$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft File: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft (raw, json) Hash identifier: s2lsyeGfxhMtwj2A62+L4kkg723pLXJU+nTWR6hv94U= Subject key identifier: 30:23:D1:67:D0:F1:57:C3:F6:B7:C9:6C:1F:43:DF:58:D2:27:9A:0C Authority key identifier: 87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 Certificate issuer: /CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Certificate serial: 010D0C9F4328584B94B90DD17C60689AF1B87900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft Manifest number: 010D0C9F4328584073A83F34E4ED172CC78401FD Signing time: Mon 20 Oct 2025 05:00:08 +0000 Manifest this update: Mon 20 Oct 2025 05:00:08 +0000 Manifest next update: Thu 23 Oct 2025 05:00:00 +0000 Files and hashes: 1: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl (hash: l4AdkAlvLOqVEa0sUbGL6wLxSRtZGw7rnuTmwuONDME=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:b9:0d:d1:7c:60:68:9a:f1:b8:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Validity Not Before: Oct 20 05:00:08 2025 GMT Not After : Oct 23 05:00:00 2025 GMT Subject: CN=08db950c-f888-426d-b6c9-ffa3f4395f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:a8:2c:72:e7:68:ab:be:7b:bb:4b:87:cb: 74:00:b6:c1:e5:5f:2e:22:f5:f9:61:29:f1:b9:77: 16:c5:ee:4c:c5:33:63:44:df:00:f5:bb:17:71:31: 7d:44:48:ee:87:01:ee:d0:83:30:1b:98:27:ed:f8: 39:f5:b4:1c:46:17:77:c1:2b:c8:d8:02:27:c5:7c: 24:d1:e6:cf:7c:6e:d2:44:6b:50:86:b3:1e:03:76: 0a:cf:e2:a3:cc:00:47:c3:2b:45:ec:b4:65:e5:a6: b1:9f:11:38:24:e4:10:3c:8e:b2:be:d6:11:4f:6e: e6:8a:df:96:38:3c:84:27:e1:d5:eb:3b:82:d6:cd: 93:fa:df:d5:38:24:2d:71:9c:24:20:f4:34:77:74: 99:95:17:05:df:4e:f7:3d:bc:64:64:17:fb:9b:39: 5c:ba:c5:55:34:0a:8e:37:b5:47:7c:ae:b3:a3:58: ee:5b:da:0f:3e:ab:25:a9:eb:e4:a5:71:96:8b:b8: 95:e1:f5:78:70:41:58:21:d2:5d:81:ed:cc:e0:e0: 4c:16:1f:da:01:ad:b5:ef:bd:49:be:a4:27:56:0f: d3:36:91:8e:30:37:51:d2:1c:75:76:da:5f:58:b7: 22:18:0d:36:bc:67:fc:14:28:f8:77:67:a5:48:20: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:D1:67:D0:F1:57:C3:F6:B7:C9:6C:1F:43:DF:58:D2:27:9A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl X509v3 Authority Key Identifier: keyid:87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5f:5a:92:4f:f7:2f:76:89:fc:1c:f2:1d:0e:17:bd:c9:21: f0:ed:e3:e0:56:31:59:d7:b8:30:f9:da:95:24:7c:a5:f3:e4: 2f:e9:7f:cd:b2:98:48:06:d0:57:48:1e:55:3a:3e:61:2a:30: 7a:eb:24:0b:5c:a2:82:1a:96:f1:f6:4f:81:b4:12:46:25:48: 77:56:bc:69:5a:3a:bd:72:e1:2e:fb:cc:4e:b4:2e:d5:ba:3c: 26:0a:c2:58:39:00:fa:f3:49:e1:5b:c5:66:e0:23:7d:40:5a: 06:b8:f2:7f:e8:77:24:47:c7:2c:d6:93:f4:e1:df:85:e8:c3: 02:32:2a:28:cf:67:9b:89:27:b7:cc:eb:ae:84:fe:97:6c:62: 76:04:58:23:b9:73:f9:b6:32:b9:24:d3:86:16:1c:f1:4c:05: 71:fe:d3:48:c0:95:88:27:bf:ab:c2:9d:87:a6:52:f2:2b:65: 06:cc:6d:fe:46:1b:77:ec:ad:63:f4:33:bd:21:94:d5:70:f5: ff:82:17:0e:dc:ce:91:7d:e1:3c:3b:d4:8e:53:e2:36:24:af: 8d:07:fe:03:fe:10:5f:bd:af:b3:5d:b3:9b:ef:c6:1d:c6:f9: c9:97:92:0a:6b:bc:c8:d3:ee:76:c3:eb:24:57:b9:e4:47:ef: fd:59:dd:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUuQ3RfGBomvG4eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5NmM1ZjMtNWRlNi00OWE3LTlmMGEtZTM5ODAzM2I2 ZWRmMB4XDTI1MTAyMDA1MDAwOFoXDTI1MTAyMzA1MDAwMFowLzEtMCsGA1UEAxMk MDhkYjk1MGMtZjg4OC00MjZkLWI2YzktZmZhM2Y0Mzk1ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6CoLHLnaKu+e7tLh8t0ALbB5V8uIvX5YSnx uXcWxe5MxTNjRN8A9bsXcTF9REjuhwHu0IMwG5gn7fg59bQcRhd3wSvI2AInxXwk 0ebPfG7SRGtQhrMeA3YKz+KjzABHwytF7LRl5aaxnxE4JOQQPI6yvtYRT27mit+W ODyEJ+HV6zuC1s2T+t/VOCQtcZwkIPQ0d3SZlRcF3073PbxkZBf7mzlcusVVNAqO N7VHfK6zo1juW9oPPqslqevkpXGWi7iV4fV4cEFYIdJdge3M4OBMFh/aAa21771J vqQnVg/TNpGOMDdR0hx1dtpfWLciGA02vGf8FCj4d2elSCAFbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDAj0WfQ8VfD9rfJbB9D31jSJ5oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2 YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4MDMzYjZlZGYvODY5NmM1ZjMtNWRlNi00 OWE3LTlmMGEtZTM5ODAzM2I2ZWRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODY5NmM1ZjMtNWRlNi00OWE3LTlm MGEtZTM5ODAzM2I2ZWRmLzg2OTZjNWYzLTVkZTYtNDlhNy05ZjBhLWUzOTgwMzNi NmVkZi5jcmwwHwYDVR0jBBgwFoAUh73g19BBNZ6vBL/2WTVKKQ6l+ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4 MDMzYjZlZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyX1qST/cvdon8HPIdDhe9 ySHw7ePgVjFZ17gw+dqVJHyl8+Qv6X/NsphIBtBXSB5VOj5hKjB66yQLXKKCGpbx 9k+BtBJGJUh3VrxpWjq9cuEu+8xOtC7VujwmCsJYOQD680nhW8Vm4CN9QFoGuPJ/ 6HckR8cs1pP04d+F6MMCMiooz2ebiSe3zOuuhP6XbGJ2BFgjuXP5tjK5JNOGFhzx TAVx/tNIwJWIJ7+rwp2HplLyK2UGzG3+Rht37K1j9DO9IZTVcPX/ghcO3M6RfeE8 O9SOU+I2JK+NB/4D/hBfva+zXbOb78YdxvnJl5IKa7zI0+52w+skV7nkR+/9Wd3q -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:37 2025 by rpki-client