$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft File: 4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft (raw, json) Hash identifier: vKl07S58mJg0D36Kqpekmjnc5AwmS3CeyRXZfQut+zs= Subject key identifier: D0:3B:41:FB:5F:01:D2:38:17:DC:99:98:0A:1E:9B:17:F6:79:91:D4 Authority key identifier: 53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62 Certificate issuer: /CN=4a01faf0-6a8e-4e38-92b4-49d20c47fcb7 Certificate serial: 010D0C9F4328584B95E2CA3966C924CD70877D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft Manifest number: 010D0C9F43285844BCAF2FE5C74267198B717F44 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl (hash: DBltxc0N7IIYt9jN48DpVqpyTYF6Ub3FsLhnyxOPDgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ca:39:66:c9:24:cd:70:87:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a01faf0-6a8e-4e38-92b4-49d20c47fcb7 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=bacca056-62ec-4b81-9d14-987407677f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:ed:1d:e8:7d:09:62:a1:43:fe:30:81:e4: ad:24:99:20:1a:fa:c5:4b:de:fa:14:be:e9:72:22: d5:c0:e8:bf:bc:dc:54:0f:fe:b7:a8:71:27:7f:45: 31:b4:13:b0:ae:77:12:89:63:b8:ba:7f:25:f4:46: c6:9e:05:63:69:79:4b:d0:16:f8:5f:49:54:7e:76: 32:5b:46:10:94:bd:d2:cf:4c:ca:fe:a1:36:a4:9e: c9:c3:08:89:a4:29:10:9a:a0:a2:fb:0c:95:fd:05: 62:fb:b0:e2:48:ab:6c:d1:28:cb:86:89:d0:e8:09: ae:69:0a:61:c5:aa:ff:37:c7:d8:2e:61:b0:55:0f: 15:fc:41:73:4e:70:4e:4e:9b:1d:b0:fa:08:17:37: 6f:41:e5:0e:98:80:7d:31:9f:62:88:8b:5c:a3:9b: e2:2a:99:51:f4:91:f7:2f:37:92:ab:68:40:7b:44: d5:3f:75:74:95:52:24:52:6c:17:1d:37:f4:e7:94: 60:6f:44:5b:cb:8a:1e:32:7c:3c:92:2c:4c:7f:99: 9f:d2:c2:cb:c2:51:2f:f2:b1:79:19:d9:15:4b:71: f9:67:da:9b:ac:ff:b8:0b:a6:dd:38:04:7f:34:9e: 7a:b7:72:f0:08:d6:2d:0e:d0:cc:3c:f2:0a:82:a8: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3B:41:FB:5F:01:D2:38:17:DC:99:98:0A:1E:9B:17:F6:79:91:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.crl X509v3 Authority Key Identifier: keyid:53:E2:5E:B8:51:AD:FF:5D:A7:50:EB:28:1F:DD:BB:A6:9F:8C:62:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a01faf0-6a8e-4e38-92b4-49d20c47fcb7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fd:3a:0a:6c:17:32:b0:a2:14:07:40:91:a8:9e:db:87:a1: 1b:56:1d:83:63:09:dc:7c:8c:de:2f:16:54:a7:bc:7b:05:2a: a8:5a:ef:46:e9:27:4e:b7:e7:31:9b:19:1a:25:1e:ab:9c:ec: 25:32:e0:e1:f3:7a:b1:d6:b4:21:f3:cd:d9:7d:73:61:9b:3e: 12:77:5c:b1:7d:b1:7d:fb:85:17:40:3b:85:f2:97:a9:07:8f: df:c0:28:c0:a3:91:4f:bd:c4:47:b4:9e:93:a6:17:11:68:71: 15:9b:fd:53:94:f7:77:9a:74:84:8a:9b:0d:66:3a:8f:6f:d1: e1:b9:5d:90:25:eb:87:4a:43:a7:4d:31:f2:50:7e:cc:d0:22: 76:7b:9f:d1:44:f6:9a:f6:48:2f:d6:eb:ee:15:ce:24:c2:75: 86:e8:73:e1:07:a9:3d:cb:11:5b:c3:a8:90:fa:b1:0f:bb:3f: 78:3b:2e:0d:f8:cc:4a:30:ad:5e:37:46:d9:22:31:6a:ba:1e: f1:e4:ef:cd:b2:8e:fd:ee:3c:da:69:8a:eb:ee:2d:8f:41:8e: c7:9e:7d:33:54:90:8f:6f:9e:a8:eb:d7:2d:4f:12:c9:b9:48: d0:5f:8d:fb:3e:8d:ef:96:01:5f:96:ab:78:73:cb:6c:84:e5: fe:e8:4e:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4so5ZskkzXCHfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwMWZhZjAtNmE4ZS00ZTM4LTkyYjQtNDlkMjBjNDdm Y2I3MB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk YmFjY2EwNTYtNjJlYy00YjgxLTlkMTQtOTg3NDA3Njc3Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNXtHeh9CWKhQ/4wgeStJJkgGvrFS976FL7p ciLVwOi/vNxUD/63qHEnf0UxtBOwrncSiWO4un8l9EbGngVjaXlL0Bb4X0lUfnYy W0YQlL3Sz0zK/qE2pJ7JwwiJpCkQmqCi+wyV/QVi+7DiSKts0SjLhonQ6AmuaQph xar/N8fYLmGwVQ8V/EFzTnBOTpsdsPoIFzdvQeUOmIB9MZ9iiItco5viKplR9JH3 LzeSq2hAe0TVP3V0lVIkUmwXHTf055Rgb0Rby4oeMnw8kixMf5mf0sLLwlEv8rF5 GdkVS3H5Z9qbrP+4C6bdOAR/NJ56t3LwCNYtDtDMPPIKgqhNcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNA7QftfAdI4F9yZmAoemxf2eZHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTAx ZmFmMC02YThlLTRlMzgtOTJiNC00OWQyMGM0N2ZjYjcvNGEwMWZhZjAtNmE4ZS00 ZTM4LTkyYjQtNDlkMjBjNDdmY2I3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGEwMWZhZjAtNmE4ZS00ZTM4LTky YjQtNDlkMjBjNDdmY2I3LzRhMDFmYWYwLTZhOGUtNGUzOC05MmI0LTQ5ZDIwYzQ3 ZmNiNy5jcmwwHwYDVR0jBBgwFoAUU+JeuFGt/12nUOsoH927pp+MYmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTAxZmFmMC02YThlLTRlMzgtOTJiNC00OWQy MGM0N2ZjYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx/ToKbBcysKIUB0CRqJ7b h6EbVh2DYwncfIzeLxZUp7x7BSqoWu9G6SdOt+cxmxkaJR6rnOwlMuDh83qx1rQh 883ZfXNhmz4Sd1yxfbF9+4UXQDuF8pepB4/fwCjAo5FPvcRHtJ6TphcRaHEVm/1T lPd3mnSEipsNZjqPb9HhuV2QJeuHSkOnTTHyUH7M0CJ2e5/RRPaa9kgv1uvuFc4k wnWG6HPhB6k9yxFbw6iQ+rEPuz94Oy4N+MxKMK1eN0bZIjFquh7x5O/Nso797jza aYrr7i2PQY7Hnn0zVJCPb56o69ctTxLJuUjQX437Po3vlgFflqt4c8tshOX+6E4c -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:03 2025 by rpki-client