$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft File: b575130a-1aa4-4ba5-8770-337f3ccebd73.mft (raw, json) Hash identifier: 9o96flDqsYzONKJWQuggV2+0lpJsRCf3xvcUtjbbXms= Subject key identifier: 40:BB:0C:BD:96:DD:28:AC:E5:0D:5E:4F:1C:60:C6:24:3E:9D:0F:67 Authority key identifier: AD:F8:F5:81:88:AA:E2:6F:5F:38:FF:89:9C:86:97:45:42:34:46:C1 Certificate issuer: /CN=b575130a-1aa4-4ba5-8770-337f3ccebd73 Certificate serial: 010D0C9F4328584BC1286FA504D0D107793A7440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft Manifest number: 010D0C9F4328584073A83A301F23859D32EE970C Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: b575130a-1aa4-4ba5-8770-337f3ccebd73.crl (hash: 3ur2Z0k/+yWkOW93Vd9hL6PwpVcjn0otPXCdOibGNcA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:6f:a5:04:d0:d1:07:79:3a:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b575130a-1aa4-4ba5-8770-337f3ccebd73 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=658a3ec9-7d14-4772-a906-57c41a158bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:86:93:d6:da:b9:77:e9:7d:30:c8:85:da: da:79:9a:e0:a2:1b:e0:aa:1f:38:d7:18:b0:22:49: 35:b2:74:c0:c7:f9:f1:b7:22:44:3b:a2:74:c2:8e: 6e:7f:ab:56:8b:53:2a:9f:e3:1c:0e:20:3a:a8:a0: 32:42:38:5f:eb:85:48:09:66:58:b3:46:4f:3f:4e: 79:5e:51:bd:ce:5b:e8:30:db:47:f4:d8:85:53:05: 78:f8:0f:66:03:eb:1c:b0:38:f8:fd:9f:54:e6:ca: d4:fd:51:3d:6a:46:07:ad:63:5c:d1:f8:04:7e:20: 64:6c:93:aa:ec:b4:7e:5e:fc:3f:d7:f0:3d:05:7d: 9f:78:0f:a1:f5:41:d3:50:1f:96:13:1e:d7:0b:a1: e8:a3:f2:ec:af:29:26:3a:90:9b:73:39:d7:07:d0: 8a:45:14:58:ff:32:0a:f8:08:cd:7e:7f:61:69:fb: c2:aa:22:56:f6:0f:e8:3c:20:e9:2d:b5:af:79:b8: 1a:ef:49:91:8f:fa:e6:58:01:4d:8f:52:00:2a:be: b2:b9:45:d9:af:2a:b8:ff:54:64:50:d3:0f:54:f9: 62:e5:1d:a0:3f:56:e6:ed:4e:72:b0:ac:3b:55:fd: cd:97:6b:5f:06:24:5c:84:28:20:ec:e1:e8:56:19: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BB:0C:BD:96:DD:28:AC:E5:0D:5E:4F:1C:60:C6:24:3E:9D:0F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73/b575130a-1aa4-4ba5-8770-337f3ccebd73.crl X509v3 Authority Key Identifier: keyid:AD:F8:F5:81:88:AA:E2:6F:5F:38:FF:89:9C:86:97:45:42:34:46:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b575130a-1aa4-4ba5-8770-337f3ccebd73.