$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft File: d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft (raw, json) Hash identifier: 9hs9IwckbFO6a0DJmE7shsUZVI11yengoEVyoZQ+4W0= Subject key identifier: FA:A5:EC:0B:52:95:11:CE:0E:FA:BA:EF:A0:B8:15:97:C4:92:20:EF Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67 Certificate issuer: /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447 Certificate serial: 010D0C9F4328584BBE3FF8F66916648804D7B8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft Manifest number: 010D0C9F43285844FE346C61B2ABF448ADEB9B91 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Thu 06 Nov 2025 02:00:00 +0000 Files and hashes: 1: d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl (hash: L4hmptbpwXL3oFTJ/KsBhYe1DUl6gHBwCns6UBpn+nM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:3f:f8:f6:69:16:64:88:04:d7:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447 Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 6 02:00:00 2025 GMT Subject: CN=60ba3083-1b6f-4208-a5d0-d3cee083f0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:63:6f:fd:d5:a5:db:05:e6:f5:20:0a:44: 06:85:66:5b:ff:e2:66:ac:dd:88:58:77:1c:9e:49: 2c:a8:9b:8c:a3:7b:35:d6:23:74:0b:2a:ba:16:03: 78:81:07:69:82:41:e5:7d:36:c3:aa:ed:d4:82:4a: 13:ec:0e:8d:1c:ec:8a:22:15:be:9d:46:64:7e:33: 09:71:9b:1a:24:0e:a5:ad:c4:26:ec:9f:e7:3b:c6: 1c:c4:c5:c9:6e:f2:30:d7:4d:12:34:4c:d0:07:4b: 71:19:15:18:0b:5f:aa:54:1e:89:d7:7d:c9:46:64: f9:ed:61:08:0d:2a:f6:b7:5a:01:dc:73:46:2c:9e: 99:5e:bc:e0:3d:04:3d:fb:22:bc:a8:2f:e5:14:1d: e7:45:98:e2:5e:d9:7c:a3:e3:51:ea:47:f3:d1:9b: 63:a0:05:37:de:79:5e:3b:7b:31:fb:50:8c:97:4b: 19:1c:74:05:6f:5f:c0:cd:4a:63:46:27:ab:17:ab: 3b:23:ed:34:4b:cf:0c:e8:0b:f8:eb:c8:30:0f:64: 74:d4:43:b6:33:db:e2:0d:76:24:ba:44:9e:51:14: 85:5a:63:57:4a:5e:1e:28:7e:13:d0:ea:78:df:fa: 2d:7c:9e:0d:d3:c3:d6:11:49:e8:b1:f8:6a:4c:7a: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A5:EC:0B:52:95:11:CE:0E:FA:BA:EF:A0:B8:15:97:C4:92:20:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl X509v3 Authority Key Identifier: keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b7:4a:26:2b:fa:49:93:3d:b0:b8:a5:8b:a8:df:2c:a7:24: 3f:54:78:10:3c:2a:91:d6:3b:bf:20:0b:3d:0e:f4:00:bb:2a: ee:e8:05:5f:ab:97:eb:4e:fe:a8:a3:c3:8a:f8:eb:78:00:0b: 12:57:37:98:14:b0:5d:c4:58:fe:5c:33:58:b6:dc:13:23:57: d5:68:2b:c6:76:52:e6:77:a9:24:10:1e:a0:3f:aa:50:7d:9e: 15:99:75:0e:62:20:0b:65:8a:1a:36:0c:4c:94:5b:dc:ec:c2: 86:22:66:49:bd:42:a9:d2:7a:a0:06:8c:05:05:a9:fd:df:c1: 6e:98:6c:03:ba:d8:87:e0:05:7e:a9:2a:11:b0:24:fd:98:e2: fe:76:7e:f9:05:35:f0:4b:3c:96:09:b3:ba:cd:24:97:39:d6: 9c:27:45:4f:b1:73:04:78:b8:fa:27:5b:9b:92:64:aa:95:b8: 0f:c3:60:de:17:a0:d8:a9:58:d1:27:53:d7:1e:af:09:64:30: 7d:ce:8c:49:01:35:e0:87:9a:06:22:a9:fd:27:4d:f9:8f:d5: 7a:be:71:44:f0:2e:cb:e6:2b:53:67:80:8c:17:73:7d:1c:1f: b2:9d:c8:e3:dd:d2:e6:4a:7c:42:20:1f:83:34:85:02:64:99: 06:11:d4:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+P/j2aRZkiATXuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYWI2N2YtMzVhNy00NDg5LWFkM2QtZmY1YjczYWIw NDQ3MB4XDTI1MTEwNDAyMDAwOFoXDTI1MTEwNjAyMDAwMFowLzEtMCsGA1UEAxMk NjBiYTMwODMtMWI2Zi00MjA4LWE1ZDAtZDNjZWUwODNmMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwljb/3VpdsF5vUgCkQGhWZb/+JmrN2IWHcc nkksqJuMo3s11iN0Cyq6FgN4gQdpgkHlfTbDqu3UgkoT7A6NHOyKIhW+nUZkfjMJ cZsaJA6lrcQm7J/nO8YcxMXJbvIw100SNEzQB0txGRUYC1+qVB6J133JRmT57WEI DSr2t1oB3HNGLJ6ZXrzgPQQ9+yK8qC/lFB3nRZjiXtl8o+NR6kfz0ZtjoAU33nle O3sx+1CMl0sZHHQFb1/AzUpjRierF6s7I+00S88M6Av468gwD2R01EO2M9viDXYk ukSeURSFWmNXSl4eKH4T0Op43/otfJ4N08PWEUnosfhqTHrwBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPql7AtSlRHODvq676C4FZfEkiDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNDFh YjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjViNzNhYjA0NDcvZDQxYWI2N2YtMzVhNy00 NDg5LWFkM2QtZmY1YjczYWIwNDQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDQxYWI2N2YtMzVhNy00NDg5LWFk M2QtZmY1YjczYWIwNDQ3L2Q0MWFiNjdmLTM1YTctNDQ4OS1hZDNkLWZmNWI3M2Fi MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUvfoqVkNKfJIRitSOopfVwr+UNWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNDFhYjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjVi NzNhYjA0NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYt0omK/pJkz2wuKWLqN8s pyQ/VHgQPCqR1ju/IAs9DvQAuyru6AVfq5frTv6oo8OK+Ot4AAsSVzeYFLBdxFj+ XDNYttwTI1fVaCvGdlLmd6kkEB6gP6pQfZ4VmXUOYiALZYoaNgxMlFvc7MKGImZJ vUKp0nqgBowFBan938FumGwDutiH4AV+qSoRsCT9mOL+dn75BTXwSzyWCbO6zSSX OdacJ0VPsXMEeLj6J1ubkmSqlbgPw2DeF6DYqVjRJ1PXHq8JZDB9zoxJATXgh5oG Iqn9J035j9V6vnFE8C7L5itTZ4CMF3N9HB+yncjj3dLmSnxCIB+DNIUCZJkGEdRz -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:29 2025 by rpki-client