$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.mft File: 474a21a7-43d3-4693-9e19-6a801636df00.mft (raw, json) Hash identifier: R5IlOq9/tNs7M7vIlSwcgNrmAKjghDDo91r0jhxqbH4= Subject key identifier: D3:29:03:7D:28:82:69:78:3B:2E:F5:8E:47:7D:11:A4:15:04:E9:A7 Authority key identifier: 72:12:1B:5D:03:1C:57:67:F5:78:4A:5C:FD:C4:D7:4A:0C:5D:E6:7C Certificate issuer: /CN=474a21a7-43d3-4693-9e19-6a801636df00 Certificate serial: 010D0C9F4328584BBE5DC2B840B131BA31D4BA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.mft Manifest number: 010D0C9F4328584073A8390F34A73EF799D6078B Signing time: Tue 04 Nov 2025 03:00:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Thu 06 Nov 2025 03:00:00 +0000 Files and hashes: 1: 474a21a7-43d3-4693-9e19-6a801636df00.crl (hash: QJHJncr2Oj4N9HS7bf99ETFM3wkgYog7zmjPMn7Gn7s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:5d:c2:b8:40:b1:31:ba:31:d4:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a21a7-43d3-4693-9e19-6a801636df00 Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 6 03:00:00 2025 GMT Subject: CN=e585b3b0-9345-41ab-ac06-7b7ea9fddb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:9b:db:ae:55:65:45:3b:12:90:83:86:3c: cd:e3:c7:9e:29:b1:fe:c1:97:91:f6:5c:a4:82:e8: a4:6f:53:92:8f:04:a6:6f:87:4e:a8:28:df:14:c1: 23:ae:79:08:24:21:93:0b:56:e3:d3:ae:8b:ad:64: a9:41:e3:1c:d1:16:af:10:0c:cb:b3:85:bd:dd:0b: 82:7c:7d:aa:8e:92:fc:11:23:80:64:c0:03:d1:ef: 02:81:6d:c9:f2:00:b3:e7:b8:03:28:4d:32:fd:69: 1a:4e:cb:a0:9a:26:f2:27:15:df:42:f0:fe:de:46: 92:c1:a6:13:53:36:89:c8:35:04:4d:1c:b9:42:08: 34:af:b7:51:6f:54:80:ee:ce:7d:45:fc:06:fd:28: 56:be:04:92:65:b5:c3:f8:0e:5b:5d:c5:d9:e8:2e: 42:56:20:19:a9:d6:c4:ec:58:a1:9f:e2:07:d4:06: 3a:a4:f1:8e:be:99:dd:f9:d0:2b:95:17:5a:1f:74: 2f:cf:d3:ea:a6:68:aa:fe:77:5d:0d:b5:a4:a2:c9: 28:e5:dd:86:a1:a6:f6:c9:68:a3:8c:4a:aa:94:03: 06:3f:db:28:df:44:38:12:4d:65:8d:1b:80:c6:86: 1d:e8:73:4b:3b:d1:78:fe:c6:1c:04:5e:5b:7a:e3: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:03:7D:28:82:69:78:3B:2E:F5:8E:47:7D:11:A4:15:04:E9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00/474a21a7-43d3-4693-9e19-6a801636df00.crl X509v3 Authority Key Identifier: keyid:72:12:1B:5D:03:1C:57:67:F5:78:4A:5C:FD:C4:D7:4A:0C:5D:E6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/474a21a7-43d3-4693-9e19-6a801636df00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:48:29:99:30:80:1b:9b:e3:07:05:74:06:73:fc:c6:6c:55: