$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft File: 525bd43e-79fc-4d46-b0a3-ea097485469b.mft (raw, json) Hash identifier: r/QwRBp5e/RoqvEXdsCJTGc5yH+O3rNhyR33e8ryrv0= Subject key identifier: C2:10:CD:BE:28:02:D0:CC:65:12:6C:52:69:CD:D5:93:3E:24:6E:57 Authority key identifier: 74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 Certificate issuer: /CN=525bd43e-79fc-4d46-b0a3-ea097485469b Certificate serial: 010D0C9F4328584BBFC311003BC8B2551CDC1740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft Manifest number: 010D0C9F43285848DBF8C580606BB5995800480C Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 525bd43e-79fc-4d46-b0a3-ea097485469b.crl (hash: wJGYoDiMjHs2emXsWUglgHUwBb7xVFYQNI4w3FHUtBI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:00:3b:c8:b2:55:1c:dc:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525bd43e-79fc-4d46-b0a3-ea097485469b Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=4acde75b-784d-48ca-8b11-9c7bab9b463d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:f8:2c:26:cc:48:44:b4:a1:33:e1:dd:61: 75:35:ae:01:8a:8a:ee:1b:ea:44:b9:ff:1a:ad:25: 16:8b:6e:2f:ae:33:3c:b9:d0:7c:31:b6:40:2d:c7: f9:6a:68:20:fc:dc:3c:b9:7f:71:3b:5e:92:36:2a: 86:0c:af:4c:1a:80:0f:2c:4d:ea:f9:ba:c1:f0:b5: c1:86:27:ea:df:af:96:7e:85:ef:ed:d4:74:74:ce: c0:12:bd:e8:14:f5:98:99:27:f5:36:f4:44:a3:a2: 1b:0d:e9:b0:a6:88:1b:d1:9d:82:41:f2:a0:81:bb: 2f:24:e4:0e:ed:50:23:6a:5b:0c:af:1a:a5:a8:30: 73:4e:39:e5:2e:05:38:91:d6:37:03:6e:bc:85:11: 14:94:54:6d:42:af:06:6e:fb:9b:a1:cf:31:c6:12: 54:1f:8c:6e:be:95:3a:9a:3a:f7:bd:17:87:6b:29: 2c:13:8d:f5:f4:45:90:49:e3:d2:06:20:97:ac:84: db:81:5a:84:ca:bc:95:d7:a8:2f:4a:5e:81:20:24: 9f:92:a2:e6:87:31:f6:87:51:60:af:39:2b:15:c0: 1a:26:ae:80:a7:af:20:6d:b9:9f:1e:de:99:55:3d: 37:71:3f:16:5e:03:55:dc:8d:5b:30:8e:5a:37:a2: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:CD:BE:28:02:D0:CC:65:12:6C:52:69:CD:D5:93:3E:24:6E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b/525bd43e-79fc-4d46-b0a3-ea097485469b.crl X509v3 Authority Key Identifier: keyid:74:B5:6B:AA:C5:D8:74:AD:2D:72:C5:EB:DF:A8:B6:83:82:0E:5F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/525bd43e-79fc-4d46-b0a3-ea097485469b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e2:10:72:43:06:33:d0:a2:84:8f:b0:e6:8f:af:c2:6b:bf: 17:58:b3:0c:11:72:30:71:33:2f:21:22:9a:7b:b7:df:1c:44: 4e:06:e7:0e:74:49:c3:be:64:5f:b8:5c:51:a5:d9:39:03:ff: 6a:6a:42:65:8e:ee:84:28:29:d2:16:fe:08:59:65:69:11:e1: fb:e4:89:9e:bc:ff:02:cb:11:e6:e7:cc:b1:65:31:12:05:c7: 00:e8:fc:96:ec:3e:a2:9a:93:fc:78:db:44:39:8b:61:dd:0d: 6c:71:56:10:66:bb:61:7d:13:14:f8:35:0b:2c:44:e0:70:10: 1e:ca:8c:13:23:11:63:bb:4f:09:ed:b3:47:2d:6b:ca:58:e0: f1:0f:ec:48:9a:f9:88:b7:4d:80:0a:7f:dd:09:a4:de:7a:a3: 25:39:47:2b:2f:ae:eb:9f:0d:e5:82:bb:3c:f2:a5:b5:be:16: 01:0a:da:b3:58:8c:bc:a9:64:18:3f:10:00:4d:16:0b:09:1d: 6a:f1:8a:8e:af:d2:7a:ce:0f:df:45:50:4c:38:d5:95:98:cb: 0e:39:0b:d5:0d:6c:8e:1c:9b:cb:f9:49:49:79:20:57:5d:c8: 3e:48:1c:f3:c6:53:e5:05:1d:5f:bd:86:70:41:79:e0:d0:df: 23:61:07:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxEAO8iyVRzcF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI1YmQ0M2UtNzlmYy00ZDQ2LWIwYTMtZWEwOTc0ODU0 NjliMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk NGFjZGU3NWItNzg0ZC00OGNhLThiMTEtOWM3YmFiOWI0NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIv4LCbMSES0oTPh3WF1Na4BioruG+pEuf8a rSUWi24vrjM8udB8MbZALcf5amgg/Nw8uX9xO16SNiqGDK9MGoAPLE3q+brB8LXB hifq36+WfoXv7dR0dM7AEr3oFPWYmSf1NvREo6IbDemwpogb0Z2CQfKggbsvJOQO 7VAjalsMrxqlqDBzTjnlLgU4kdY3A268hREUlFRtQq8Gbvuboc8xxhJUH4xuvpU6 mjr3vReHayksE4319EWQSePSBiCXrITbgVqEyryV16gvSl6BICSfkqLmhzH2h1Fg rzkrFcAaJq6Ap68gbbmfHt6ZVT03cT8WXgNV3I1bMI5aN6KRRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMIQzb4oAtDMZRJsUmnN1ZM+JG5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjVi ZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5NzQ4NTQ2OWIvNTI1YmQ0M2UtNzlmYy00 ZDQ2LWIwYTMtZWEwOTc0ODU0NjliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTI1YmQ0M2UtNzlmYy00ZDQ2LWIw YTMtZWEwOTc0ODU0NjliLzUyNWJkNDNlLTc5ZmMtNGQ0Ni1iMGEzLWVhMDk3NDg1 NDY5Yi5jcmwwHwYDVR0jBBgwFoAUdLVrqsXYdK0tcsXr36i2g4IOX6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjViZDQzZS03OWZjLTRkNDYtYjBhMy1lYTA5 NzQ4NTQ2OWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY4hByQwYz0KKEj7Dmj6/C a78XWLMMEXIwcTMvISKae7ffHEROBucOdEnDvmRfuFxRpdk5A/9qakJlju6EKCnS Fv4IWWVpEeH75ImevP8CyxHm58yxZTESBccA6PyW7D6impP8eNtEOYth3Q1scVYQ ZrthfRMU+DULLETgcBAeyowTIxFju08J7bNHLWvKWODxD+xImvmIt02ACn/dCaTe eqMlOUcrL67rnw3lgrs88qW1vhYBCtqzWIy8qWQYPxAATRYLCR1q8YqOr9J6zg/f RVBMONWVmMsOOQvVDWyOHJvL+UlJeSBXXcg+SBzzxlPlBR1fvYZwQXng0N8jYQdp -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:51 2025 by rpki-client