$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: yWMM7EAo7Ke8V/YIsT/lSdLySX0X8upPmffB/7c8tKs= Subject key identifier: EC:51:82:67:72:D3:9F:EC:FE:90:E3:00:6D:8F:AA:FB:D8:D1:BE:D2 Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584B3C6F21F5B0D6E3A07B3A4700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A0695 Signing time: Thu 18 Sep 2025 14:00:03 +0000 Manifest this update: Thu 18 Sep 2025 14:00:03 +0000 Manifest next update: Sun 21 Sep 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: Kd/suIS4o6QtT1Sfl7AuRHI7ak0qI8RXySR8pSginbY=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: wBA1VQFvs3I4WIlSCR0SsbnmNqsikQu/0yxNF7MWD4w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:6f:21:f5:b0:d6:e3:a0:7b:3a:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Sep 18 14:00:03 2025 GMT Not After : Sep 21 14:00:00 2025 GMT Subject: CN=fbae45ed-49cb-444f-b191-4ac685a765f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:db:25:0e:50:9e:14:92:f2:ec:d9:22:c3: 07:44:7b:2a:51:b5:a8:25:3c:87:10:b3:95:f9:96: 76:d0:b1:06:da:ca:6d:ac:a5:ab:e5:ec:97:dc:e8: 86:c6:1d:18:57:50:29:38:8b:e5:e2:85:ad:4c:bd: 1a:c7:57:96:71:1e:d2:26:65:aa:e3:9c:f3:66:8d: 45:fb:eb:4e:64:b5:15:0a:e2:69:7f:a4:7d:74:f5: 26:30:5f:ae:27:d0:90:75:a9:06:73:48:0a:1e:37: e0:58:ba:53:63:da:79:2b:5d:26:e0:3a:b3:a3:1a: 71:a8:0a:8d:b4:4f:6b:81:18:3f:06:28:2a:d7:ab: 65:ef:b6:fe:0b:79:bc:90:29:58:e6:15:19:88:19: b9:89:5c:d5:70:c1:27:49:a3:96:4d:c8:f7:38:59: 1c:24:18:b7:63:95:df:d6:55:38:ae:3b:06:cf:83: ae:df:f9:f8:0f:11:63:b2:22:ae:83:95:9b:4e:77: 2f:0b:7d:4f:cb:13:10:05:2a:a4:eb:a5:22:c3:3f: 73:32:90:e1:97:0b:0a:df:76:e2:41:ad:51:c1:bb: 51:e9:ae:d6:55:09:74:5a:e7:92:56:5a:41:d8:73: 9c:bb:7d:f7:95:07:bf:28:36:98:d8:79:7e:20:56: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:82:67:72:D3:9F:EC:FE:90:E3:00:6D:8F:AA:FB:D8:D1:BE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:90:22:10:ce:9d:a3:0e:e5:dc:1f:54:17:ff:22:36:e8:b0: b2:0a:73:75:e2:3d:9d:aa:cd:23:65:eb:30:4a:b4:c4:3b:aa: 55:13:b6:25:38:b4:29:fb:04:6f:19:4d:7f:ce:66:f9:4f:66: 82:f8:40:6d:60:74:fb:8f:95:e6:c6:f2:9b:89:12:48:df:8a: d9:dc:26:2d:2d:42:38:4d:f5:8f:ec:b0:3b:70:8e:43:d8:7f: 22:77:81:26:1d:d2:fa:74:1c:92:f5:12:ba:82:e4:f3:ce:bf: a3:e9:4f:f2:e8:3e:82:64:ba:cc:77:9a:23:19:ca:a3:0e:ab: f4:65:06:52:ac:cc:c9:30:50:17:f5:a4:eb:a5:fa:08:8d:7f: fa:cd:70:1d:09:26:28:9d:14:9a:95:d4:f3:c3:ec:83:9c:39: fb:41:c3:7b:50:2b:20:bf:d1:dd:73:04:9e:bd:83:ff:9f:54: d0:02:8f:66:76:34:70:72:19:5e:b4:b3:9e:51:ae:42:ed:18: 2a:a8:36:45:18:1c:6e:b9:87:8e:55:cb:b0:ed:31:a8:e6:93: 6a:c4:af:31:11:58:7e:1f:df:d2:8c:46:42:42:ee:9f:02:2e: 3d:02:91:dd:3e:2d:db:b6:cd:14:57:9f:65:ea:a0:25:e1:72: bc:26:5d:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs8byH1sNbjoHs6RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MDkxODE0MDAwM1oXDTI1MDkyMTE0MDAwMFowLzEtMCsGA1UEAxMk ZmJhZTQ1ZWQtNDljYi00NDRmLWIxOTEtNGFjNjg1YTc2NWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy63bJQ5QnhSS8uzZIsMHRHsqUbWoJTyHELOV +ZZ20LEG2sptrKWr5eyX3OiGxh0YV1ApOIvl4oWtTL0ax1eWcR7SJmWq45zzZo1F ++tOZLUVCuJpf6R9dPUmMF+uJ9CQdakGc0gKHjfgWLpTY9p5K10m4DqzoxpxqAqN tE9rgRg/Bigq16tl77b+C3m8kClY5hUZiBm5iVzVcMEnSaOWTcj3OFkcJBi3Y5Xf 1lU4rjsGz4Ou3/n4DxFjsiKug5WbTncvC31PyxMQBSqk66Uiwz9zMpDhlwsK33bi Qa1RwbtR6a7WVQl0WueSVlpB2HOcu333lQe/KDaY2Hl+IFZYhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOxRgmdy05/s/pDjAG2PqvvY0b7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmkCIQzp2jDuXcH1QX/yI2 6LCyCnN14j2dqs0jZeswSrTEO6pVE7YlOLQp+wRvGU1/zmb5T2aC+EBtYHT7j5Xm xvKbiRJI34rZ3CYtLUI4TfWP7LA7cI5D2H8id4EmHdL6dByS9RK6guTzzr+j6U/y 6D6CZLrMd5ojGcqjDqv0ZQZSrMzJMFAX9aTrpfoIjX/6zXAdCSYonRSaldTzw+yD nDn7QcN7UCsgv9HdcwSevYP/n1TQAo9mdjRwchletLOeUa5C7RgqqDZFGBxuuYeO Vcuw7TGo5pNqxK8xEVh+H9/SjEZCQu6fAi49ApHdPi3bts0UV59l6qAl4XK8Jl2K -----END CERTIFICATE-----Generated at Thu Sep 18 18:55:15 2025 by rpki-client