$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft File: 5a57bda3-7411-4b5c-825c-231b2d2011d3.mft (raw, json) Hash identifier: aeb6CE4uLLwVpNEnv1Fa6Ix1i7j6xhFBFfTwrGk8Two= Subject key identifier: 8B:6E:0F:8C:C2:9B:F4:9A:3B:5E:FD:1B:FA:56:B4:0D:4A:5A:D6:BD Authority key identifier: 24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 Certificate issuer: /CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Certificate serial: 010D0C9F4328584B93AD05CD970A6BD55C6A4A98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft Manifest number: 010D0C9F4328584A7162C3B1AFDA880220475C68 Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 5a57bda3-7411-4b5c-825c-231b2d2011d3.crl (hash: 4GL0xJmxezUR8CGtmTfZJl+z5e4sD0wnQPCCysu4cMU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:05:cd:97:0a:6b:d5:5c:6a:4a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a57bda3-7411-4b5c-825c-231b2d2011d3 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=66250b99-f033-475f-87eb-c487add6469a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:db:3e:4e:fa:ed:c3:31:45:b2:b8:14:9a: 9c:ef:73:3b:3f:38:03:ff:45:5d:22:72:20:75:95: da:74:50:60:9a:af:85:81:4c:c9:60:9d:d4:22:0d: f6:c4:b1:5d:31:c3:b1:07:33:4d:e1:73:5b:5b:bd: 36:94:30:ab:73:56:1d:dd:39:09:56:d1:f9:26:ce: ac:1c:04:73:eb:45:10:ed:d5:ac:23:e8:24:8a:28: b5:86:f0:50:f9:0a:61:55:6e:a9:f9:51:96:7c:83: d4:b0:bb:fa:72:b1:d4:05:cc:fa:be:f6:88:7e:cf: ec:d1:e9:b7:92:37:42:ad:03:f6:f1:fb:eb:75:8e: 80:c8:7b:3a:84:ab:78:8a:74:81:82:27:d5:f8:7b: 00:57:d8:41:16:77:a9:18:a2:a3:87:53:82:3f:09: 17:bf:b2:b1:a9:8a:06:ea:c4:48:45:35:5e:98:7a: 33:6e:d6:df:a3:bd:68:68:3c:bc:fe:f0:3e:5c:fe: cb:a7:68:b2:68:fa:fc:a0:d8:e8:de:46:56:b3:39: 89:fb:6f:88:55:15:65:b8:c0:d5:86:a1:5b:04:5a: 29:c8:94:08:33:e7:98:2d:f5:77:23:1d:8d:51:cd: 24:38:41:06:78:dd:af:46:3e:3d:ea:9c:4e:21:69: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:0F:8C:C2:9B:F4:9A:3B:5E:FD:1B:FA:56:B4:0D:4A:5A:D6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3/5a57bda3-7411-4b5c-825c-231b2d2011d3.crl X509v3 Authority Key Identifier: keyid:24:AC:7D:A1:08:58:D7:CF:25:48:17:2A:35:51:4C:09:41:5D:A3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a57bda3-7411-4b5c-825c-231b2d2011d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:90:f9:c0:42:e6:f3:43:9f:06:06:8a:f8:69:dc:54:47:d4: 91:1b:8f:31:8f:49:6c:6e:c0:c3:7c:5f:6d:29:06:c2:6d:a6: d0:8b:ca:57:d9:b0:d9:70:d6:c3:b7:a7:5b:dc:6b:a8:43:f5: cc:e1:0d:78:ea:73:8d:e8:ba:0c:84:00:1c:35:22:87:ac:41: 4f:9c:2c:11:0b:85:0a:af:09:cf:62:fb:2f:d4:6e:1e:10:4e: 0b:e2:25:f9:cd:71:a5:13:e9:f8:4d:fd:6c:21:ce:aa:9e:a3: b5:39:78:ae:56:0e:2b:66:54:0d:57:b0:72:34:64:22:42:85: 07:ae:6c:24:0b:73:ad:e1:e2:d4:a6:eb:cc:5b:8b:98:e2:2e: fe:20:d4:da:5b:61:fc:3e:7f:30:48:19:f1:58:67:44:ff:56: c6:da:8a:58:9e:95:1e:3b:73:a3:ba:f1:25:02:47:67:db:05: bb:6d:5f:53:1f:7c:ec:2b:c5:ca:f6:d7:77:d1:be:73:9f:d0: 2a:63:2e:30:5e:aa:17:cc:da:88:ce:ba:17:42:24:4c:91:71: 40:48:8b:a6:19:49:10:d8:17:1a:a7:6b:4d:a4:9b:30:fd:08: f4:04:e1:7d:de:35:bc:4d:7d:f7:24:9d:67:42:91:89:e2:d9: af:33:bb:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQXNlwpr1VxqSpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE1N2JkYTMtNzQxMS00YjVjLTgyNWMtMjMxYjJkMjAx MWQzMB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk NjYyNTBiOTktZjAzMy00NzVmLTg3ZWItYzQ4N2FkZDY0NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjbbPk767cMxRbK4FJqc73M7PzgD/0VdInIg dZXadFBgmq+FgUzJYJ3UIg32xLFdMcOxBzNN4XNbW702lDCrc1Yd3TkJVtH5Js6s HARz60UQ7dWsI+gkiii1hvBQ+QphVW6p+VGWfIPUsLv6crHUBcz6vvaIfs/s0em3 kjdCrQP28fvrdY6AyHs6hKt4inSBgifV+HsAV9hBFnepGKKjh1OCPwkXv7KxqYoG 6sRIRTVemHozbtbfo71oaDy8/vA+XP7Lp2iyaPr8oNjo3kZWszmJ+2+IVRVluMDV hqFbBFopyJQIM+eYLfV3Ix2NUc0kOEEGeN2vRj496pxOIWnQTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFItuD4zCm/SaO179G/pWtA1KWta9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3 YmRhMy03NDExLTRiNWMtODI1Yy0yMzFiMmQyMDExZDMvNWE1N2JkYTMtNzQxMS00 YjVjLTgyNWMtMjMxYjJkMjAxMWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWE1N2JkYTMtNzQxMS00YjVjLTgy NWMtMjMxYjJkMjAxMWQzLzVhNTdiZGEzLTc0MTEtNGI1Yy04MjVjLTIzMWIyZDIw MTFkMy5jcmwwHwYDVR0jBBgwFoAUJKx9oQhY188lSBcqNVFMCUFdo/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YTU3YmRhMy03NDExLTRiNWMtODI1Yy0yMzFi MmQyMDExZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIkPnAQubzQ58GBor4adxU R9SRG48xj0lsbsDDfF9tKQbCbabQi8pX2bDZcNbDt6db3GuoQ/XM4Q146nON6LoM hAAcNSKHrEFPnCwRC4UKrwnPYvsv1G4eEE4L4iX5zXGlE+n4Tf1sIc6qnqO1OXiu Vg4rZlQNV7ByNGQiQoUHrmwkC3Ot4eLUpuvMW4uY4i7+INTaW2H8Pn8wSBnxWGdE /1bG2opYnpUeO3OjuvElAkdn2wW7bV9TH3zsK8XK9td30b5zn9AqYy4wXqoXzNqI zroXQiRMkXFASIumGUkQ2Bcap2tNpJsw/Qj0BOF93jW8TX33JJ1nQpGJ4tmvM7sj -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:54 2025 by rpki-client