$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft File: cb309158-c6de-47be-ad39-450cc6e8cb6c.mft (raw, json) Hash identifier: MjrlIo1H4B8kTN69zz9u800AIs73m3fgl/qB93JAZlo= Subject key identifier: EE:82:41:5A:E8:DA:A2:6E:75:E5:F8:2C:49:84:DE:F4:66:B4:D8:2E Authority key identifier: 0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85 Certificate issuer: /CN=cb309158-c6de-47be-ad39-450cc6e8cb6c Certificate serial: 010D0C9F4328584BC01C68149FC434CF366B9200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft Manifest number: 010D0C9F43285849DFEEC7A877A70AA9D25A68AC Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: cb309158-c6de-47be-ad39-450cc6e8cb6c.crl (hash: h8GS7olqqyjDQNQXvknDA3OInOg1ZZ+9t1TxJBiB5ac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:68:14:9f:c4:34:cf:36:6b:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb309158-c6de-47be-ad39-450cc6e8cb6c Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=932a0ee9-0de2-4f26-b621-c410eca5a0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:86:40:fe:1e:d1:8d:e5:82:53:41:3f:d0: fd:7a:bf:2e:cf:bf:80:c8:36:ed:b9:70:06:7e:e8: 34:d6:b3:cb:4a:40:43:38:f1:a8:3d:6f:58:c3:e4: 25:c7:b2:e3:02:bc:b3:0a:28:e4:9a:0e:cd:e1:2c: 9e:ee:7e:80:7c:48:7c:17:86:06:9b:a7:86:89:a4: 38:9b:ea:dc:5f:c1:1e:01:f4:fd:14:2f:83:3d:05: 9a:70:1a:4e:b9:db:29:e7:a5:06:c6:d0:d7:7e:23: 12:3c:86:97:27:38:de:58:17:80:10:e4:8d:32:3d: 52:10:61:66:0b:88:b8:7d:c5:0f:34:72:1f:c9:1d: d1:32:0c:cd:e9:eb:70:ac:e1:da:18:07:dc:10:81: da:5e:fd:4c:50:82:aa:e6:1a:d7:ff:89:36:c8:96: 51:ff:77:6f:9a:2b:d1:10:c6:1a:11:3e:05:c4:77: 95:fd:22:88:20:c1:e0:48:f6:8d:5c:66:0f:86:5a: 56:e9:73:dd:e1:94:f3:39:37:e8:66:53:e6:59:ab: 7d:d7:05:ab:a1:d8:9a:c7:71:85:19:1e:5b:a9:15: 1f:9d:d1:fd:36:90:3b:0c:d6:51:f1:dd:f7:7e:85: d4:dd:e2:50:95:df:0a:6f:4a:31:3d:ed:b7:78:8a: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:41:5A:E8:DA:A2:6E:75:E5:F8:2C:49:84:DE:F4:66:B4:D8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl X509v3 Authority Key Identifier: keyid:0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cd:63:1c:48:8e:20:51:c2:c2:8d:cd:45:7c:40:d3:7d:c3: 6a:fc:63:89:af:18:4b:2f:9f:35:51:b3:66:e5:5e:cc:18:85: 57:ff:f0:d7:87:5c:00:83:1f:38:f9:d2:0f:e1:45:ba:e0:f4: aa:d9:75:13:60:e6:44:48:e6:5d:09:54:88:fe:f3:41:12:49: 6a:43:7a:7e:00:aa:1f:19:3f:17:d2:78:e5:32:9d:0a:be:52: 27:73:50:9d:94:09:fb:ab:d4:bc:f2:c8:6e:b0:3c:f8:53:5f: 17:69:80:64:6e:ad:da:cb:6b:db:d0:50:40:bd:5d:82:ca:fe: 52:f0:43:cf:75:7d:2e:be:f3:48:c0:4b:fa:5f:e6:e6:83:e6: 5e:e5:22:2b:81:5b:df:c9:90:fb:e3:b4:de:4a:a3:6a:7c:c8: fb:5a:bb:4f:4f:6b:cc:98:33:25:fe:8b:fb:9e:88:b8:42:fc: fb:0d:ac:e8:75:ca:02:55:9c:9e:55:af:5b:35:23:a5:7d:57: b0:80:61:e5:4d:61:84:83:b2:c4:53:d1:85:0e:ff:9a:7e:cb: 97:d0:38:ca:18:0e:89:36:f5:95:60:9d:b9:68:13:fa:05:ce: f6:0d:28:68:be:99:b6:e5:09:9e:3e:12:0b:9c:e4:d8:e8:29: c3:3e:22:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGgUn8Q0zzZrkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzMDkxNTgtYzZkZS00N2JlLWFkMzktNDUwY2M2ZThj YjZjMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk OTMyYTBlZTktMGRlMi00ZjI2LWI2MjEtYzQxMGVjYTVhMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6GQP4e0Y3lglNBP9D9er8uz7+AyDbtuXAG fug01rPLSkBDOPGoPW9Yw+Qlx7LjAryzCijkmg7N4Sye7n6AfEh8F4YGm6eGiaQ4 m+rcX8EeAfT9FC+DPQWacBpOudsp56UGxtDXfiMSPIaXJzjeWBeAEOSNMj1SEGFm C4i4fcUPNHIfyR3RMgzN6etwrOHaGAfcEIHaXv1MUIKq5hrX/4k2yJZR/3dvmivR EMYaET4FxHeV/SKIIMHgSPaNXGYPhlpW6XPd4ZTzOTfoZlPmWat91wWrodiax3GF GR5bqRUfndH9NpA7DNZR8d33foXU3eJQld8Kb0oxPe23eIrWYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6CQVro2qJudeX4LEmE3vRmtNguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jYjMw OTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBjYzZlOGNiNmMvY2IzMDkxNTgtYzZkZS00 N2JlLWFkMzktNDUwY2M2ZThjYjZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2IzMDkxNTgtYzZkZS00N2JlLWFk MzktNDUwY2M2ZThjYjZjL2NiMzA5MTU4LWM2ZGUtNDdiZS1hZDM5LTQ1MGNjNmU4 Y2I2Yy5jcmwwHwYDVR0jBBgwFoAUC0DS2HRhTh5zdXiMdwPD+9ALDIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jYjMwOTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBj YzZlOGNiNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTzWMcSI4gUcLCjc1FfEDT fcNq/GOJrxhLL581UbNm5V7MGIVX//DXh1wAgx84+dIP4UW64PSq2XUTYOZESOZd CVSI/vNBEklqQ3p+AKofGT8X0njlMp0KvlInc1CdlAn7q9S88shusDz4U18XaYBk bq3ay2vb0FBAvV2Cyv5S8EPPdX0uvvNIwEv6X+bmg+Ze5SIrgVvfyZD747TeSqNq fMj7WrtPT2vMmDMl/ov7noi4Qvz7DazodcoCVZyeVa9bNSOlfVewgGHlTWGEg7LE U9GFDv+afsuX0DjKGA6JNvWVYJ25aBP6Bc72DShovpm25QmePhILnOTY6CnDPiLa -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:19 2025 by rpki-client