$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft File: d5eec909-6f75-45a2-a388-8fd21596aab7.mft (raw, json) Hash identifier: j3IenTXazp/eYqUwNOeeFmPo0syR+LbY0relT5TGfU4= Subject key identifier: 65:AF:85:B3:C7:1D:02:E9:34:E4:97:E4:35:84:61:2B:E8:02:4E:1D Authority key identifier: BA:C2:C8:54:2D:60:B9:7E:32:E9:99:55:4F:0D:12:8D:2A:C3:87:87 Certificate issuer: /CN=d5eec909-6f75-45a2-a388-8fd21596aab7 Certificate serial: 010D0C9F4328584BBFC30D591C1CFBA6CAE98CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft Manifest number: 010D0C9F432858492CCED797722199E4E8BE7BCC Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: d5eec909-6f75-45a2-a388-8fd21596aab7.crl (hash: 4JS6r2UIWNdVegd2qy4mAS8A+rZkYI1+f7bWnYBZSjA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0d:59:1c:1c:fb:a6:ca:e9:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5eec909-6f75-45a2-a388-8fd21596aab7 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=31af20f2-a50a-40d7-ad85-d9f6449650e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:37:ee:95:7a:ec:47:85:f0:e1:79:ae:68:e1: 19:c0:59:ae:6c:cc:56:54:65:26:f3:2b:50:06:63: 24:f9:b0:4d:22:d3:6c:35:4b:b9:ca:b1:de:44:d4: 13:74:35:36:de:c5:5d:de:44:91:73:a1:8f:22:69: cb:2c:f5:d1:4c:a7:8a:e1:11:3e:65:68:58:17:8f: 5b:2f:49:33:fa:c7:02:1d:d2:09:10:fc:aa:00:35: 00:47:c0:16:d1:f8:74:d8:1c:a4:2d:d6:b7:02:3a: d5:24:27:e0:63:85:c3:8a:1a:da:8d:3e:c5:bf:b4: 73:8e:9d:e7:e1:d7:20:b0:7d:0b:39:26:44:c4:5b: 29:d4:52:b1:9e:fd:4a:a7:20:a0:90:5d:2e:a9:71: 62:c1:55:4e:56:df:4b:e2:7d:07:c9:e0:22:fa:9c: 13:75:42:d8:4a:25:19:7c:dc:01:ed:15:c4:d0:a1: 86:62:58:9c:28:61:b6:09:58:40:ce:44:77:86:f4: 20:b3:bb:92:f1:a3:be:80:da:cf:11:56:85:75:2f: ae:13:58:ff:bd:bf:1b:d9:63:79:c4:32:ec:0d:21: 56:56:67:fa:8f:52:f8:19:ed:53:f6:e2:d9:73:cb: bd:37:d9:1e:61:b6:d9:c7:4b:09:9f:2f:14:10:ba: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:85:B3:C7:1D:02:E9:34:E4:97:E4:35:84:61:2B:E8:02:4E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7/d5eec909-6f75-45a2-a388-8fd21596aab7.crl X509v3 Authority Key Identifier: keyid:BA:C2:C8:54:2D:60:B9:7E:32:E9:99:55:4F:0D:12:8D:2A:C3:87:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d5eec909-6f75-45a2-a388-8fd21596aab7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:89:25:8d:8b:4e:c3:90:73:ba:f1:9d:2a:14:3a:c7:9a:74: 25:4b:e9:d9:22:f7:7d:1b:3d:c9:29:25:84:2a:30:b0:ac:d3: