:B1:39:D0:61:A6:DF:96:20:BA:96:8F:5B:A8:B5:67:3E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4d:39:11:d1:86:58:de:e5:2e:0f:d0:6d:ce:a5:47:39:32: 9a:39:96:fb:d8:d5:70:3d:f7:d4:f3:8c:28:5a:f6:05:d3:fd: a0:71:65:f1:c3:3a:4f:66:12:2a:c7:97:d6:cf:33:c7:48:31: 49:51:d1:5c:07:1a:6b:ae:9e:4b:11:7d:cc:21:0e:d2:82:32: 64:63:a7:0f:61:72:4d:5e:b0:42:f6:71:c3:4e:cf:82:32:9e: bb:43:4d:f9:81:ff:72:a8:4d:2e:aa:c4:d5:c6:5e:c8:60:db: bf:20:1c:30:7a:b0:cf:3f:e0:0d:d5:ba:1d:8b:05:80:ce:b6: 1a:e4:c1:b8:a0:48:39:c7:d5:8d:9a:46:fb:63:37:23:96:1d: 99:ec:a4:8b:2b:cd:b9:9d:e3:0a:7e:0f:98:4e:f2:f8:d6:a5: 7c:a9:a3:98:2b:6c:b2:ba:1c:99:80:6e:4a:fd:e4:84:9f:c0: 4e:57:14:5a:3d:e2:fd:38:42:87:05:b7:ca:1e:40:2f:ff:0b: a1:cd:2b:de:fe:49:5f:2b:08:bc:0a:5f:28:de:d3:5b:c2:47: f7:4f:99:3f:af:4f:29:15:bf:66:13:11:e9:b8:c9:27:be:15: f0:79:d7:37:a7:11:d5:c7:96:32:10:8d:cf:c6:74:ab:cb:16: 98:2c:4a:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuK1eRKVKuYXaHRjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MTAxNjE2MDAwOFoXDTI1MTAxODE2MDAwMFowLzEtMCsGA1UEAxMk Y2RhOTU3YjgtNzlkYS00MjJjLTk5ODAtYjAzN2FmMjFkNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAeyA0nBbzhsAk0KtSbTBPf9HgrDisQe6fh3 Oe63jc+KJ5V7AhNtZ1xs8CCww2taVo9wvuEjVYIt2wER4N/2BBgmvJJWAxwrMzLp KWuomyfkTHIRhZILdnaE54IvQDSdpmbVDz8j7D4rUA9ICx9xdzfPuP1seW5L7M4P sj+yJjdHrbs4qywfrYmVUOUSIwMomoT8lIUshY/fiHmDDldoWCAPjB8wONGNzlcS aLjV7Hsbh/bs1Y+02tjBQyZ8f90m8ctwtqwLxvNAAeP5GvKVCGaaVao4unDlf7bt mjv42zHCUa0kdH3Oc4dKhfUPSEVCAv5R9Pqn/l/kGEfx1Lz/BQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNCms7E50GGm35YgupaPW6i1Zz4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFTTkR0YZY3uUuD9BtzqVH OTKaOZb72NVwPffU84woWvYF0/2gcWXxwzpPZhIqx5fWzzPHSDFJUdFcBxprrp5L EX3MIQ7SgjJkY6cPYXJNXrBC9nHDTs+CMp67Q035gf9yqE0uqsTVxl7IYNu/IBww erDPP+AN1bodiwWAzrYa5MG4oEg5x9WNmkb7Yzcjlh2Z7KSLK825neMKfg+YTvL4 1qV8qaOYK2yyuhyZgG5K/eSEn8BOVxRaPeL9OEKHBbfKHkAv/wuhzSve/klfKwi8 Cl8o3tNbwkf3T5k/r08pFb9mExHpuMknvhXwedc3pxHVx5YyEI3PxnSryxaYLErf -----END CERTIFICATE-----Generated at Fri Oct 17 09:38:11 2025 by rpki-client