$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft File: 5171f9e2-3fed-4e38-b77a-52b343e616fe.mft (raw, json) Hash identifier: Vf1Jym260fUS2QC/+jC26T2mb97StUJ7OiVkwdQq3Is= Subject key identifier: DE:A7:20:3B:3D:FE:73:7B:07:42:AE:52:AA:9A:03:52:15:E0:5B:42 Authority key identifier: 0F:5C:6F:22:9D:60:3D:95:03:79:3E:FB:61:26:C9:AB:EC:AE:E5:19 Certificate issuer: /CN=5171f9e2-3fed-4e38-b77a-52b343e616fe Certificate serial: 010D0C9F4328584BC03A2DB80ED60374D33023C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft Manifest number: 010D0C9F4328584073A820D2DDD7AF36AA8AA48C Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 5171f9e2-3fed-4e38-b77a-52b343e616fe.crl (hash: 35cuNSTq1CmooEu59CSIwUSy1wCGIwgxZY3YZv03oEI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:b8:0e:d6:03:74:d3:30:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5171f9e2-3fed-4e38-b77a-52b343e616fe Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=d4ada74c-0b8c-4b33-a757-0cf95ea0db61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:79:be:34:a3:28:07:6f:3d:94:47:64:d1: c0:74:92:fb:54:c8:38:b0:1b:ff:fd:33:eb:a7:9b: 30:0d:90:f1:eb:4f:2b:c2:49:df:5a:dd:eb:00:56: c8:b3:6b:6a:96:71:1f:41:40:44:b0:c8:6c:98:94: 4b:f3:63:8a:8d:56:71:e2:0b:d1:9b:e2:95:33:79: 62:cb:8e:fa:1b:e1:2f:e8:db:2f:a0:85:d0:22:ed: 22:d5:ea:2b:e5:5a:93:d6:c7:90:1b:5c:ef:0a:9d: bd:98:e5:72:47:0e:f4:87:d0:5e:fc:b0:2d:32:16: 9e:e2:5c:db:13:11:11:eb:3f:b5:73:db:70:77:87: 36:2b:9b:9c:2c:cd:47:1d:02:07:0a:d6:fe:dd:65: c0:14:26:6f:77:d2:06:0d:42:2e:9e:53:5b:bd:19: d5:dc:11:0f:9b:94:df:22:99:c7:57:fc:54:8d:21: 74:df:87:f0:ac:62:7b:4b:ec:50:d2:43:f8:eb:a7: 34:4c:8e:03:40:a1:52:61:e3:c9:4c:b8:9b:0c:b8: c6:ec:9e:a2:0f:77:a4:e8:0d:44:5b:7c:cd:d3:5e: 67:70:e7:75:9b:bf:9d:5f:de:92:8c:5c:3d:f8:5b: 92:fa:32:96:cc:8b:e4:ad:73:e8:ee:6f:0d:4b:8d: 85:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:20:3B:3D:FE:73:7B:07:42:AE:52:AA:9A:03:52:15:E0:5B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe/5171f9e2-3fed-4e38-b77a-52b343e616fe.crl X509v3 Authority Key Identifier: keyid:0F:5C:6F:22:9D:60:3D:95:03:79:3E:FB:61:26:C9:AB:EC:AE:E5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5171f9e2-3fed-4e38-b77a-52b343e616fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9b:59:a1:60:79:5d:3b:32:ec:22:58:51:e4:5a:92:28:f4: 1b:a1:66:b4:31:4c:2a:49:17:6e:98:2b:c2:ae:37:62:f0:5f: c3:ac:f1:0a:39:2d:1f:e5:0c:b6:83:91:b7:83:df:52:02:a3: bb:92:d5:89:d4:72:6b:9a:b9:87:28:d8:16:26:19:96:de:84: e9:2e:9b:35:b6:0a:e4:27:df:74:09:77:59:71:84:66:72:66: 4c:9a:c6:06:21:06:88:c5:72:39:e8:89:d1:29:94:52:9f:79: a6:24:c2:b8:27:74:a8:8a:fe:67:f5:b5:b3:94:56:11:95:9c: 13:38:f5:a7:f0:f7:3a:3a:f9:fd:16:81:1d:d7:a1:c2:51:02: 1c:2f:85:43:dd:35:a8:f5:62:e3:02:4e:8e:0a:5c:c7:46:ff: 23:6c:71:09:67:85:3b:a0:d2:14:73:8b:34:39:3c:11:40:9c: c9:9e:9c:b2:af:d5:a8:5b:25:05:c8:2c:88:7a:d9:13:74:9d: 52:8d:49:6c:d0:e3:8d:41:13:48:7a:48:e4:71:2b:ec:7f:f2: be:59:a0:6a:5d:24:15:6f:93:9e:15:bd:63:94:0c:d0:73:20: 62:13:5f:fc:f6:97:0c:5b:6e:0f:81:6c:9b:e2:c9:0f:50:55: e5:7b:5a:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi24DtYDdNMwI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3MWY5ZTItM2ZlZC00ZTM4LWI3N2EtNTJiMzQzZTYx NmZlMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZDRhZGE3NGMtMGI4Yy00YjMzLWE3NTctMGNmOTVlYTBkYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDp5vjSjKAdvPZRHZNHAdJL7VMg4sBv//TPr p5swDZDx608rwknfWt3rAFbIs2tqlnEfQUBEsMhsmJRL82OKjVZx4gvRm+KVM3li y476G+Ev6NsvoIXQIu0i1eor5VqT1seQG1zvCp29mOVyRw70h9Be/LAtMhae4lzb ExER6z+1c9twd4c2K5ucLM1HHQIHCtb+3WXAFCZvd9IGDUIunlNbvRnV3BEPm5Tf IpnHV/xUjSF034fwrGJ7S+xQ0kP466c0TI4DQKFSYePJTLibDLjG7J6iD3ek6A1E W3zN015ncOd1m7+dX96SjFw9+FuS+jKWzIvkrXPo7m8NS42FSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN6nIDs9/nN7B0KuUqqaA1IV4FtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTcx ZjllMi0zZmVkLTRlMzgtYjc3YS01MmIzNDNlNjE2ZmUvNTE3MWY5ZTItM2ZlZC00 ZTM4LWI3N2EtNTJiMzQzZTYxNmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTE3MWY5ZTItM2ZlZC00ZTM4LWI3 N2EtNTJiMzQzZTYxNmZlLzUxNzFmOWUyLTNmZWQtNGUzOC1iNzdhLTUyYjM0M2U2 MTZmZS5jcmwwHwYDVR0jBBgwFoAUD1xvIp1gPZUDeT77YSbJq+yu5RkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTcxZjllMi0zZmVkLTRlMzgtYjc3YS01MmIz NDNlNjE2ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDm1mhYHldOzLsIlhR5FqS KPQboWa0MUwqSRdumCvCrjdi8F/DrPEKOS0f5Qy2g5G3g99SAqO7ktWJ1HJrmrmH KNgWJhmW3oTpLps1tgrkJ990CXdZcYRmcmZMmsYGIQaIxXI56InRKZRSn3mmJMK4 J3Soiv5n9bWzlFYRlZwTOPWn8Pc6Ovn9FoEd16HCUQIcL4VD3TWo9WLjAk6OClzH Rv8jbHEJZ4U7oNIUc4s0OTwRQJzJnpyyr9WoWyUFyCyIetkTdJ1SjUls0OONQRNI ekjkcSvsf/K+WaBqXSQVb5OeFb1jlAzQcyBiE1/89pcMW24PgWyb4skPUFXle1qg -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:03 2025 by rpki-client