$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.mft File: b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.mft (raw, json) Hash identifier: 0ikLa3XeO6kTBeXLE64eMMAEzJHtPyoxd5sEm1ZSIyY= Subject key identifier: AD:6E:06:AE:D9:E0:DD:3E:42:4D:72:03:72:1D:DA:B7:6B:5A:49:C8 Authority key identifier: 33:5C:AA:32:73:E4:16:E9:CA:CD:36:58:48:A8:96:9A:40:77:4E:2E Certificate issuer: /CN=b1a04f2a-d55f-44cd-8adb-3fb3fd855b83 Certificate serial: 010D0C9F4328584BBA2DB572D68E27834C37F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.mft Manifest number: 010D0C9F43285845FB08FFCA7F0837F91F6FC612 Signing time: Sun 02 Nov 2025 15:00:03 +0000 Manifest this update: Sun 02 Nov 2025 15:00:03 +0000 Manifest next update: Tue 04 Nov 2025 15:00:00 +0000 Files and hashes: 1: b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.crl (hash: xTfBNatpZ+Fkl8WcnIi+4WPtJ/EtVYrGYlKzDbTEcds=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:2d:b5:72:d6:8e:27:83:4c:37:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a04f2a-d55f-44cd-8adb-3fb3fd855b83 Validity Not Before: Nov 2 15:00:03 2025 GMT Not After : Nov 4 15:00:00 2025 GMT Subject: CN=6aa1b73d-863d-4002-85f7-fff24242c5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:4b:69:88:ee:fd:30:40:71:08:a9:b8:14: e7:c4:93:b4:a5:65:b2:fc:cb:ca:b4:9b:c5:71:0c: bc:f6:36:da:4d:eb:5a:c3:ae:bb:04:ce:5d:c8:6c: 61:28:4b:a4:18:82:14:58:0d:5f:ff:58:93:73:9b: 03:19:b6:c0:4d:ea:fa:8b:09:3a:3d:fe:04:66:19: b5:17:e0:9c:60:09:66:2b:e6:55:69:ce:e2:60:8a: 8d:c1:57:11:4e:84:19:83:d4:b5:dc:7e:4d:a6:5b: 0f:3a:b4:83:2f:fc:66:04:01:36:8e:0e:3a:bd:3b: fb:38:07:79:f8:82:75:25:09:b1:62:80:55:79:57: ad:25:9d:aa:7d:96:b7:e9:cd:69:5a:77:99:8d:df: ed:3d:93:94:8d:5a:e8:ae:74:51:ce:0f:d9:af:ae: 60:21:59:8b:d0:98:8e:70:c5:fb:d3:3f:9a:38:31: fa:a7:79:57:70:b1:13:37:e1:21:07:ab:b2:5d:96: 62:a4:7d:84:83:de:80:3c:b2:5a:66:f0:1f:c1:ed: dd:c4:2e:79:62:9f:99:2e:7d:3a:3d:69:39:db:b5: bf:77:e2:80:9b:93:b2:91:a3:fc:00:87:da:ba:24: 4e:84:aa:62:eb:fa:80:6b:57:72:05:98:3a:1e:30: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:06:AE:D9:E0:DD:3E:42:4D:72:03:72:1D:DA:B7:6B:5A:49:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.crl X509v3 Authority Key Identifier: keyid:33:5C:AA:32:73:E4:16:E9:CA:CD:36:58:48:A8:96:9A:40:77:4E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b1a04f2a-d55f-44cd-8adb-3fb3fd855b83.