$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft File: 5435538b-fc51-4bec-ae5c-304b1aaa155d.mft (raw, json) Hash identifier: ezyDThLPx/4Wk8Bio9aVThMv0G3u3FVpN1iYIXp8Af8= Subject key identifier: 4D:F9:D2:49:5A:F5:A7:CC:3D:DE:42:02:4A:2D:F4:52:E0:BD:93:41 Authority key identifier: 25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA Certificate issuer: /CN=5435538b-fc51-4bec-ae5c-304b1aaa155d Certificate serial: 010D0C9F4328584BBFE0D5FF72EE5367B5900280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft Manifest number: 010D0C9F43285843BED48F6BEC6F6A942C99341E Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 5435538b-fc51-4bec-ae5c-304b1aaa155d.crl (hash: PSserUs0jq+aAqDEkzo4A6OeFCHgDPVwbdL0C9SxPEA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:ff:72:ee:53:67:b5:90:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5435538b-fc51-4bec-ae5c-304b1aaa155d Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=595a8c15-8384-4da6-ba6b-9cd08dd14372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:21:ae:43:28:f3:9e:e1:4f:19:ba:49:4c: 73:1d:c3:b9:ce:a4:b3:00:da:01:bb:68:4d:a3:fd: b2:d1:09:a8:2b:43:b6:de:28:33:f6:e3:03:74:2b: 82:52:6f:b7:a2:e7:b1:b2:d4:c4:81:e5:ab:81:e9: 8e:96:d3:7a:27:66:c7:80:f4:83:de:9a:dd:96:c9: af:ca:f2:fa:eb:54:a7:c0:fe:a8:d8:7e:91:38:cc: 91:55:e7:b9:8d:73:8a:a4:bb:33:9e:e6:d4:ac:b9: cc:f5:7f:84:6f:27:52:79:83:05:ec:89:69:cb:e7: b6:54:11:e4:b7:33:44:5a:7f:48:29:de:bf:d8:28: 90:a2:6f:d6:d4:36:5a:f9:e2:52:c5:8c:91:80:03: 6e:e7:7e:34:b8:54:21:c4:95:52:96:4a:0d:2b:73: d8:b2:0f:ba:4e:9f:03:78:93:2f:ba:b2:03:d2:2c: 8d:1a:0b:81:d9:c7:e4:80:65:f0:55:83:3e:86:02: 75:48:30:7a:ad:3e:67:e0:71:ce:c3:24:a5:9a:5e: ba:73:cd:24:ae:0f:0f:10:c1:62:77:53:d7:fc:9b: d7:76:cc:01:6a:62:e0:05:c1:9e:28:22:9c:81:f0: 25:26:31:22:d1:c9:9a:51:26:50:d5:7b:a9:19:0a: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:D2:49:5A:F5:A7:CC:3D:DE:42:02:4A:2D:F4:52:E0:BD:93:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d/5435538b-fc51-4bec-ae5c-304b1aaa155d.crl X509v3 Authority Key Identifier: keyid:25:44:40:34:92:B6:70:84:02:62:7F:3A:77:3E:EF:50:C6:6C:93:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5435538b-fc51-4bec-ae5c-304b1aaa155d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:fc:e8:f7:e5:e8:b7:d4:27:71:d1:7f:21:7a:dc:eb:e9:53: 5d:b8:be:5f:80:c7:e2:49:63:a2:37:0b:08:99:50:f7:df:71: 21:10:7f:ad:85:ec:28:c7:56:a0:3c:ff:68:19:e3:18:3c:bf: 43:e4:2e:5a:27:60:ef:82:af:8e:bc:c9:94:17:81:79:47:7c: 28:8c:b7:3e:fe:2c:d8:6b:a8:ac:a1:5d:c0:65:41:23:f3:8e: 3b:0a:fa:43:52:ae:48:8d:c3:38:7b:df:04:cf:35:7f:9a:98: 05:7e:d6:d1:7d:fb:d8:10:25:fa:39:f0:70:e3:01:7c:48:78: 5f:9a:88:bd:50:72:34:35:cd:19:8f:c7:e9:65:2d:f2:35:39: 52:4c:12:75:cc:17:5c:de:a7:16:4d:7a:d1:ad:33:77:30:89: f5:33:09:f8:43:53:b2:bb:f8:40:07:ed:58:52:1d:cf:6b:c5: f3:fd:c9:2b:7f:2a:63:eb:3d:30:cc:38:3d:db:8e:5c:33:39: d0:52:26:be:e6:43:79:b4:73:b9:83:7f:26:69:c9:1b:f8:23: d9:45:46:02:c3:f9:e8:eb:ff:39:16:66:ba:c8:49:68:54:e7: ab:9d:c5:ec:b5:c7:96:1f:d2:19:59:77:41:19:a6:a0:36:c5: 6d:3b:88:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NX/cu5TZ7WQAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQzNTUzOGItZmM1MS00YmVjLWFlNWMtMzA0YjFhYWEx NTVkMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NTk1YThjMTUtODM4NC00ZGE2LWJhNmItOWNkMDhkZDE0MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCohrkMo857hTxm6SUxzHcO5zqSzANoBu2hN o/2y0QmoK0O23igz9uMDdCuCUm+3ouexstTEgeWrgemOltN6J2bHgPSD3prdlsmv yvL661SnwP6o2H6ROMyRVee5jXOKpLsznubUrLnM9X+EbydSeYMF7Ilpy+e2VBHk tzNEWn9IKd6/2CiQom/W1DZa+eJSxYyRgANu5340uFQhxJVSlkoNK3PYsg+6Tp8D eJMvurID0iyNGguB2cfkgGXwVYM+hgJ1SDB6rT5n4HHOwySlml66c80krg8PEMFi d1PX/JvXdswBamLgBcGeKCKcgfAlJjEi0cmaUSZQ1XupGQppvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE350kla9afMPd5CAkot9FLgvZNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NDM1 NTM4Yi1mYzUxLTRiZWMtYWU1Yy0zMDRiMWFhYTE1NWQvNTQzNTUzOGItZmM1MS00 YmVjLWFlNWMtMzA0YjFhYWExNTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTQzNTUzOGItZmM1MS00YmVjLWFl NWMtMzA0YjFhYWExNTVkLzU0MzU1MzhiLWZjNTEtNGJlYy1hZTVjLTMwNGIxYWFh MTU1ZC5jcmwwHwYDVR0jBBgwFoAUJURANJK2cIQCYn86dz7vUMZsk/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81NDM1NTM4Yi1mYzUxLTRiZWMtYWU1Yy0zMDRi MWFhYTE1NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDQ/Oj35ei31Cdx0X8hetzr 6VNduL5fgMfiSWOiNwsImVD333EhEH+thewox1agPP9oGeMYPL9D5C5aJ2Dvgq+O vMmUF4F5R3wojLc+/izYa6isoV3AZUEj8447CvpDUq5IjcM4e98EzzV/mpgFftbR ffvYECX6OfBw4wF8SHhfmoi9UHI0Nc0Zj8fpZS3yNTlSTBJ1zBdc3qcWTXrRrTN3 MIn1Mwn4Q1Oyu/hAB+1YUh3Pa8Xz/ckrfypj6z0wzDg9245cMznQUia+5kN5tHO5 g38mackb+CPZRUYCw/no6/85Fma6yEloVOerncXstceWH9IZWXdBGaagNsVtO4gJ -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:04 2025 by rpki-client