$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft File: 521afd0e-d4dc-449b-89c3-9881a2bfd053.mft (raw, json) Hash identifier: hjvWc5ATdGSgDOCtg6SV4gTYHBWx/BBwivkW3Z9ulzk= Subject key identifier: 73:14:C0:73:B7:DA:B1:31:B4:E3:FE:03:FA:70:F6:F5:A8:53:5B:66 Authority key identifier: 41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA Certificate issuer: /CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Certificate serial: 010D0C9F4328584B7768D59E278DCE368FC2F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft Manifest number: 010D0C9F432858472E44014E34E5BE43E57AF389 Signing time: Thu 09 Oct 2025 17:00:03 +0000 Manifest this update: Thu 09 Oct 2025 17:00:03 +0000 Manifest next update: Sat 11 Oct 2025 17:00:00 +0000 Files and hashes: 1: 521afd0e-d4dc-449b-89c3-9881a2bfd053.crl (hash: UQN04YHMIWhmUsAt6MuAKk5P8YrdT9ufLCr38WXL3qU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:68:d5:9e:27:8d:ce:36:8f:c2:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Validity Not Before: Oct 9 17:00:03 2025 GMT Not After : Oct 11 17:00:00 2025 GMT Subject: CN=4e5b41a3-6d09-4e95-b980-bb62e3a46097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:08:00:c1:43:83:ea:82:42:9d:7e:79:c3: 59:88:4d:8d:62:ca:74:a4:c8:bb:66:b2:1c:f1:cc: 1d:63:73:29:e5:77:de:78:2c:84:92:7f:57:0a:cf: 25:b0:e9:00:b5:82:99:8e:9d:a4:30:5a:4a:0c:50: 0f:9d:97:b4:8b:fa:e6:a5:6e:be:13:81:30:ac:71: 28:35:0d:43:03:cf:23:48:07:8d:77:96:05:ad:b8: 66:af:e7:77:1a:66:cb:ba:2a:ba:5c:9d:ba:79:6b: aa:aa:dc:5b:40:72:ee:a2:6e:1a:bb:8e:50:d6:a3: 85:7c:42:56:11:fa:93:74:95:d1:ef:1a:6e:bc:3e: 54:4e:27:7e:76:22:83:b7:ae:d9:df:8e:68:ae:c0: 2c:e1:cb:7c:5d:25:74:eb:47:18:e3:67:65:60:d6: d4:7a:17:a3:72:99:89:53:94:b1:1b:cd:21:37:1f: f7:90:b4:7a:ea:48:89:2d:2e:31:ea:77:78:4c:b4: 23:2d:f2:5b:fa:b5:ec:16:66:9d:85:59:ef:9c:3d: 22:74:8c:b1:d6:31:c3:8c:66:b4:3c:e1:79:f7:ed: ef:3d:c1:00:fa:c6:8e:83:ba:1e:59:aa:d7:b6:78: ec:48:09:56:b8:8f:09:eb:62:9c:c1:c8:be:4d:bb: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:14:C0:73:B7:DA:B1:31:B4:E3:FE:03:FA:70:F6:F5:A8:53:5B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl X509v3 Authority Key Identifier: keyid:41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cd:e1:e2:1d:cc:25:ac:f4:b8:7e:57:d5:de:ef:67:22:68: 7b:11:29:6c:e8:8e:89:58:84:c0:c6:6f:41:db:1e:c0:a6:33: 