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:11:85:cb:31:49:4d:e6:cb:2c:fe:d5:3b:3b:cd:2b:46:36: 8c:61:41:06:1e:37:2a:9b:10:38:25:d3:94:91:32:aa:4b:90: 61:cc:46:58:7e:06:df:e0:dc:39:86:69:de:23:64:b2:11:39: fb:90:4d:c8:83:11:b7:09:b7:24:f2:d0:b7:a2:d4:16:34:dc: 94:90:44:63:f5:bc:96:f7:b8:83:17:e5:03:1c:d7:91:d0:8c: ff:0e:f0:e2:bd:9e:56:41:28:07:ec:1d:30:f8:b9:c0:b0:3a: 0f:95:3b:1d:19:05:aa:7b:8a:46:02:3d:0d:9b:a5:e7:c5:19: 95:ca:f5:cb:a4:6c:c1:93:01:29:60:0e:06:3a:a6:08:b3:7c: 3c:f7:4a:ca:fa:61:bc:f7:9a:dc:67:48:00:81:07:15:f9:f0: 57:ec:f9:f8:22:b3:dd:6a:fa:9b:67:1b:a7:89:b7:65:0c:ed: 5f:b1:96:93:fe:d4:84:88:d7:41:6b:a2:2d:11:da:01:ca:5a: af:b1:fd:cb:a9:6d:cb:83:51:82:1d:b6:66:f1:9d:08:de:2c: ec:a5:56:f2:91:59:0b:2f:22:9a:24:bc:83:b5:cf:86:e5:ea: c6:75:85:33:46:57:a5:37:cf:f5:97:8c:03:66:b0:b6:65:48: fc:98:be:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6LbVy1o4ng0w3+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFhMDRmMmEtZDU1Zi00NGNkLThhZGItM2ZiM2ZkODU1 YjgzMB4XDTI1MTEwMjE1MDAwM1oXDTI1MTEwNDE1MDAwMFowLzEtMCsGA1UEAxMk NmFhMWI3M2QtODYzZC00MDAyLTg1ZjctZmZmMjQyNDJjNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ZLaYju/TBAcQipuBTnxJO0pWWy/MvKtJvF cQy89jbaTetaw667BM5dyGxhKEukGIIUWA1f/1iTc5sDGbbATer6iwk6Pf4EZhm1 F+CcYAlmK+ZVac7iYIqNwVcRToQZg9S13H5NplsPOrSDL/xmBAE2jg46vTv7OAd5 +IJ1JQmxYoBVeVetJZ2qfZa36c1pWneZjd/tPZOUjVrornRRzg/Zr65gIVmL0JiO cMX70z+aODH6p3lXcLETN+EhB6uyXZZipH2Eg96APLJaZvAfwe3dxC55Yp+ZLn06 PWk527W/d+KAm5OykaP8AIfauiROhKpi6/qAa1dyBZg6HjBcYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK1uBq7Z4N0+Qk1yA3Id2rdrWknIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMWEw NGYyYS1kNTVmLTQ0Y2QtOGFkYi0zZmIzZmQ4NTViODMvYjFhMDRmMmEtZDU1Zi00 NGNkLThhZGItM2ZiM2ZkODU1YjgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjFhMDRmMmEtZDU1Zi00NGNkLThh ZGItM2ZiM2ZkODU1YjgzL2IxYTA0ZjJhLWQ1NWYtNDRjZC04YWRiLTNmYjNmZDg1 NWI4My5jcmwwHwYDVR0jBBgwFoAUM1yqMnPkFunKzTZYSKiWmkB3Ti4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMWEwNGYyYS1kNTVmLTQ0Y2QtOGFkYi0zZmIz ZmQ4NTViODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXEYXLMUlN5sss/tU7O80r RjaMYUEGHjcqmxA4JdOUkTKqS5BhzEZYfgbf4Nw5hmneI2SyETn7kE3IgxG3Cbck 8tC3otQWNNyUkERj9byW97iDF+UDHNeR0Iz/DvDivZ5WQSgH7B0w+LnAsDoPlTsd GQWqe4pGAj0Nm6XnxRmVyvXLpGzBkwEpYA4GOqYIs3w890rK+mG895rcZ0gAgQcV +fBX7Pn4IrPdavqbZxunibdlDO1fsZaT/tSEiNdBa6ItEdoBylqvsf3LqW3Lg1GC HbZm8Z0I3izspVbykVkLLyKaJLyDtc+G5erGdYUzRlelN8/1l4wDZrC2ZUj8mL6b -----END CERTIFICATE-----Generated at Mon Nov 3 07:57:47 2025 by rpki-client