$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft File: db3948d9-e295-422b-8439-1e057eb4673b.mft (raw, json) Hash identifier: QsQ2JvbP8XMfSipCJN2zfYhU905FO035hs6kXcrl+aA= Subject key identifier: E3:BB:25:88:99:58:E5:D7:87:38:CA:18:B8:6C:25:4A:53:63:2F:67 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584BBF4BF07446E7DD20B8BB21C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft Manifest number: 010D0C9F43285845292D99C252463B75123B50DC Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Fri 07 Nov 2025 11:00:00 +0000 Files and hashes: 1: db3948d9-e295-422b-8439-1e057eb4673b.crl (hash: crOxJTGxXXxX7pS0KjJzgOvwG0yOq1wQHyQViYOLjG0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f0:74:46:e7:dd:20:b8:bb:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 7 11:00:00 2025 GMT Subject: CN=eac521a2-5a33-42b1-a7ce-411314c52d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:f6:84:b3:95:9f:bc:b6:e3:e0:02:84:c6: d8:0e:07:c4:41:92:5b:a4:cf:37:ca:3c:09:be:e3: 13:91:e5:a0:df:d6:e4:77:b5:d4:fc:97:e0:9b:7a: 85:7c:35:bd:6a:7c:86:30:2b:fb:88:97:36:de:d0: 9e:44:f1:42:72:5e:4c:82:0a:21:b3:c8:85:e2:80: 11:02:0b:a4:b7:66:6b:98:66:a8:77:97:d1:4f:52: 8b:5d:3c:d6:89:01:82:dc:cf:4a:16:e7:8f:96:92: 37:16:33:c1:68:ca:9c:82:b5:e7:ca:e9:08:6d:67: d0:41:e9:c8:da:97:f3:90:e3:f3:ee:5b:7e:da:5c: a3:1d:fc:b1:f0:de:f6:22:cb:2d:ac:17:da:3d:01: 05:31:73:fa:57:9b:a4:9d:72:89:bf:63:f8:59:ac: e7:0b:79:de:91:a7:4d:75:92:f1:09:f2:05:a1:b0: 90:c4:fd:b1:86:26:5d:78:cf:04:c8:5a:d0:69:af: 84:0c:ad:85:ae:37:6a:8f:b0:bc:a4:17:15:9f:a9: d6:6f:3e:d2:0f:ec:9e:51:d5:c5:43:c1:a8:f9:86: d6:82:cd:50:15:b2:ca:d7:6a:fd:f0:f8:d6:9f:03: a4:1b:22:ee:d8:7f:9c:38:82:d1:bb:33:4e:61:7a: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:25:88:99:58:E5:D7:87:38:CA:18:B8:6C:25:4A:53:63:2F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:00:c3:2d:36:a0:f7:91:6e:91:01:e3:0f:d5:3f:51:dd: a7:14:55:9c:97:56:08:09:03:72:60:c4:5d:66:ca:1b:b5:7b: 9d:08:85:70:6c:dc:5c:34:fb:24:37:dc:a3:37:41:f3:4e:3d: 7f:d2:e6:16:2e:00:e5:b5:6f:71:0b:d2:76:e7:e7:9c:81:6b: e4:fb:36:b6:88:38:f1:50:2b:f1:78:d4:88:c0:5f:10:f4:66: 7c:1c:1f:fd:09:f7:55:94:8b:a1:5b:fe:65:58:77:b6:06:a4: 0a:3e:85:44:1b:e4:75:8c:2b:92:17:71:0d:bc:08:4c:08:bf: 3b:61:0b:a9:f9:d4:ba:63:19:d9:26:6f:21:bc:9c:bb:a3:b8: 94:aa:31:7b:30:e6:b9:7a:f1:1a:01:57:9b:66:3c:b3:49:74: a8:90:2e:27:06:2f:37:f5:43:b1:48:b1:4e:0a:b2:d1:bf:9e: e1:aa:de:e8:dd:3d:1e:d2:b7:5a:9c:46:2e:e0:c6:22:c2:37: 1f:58:e7:4b:de:08:a4:20:b4:51:81:67:f1:8d:9e:d3:4f:2a: 30:e4:f4:f0:9d:7c:66:16:3a:2f:36:da:ab:e7:ec:23:03:d4: db:c3:3f:75:c7:df:7f:49:c4:07:db:17:99:fd:32:ae:52:3a: 3b:47:58:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/B0RufdILi7IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNzExMDAwMFowLzEtMCsGA1UEAxMk ZWFjNTIxYTItNWEzMy00MmIxLWE3Y2UtNDExMzE0YzUyZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4H2hLOVn7y24+AChMbYDgfEQZJbpM83yjwJ vuMTkeWg39bkd7XU/Jfgm3qFfDW9anyGMCv7iJc23tCeRPFCcl5Mggohs8iF4oAR Agukt2ZrmGaod5fRT1KLXTzWiQGC3M9KFuePlpI3FjPBaMqcgrXnyukIbWfQQenI 2pfzkOPz7lt+2lyjHfyx8N72IsstrBfaPQEFMXP6V5uknXKJv2P4WaznC3nekadN dZLxCfIFobCQxP2xhiZdeM8EyFrQaa+EDK2Frjdqj7C8pBcVn6nWbz7SD+yeUdXF Q8Go+YbWgs1QFbLK12r98PjWnwOkGyLu2H+cOILRuzNOYXqP4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOO7JYiZWOXXhzjKGLhsJUpTYy9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZGIzOTQ4ZDktZTI5NS00 MjJiLTg0MzktMWUwNTdlYjQ2NzNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJWgDDLTag95FukQHjD9U/ Ud2nFFWcl1YICQNyYMRdZsobtXudCIVwbNxcNPskN9yjN0HzTj1/0uYWLgDltW9x C9J25+ecgWvk+za2iDjxUCvxeNSIwF8Q9GZ8HB/9CfdVlIuhW/5lWHe2BqQKPoVE G+R1jCuSF3ENvAhMCL87YQup+dS6YxnZJm8hvJy7o7iUqjF7MOa5evEaAVebZjyz SXSokC4nBi839UOxSLFOCrLRv57hqt7o3T0e0rdanEYu4MYiwjcfWOdL3gikILRR gWfxjZ7TTyow5PTwnXxmFjovNtqr5+wjA9Tbwz91x99/ScQH2xeZ/TKuUjo7R1jD -----END CERTIFICATE-----Generated at Wed Nov 5 10:51:07 2025 by rpki-client