9a:fc:45:31:26:5e:33:9e:c5:50:c4:0c:cf:6f:26:6b:b6:ef: d5:64:1b:e4:1b:d7:4f:ea:82:a1:51:35:53:10:88:8a:7b:f3: 3d:83:23:e4:72:12:8d:3e:44:18:d6:b5:89:40:b1:6b:d4:c7: df:5f:c9:c6:2d:49:ac:cf:6a:c3:bb:37:1f:0c:ba:9b:a2:aa: 23:62:f0:33:66:1f:67:3e:3f:fd:9e:1a:06:bc:3d:94:26:94: a6:52:53:43:a1:7b:ca:69:05:20:a2:54:6d:08:8e:39:ac:07: 76:2c:70:e8:2e:b3:3d:85:18:14:1d:e4:93:b3:fe:f5:9b:b4: cd:cc:2c:35:89:90:bf:6d:d8:df:19:e2:7f:f7:27:77:47:1e: ee:c5:9a:6f:19:45:51:d1:44:04:0f:c6:8f:5e:16:26:5d:69: e5:34:3f:42:e6:7a:36:79:b8:9e:48:d6:3f:62:e9:07:3f:7a: 8e:fc:53:d5:e2:72:6c:35:10:81:33:eb:0e:9f:26:8a:70:6c: 03:5b:63:ec:f0:f7:19:bc:de:06:51:bb:6c:35:03:c7:5c:6e: ca:5f:f7:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3aNWeJ43ONo/C9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxYWZkMGUtZDRkYy00NDliLTg5YzMtOTg4MWEyYmZk MDUzMB4XDTI1MTAwOTE3MDAwM1oXDTI1MTAxMTE3MDAwMFowLzEtMCsGA1UEAxMk NGU1YjQxYTMtNmQwOS00ZTk1LWI5ODAtYmI2MmUzYTQ2MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArakIAMFDg+qCQp1+ecNZiE2NYsp0pMi7ZrIc 8cwdY3Mp5XfeeCyEkn9XCs8lsOkAtYKZjp2kMFpKDFAPnZe0i/rmpW6+E4EwrHEo NQ1DA88jSAeNd5YFrbhmr+d3GmbLuiq6XJ26eWuqqtxbQHLuom4au45Q1qOFfEJW EfqTdJXR7xpuvD5UTid+diKDt67Z345orsAs4ct8XSV060cY42dlYNbUehejcpmJ U5SxG80hNx/3kLR66kiJLS4x6nd4TLQjLfJb+rXsFmadhVnvnD0idIyx1jHDjGa0 POF59+3vPcEA+saOg7oeWarXtnjsSAlWuI8J62Kcwci+Tbv1cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHMUwHO32rExtOP+A/pw9vWoU1tmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MjFh ZmQwZS1kNGRjLTQ0OWItODljMy05ODgxYTJiZmQwNTMvNTIxYWZkMGUtZDRkYy00 NDliLTg5YzMtOTg4MWEyYmZkMDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTIxYWZkMGUtZDRkYy00NDliLTg5 YzMtOTg4MWEyYmZkMDUzLzUyMWFmZDBlLWQ0ZGMtNDQ5Yi04OWMzLTk4ODFhMmJm ZDA1My5jcmwwHwYDVR0jBBgwFoAUQWbT5G9HK6y8oF3v6lLydG8tAdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81MjFhZmQwZS1kNGRjLTQ0OWItODljMy05ODgx YTJiZmQwNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0zeHiHcwlrPS4flfV3u9n Imh7ESls6I6JWITAxm9B2x7ApjOa/EUxJl4znsVQxAzPbyZrtu/VZBvkG9dP6oKh UTVTEIiKe/M9gyPkchKNPkQY1rWJQLFr1MffX8nGLUmsz2rDuzcfDLqboqojYvAz Zh9nPj/9nhoGvD2UJpSmUlNDoXvKaQUgolRtCI45rAd2LHDoLrM9hRgUHeSTs/71 m7TNzCw1iZC/bdjfGeJ/9yd3Rx7uxZpvGUVR0UQED8aPXhYmXWnlND9C5no2ebie SNY/YukHP3qO/FPV4nJsNRCBM+sOnyaKcGwDW2Ps8PcZvN4GUbtsNQPHXG7KX/d1 -----END CERTIFICATE-----Generated at Thu Oct 9 20:09:11 2025 by rpki-client