$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft File: 5a57bda3-7411-4b5c-825c-231b2d2011d3.mft (raw, json) Hash identifier: Pol9clY6c9kSU+htfZ962TQziS4gggl02uN1r/MXaT4= Subject key identifier: A8:D5:66:F4:EB:E3:01:B5:C3:E7:14:DE:7E:44:04:25:BD:F2:F8:2E Authority key identifier: 24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 Certificate issuer: /CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Certificate serial: 010D0C9F4328584BC0580030A62AE4933C586500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft Manifest number: 010D0C9F4328584A7162C3B1AFDA880220475C78 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 5a57bda3-7411-4b5c-825c-231b2d2011d3.crl (hash: lNTu8BwYc0WEKE5TD1715PudBg5YX558ksZ8NIUTLts=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:30:a6:2a:e4:93:3c:58:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=dcc41298-cac5-49ce-8037-6b2a12212fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:20:b8:79:16:2d:99:63:c1:a7:20:ff:58: 1a:13:0b:b1:cf:b2:9d:72:89:4e:81:95:43:97:32: 12:0e:df:51:0f:80:a1:14:3e:57:00:53:96:88:1d: 7d:9f:30:7f:68:49:45:82:a9:50:6b:bd:10:0a:00: e2:e5:45:e7:e9:dd:e6:2f:a2:0e:8f:91:b9:b0:1f: 7a:49:cb:05:a4:1d:de:43:b4:1b:5e:bf:17:25:be: a9:dd:19:c8:d1:a1:d9:65:e4:bc:4a:88:d4:2e:45: 23:dc:69:4d:32:9e:f9:6b:e9:0e:88:9f:07:79:90: b6:ad:c7:66:41:80:96:1f:00:17:74:10:0e:f7:1c: fc:10:e6:74:9f:c3:b7:9a:cf:42:22:d9:aa:ca:b9: b9:c6:9e:7d:55:54:e1:60:c4:db:97:c9:5c:e4:72: 09:3a:0c:28:bc:84:e5:38:5d:47:aa:eb:81:b9:2a: 8e:13:e8:11:0a:cd:a6:b7:53:1f:ea:7d:f1:e3:89: 65:39:b4:36:f7:17:ef:d4:ea:e6:5a:be:c8:6c:0b: 84:91:23:ed:3c:34:a3:a6:ed:fa:12:6f:73:2a:df: 24:50:1f:29:43:20:71:17:71:39:1b:c3:82:f2:9e: 24:37:c9:38:4f:df:48:a8:ad:1b:87:6f:0c:4b:38: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:66:F4:EB:E3:01:B5:C3:E7:14:DE:7E:44:04:25:BD:F2:F8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl X509v3 Authority Key Identifier: keyid:24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8e:8a:ee:7a:13:89:76:35:79:34:f4:4a:0a:a3:6e:d8:a1: 73:21:3f:c6:fa:cf:f0:a4:26:52:3c:fb:04:83:33:14:91:d9: 6e:27:0c:03:be:a3:cb:b7:ad:31:4f:31:5b:8d:69:0e:c9:7c: 5c:04:27:9f:59:ee:97:6f:d4:69:a2:38:df:a6:90:80:18:5a: fe:ae:76:de:43:27:31:9e:9c:e3:5f:f3:be:14:8f:8b:dc:41: 29:16:c8:04:cd:b7:b2:cc:82:a9:74:63:ca:59:00:a3:43:bf: e1:d7:36:e9:06:1c:e5:af:00:cb:9f:ec:5b:0b:77:90:52:f1: 0b:a9:f0:e9:9f:94:82:45:44:b5:9b:25:3c:11:0e:06:f8:20: db:be:bb:7a:6a:2d:d2:b9:61:13:86:7f:d5:74:fe:48:a3:24: 98:5b:0b:a3:0d:5e:29:85:7b:1c:67:94:b5:20:60:ed:47:17: 57:96:f0:5f:5a:37:1e:0f:c8:57:be:ba:2d:c8:a0:5f:e0:b2: 17:cb:0d:df:1e:64:a8:9e:ac:9e:e3:ec:15:cc:18:0e:15:01: 5a:95:2f:05:1b:e0:ff:c1:ca:93:6c:be:19:6b:89:fb:9e:31: f5:a3:57:a6:f4:2a:0a:66:6e:ee:f1:35:72:2d:07:55:77:37: 11:9d:02:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAAwpirkkzxYZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE1N2JkYTMtNzQxMS00YjVjLTgyNWMtMjMxYjJkMjAx MWQzMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ZGNjNDEyOTgtY2FjNS00OWNlLTgwMzctNmIyYTEyMjEyZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKsguHkWLZljwacg/1gaEwuxz7KdcolOgZVD lzISDt9RD4ChFD5XAFOWiB19nzB/aElFgqlQa70QCgDi5UXn6d3mL6IOj5G5sB96 ScsFpB3eQ7QbXr8XJb6p3RnI0aHZZeS8SojULkUj3GlNMp75a+kOiJ8HeZC2rcdm QYCWHwAXdBAO9xz8EOZ0n8O3ms9CItmqyrm5xp59VVThYMTbl8lc5HIJOgwovITl OF1HquuBuSqOE+gRCs2mt1Mf6n3x44llObQ29xfv1OrmWr7IbAuEkSPtPDSjpu36 Em9zKt8kUB8pQyBxF3E5G8OC8p4kN8k4T99IqK0bh28MSziR6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKjVZvTr4wG1w+cU3n5EBCW98vguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3 YmRhMy03NDExLTRiNWMtODI1Yy0yMzFiMmQyMDExZDMvNWE1N2JkYTMtNzQxMS00 YjVjLTgyNWMtMjMxYjJkMjAxMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWE1N2JkYTMtNzQxMS00YjVjLTgy NWMtMjMxYjJkMjAxMWQzLzVhNTdiZGEzLTc0MTEtNGI1Yy04MjVjLTIzMWIyZDIw MTFkMy5jcmwwHwYDVR0jBBgwFoAUJKx9oQhY188lSBcqNVFMCUFdo/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3YmRhMy03NDExLTRiNWMtODI1Yy0yMzFi MmQyMDExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAejoruehOJdjV5NPRKCqNu 2KFzIT/G+s/wpCZSPPsEgzMUkdluJwwDvqPLt60xTzFbjWkOyXxcBCefWe6Xb9Rp ojjfppCAGFr+rnbeQycxnpzjX/O+FI+L3EEpFsgEzbeyzIKpdGPKWQCjQ7/h1zbp BhzlrwDLn+xbC3eQUvELqfDpn5SCRUS1myU8EQ4G+CDbvrt6ai3SuWEThn/VdP5I oySYWwujDV4phXscZ5S1IGDtRxdXlvBfWjceD8hXvrotyKBf4LIXyw3fHmSonqye 4+wVzBgOFQFalS8FG+D/wcqTbL4Za4n7njH1o1em9CoKZm7u8TVyLQdVdzcRnQKJ -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:13 2025 by rpki-client