$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft File: d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft (raw, json) Hash identifier: vll19/vRsqipeXlatkLogWnmfTsNiwIAIbc5gcQkmCk= Subject key identifier: BA:E1:A3:23:36:B1:D1:36:0A:DE:A7:37:3B:26:55:E4:7D:D7:9A:5B Authority key identifier: AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6 Certificate issuer: /CN=d2acdbd8-f1ce-4bef-aafd-16a56d585345 Certificate serial: 010D0C9F4328584BC181C59A20602C50C7CA9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft Manifest number: 010D0C9F432858446A928B086A3AB16181E20D21 Signing time: Wed 05 Nov 2025 06:00:08 +0000 Manifest this update: Wed 05 Nov 2025 06:00:08 +0000 Manifest next update: Fri 07 Nov 2025 06:00:00 +0000 Files and hashes: 1: d2acdbd8-f1ce-4bef-aafd-16a56d585345.crl (hash: EfiMb3kBao3Ns9dKXT5WPZhY1zKkcMR9ReBgH8aKygw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:81:c5:9a:20:60:2c:50:c7:ca:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2acdbd8-f1ce-4bef-aafd-16a56d585345 Validity Not Before: Nov 5 06:00:08 2025 GMT Not After : Nov 7 06:00:00 2025 GMT Subject: CN=666ac95a-894d-40b1-90a8-5b388fad00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:a0:7f:54:78:c1:1a:80:72:d4:05:cc:82: 51:06:e2:e9:aa:f6:8e:16:f6:89:43:8b:58:b0:f1: bf:30:8b:4b:b7:32:f0:02:0b:d5:65:97:02:4a:0b: 81:59:c3:04:e7:d6:80:c3:a0:f5:a2:04:dd:52:18: 86:26:2e:bc:ac:12:81:df:79:d1:94:9a:a5:53:3f: bc:97:22:62:a3:ed:33:6b:3f:05:6c:4d:43:56:7b: 4d:25:a0:97:99:ac:f1:7c:0e:b7:28:43:68:53:2f: 0d:e1:bc:d5:a4:c3:dd:19:f8:0e:db:84:8f:4a:b6: 5b:d8:5a:ac:dd:09:fc:69:82:7f:12:d1:67:ff:1d: b9:4f:52:1a:46:07:46:13:f4:d6:f1:4d:fb:7e:6a: 4d:78:71:2c:3a:b7:77:45:9e:b1:79:12:bc:60:95: ee:31:de:c0:af:a2:ef:51:d9:7b:4c:3d:4f:57:d3: b2:4c:24:4b:65:8d:f3:e2:49:59:cf:80:04:36:14: 74:b8:5a:8e:5c:90:d6:cb:6c:46:4d:ca:89:30:69: d2:8a:ac:42:a0:c9:01:49:28:3f:73:ad:70:c1:d6: d0:8f:74:19:10:04:da:60:64:50:8d:0b:2c:fe:24: 49:57:96:f3:a2:f6:06:69:6a:8b:f0:0b:2f:f7:49: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:A3:23:36:B1:D1:36:0A:DE:A7:37:3B:26:55:E4:7D:D7:9A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.crl X509v3 Authority Key Identifier: keyid:AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:56:b8:66:b2:54:b3:9e:9b:bb:a0:51:5a:d2:05:a6:db: ce:54:c6:95:7e:36:7a:02:8f:fb:a7:e3:d6:cb:06:85:71:49: f4:9e:f4:6d:8b:4d:55:2c:b9:77:24:f1:ae:39:b3:9d:67:c5: a3:06:85:0c:22:2e:f4:37:f8:db:10:d3:70:0d:dc:5a:3a:9c: 71:31:31:1d:e6:f9:e6:32:93:aa:c1:da:76:c0:94:5a:21:55: bd:ef:5e:9e:4d:0a:2c:ba:d5:22:ef:10:8f:fc:c9:27:dc:7a: 2d:b2:62:03:ef:a3:88:44:a2:65:7b:5c:00:7c:7a:83:5b:8d: 8c:26:f8:9e:f7:02:b0:75:a4:63:9f:61:2f:2a:cf:a5:4f:45: 20:90:f4:dd:8a:09:d7:02:e2:b8:64:63:71:94:e5:b2:8d:c3: f8:fa:d8:6c:20:c0:84:d1:c9:1b:6b:a9:63:44:fa:54:96:da: ca:91:b2:e6:c8:9f:b2:41:05:b7:bf:5e:64:35:d0:b3:53:84: fd:b4:02:85:5b:41:27:0c:08:a5:d0:42:9a:3d:f9:11:12:a1: a3:00:8e:88:c6:4a:67:62:c2:ed:ee:c5:bc:b4:b7:20:c8:18: c0:89:44:1c:88:6d:51:e4:24:83:a5:4e:79:e5:69:50:22:1d: ca:79:db:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBgcWaIGAsUMfKm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJhY2RiZDgtZjFjZS00YmVmLWFhZmQtMTZhNTZkNTg1 MzQ1MB4XDTI1MTEwNTA2MDAwOFoXDTI1MTEwNzA2MDAwMFowLzEtMCsGA1UEAxMk NjY2YWM5NWEtODk0ZC00MGIxLTkwYTgtNWIzODhmYWQwMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ6gf1R4wRqActQFzIJRBuLpqvaOFvaJQ4tY sPG/MItLtzLwAgvVZZcCSguBWcME59aAw6D1ogTdUhiGJi68rBKB33nRlJqlUz+8 lyJio+0zaz8FbE1DVntNJaCXmazxfA63KENoUy8N4bzVpMPdGfgO24SPSrZb2Fqs 3Qn8aYJ/EtFn/x25T1IaRgdGE/TW8U37fmpNeHEsOrd3RZ6xeRK8YJXuMd7Ar6Lv Udl7TD1PV9OyTCRLZY3z4klZz4AENhR0uFqOXJDWy2xGTcqJMGnSiqxCoMkBSSg/ c61wwdbQj3QZEATaYGRQjQss/iRJV5bzovYGaWqL8Asv90kFqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLrhoyM2sdE2Ct6nNzsmVeR915pbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMmFj ZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1NmQ1ODUzNDUvZDJhY2RiZDgtZjFjZS00 YmVmLWFhZmQtMTZhNTZkNTg1MzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDJhY2RiZDgtZjFjZS00YmVmLWFh ZmQtMTZhNTZkNTg1MzQ1L2QyYWNkYmQ4LWYxY2UtNGJlZi1hYWZkLTE2YTU2ZDU4 NTM0NS5jcmwwHwYDVR0jBBgwFoAUrEYPjTfCFNFxBhrTRCBI1/drXdYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMmFjZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1 NmQ1ODUzNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgKla4ZrJUs56bu6BRWtIF ptvOVMaVfjZ6Ao/7p+PWywaFcUn0nvRti01VLLl3JPGuObOdZ8WjBoUMIi70N/jb ENNwDdxaOpxxMTEd5vnmMpOqwdp2wJRaIVW9716eTQosutUi7xCP/Mkn3HotsmID 76OIRKJle1wAfHqDW42MJvie9wKwdaRjn2EvKs+lT0UgkPTdignXAuK4ZGNxlOWy jcP4+thsIMCE0ckba6ljRPpUltrKkbLmyJ+yQQW3v15kNdCzU4T9tAKFW0EnDAil 0EKaPfkREqGjAI6IxkpnYsLt7sW8tLcgyBjAiUQciG1R5CSDpU555WlQIh3KedsO -----END CERTIFICATE-----Generated at Wed Nov 5 19:43:01 2025 by rpki-client