e8:63:15:92:81:0f:22:d8:fe:c5:50:9e:7b:85:47:3f:ae:46: c9:a9:01:97:43:90:74:15:23:2a:b0:34:5e:88:fb:0f:08:0f: 7a:83:48:76:6c:10:84:09:d5:42:70:62:83:c7:51:e2:6b:d1: b9:58:8b:67:6f:c2:df:98:16:73:f2:e9:db:d4:0b:31:3e:b0: 05:35:52:44:66:07:5a:f3:52:0b:dd:b9:45:3f:54:6b:56:77: c8:99:f4:31:d9:90:c0:14:d8:fe:f6:99:c8:3c:05:21:05:b0: f8:99:4c:2f:68:9b:fd:b6:f2:ae:a0:d8:97:5c:a5:52:a0:a3: 9f:4f:fb:af:28:bc:61:73:58:2f:f1:42:4e:8a:67:69:fe:03: ed:0b:09:55:6c:60:ca:c0:bf:db:d6:d7:4a:52:fa:24:0d:aa: a2:3d:1f:c9:2b:5c:09:bf:0d:48:ce:d6:2f:df:7d:bc:4e:28: 91:ee:5e:b2:b7:01:1a:7d:8e:ea:e4:b2:d0:2a:e7:fa:4b:2b: d8:79:e2:65:e7:a2:46:30:c0:7a:d4:80:ed:a4:ec:67:5b:a2: 95:94:be:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww1ZHBz7psrpjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlZWM5MDktNmY3NS00NWEyLWEzODgtOGZkMjE1OTZh YWI3MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk MzFhZjIwZjItYTUwYS00MGQ3LWFkODUtZDlmNjQ0OTY1MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTfulXrsR4Xw4XmuaOEZwFmubMxWVGUm8ytQ BmMk+bBNItNsNUu5yrHeRNQTdDU23sVd3kSRc6GPImnLLPXRTKeK4RE+ZWhYF49b L0kz+scCHdIJEPyqADUAR8AW0fh02BykLda3AjrVJCfgY4XDihrajT7Fv7Rzjp3n 4dcgsH0LOSZExFsp1FKxnv1KpyCgkF0uqXFiwVVOVt9L4n0HyeAi+pwTdULYSiUZ fNwB7RXE0KGGYlicKGG2CVhAzkR3hvQgs7uS8aO+gNrPEVaFdS+uE1j/vb8b2WN5 xDLsDSFWVmf6j1L4Ge1T9uLZc8u9N9keYbbZx0sJny8UELq68QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWvhbPHHQLpNOSX5DWEYSvoAk4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNWVl YzkwOS02Zjc1LTQ1YTItYTM4OC04ZmQyMTU5NmFhYjcvZDVlZWM5MDktNmY3NS00 NWEyLWEzODgtOGZkMjE1OTZhYWI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDVlZWM5MDktNmY3NS00NWEyLWEz ODgtOGZkMjE1OTZhYWI3L2Q1ZWVjOTA5LTZmNzUtNDVhMi1hMzg4LThmZDIxNTk2 YWFiNy5jcmwwHwYDVR0jBBgwFoAUusLIVC1guX4y6ZlVTw0SjSrDh4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNWVlYzkwOS02Zjc1LTQ1YTItYTM4OC04ZmQy MTU5NmFhYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmiSWNi07DkHO68Z0qFDrH mnQlS+nZIvd9Gz3JKSWEKjCwrNPoYxWSgQ8i2P7FUJ57hUc/rkbJqQGXQ5B0FSMq sDReiPsPCA96g0h2bBCECdVCcGKDx1Hia9G5WItnb8LfmBZz8unb1AsxPrAFNVJE Zgda81IL3blFP1RrVnfImfQx2ZDAFNj+9pnIPAUhBbD4mUwvaJv9tvKuoNiXXKVS oKOfT/uvKLxhc1gv8UJOimdp/gPtCwlVbGDKwL/b1tdKUvokDaqiPR/JK1wJvw1I ztYv3328TiiR7l6ytwEafY7q5LLQKuf6SyvYeeJl56JGMMB61IDtpOxnW6KVlL6v -----END CERTIFICATE-----Generated at Wed Nov 5 09:42:51 2025 by rpki-client