$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft File: db3948d9-e295-422b-8439-1e057eb4673b.mft (raw, json) Hash identifier: 20WAclIlIURXBOHdc2j5ovUvPOfgpeW+i2zA0xpYKPQ= Subject key identifier: A1:A9:52:BF:C6:F8:9C:4E:6E:3E:CF:45:98:CA:F1:93:2A:B2:6C:D4 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584BB9B6936F2D2F880742340280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft Manifest number: 010D0C9F43285845292D99C252463B75123B50DA Signing time: Sun 02 Nov 2025 11:00:04 +0000 Manifest this update: Sun 02 Nov 2025 11:00:04 +0000 Manifest next update: Wed 05 Nov 2025 11:00:00 +0000 Files and hashes: 1: db3948d9-e295-422b-8439-1e057eb4673b.crl (hash: XZNworX+bIuqqCrXgBVump3zhfGcDwaTkT0qf8rGVyg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:b6:93:6f:2d:2f:88:07:42:34:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Nov 2 11:00:04 2025 GMT Not After : Nov 5 11:00:00 2025 GMT Subject: CN=de8bd0d8-3069-4532-8cb7-7c7ea7f540af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:95:dc:7f:d2:28:f3:7b:10:73:6b:db:37: 93:d6:d0:66:51:46:17:72:7b:ba:3b:4a:b5:b7:c8: a1:be:cc:45:20:ac:5b:83:1d:8d:5b:fa:4c:c8:03: 13:1d:f1:c3:af:bc:d5:60:60:21:ee:23:f7:14:74: 32:5a:c1:3c:00:26:b0:1f:1b:ba:63:9b:e1:4c:38: e7:6c:dc:30:0d:69:72:06:85:b3:9d:26:26:6c:f6: a0:da:bf:53:c5:fd:0b:88:1c:9f:a7:75:b8:16:8f: 2c:9c:1e:8c:75:00:9a:9c:69:36:61:1f:80:f5:d6: ed:65:8f:39:33:7e:85:49:5c:3b:54:28:28:e4:88: 51:70:ca:63:da:48:4f:e7:97:e3:dc:ef:76:71:6c: 35:7d:5f:19:a8:fa:bc:5c:60:94:8f:cf:4e:ac:b3: 62:25:37:98:14:04:d0:61:9f:e1:cc:7c:55:e2:d8: 07:d3:38:55:a3:2f:d4:3c:d9:df:f6:2b:47:53:47: 55:8b:d2:21:bc:a1:df:09:34:9d:b9:64:57:8b:6a: 81:09:25:c5:ba:a7:1b:e6:24:78:0d:b2:bc:6e:56: 72:97:45:d2:52:e4:d5:b6:33:a5:ce:59:41:66:b1: 65:b4:18:1e:2b:91:d9:2d:71:c3:3e:9d:92:8d:77: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A9:52:BF:C6:F8:9C:4E:6E:3E:CF:45:98:CA:F1:93:2A:B2:6C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8a:a3:ea:5e:8c:1d:da:84:fd:ce:55:0c:69:68:a8:f1:e3: 95:d0:19:9b:d8:92:2e:24:1c:4d:f9:f2:0b:f6:39:51:b5:4b: d1:0f:ae:9b:86:47:a2:26:62:3b:b2:45:dd:1d:50:10:b8:c0: ca:44:44:a9:3f:e4:cd:ff:70:b1:29:0e:ae:b4:2a:68:1f:6d: 58:9d:23:41:55:b4:85:af:02:05:b5:52:aa:e7:99:45:5c:94: 61:c0:a8:bf:d1:55:48:0e:3c:aa:1e:b4:99:93:25:fe:dc:1a: a4:53:35:66:4e:1a:ed:75:71:48:e9:de:46:11:2b:18:d6:6f: 86:18:05:dc:10:64:7e:98:db:38:65:be:26:13:56:6a:88:c5: 18:ca:06:66:fe:16:6c:ee:cf:f2:5d:a1:fa:15:3d:89:e3:20: dd:1b:d8:b0:ae:36:c7:8c:31:5a:a3:9e:b7:3a:73:d3:ed:46: de:9e:5e:3a:de:15:8b:43:e1:13:56:5d:d3:3c:ac:eb:98:30: 0e:80:a8:97:15:57:6c:4e:7a:6b:2b:1e:f7:8b:72:76:d4:e2: 18:11:fd:92:30:c3:04:a7:e6:40:58:37:90:15:c0:70:28:1a: 6a:e3:ea:23:5b:67:cd:c9:69:0e:cf:3a:3e:98:70:64:23:ed: 84:d5:82:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5tpNvLS+IB0I0AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI1MTEwMjExMDAwNFoXDTI1MTEwNTExMDAwMFowLzEtMCsGA1UEAxMk ZGU4YmQwZDgtMzA2OS00NTMyLThjYjctN2M3ZWE3ZjU0MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp+V3H/SKPN7EHNr2zeT1tBmUUYXcnu6O0q1 t8ihvsxFIKxbgx2NW/pMyAMTHfHDr7zVYGAh7iP3FHQyWsE8ACawHxu6Y5vhTDjn bNwwDWlyBoWznSYmbPag2r9Txf0LiByfp3W4Fo8snB6MdQCanGk2YR+A9dbtZY85 M36FSVw7VCgo5IhRcMpj2khP55fj3O92cWw1fV8ZqPq8XGCUj89OrLNiJTeYFATQ YZ/hzHxV4tgH0zhVoy/UPNnf9itHU0dVi9IhvKHfCTSduWRXi2qBCSXFuqcb5iR4 DbK8blZyl0XSUuTVtjOlzllBZrFltBgeK5HZLXHDPp2SjXeiaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGpUr/G+JxObj7PRZjK8ZMqsmzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZGIzOTQ4ZDktZTI5NS00 MjJiLTg0MzktMWUwNTdlYjQ2NzNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3iqPqXowd2oT9zlUMaWio 8eOV0Bmb2JIuJBxN+fIL9jlRtUvRD66bhkeiJmI7skXdHVAQuMDKRESpP+TN/3Cx KQ6utCpoH21YnSNBVbSFrwIFtVKq55lFXJRhwKi/0VVIDjyqHrSZkyX+3BqkUzVm ThrtdXFI6d5GESsY1m+GGAXcEGR+mNs4Zb4mE1ZqiMUYygZm/hZs7s/yXaH6FT2J 4yDdG9iwrjbHjDFao563OnPT7Ubenl463hWLQ+ETVl3TPKzrmDAOgKiXFVdsTnpr Kx73i3J21OIYEf2SMMMEp+ZAWDeQFcBwKBpq4+ojW2fNyWkOzzo+mHBkI+2E1YIH -----END CERTIFICATE-----Generated at Mon Nov 3 01:43:51 2025 by rpki-client