$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft File: 27e70452-5e7e-4070-905f-86c708cbebd5.mft (raw, json) Hash identifier: 9N+doZG4FeQfSr6SJ5+sxnHdeUU2Knsmb4Xz5j4prg0= Subject key identifier: 3A:06:01:9B:16:17:6A:CC:81:4C:2A:1D:A3:EE:3D:51:19:86:AC:EE Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584B96D1040AA68B9BCE4E58C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft Manifest number: 010D0C9F43285847C5D06CE8A04E829CA21F7BE7 Signing time: Mon 20 Oct 2025 23:00:03 +0000 Manifest this update: Mon 20 Oct 2025 23:00:03 +0000 Manifest next update: Thu 23 Oct 2025 23:00:00 +0000 Files and hashes: 1: 27e70452-5e7e-4070-905f-86c708cbebd5.crl (hash: LHYtQrh5YbsYPhETpK6hOfCKDEQH42RR2V/VWyKEAaI=) 2: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (hash: BQb8zPHt8VJ8Pv18I+6OuF7Sx8EW6iLz5dRAZ+bqxpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:d1:04:0a:a6:8b:9b:ce:4e:58:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Oct 20 23:00:03 2025 GMT Not After : Oct 23 23:00:00 2025 GMT Subject: CN=5082e888-88d6-4a4e-b6fb-5fc271511d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:89:f9:14:7f:56:88:28:dd:56:d1:b2:0a: 39:fd:9f:ea:1d:1b:e8:ab:59:4b:20:88:51:ee:ec: 67:2c:d0:47:f2:4b:f5:79:b8:4e:82:fc:84:47:8a: 7a:ae:db:c2:87:07:87:9b:36:f6:b0:0a:28:2b:3b: e3:62:35:be:a8:9e:75:dc:9b:50:1f:d7:d0:98:b8: a3:43:76:a5:a6:1b:dc:6a:5e:3d:e3:d8:f5:9a:cd: a0:f0:b7:b8:0b:b6:b3:a8:3d:c2:4c:f3:4e:ea:7b: 34:35:e0:c5:58:b4:3f:b7:c3:ad:7d:6b:3d:ba:eb: 1d:d2:02:8d:e9:6e:6e:9f:40:87:63:83:b9:2a:96: 7d:51:82:7c:b2:f4:a6:e3:1c:c4:d2:60:57:b4:be: 5b:2f:fe:01:c2:64:4f:cc:f4:d8:4c:a2:98:56:2d: 9c:7d:f8:29:58:49:a1:1f:1c:c9:c2:2a:93:f6:2e: e4:e2:1c:0d:67:c6:e9:89:60:6c:a6:b0:8f:08:06: 2c:22:77:50:05:00:05:6a:d1:6a:cd:38:ce:6d:3b: d5:a3:c3:19:2a:ed:22:d1:b5:4b:5b:88:66:9d:20: b3:ca:2e:db:a0:ec:f5:fa:ad:4f:95:5d:b7:c1:95: 56:90:08:99:fd:87:85:59:6f:8d:e3:7a:cc:fa:43: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:01:9B:16:17:6A:CC:81:4C:2A:1D:A3:EE:3D:51:19:86:AC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:30:b5:54:09:93:74:80:b1:c9:9d:d0:71:ab:4e:18:78:b6: 16:65:c8:38:94:34:6c:14:5c:37:a8:4e:04:b1:28:db:2f:31: b9:6f:b1:d5:6d:6b:9d:c2:57:d2:07:fb:18:50:38:cb:19:83: 21:d4:6d:60:6b:23:a9:9a:aa:74:6c:e9:f6:3b:95:c4:95:16: ba:7f:93:59:2a:d0:ab:b1:ca:a7:4e:f4:b6:f6:59:47:88:72: 95:3c:7f:c2:c8:0b:6d:b2:2c:a8:aa:de:c1:43:e3:85:99:ec: db:62:1d:b6:6e:4e:f9:e1:96:07:6f:c7:b7:be:7e:2b:00:01: 73:53:9d:13:75:15:d5:59:21:83:91:86:e7:53:3a:7e:8a:f6: 9e:9f:28:e9:f6:65:4c:d4:d6:b1:53:fd:51:2e:13:54:b5:74: 2d:90:87:d4:18:b2:07:28:03:82:0b:b9:2a:ee:41:e2:e2:3a: 1f:4d:c4:12:cb:28:5f:4a:8d:ca:90:cc:b9:6d:e1:eb:36:42: f7:3c:62:34:14:5e:14:a8:5f:80:70:8c:5f:cb:f6:9c:55:ac: bc:ec:da:ee:a8:44:41:32:31:b7:41:ad:65:1e:6e:63:5c:13: 3b:8b:43:5c:38:e0:5b:05:00:eb:f2:fc:5f:67:e4:22:74:fa: c0:3b:37:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW0QQKpoubzk5YwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI1MTAyMDIzMDAwM1oXDTI1MTAyMzIzMDAwMFowLzEtMCsGA1UEAxMk NTA4MmU4ODgtODhkNi00YTRlLWI2ZmItNWZjMjcxNTExZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6CJ+RR/Vogo3VbRsgo5/Z/qHRvoq1lLIIhR 7uxnLNBH8kv1ebhOgvyER4p6rtvChweHmzb2sAooKzvjYjW+qJ513JtQH9fQmLij Q3alphvcal4949j1ms2g8Le4C7azqD3CTPNO6ns0NeDFWLQ/t8OtfWs9uusd0gKN 6W5un0CHY4O5KpZ9UYJ8svSm4xzE0mBXtL5bL/4BwmRPzPTYTKKYVi2cffgpWEmh HxzJwiqT9i7k4hwNZ8bpiWBsprCPCAYsIndQBQAFatFqzTjObTvVo8MZKu0i0bVL W4hmnSCzyi7boOz1+q1PlV23wZVWkAiZ/YeFWW+N43rM+kNUMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDoGAZsWF2rMgUwqHaPuPVEZhqzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvMjdlNzA0NTItNWU3ZS00 MDcwLTkwNWYtODZjNzA4Y2JlYmQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIMLVUCZN0gLHJndBxq04Y eLYWZcg4lDRsFFw3qE4EsSjbLzG5b7HVbWudwlfSB/sYUDjLGYMh1G1gayOpmqp0 bOn2O5XElRa6f5NZKtCrscqnTvS29llHiHKVPH/CyAttsiyoqt7BQ+OFmezbYh22 bk754ZYHb8e3vn4rAAFzU50TdRXVWSGDkYbnUzp+ivaenyjp9mVM1NaxU/1RLhNU tXQtkIfUGLIHKAOCC7kq7kHi4jofTcQSyyhfSo3KkMy5beHrNkL3PGI0FF4UqF+A cIxfy/acVay87NruqERBMjG3Qa1lHm5jXBM7i0NcOOBbBQDr8vxfZ+QidPrAOzdn -----END CERTIFICATE-----Generated at Tue Oct 21 19:39:37 2025 by rpki-client