$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft File: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft (raw, json) Hash identifier: Uj8I9Y/H2t8caTW5ewiX4Q0Wjn3nig6lWPpj4cF7rZs= Subject key identifier: DF:0B:9D:53:BF:F8:13:8B:8C:14:6B:F4:85:1E:6C:79:8E:7A:43:F4 Authority key identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Certificate issuer: /CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Certificate serial: 010D0C9F4328584BBF887C83744F366211E96B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft Manifest number: 010D0C9F4328584073A854DB5F74B2A9424A768B Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl (hash: 9gqic2cE1WW/3HLFnKBHNNq8sAt84PQ3uI1LvkxRnLI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7c:83:74:4f:36:62:11:e9:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=211eacbe-49b4-444a-a3f8-a3c25589a875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:75:13:d9:e8:ca:0d:1c:6a:a6:12:2b:de: d4:c7:56:8b:fd:8a:ad:4e:be:6b:43:11:4f:01:2f: ce:0c:11:82:c3:06:ae:89:2a:64:0d:3c:06:a6:e4: 10:b2:f7:57:25:45:28:59:b9:7e:c8:e2:c8:b8:c6: 85:01:8c:d2:b7:d6:4b:4b:62:3b:7a:ee:1e:e9:a1: 12:13:a6:f0:ac:bd:da:72:22:7b:99:38:bd:42:c8: 42:57:77:74:7b:04:b6:2c:cf:de:ac:dd:a5:53:08: b1:be:bf:bf:19:c3:71:58:4b:96:e0:9e:58:a4:00: 4c:df:c5:fe:da:a6:ee:e7:c0:6f:d3:b2:08:c2:78: e4:6b:74:b2:24:82:ca:1f:f0:c7:c9:6e:f0:5e:68: b3:3b:72:35:bd:0f:8c:a8:1f:cc:30:5b:8f:23:94: 8d:eb:2a:59:7a:01:0c:6d:af:f3:41:99:24:fc:20: d3:ea:3f:bb:be:85:51:eb:cf:09:5f:68:37:39:a8: 0d:c3:f1:95:c4:67:01:b3:15:e6:ee:9e:6f:23:1a: 44:55:99:95:fb:e8:e9:3a:f7:bd:c5:8e:c2:60:8e: 63:ed:f8:a9:62:0c:78:08:95:96:03:2b:60:37:ea: dc:6f:50:e7:22:e2:25:d4:6c:19:e7:1d:0d:82:ce: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:9D:53:BF:F8:13:8B:8C:14:6B:F4:85:1E:6C:79:8E:7A:43:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl X509v3 Authority Key Identifier: keyid:C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:bf:1e:53:72:e8:1c:6f:a3:05:04:26:86:90:eb:f4:bd: 8b:ed:ad:f1:9f:7d:40:42:08:a0:59:42:b3:e3:71:fd:35:b3: 5b:cc:90:cb:ca:10:3c:c0:34:08:6b:a0:6c:aa:74:b5:b2:d2: 4a:87:d5:dd:68:8d:cc:2f:f4:91:bf:5f:5b:ca:3f:63:b8:fe: 31:e6:b7:a1:c9:59:c2:ca:95:9c:4f:ab:dc:1e:5c:2a:16:e0: 34:b7:2a:92:a1:69:c3:e1:c4:1b:94:c5:7c:27:33:27:4d:f0: b7:03:52:af:19:30:57:c1:10:ba:88:39:fe:0c:3a:63:c2:99: 23:44:7e:ef:82:88:3d:2d:fb:2d:5a:18:d5:dd:b2:50:d6:31: 0f:ae:6c:cf:84:cd:8a:a8:0b:97:c6:c3:12:c4:1a:0f:9d:a0: 31:d0:13:b5:1e:36:97:c6:5e:7d:d6:ef:62:81:cb:e3:2b:10: 5c:b1:a9:1a:7a:fb:61:f7:3d:99:ce:f3:e0:5e:a6:3e:0e:04: b3:35:99:81:7d:c5:0c:56:c9:ed:7d:3a:a8:0c:6c:36:85:da: 00:4c:18:f7:29:48:8c:7a:b8:3c:3f:c0:dc:d4:93:ee:73:d8: 9f:a7:88:62:95:17:c6:0b:9c:90:2d:b9:85:62:03:0a:07:2f: 38:be:02:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iHyDdE82YhHpa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNkMWVkZWMtYzM4NS00OWE4LTgyMmYtZDRkY2JlNWUw ZTRkMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk MjExZWFjYmUtNDliNC00NDRhLWEzZjgtYTNjMjU1ODlhODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/B1E9noyg0caqYSK97Ux1aL/YqtTr5rQxFP AS/ODBGCwwauiSpkDTwGpuQQsvdXJUUoWbl+yOLIuMaFAYzSt9ZLS2I7eu4e6aES E6bwrL3aciJ7mTi9QshCV3d0ewS2LM/erN2lUwixvr+/GcNxWEuW4J5YpABM38X+ 2qbu58Bv07IIwnjka3SyJILKH/DHyW7wXmizO3I1vQ+MqB/MMFuPI5SN6ypZegEM ba/zQZkk/CDT6j+7voVR688JX2g3OagNw/GVxGcBsxXm7p5vIxpEVZmV++jpOve9 xY7CYI5j7fipYgx4CJWWAytgN+rcb1DnIuIl1GwZ5x0Ngs4fGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN8LnVO/+BOLjBRr9IUebHmOekP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Qx ZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1ZTBlNGQvZGNkMWVkZWMtYzM4NS00 OWE4LTgyMmYtZDRkY2JlNWUwZTRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNkMWVkZWMtYzM4NS00OWE4LTgy MmYtZDRkY2JlNWUwZTRkL2RjZDFlZGVjLWMzODUtNDlhOC04MjJmLWQ0ZGNiZTVl MGU0ZC5jcmwwHwYDVR0jBBgwFoAUwAz0vQZvXQXZZqbcKLmsvL2rkpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRj YmU1ZTBlNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0lb8eU3LoHG+jBQQmhpDr 9L2L7a3xn31AQgigWUKz43H9NbNbzJDLyhA8wDQIa6BsqnS1stJKh9XdaI3ML/SR v19byj9juP4x5rehyVnCypWcT6vcHlwqFuA0tyqSoWnD4cQblMV8JzMnTfC3A1Kv GTBXwRC6iDn+DDpjwpkjRH7vgog9LfstWhjV3bJQ1jEPrmzPhM2KqAuXxsMSxBoP naAx0BO1HjaXxl591u9igcvjKxBcsakaevth9z2ZzvPgXqY+DgSzNZmBfcUMVsnt fTqoDGw2hdoATBj3KUiMerg8P8Dc1JPuc9ifp4hilRfGC5yQLbmFYgMKBy84vgLD -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:14 2025 by rpki-client