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3f:88:fc:4e:19:b7:02:c9:07:3f:76:67:ca:ca:82:7a:b5: 4d:84:df:81:b5:b2:38:c6:7e:01:6e:e7:2a:d3:f5:dc:63:df: cf:36:cd:dc:bf:02:50:90:2b:f7:75:8e:38:ba:03:b3:08:d6: f9:d0:21:f2:c8:19:50:2c:62:82:a6:6d:2b:07:4a:08:b3:11: d0:2d:10:10:e3:ee:81:a9:92:cc:c1:93:0f:b1:bd:cc:dc:88: d6:bd:4e:64:73:43:15:db:7c:a7:d7:e7:e0:01:5c:3a:72:8a: a3:71:c9:18:24:6c:01:e4:60:48:d6:2b:7d:1f:61:6b:c1:74: 41:c9:4f:0d:b5:9d:64:e5:3a:4f:4f:11:c0:b3:7d:c1:28:d0: 42:86:1f:ae:60:15:fb:b4:7b:85:e3:81:98:ed:85:f4:4c:21: 01:7e:55:de:a3:24:b1:20:88:78:74:31:85:3a:b2:aa:e2:40: 4a:89:07:35:9e:96:d0:72:3b:fa:4e:97:ff:21:2b:7a:4d:53: 52:94:d3:1b:d0:f4:2d:0f:84:92:29:b3:5b:d2:fa:44:6b:a7: 4c:7b:f3:9d:a8:e7:ae:9e:e1:b4:6c:12:33:30:a5:a5:60:15: 02:a8:4d:45:33:f9:86:e2:08:c5:0e:e5:a0:54:38:bc:5f:de: cf:fd:26:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKG+lBNDRB3k6dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU3NTEzMGEtMWFhNC00YmE1LTg3NzAtMzM3ZjNjY2Vi ZDczMB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk NjU4YTNlYzktN2QxNC00NzcyLWE5MDYtNTdjNDFhMTU4YmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09iGk9bauXfpfTDIhdraeZrgohvgqh841xiw Ikk1snTAx/nxtyJEO6J0wo5uf6tWi1Mqn+McDiA6qKAyQjhf64VICWZYs0ZPP055 XlG9zlvoMNtH9NiFUwV4+A9mA+scsDj4/Z9U5srU/VE9akYHrWNc0fgEfiBkbJOq 7LR+Xvw/1/A9BX2feA+h9UHTUB+WEx7XC6Hoo/LsrykmOpCbcznXB9CKRRRY/zIK +AjNfn9hafvCqiJW9g/oPCDpLbWvebga70mRj/rmWAFNj1IAKr6yuUXZryq4/1Rk UNMPVPli5R2gP1bm7U5ysKw7Vf3Nl2tfBiRchCgg7OHoVhnigwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEC7DL2W3Sis5Q1eTxxgxiQ+nQ9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTc1 MTMwYS0xYWE0LTRiYTUtODc3MC0zMzdmM2NjZWJkNzMvYjU3NTEzMGEtMWFhNC00 YmE1LTg3NzAtMzM3ZjNjY2ViZDczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU3NTEzMGEtMWFhNC00YmE1LTg3 NzAtMzM3ZjNjY2ViZDczL2I1NzUxMzBhLTFhYTQtNGJhNS04NzcwLTMzN2YzY2Nl YmQ3My5jcmwwHwYDVR0jBBgwFoAUrfj1gYiq4m9fOP+JnIaXRUI0RsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTc1MTMwYS0xYWE0LTRiYTUtODc3MC0zMzdm M2NjZWJkNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqP4j8Thm3AskHP3ZnysqC erVNhN+BtbI4xn4Bbucq0/XcY9/PNs3cvwJQkCv3dY44ugOzCNb50CHyyBlQLGKC pm0rB0oIsxHQLRAQ4+6BqZLMwZMPsb3M3IjWvU5kc0MV23yn1+fgAVw6coqjcckY JGwB5GBI1it9H2FrwXRByU8NtZ1k5TpPTxHAs33BKNBChh+uYBX7tHuF44GY7YX0 TCEBflXeoySxIIh4dDGFOrKq4kBKiQc1npbQcjv6Tpf/ISt6TVNSlNMb0PQtD4SS KbNb0vpEa6dMe/OdqOeunuG0bBIzMKWlYBUCqE1FM/mG4gjFDuWgVDi8X97P/Sap -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:06 2025 by rpki-client