ca:b9:39:cc:31:01:13:8c:ff:46:af:d4:75:a6:41:7c:1a:d5: 0a:76:90:0b:4a:0f:51:a4:b3:2c:cf:b2:33:dc:6f:3b:62:2e: e4:df:28:9b:d3:5b:4b:35:5e:16:77:c2:1b:cd:f5:80:4d:2a: f3:e5:af:fd:2d:db:39:a6:0b:6d:3e:01:4d:72:ef:00:e6:31: f0:28:48:88:5d:47:35:37:61:66:d3:20:3f:4b:9a:44:c4:91: da:bd:08:14:b9:75:ac:5a:27:2b:a5:fd:44:51:0b:55:ac:7c: 4c:ca:b6:0c:74:8a:4c:dd:d3:d1:40:81:be:b2:66:d7:97:a3: 31:0e:23:ae:b1:ff:ce:a2:fa:75:05:ee:fe:e0:f0:12:df:56: 10:2d:94:43:9c:ac:00:bc:bb:a9:c4:18:1c:72:8a:f9:5d:3b: 8e:e1:b5:06:19:56:ad:84:d7:51:33:ff:15:d9:d3:9e:22:97: 5f:65:31:40:7a:54:1f:b3:58:63:12:93:1d:14:65:21:6c:9e: 2a:1f:d3:50:73:76:9b:7a:3f:77:be:b1:69:2b:c1:05:a2:00: 08:19:f3:23:18:a9:b7:a0:70:94:41:6a:63:49:3a:08:38:20: 67:15:5e:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+XcK4QLExujHUuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc0YTIxYTctNDNkMy00NjkzLTllMTktNmE4MDE2MzZk ZjAwMB4XDTI1MTEwNDAzMDAwOVoXDTI1MTEwNjAzMDAwMFowLzEtMCsGA1UEAxMk ZTU4NWIzYjAtOTM0NS00MWFiLWFjMDYtN2I3ZWE5ZmRkYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ib265VZUU7EpCDhjzN48eeKbH+wZeR9lyk guikb1OSjwSmb4dOqCjfFMEjrnkIJCGTC1bj066LrWSpQeMc0RavEAzLs4W93QuC fH2qjpL8ESOAZMAD0e8CgW3J8gCz57gDKE0y/WkaTsugmibyJxXfQvD+3kaSwaYT UzaJyDUETRy5Qgg0r7dRb1SA7s59RfwG/ShWvgSSZbXD+A5bXcXZ6C5CViAZqdbE 7Fihn+IH1AY6pPGOvpnd+dArlRdaH3Qvz9Pqpmiq/nddDbWkosko5d2Goab2yWij jEqqlAMGP9so30Q4Ek1ljRuAxoYd6HNLO9F4/sYcBF5beuPDLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNMpA30ogml4Oy71jkd9EaQVBOmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NzRh MjFhNy00M2QzLTQ2OTMtOWUxOS02YTgwMTYzNmRmMDAvNDc0YTIxYTctNDNkMy00 NjkzLTllMTktNmE4MDE2MzZkZjAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDc0YTIxYTctNDNkMy00NjkzLTll MTktNmE4MDE2MzZkZjAwLzQ3NGEyMWE3LTQzZDMtNDY5My05ZTE5LTZhODAxNjM2 ZGYwMC5jcmwwHwYDVR0jBBgwFoAUchIbXQMcV2f1eEpc/cTXSgxd5nwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80NzRhMjFhNy00M2QzLTQ2OTMtOWUxOS02YTgw MTYzNmRmMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwSCmZMIAbm+MHBXQGc/zG bFXKuTnMMQETjP9Gr9R1pkF8GtUKdpALSg9RpLMsz7Iz3G87Yi7k3yib01tLNV4W d8IbzfWATSrz5a/9Lds5pgttPgFNcu8A5jHwKEiIXUc1N2Fm0yA/S5pExJHavQgU uXWsWicrpf1EUQtVrHxMyrYMdIpM3dPRQIG+smbXl6MxDiOusf/Oovp1Be7+4PAS 31YQLZRDnKwAvLupxBgccor5XTuO4bUGGVathNdRM/8V2dOeIpdfZTFAelQfs1hj EpMdFGUhbJ4qH9NQc3abej93vrFpK8EFogAIGfMjGKm3oHCUQWpjSToIOCBnFV6Y -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:53 2025 by rpki-client