$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft File: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft (raw, json) Hash identifier: konEik5Kxi4nmABB81Q57aR+YgGrwEACWPP1Iom1G98= Subject key identifier: 58:D3:5C:A7:DB:BE:7F:AD:77:09:09:53:A4:F4:B1:3F:A0:73:AC:04 Authority key identifier: 37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 Certificate issuer: /CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Certificate serial: 010D0C9F4328584BBFE0DABECC7A991ACE1DAE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft Manifest number: 010D0C9F4328584073A81AFCD522FA53D685A10C Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl (hash: +jLltk28/dLNlgIofo6G9XNCn3pGVyauqhnu1vv5/p4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:da:be:cc:7a:99:1a:ce:1d:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=1fcaf703-3986-46a3-aef7-7776b3961e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:d6:91:01:81:ae:2c:64:aa:3c:c4:44:bd: 2a:89:14:0c:34:f9:2f:de:e2:c7:85:5e:19:1f:f2: fa:77:b2:67:ea:8f:0f:a4:3f:d7:6d:85:5f:27:f1: 89:63:2c:78:42:07:ee:bd:27:cf:59:3c:67:54:56: a2:b0:83:51:80:9a:eb:20:1e:d8:46:f0:14:62:26: d7:58:04:21:45:03:a5:eb:e5:b0:b8:3e:57:89:e9: f4:38:0d:64:17:9f:12:c2:cc:0e:3b:44:09:0c:aa: 4d:87:a7:63:e4:7d:0d:68:24:f9:58:b3:02:d8:f4: e7:2f:c2:b9:ab:86:59:04:f2:20:b8:b9:f2:59:d1: 14:2d:c8:42:9e:ce:61:9f:8d:b2:c9:c7:37:82:16: 2c:2e:94:2e:16:fe:5e:97:25:11:e4:90:58:96:2c: 80:f0:5a:8b:5c:2f:88:5e:64:62:75:c1:b9:a8:b0: a7:16:de:1e:80:81:7f:61:c1:ca:8d:16:10:05:c3: 10:95:cd:e4:10:22:4c:dd:b5:f1:da:95:36:8d:c0: d7:7c:09:b7:f4:d8:7f:62:85:f3:d6:76:c7:50:8b: e3:02:f3:64:bb:83:74:db:ac:30:c4:fc:a2:67:36: 41:56:22:7f:22:d6:7f:38:ab:d6:e9:33:6f:66:b0: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D3:5C:A7:DB:BE:7F:AD:77:09:09:53:A4:F4:B1:3F:A0:73:AC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl X509v3 Authority Key Identifier: keyid:37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e7:d6:86:d2:06:63:e8:9a:86:9b:f0:2c:7d:da:e2:18:34: 07:de:29:78:e7:83:a1:b9:d0:53:b0:1c:ee:57:ca:c0:a9:3e: dc:bb:49:80:08:f3:8d:29:61:f0:1a:78:27:87:46:dc:a7:e7: 30:af:5c:ab:e7:d7:5d:0e:42:c2:89:74:ed:54:41:e0:a2:9c: b9:8c:d3:1f:4a:77:05:6c:c1:83:8e:75:17:53:8a:b5:b2:8f: c1:54:3d:16:2e:d3:86:b4:9b:d8:20:e1:08:5f:26:ed:81:f9: d5:4c:e7:e2:bc:79:05:53:63:18:b2:d9:45:ec:40:aa:f0:6d: 20:ca:01:0c:a0:3a:8d:55:5c:59:6f:cc:5f:94:14:f6:e1:12: 7d:e3:27:1c:35:b4:b8:c7:5f:ad:6f:9c:c4:15:1b:93:b3:37: 29:37:00:03:a4:68:2d:da:ad:8d:c8:a9:f3:dc:e8:08:23:33: a5:3c:45:36:c1:20:67:c7:8a:95:72:e6:fe:6c:84:a8:23:2e: a1:49:1a:3a:6a:d9:f7:74:03:b4:04:64:a5:30:13:03:bc:0e: 43:21:15:50:84:b8:bc:35:73:67:75:30:88:1a:13:fb:60:79: c1:37:e4:ac:d9:98:55:ac:25:6a:58:12:ff:ba:59:56:24:f9: 4b:7c:9c:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nq+zHqZGs4droAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEwMTI4YjEtZTFlZS00M2Y1LWIyOGMtMTQ3MjM4ZmRi ZjFmMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk MWZjYWY3MDMtMzk4Ni00NmEzLWFlZjctNzc3NmIzOTYxZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v/WkQGBrixkqjzERL0qiRQMNPkv3uLHhV4Z H/L6d7Jn6o8PpD/XbYVfJ/GJYyx4QgfuvSfPWTxnVFaisINRgJrrIB7YRvAUYibX WAQhRQOl6+WwuD5Xien0OA1kF58SwswOO0QJDKpNh6dj5H0NaCT5WLMC2PTnL8K5 q4ZZBPIguLnyWdEULchCns5hn42yycc3ghYsLpQuFv5elyUR5JBYliyA8FqLXC+I XmRidcG5qLCnFt4egIF/YcHKjRYQBcMQlc3kECJM3bXx2pU2jcDXfAm39Nh/YoXz 1nbHUIvjAvNku4N026wwxPyiZzZBViJ/ItZ/OKvW6TNvZrDalQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFjTXKfbvn+tdwkJU6T0sT+gc6wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAx MjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcyMzhmZGJmMWYvMGEwMTI4YjEtZTFlZS00 M2Y1LWIyOGMtMTQ3MjM4ZmRiZjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGEwMTI4YjEtZTFlZS00M2Y1LWIy OGMtMTQ3MjM4ZmRiZjFmLzBhMDEyOGIxLWUxZWUtNDNmNS1iMjhjLTE0NzIzOGZk YmYxZi5jcmwwHwYDVR0jBBgwFoAUN1jIJ9+mWGi07u8bGasTNY9yHxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAxMjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcy MzhmZGJmMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC359aG0gZj6JqGm/Asfdri GDQH3il454OhudBTsBzuV8rAqT7cu0mACPONKWHwGngnh0bcp+cwr1yr59ddDkLC iXTtVEHgopy5jNMfSncFbMGDjnUXU4q1so/BVD0WLtOGtJvYIOEIXybtgfnVTOfi vHkFU2MYstlF7ECq8G0gygEMoDqNVVxZb8xflBT24RJ94yccNbS4x1+tb5zEFRuT szcpNwADpGgt2q2NyKnz3OgIIzOlPEU2wSBnx4qVcub+bISoIy6hSRo6atn3dAO0 BGSlMBMDvA5DIRVQhLi8NXNndTCIGhP7YHnBN+Ss2ZhVrCVqWBL/ullWJPlLfJxF -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:28 2025 by rpki-client