$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.mft File: 3c895654-45e3-442b-8573-48372885f407.mft (raw, json) Hash identifier: L8OmrA1nYBxGc6BCoHNUAQ5EGD6OxQIxHebqfFQrd3U= Subject key identifier: BB:D4:04:6D:6A:B2:0C:F4:DC:2D:75:85:1A:F5:0C:78:92:8E:71:09 Authority key identifier: F6:81:4F:60:04:74:10:31:47:81:6E:5F:B8:76:C6:6A:EF:02:60:C8 Certificate issuer: /CN=3c895654-45e3-442b-8573-48372885f407 Certificate serial: 010D0C9F4328584BBF887CE4743764A10D9FE320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.mft Manifest number: 010D0C9F43285843B072F2A73890EBB5852A4663 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 3c895654-45e3-442b-8573-48372885f407.crl (hash: knU95dc1lfF+7k944+Q13Ql0g7YeehUANZoCbTcsMp4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7c:e4:74:37:64:a1:0d:9f:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c895654-45e3-442b-8573-48372885f407 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=7f17032b-1a89-4320-a874-69e8a5ffc775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:48:f3:95:dc:fb:ed:b9:6f:4b:b0:ba:2b: c2:36:7b:68:de:04:34:dd:13:86:ff:aa:9f:19:f6: d0:31:81:b7:50:66:b3:4d:e8:0c:d6:f3:a4:9d:89: 20:1e:14:2c:3f:97:45:c0:7b:fb:32:81:8f:17:7c: 85:5c:ea:0c:68:7c:49:ef:45:4a:5f:14:c6:9a:09: c1:51:16:55:92:4a:8b:8e:42:d9:a4:e3:6a:7e:01: bf:5e:ef:0f:ea:ac:53:5e:07:ed:26:86:3e:b3:a7: 6f:f3:ca:35:f8:10:b9:2d:95:ef:5e:81:93:ea:a0: e0:99:c5:9a:df:73:1b:85:b7:8e:15:38:a1:22:c6: 15:b5:a8:96:13:1b:20:08:f6:af:fc:e5:43:fa:60: 83:e3:ea:ee:02:9e:58:ab:a8:ab:3a:a4:70:7e:92: ac:aa:dc:9e:8c:11:44:ed:28:16:da:cd:87:98:d4: 41:17:4b:bb:df:dc:35:5e:bc:43:51:d0:f6:0a:ce: da:35:03:1c:2e:22:07:aa:0f:2d:9a:be:2b:06:77: 2d:10:e6:41:2e:a0:bd:e4:55:8f:4a:c8:02:0f:07: 3a:c4:d0:d0:f4:ff:57:38:65:12:af:04:37:ac:1d: bc:54:b9:66:ba:2e:8b:d9:70:60:4a:ee:f8:4a:97: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:04:6D:6A:B2:0C:F4:DC:2D:75:85:1A:F5:0C:78:92:8E:71:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407/3c895654-45e3-442b-8573-48372885f407.crl X509v3 Authority Key Identifier: keyid:F6:81:4F:60:04:74:10:31:47:81:6E:5F:B8:76:C6:6A:EF:02:60:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c895654-45e3-442b-8573-48372885f407.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:17:3c:be:02:0e:b9:5f:5f:62:8c:a2:fa:f6:06:f9:6d:96: e3:58:fa:f6:3f:7c:81:9b:aa:01:30:4a:57:df:c9:b7:ac:9b: ef:e8:c6:a2:69:83:15:78:49:68:28:4e:46:58:4d:4e:90:61: b5:7f:a8:c5:fe:68:2d:c5:38:70:d3:02:31:54:0b:b9:8a:40: a9:36:e4:e1:93:cc:71:28:73:09:20:c2:06:5e:a7:30:f1:de: 7b:cf:f9:d8:e3:24:1d:a4:bb:7b:00:7d:92:76:02:bf:79:9c: fc:cd:25:93:60:32:5d:b3:f8:32:90:2d:f0:28:7d:ab:9e:5c: 1f:7d:27:c2:70:99:3b:45:13:66:28:bd:44:8c:fd:74:6a:a0: 43:e4:1c:8f:7f:50:12:81:1e:8e:5e:3d:0a:5e:12:37:07:9f: 33:86:6b:2c:01:17:a6:77:b7:6f:2e:53:39:70:18:db:f0:53: 03:72:c6:e3:68:cd:1e:aa:0c:d2:74:5f:17:f7:02:3b:46:94: 0e:b3:bc:cb:83:1c:6b:51:38:45:56:91:fd:f0:d7:d6:bd:e8: f0:4a:6b:eb:cf:82:83:94:6e:73:17:9b:2c:ee:2e:5e:0c:fc: fe:da:08:e8:d2:2a:04:f3:0e:ff:13:c5:94:dd:b1:35:ce:ee: db:75:a9:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iHzkdDdkoQ2f4yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4OTU2NTQtNDVlMy00NDJiLTg1NzMtNDgzNzI4ODVm NDA3MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk N2YxNzAzMmItMWE4OS00MzIwLWE4NzQtNjllOGE1ZmZjNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwBI85Xc++25b0uwuivCNnto3gQ03ROG/6qf GfbQMYG3UGazTegM1vOknYkgHhQsP5dFwHv7MoGPF3yFXOoMaHxJ70VKXxTGmgnB URZVkkqLjkLZpONqfgG/Xu8P6qxTXgftJoY+s6dv88o1+BC5LZXvXoGT6qDgmcWa 33MbhbeOFTihIsYVtaiWExsgCPav/OVD+mCD4+ruAp5Yq6irOqRwfpKsqtyejBFE 7SgW2s2HmNRBF0u739w1XrxDUdD2Cs7aNQMcLiIHqg8tmr4rBnctEOZBLqC95FWP SsgCDwc6xNDQ9P9XOGUSrwQ3rB28VLlmui6L2XBgSu74SpcP5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLvUBG1qsgz03C11hRr1DHiSjnEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzg5 NTY1NC00NWUzLTQ0MmItODU3My00ODM3Mjg4NWY0MDcvM2M4OTU2NTQtNDVlMy00 NDJiLTg1NzMtNDgzNzI4ODVmNDA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M4OTU2NTQtNDVlMy00NDJiLTg1 NzMtNDgzNzI4ODVmNDA3LzNjODk1NjU0LTQ1ZTMtNDQyYi04NTczLTQ4MzcyODg1 ZjQwNy5jcmwwHwYDVR0jBBgwFoAU9oFPYAR0EDFHgW5fuHbGau8CYMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzg5NTY1NC00NWUzLTQ0MmItODU3My00ODM3 Mjg4NWY0MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUFzy+Ag65X19ijKL69gb5 bZbjWPr2P3yBm6oBMEpX38m3rJvv6MaiaYMVeEloKE5GWE1OkGG1f6jF/mgtxThw 0wIxVAu5ikCpNuThk8xxKHMJIMIGXqcw8d57z/nY4yQdpLt7AH2SdgK/eZz8zSWT YDJds/gykC3wKH2rnlwffSfCcJk7RRNmKL1EjP10aqBD5ByPf1ASgR6OXj0KXhI3 B58zhmssARemd7dvLlM5cBjb8FMDcsbjaM0eqgzSdF8X9wI7RpQOs7zLgxxrUThF VpH98NfWvejwSmvrz4KDlG5zF5ss7i5eDPz+2gjo0ioE8w7/E8WU3bE1zu7bdalp -----END CERTIFICATE-----Generated at Tue Nov 4 21:51:14 2025 by rpki-client