$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.mft File: c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.mft (raw, json) Hash identifier: d98/Lx6WI0vOFkyb0GaPeJnQfUK9tPO6jwrTLAuwqL0= Subject key identifier: 7B:B6:2A:C3:02:BE:37:95:DD:29:97:90:9E:5C:D1:5A:72:FE:3D:A1 Authority key identifier: F1:6C:7A:74:B2:AF:87:72:E8:8E:29:9F:E5:8F:8D:9E:A3:9F:20:AE Certificate issuer: /CN=c5b8f0e0-8b40-49f5-b3dd-1da068db2c34 Certificate serial: 010D0C9F4328584BBFE0D8F997D0CDAF94FD5074 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.mft Manifest number: 010D0C9F4328584073A81B18FBD2827A555B7F8C Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.crl (hash: wbBQ9pSazFxoGu/9EObTn6S2evTI8Y1PQdQeydEK2Q0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d8:f9:97:d0:cd:af:94:fd:50:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5b8f0e0-8b40-49f5-b3dd-1da068db2c34 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=5193c69b-b592-44c9-9a5c-1dab67d2f41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:14:2f:60:26:be:da:54:99:ef:a4:9e:6d: b3:62:ee:af:df:d8:7d:19:de:d0:19:fb:e7:68:87: e8:48:46:e7:af:ba:79:c3:37:c9:6f:8a:ed:66:45: e2:3d:a7:de:16:9c:60:02:81:a2:56:46:0f:02:80: 0c:6a:34:97:e7:19:df:e8:5e:c8:4d:8a:c1:61:19: d6:e7:f2:eb:98:0b:f0:36:81:fd:d0:f1:85:53:e9: d9:52:a5:3b:53:2c:08:3e:46:43:f2:af:83:4f:a4: 7f:b0:90:ee:0e:4e:63:71:e7:63:4a:6a:85:be:19: b7:29:84:d0:68:2d:4e:0e:34:d8:c7:b1:7b:85:53: da:ea:cc:dd:93:16:17:af:24:57:ed:cc:34:5d:7e: ec:c4:56:98:41:91:0d:a2:b0:31:a1:30:bf:a4:b8: ca:90:e8:d9:45:22:ac:51:bb:f1:bc:76:31:40:6b: 1c:c2:d7:a7:66:4f:08:5d:52:6a:3e:c0:b0:e8:e9: 88:2a:d5:92:fa:b1:f4:a2:ed:5a:5a:45:ef:53:ca: 60:16:16:e5:84:40:8d:17:4b:be:92:89:61:f8:04: c3:84:29:49:fb:e9:d9:a0:34:74:05:42:cb:c7:4a: 40:60:5c:2c:0d:87:b7:e2:b1:83:93:71:11:d9:58: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:2A:C3:02:BE:37:95:DD:29:97:90:9E:5C:D1:5A:72:FE:3D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.crl X509v3 Authority Key Identifier: keyid:F1:6C:7A:74:B2:AF:87:72:E8:8E:29:9F:E5:8F:8D:9E:A3:9F:20:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5b8f0e0-8b40-49f5-b3dd-1da068db2c34.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e6:9d:c2:68:e5:ba:b3:24:e4:2f:48:26:db:5f:ef:47:f2: 53:d5:09:2e:9d:ac:46:b9:25:3a:5a:ec:49:cb:05:5f:9b:b4: 71:ad:0f:81:b4:7a:62:e0:4d:57:f7:4b:ca:fc:ed:15:1a:67: 74:7b:af:40:f3:c2:64:8a:d3:d9:39:30:36:45:25:fc:a5:f6: 58:b3:43:6a:5e:60:41:9d:1a:6c:ad:0b:60:39:85:8f:ab:7a: 29:e2:ec:47:dc:2b:f0:d2:90:2b:7d:67:35:cb:a7:32:66:ab: 05:3a:b2:86:9b:d3:c4:5d:74:b1:62:af:c9:61:ce:be:b2:1d: f6:a2:92:37:72:bf:79:85:64:3e:48:7a:18:b9:88:d2:86:aa: f3:83:5b:4d:98:35:35:5b:ad:3a:fc:d1:aa:ce:4d:ad:a2:56: eb:44:2f:26:59:ed:05:3d:65:39:a7:df:80:4a:eb:e2:b9:f6: bb:b5:a8:f6:9f:7d:28:56:db:1e:47:c9:d4:05:07:bb:4d:9b: fa:2b:bb:5a:47:2d:b7:33:42:06:a3:01:36:97:bf:13:a7:32: 40:ea:2f:95:2d:c0:fb:e4:28:a8:ab:ca:be:cf:6c:dd:25:70: 5b:20:ec:49:fe:16:b8:c1:5b:bc:9d:f1:d1:c1:98:7f:a8:fc: 12:86:14:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nj5l9DNr5T9UHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzViOGYwZTAtOGI0MC00OWY1LWIzZGQtMWRhMDY4ZGIy YzM0MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NTE5M2M2OWItYjU5Mi00NGM5LTlhNWMtMWRhYjY3ZDJmNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgugUL2AmvtpUme+knm2zYu6v39h9Gd7QGfvn aIfoSEbnr7p5wzfJb4rtZkXiPafeFpxgAoGiVkYPAoAMajSX5xnf6F7ITYrBYRnW 5/LrmAvwNoH90PGFU+nZUqU7UywIPkZD8q+DT6R/sJDuDk5jcedjSmqFvhm3KYTQ aC1ODjTYx7F7hVPa6szdkxYXryRX7cw0XX7sxFaYQZENorAxoTC/pLjKkOjZRSKs UbvxvHYxQGscwtenZk8IXVJqPsCw6OmIKtWS+rH0ou1aWkXvU8pgFhblhECNF0u+ kolh+ATDhClJ++nZoDR0BULLx0pAYFwsDYe34rGDk3ER2ViMfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHu2KsMCvjeV3SmXkJ5c0Vpy/j2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNWI4 ZjBlMC04YjQwLTQ5ZjUtYjNkZC0xZGEwNjhkYjJjMzQvYzViOGYwZTAtOGI0MC00 OWY1LWIzZGQtMWRhMDY4ZGIyYzM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzViOGYwZTAtOGI0MC00OWY1LWIz ZGQtMWRhMDY4ZGIyYzM0L2M1YjhmMGUwLThiNDAtNDlmNS1iM2RkLTFkYTA2OGRi MmMzNC5jcmwwHwYDVR0jBBgwFoAU8Wx6dLKvh3Lojimf5Y+NnqOfIK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNWI4ZjBlMC04YjQwLTQ5ZjUtYjNkZC0xZGEw NjhkYjJjMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe5p3CaOW6syTkL0gm21/v R/JT1QkunaxGuSU6WuxJywVfm7RxrQ+BtHpi4E1X90vK/O0VGmd0e69A88JkitPZ OTA2RSX8pfZYs0NqXmBBnRpsrQtgOYWPq3op4uxH3Cvw0pArfWc1y6cyZqsFOrKG m9PEXXSxYq/JYc6+sh32opI3cr95hWQ+SHoYuYjShqrzg1tNmDU1W606/NGqzk2t olbrRC8mWe0FPWU5p9+ASuviufa7taj2n30oVtseR8nUBQe7TZv6K7taRy23M0IG owE2l78TpzJA6i+VLcD75Cioq8q+z2zdJXBbIOxJ/ha4wVu8nfHRwZh/qPwShhS+ -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:49 2025 by rpki-client