$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft File: c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft (raw, json) Hash identifier: GnvLs0UUJ1RdsBnh3guaBo5K/PFxARl5WWckx4icUuo= Subject key identifier: D2:15:4A:9F:A8:A6:06:A0:E1:22:2B:51:0D:2D:19:0F:3B:EF:30:6E Authority key identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 Certificate issuer: /CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f Certificate serial: 010D0C9F4328584BC01C67050BDF65CEFCE03980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft Manifest number: 010D0C9F43285846DD7DCDF3977753D1A8E17540 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl (hash: bIWSeM2dR6FS51MZfcCNV0cT/aaHBPj2Q5wrTqG4GBA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:05:0b:df:65:ce:fc:e0:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=fed53401-5c85-4c26-8bcb-130abfa3e9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:ce:9d:2a:d4:98:45:13:6a:56:0b:ff:28: e1:ce:22:f3:75:cd:83:72:6d:dc:df:f7:bd:7e:55: d5:d3:81:75:e9:4b:16:56:19:a9:f3:8c:56:b2:00: 29:8d:95:65:c8:a3:26:1e:3d:a7:3d:e7:74:cd:00: 7a:58:1b:c0:07:37:93:d4:d9:e2:64:67:ac:c1:be: 87:95:80:f8:41:8e:72:35:2c:b7:8f:74:63:f3:cc: 0d:8c:ab:5c:17:0b:ad:fd:42:6f:49:03:ad:4a:44: fb:ee:7a:ee:e0:3f:18:de:89:b3:4c:a0:bd:58:f3: a3:3e:59:a4:43:f0:b9:fd:33:bc:ec:27:f0:52:f8: 85:80:41:47:9e:f0:63:cc:de:4f:5b:29:50:71:60: 9f:e1:50:48:65:f3:78:3f:bf:5d:d7:d3:58:3d:c0: b0:66:24:6f:ac:d5:af:8c:49:df:8d:8f:5a:c1:b7: d3:77:3a:5d:ad:be:d3:e7:83:40:2e:e3:ff:e0:92: 6a:1c:35:ae:a5:75:a0:b3:f2:20:ac:7f:83:be:c3: 2b:9e:00:68:cf:b3:07:18:f9:8e:f1:db:d1:52:25: 8d:fb:98:49:e8:3b:ad:c4:1f:ae:32:9d:10:89:77: e5:d5:e7:a3:04:83:22:45:43:45:8f:b7:b1:ab:bd: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:4A:9F:A8:A6:06:A0:E1:22:2B:51:0D:2D:19:0F:3B:EF:30:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl X509v3 Authority Key Identifier: keyid:72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5c:89:30:70:8b:c1:de:73:63:6f:aa:5d:7f:08:ca:76:99: cd:01:25:a1:4d:ae:9d:76:69:b9:df:ac:80:84:5d:75:c1:ad: f1:ef:dd:7f:9c:df:aa:c8:78:7b:94:ec:b1:29:a3:b6:ca:65: 83:38:69:7f:f7:ed:86:77:a4:01:23:7f:2c:43:b3:d6:45:7d: b7:26:93:07:e2:05:15:2f:74:39:ea:36:19:0e:8a:47:b9:b7: 7c:b4:0a:9d:8b:ea:05:98:6f:e7:20:4a:67:0a:bc:5e:f8:2c: 54:c9:63:55:57:30:0e:07:be:7f:dc:b4:2c:94:0b:95:9d:53: 54:c7:d7:ef:ac:0d:e7:a9:60:40:61:53:05:e1:6f:fe:95:d6: f0:69:ab:92:09:1b:a5:4f:5b:58:d9:33:50:45:69:a4:98:89: 2c:3e:cd:fe:26:8d:f5:85:6a:d7:5b:f9:8b:a1:0f:2c:46:5f: 34:01:75:93:87:65:a3:5e:d4:31:97:81:00:e4:55:50:06:b2: 1c:3a:36:70:39:3f:d0:c6:fa:fe:b3:5c:39:6c:20:97:3f:5d: 38:aa:af:a4:83:f3:8b:cc:dd:0e:55:a7:57:a6:18:fe:70:f1: e6:7d:b2:50:f2:48:2f:fe:62:bc:bd:57:e9:2c:ac:54:9d:85: eb:e2:91:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGcFC99lzvzgOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhZDRmMmYtODdjMy00MzZlLWIwZTUtMzUzMmUyMTA5 ZjlmMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZmVkNTM0MDEtNWM4NS00YzI2LThiY2ItMTMwYWJmYTNlOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMrOnSrUmEUTalYL/yjhziLzdc2Dcm3c3/e9 flXV04F16UsWVhmp84xWsgApjZVlyKMmHj2nPed0zQB6WBvABzeT1NniZGeswb6H lYD4QY5yNSy3j3Rj88wNjKtcFwut/UJvSQOtSkT77nru4D8Y3omzTKC9WPOjPlmk Q/C5/TO87CfwUviFgEFHnvBjzN5PWylQcWCf4VBIZfN4P79d19NYPcCwZiRvrNWv jEnfjY9awbfTdzpdrb7T54NALuP/4JJqHDWupXWgs/IgrH+DvsMrngBoz7MHGPmO 8dvRUiWN+5hJ6DutxB+uMp0QiXfl1eejBIMiRUNFj7exq70h5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIVSp+opgag4SIrUQ0tGQ877zBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Fk NGYyZi04N2MzLTQzNmUtYjBlNS0zNTMyZTIxMDlmOWYvYzNhZDRmMmYtODdjMy00 MzZlLWIwZTUtMzUzMmUyMTA5ZjlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhZDRmMmYtODdjMy00MzZlLWIw ZTUtMzUzMmUyMTA5ZjlmL2MzYWQ0ZjJmLTg3YzMtNDM2ZS1iMGU1LTM1MzJlMjEw OWY5Zi5jcmwwHwYDVR0jBBgwFoAUcr9/okkZ0BrT18YntdG5/c/a05kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2FkNGYyZi04N2MzLTQzNmUtYjBlNS0zNTMy ZTIxMDlmOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLXIkwcIvB3nNjb6pdfwjK dpnNASWhTa6ddmm536yAhF11wa3x791/nN+qyHh7lOyxKaO2ymWDOGl/9+2Gd6QB I38sQ7PWRX23JpMH4gUVL3Q56jYZDopHubd8tAqdi+oFmG/nIEpnCrxe+CxUyWNV VzAOB75/3LQslAuVnVNUx9fvrA3nqWBAYVMF4W/+ldbwaauSCRulT1tY2TNQRWmk mIksPs3+Jo31hWrXW/mLoQ8sRl80AXWTh2WjXtQxl4EA5FVQBrIcOjZwOT/Qxvr+ s1w5bCCXP104qq+kg/OLzN0OVadXphj+cPHmfbJQ8kgv/mK8vVfpLKxUnYXr4pHS -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:20 2025 by rpki-client