$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft File: 623d1527-5b57-4129-8bda-7e41b87729f6.mft (raw, json) Hash identifier: GRpBXTxd0jKPaUiu009eq8DhKsDqDQ4CKRvEL2rdbgM= Subject key identifier: 50:32:EB:E8:C9:0E:EE:CD:62:E9:14:C7:1E:8F:FE:61:84:32:5F:A3 Authority key identifier: 9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A Certificate issuer: /CN=623d1527-5b57-4129-8bda-7e41b87729f6 Certificate serial: 010D0C9F4328584BBD6F7DD090AC939C18947980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft Manifest number: 010D0C9F43285849626DB4D74B2331D59001C2DD Signing time: Mon 03 Nov 2025 19:00:03 +0000 Manifest this update: Mon 03 Nov 2025 19:00:03 +0000 Manifest next update: Thu 06 Nov 2025 19:00:00 +0000 Files and hashes: 1: 453527a2-dbfe-312b-9bfe-6a6e4386269f.roa (hash: 4E+isR+30FAMPC2hwFAVHpLSmPaT1uLEmCwFJEGLmn4=) 2: 623d1527-5b57-4129-8bda-7e41b87729f6.crl (hash: 714qKOHqckFTUMBTsmJYQIzCcEuXMrt3vwj5tAlNi6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:6f:7d:d0:90:ac:93:9c:18:94:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623d1527-5b57-4129-8bda-7e41b87729f6 Validity Not Before: Nov 3 19:00:03 2025 GMT Not After : Nov 6 19:00:00 2025 GMT Subject: CN=fc3a8afe-4055-4a49-9a7d-55c8ed5ea814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:d4:ff:66:d3:b3:4e:ec:93:55:01:33:a9: 32:5b:c1:5a:0d:2d:fc:e3:7d:17:c1:db:d3:cf:8d: 4a:f5:33:dd:43:2f:36:ae:a6:b1:ba:67:4d:e3:4c: 08:f0:0f:e8:47:9b:25:ce:44:8b:a4:7b:d0:76:35: 46:ef:d1:f5:33:6f:eb:11:d9:bb:78:b7:78:57:28: 8b:dc:d0:11:97:3b:2f:eb:e3:5f:7c:e0:8c:a4:81: 33:a0:11:ea:44:fe:e8:f8:6f:6c:da:12:bb:00:dc: c3:ed:2d:5f:cd:64:1d:02:60:90:0f:82:a0:f5:44: e7:6f:62:95:15:eb:d3:d3:70:47:8e:06:0a:3e:b9: 47:eb:de:12:b7:45:a4:35:47:22:28:42:c6:8b:6e: 12:4d:5c:5a:93:6e:e4:3e:02:32:1c:a5:c5:39:b2: eb:df:a7:58:1b:2a:d0:f6:56:e6:5d:4e:02:ff:62: 7a:0f:10:7a:a1:ae:84:48:4e:3a:86:d6:7e:d1:11: 8e:c8:9d:db:80:5e:44:5f:6b:22:4e:99:34:1e:8f: 92:20:3f:b4:c4:4f:36:2f:2a:f7:aa:39:f9:b7:97: bf:d0:ca:0c:d9:d1:b4:fa:52:0b:e7:33:2f:7c:03: 78:ac:21:f4:4c:29:19:1d:37:65:a1:71:03:01:4b: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:EB:E8:C9:0E:EE:CD:62:E9:14:C7:1E:8F:FE:61:84:32:5F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl X509v3 Authority Key Identifier: keyid:9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1a:f6:bd:9a:36:60:dc:aa:73:b5:42:b0:c0:93:6b:98:27: d4:b6:a3:c0:75:31:23:92:91:2b:fc:58:f1:10:00:f0:93:d6: f3:b8:7d:06:f4:38:85:fb:96:0b:8d:75:33:0f:73:30:91:fe: e0:70:d2:49:fd:35:d2:2b:64:33:c6:fa:93:0c:e8:fc:b9:13: c5:af:c8:58:da:af:e5:2b:a6:a5:d5:47:18:d8:da:6e:df:01: ff:81:71:46:db:be:6e:0d:ef:4b:9b:71:98:c3:5b:de:5f:e3: 61:e9:09:be:91:6a:7e:df:60:0e:44:63:19:4b:7a:b6:ed:15: d7:81:ff:c5:87:d0:ce:f2:0c:0c:4a:f3:2f:bb:f8:e6:5a:a1: b4:db:cf:2c:f7:49:d0:cc:04:28:c3:1b:40:7a:43:c4:56:64: 95:97:70:9e:4e:c2:c1:0c:66:04:cc:93:bb:db:3e:f4:81:46: 1e:b6:f2:7e:18:6b:d5:f7:90:4a:1e:62:da:8b:8f:82:d1:b5: 44:95:56:71:f7:20:83:91:fb:01:d9:5b:50:b7:92:a5:2c:b1: 84:d9:50:91:f5:4d:f6:7a:43:af:15:a4:82:7e:1d:a1:e7:f0: ec:50:df:38:0d:b4:b8:42:14:87:35:99:17:e8:7a:a9:0e:75: 22:90:cd:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9b33QkKyTnBiUeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIzZDE1MjctNWI1Ny00MTI5LThiZGEtN2U0MWI4Nzcy OWY2MB4XDTI1MTEwMzE5MDAwM1oXDTI1MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk ZmMzYThhZmUtNDA1NS00YTQ5LTlhN2QtNTVjOGVkNWVhODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2TU/2bTs07sk1UBM6kyW8FaDS38430XwdvT z41K9TPdQy82rqaxumdN40wI8A/oR5slzkSLpHvQdjVG79H1M2/rEdm7eLd4VyiL 3NARlzsv6+NffOCMpIEzoBHqRP7o+G9s2hK7ANzD7S1fzWQdAmCQD4Kg9UTnb2KV FevT03BHjgYKPrlH694St0WkNUciKELGi24STVxak27kPgIyHKXFObLr36dYGyrQ 9lbmXU4C/2J6DxB6oa6ESE46htZ+0RGOyJ3bgF5EX2siTpk0Ho+SID+0xE82Lyr3 qjn5t5e/0MoM2dG0+lIL5zMvfAN4rCH0TCkZHTdloXEDAUtrowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFAy6+jJDu7NYukUxx6P/mGEMl+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjNk MTUyNy01YjU3LTQxMjktOGJkYS03ZTQxYjg3NzI5ZjYvNjIzZDE1MjctNWI1Ny00 MTI5LThiZGEtN2U0MWI4NzcyOWY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjIzZDE1MjctNWI1Ny00MTI5LThi ZGEtN2U0MWI4NzcyOWY2LzYyM2QxNTI3LTViNTctNDEyOS04YmRhLTdlNDFiODc3 MjlmNi5jcmwwHwYDVR0jBBgwFoAUmnfnNTCVJf6ed+zDkHocoERnDDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjNkMTUyNy01YjU3LTQxMjktOGJkYS03ZTQx Yjg3NzI5ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoGva9mjZg3KpztUKwwJNr mCfUtqPAdTEjkpEr/FjxEADwk9bzuH0G9DiF+5YLjXUzD3Mwkf7gcNJJ/TXSK2Qz xvqTDOj8uRPFr8hY2q/lK6al1UcY2Npu3wH/gXFG275uDe9Lm3GYw1veX+Nh6Qm+ kWp+32AORGMZS3q27RXXgf/Fh9DO8gwMSvMvu/jmWqG0288s90nQzAQowxtAekPE VmSVl3CeTsLBDGYEzJO72z70gUYetvJ+GGvV95BKHmLai4+C0bVElVZx9yCDkfsB 2VtQt5KlLLGE2VCR9U32ekOvFaSCfh2h5/DsUN84DbS4QhSHNZkX6HqpDnUikM3N -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:02 2025 by rpki-client