$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft File: a316d791-42be-46db-a9be-4bfacf99332c.mft (raw, json) Hash identifier: 6wEyV2xi4FM9f/4L41nWZKzUoBdz4+UaCasCz4mOzDA= Subject key identifier: 44:DF:26:F4:B0:D4:F0:0E:30:05:30:CB:FA:D6:03:FD:24:EC:2C:83 Authority key identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Certificate issuer: /CN=a316d791-42be-46db-a9be-4bfacf99332c Certificate serial: 010D0C9F4328584B963C2F62C224B0028DFE7500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft Manifest number: 010D0C9F43285845833E1B28A28271A6029CFEAD Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: a316d791-42be-46db-a9be-4bfacf99332c.crl (hash: PyoPOJp2q/fp8U9d+Qsl+cb047jHxfvctwe7Hce9Dos=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2f:62:c2:24:b0:02:8d:fe:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316d791-42be-46db-a9be-4bfacf99332c Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=7bdab0b8-a225-47c7-bc13-a18cffc2329c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:e9:ba:a5:f9:43:5e:9d:d0:24:78:f8:b8: 8c:61:2b:88:f6:7d:9f:a5:45:8d:bd:e5:61:9e:37: b5:20:ac:d2:a7:b5:3f:98:5a:32:b9:e4:19:96:78: 76:a3:c5:7a:b6:57:46:c9:2b:33:ef:d2:fd:94:ec: f7:48:17:ae:9f:d5:b6:d3:75:42:80:3b:ac:1f:74: ca:48:82:08:ef:dd:be:c7:d6:ef:17:95:51:0e:97: 29:48:5a:c0:51:6f:d1:71:3a:d3:41:d1:28:3c:65: 09:bc:2d:05:89:63:5b:75:a8:d7:39:a6:7a:88:06: 86:87:ab:4e:51:2d:b8:a8:18:82:05:7c:15:5f:f8: 39:3b:0c:9c:e9:b1:ba:d0:2b:29:98:7d:fe:9e:66: 9c:f8:e4:33:b6:c3:93:4e:17:32:16:52:ac:fa:d6: 6e:33:b1:2b:17:34:7a:68:b6:ac:40:fa:dc:63:40: 24:91:5f:69:df:ef:68:14:10:e3:e1:8b:7c:c6:2b: 6c:f4:e9:a8:4b:58:f9:20:fd:ec:cc:f0:e5:f7:09: 99:77:89:32:0d:81:6d:b6:c5:81:d0:a1:4d:53:36: 45:1d:13:f0:15:45:2f:9c:7b:c8:e2:0e:00:96:b0: 33:08:d7:d1:7c:27:af:dd:ce:e2:08:00:7b:0b:4f: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:26:F4:B0:D4:F0:0E:30:05:30:CB:FA:D6:03:FD:24:EC:2C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl X509v3 Authority Key Identifier: keyid:4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:ef:55:78:d3:cc:27:af:23:16:38:75:5c:35:46:6b:3a: 43:34:ff:fa:55:d2:a7:af:fb:ab:6f:61:94:ac:c1:a9:9f:d7: 09:70:37:32:4e:11:6a:fe:99:06:8c:b0:5d:86:88:31:34:28: 42:0b:2f:87:e4:38:89:aa:b5:d2:e8:87:56:b9:30:f3:33:ae: 54:5c:31:1c:ba:c9:af:ab:a4:67:a9:18:67:6f:b9:c4:d6:49: a7:59:8f:d8:b0:23:59:95:4b:ca:b9:a4:78:7c:ba:d9:fb:08: 6c:ae:d3:4c:ac:ab:c8:4b:b5:b9:14:ca:ca:3d:4a:f4:ac:67: 1a:82:c5:80:b3:3d:d5:c1:65:62:e6:21:6b:e4:b0:9f:d7:a1: 46:57:f3:13:57:c5:8c:52:eb:7c:30:75:30:87:0e:f5:ec:f8: ff:58:14:31:71:45:5d:7d:a4:fd:17:2d:17:ff:4c:14:d3:ef: ea:8a:a3:4e:68:32:d9:9c:8f:a2:81:61:dd:60:91:d3:38:3f: 65:d6:71:95:1e:37:21:cd:5f:c9:bd:6b:2b:c5:57:2a:86:fd: c1:4a:93:bf:08:5b:eb:a5:6f:81:bb:1c:2d:0f:a6:24:f0:78: bd:d8:d1:4e:fd:76:37:4f:e5:22:b2:12:6c:86:2f:88:a2:10: ef:a9:43:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPC9iwiSwAo3+dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMxNmQ3OTEtNDJiZS00NmRiLWE5YmUtNGJmYWNmOTkz MzJjMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk N2JkYWIwYjgtYTIyNS00N2M3LWJjMTMtYTE4Y2ZmYzIzMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o/puqX5Q16d0CR4+LiMYSuI9n2fpUWNveVh nje1IKzSp7U/mFoyueQZlnh2o8V6tldGySsz79L9lOz3SBeun9W203VCgDusH3TK SIII792+x9bvF5VRDpcpSFrAUW/RcTrTQdEoPGUJvC0FiWNbdajXOaZ6iAaGh6tO US24qBiCBXwVX/g5Owyc6bG60CspmH3+nmac+OQztsOTThcyFlKs+tZuM7ErFzR6 aLasQPrcY0AkkV9p3+9oFBDj4Yt8xits9OmoS1j5IP3szPDl9wmZd4kyDYFttsWB 0KFNUzZFHRPwFUUvnHvI4g4AlrAzCNfRfCev3c7iCAB7C08eUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFETfJvSw1PAOMAUwy/rWA/0k7CyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzE2 ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5OTMzMmMvYTMxNmQ3OTEtNDJiZS00 NmRiLWE5YmUtNGJmYWNmOTkzMzJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTMxNmQ3OTEtNDJiZS00NmRiLWE5 YmUtNGJmYWNmOTkzMzJjL2EzMTZkNzkxLTQyYmUtNDZkYi1hOWJlLTRiZmFjZjk5 MzMyYy5jcmwwHwYDVR0jBBgwFoAUTs6igdyVoR04bSB+yWF1lcqU8pgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZh Y2Y5OTMzMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0a+9VeNPMJ68jFjh1XDVG azpDNP/6VdKnr/urb2GUrMGpn9cJcDcyThFq/pkGjLBdhogxNChCCy+H5DiJqrXS 6IdWuTDzM65UXDEcusmvq6RnqRhnb7nE1kmnWY/YsCNZlUvKuaR4fLrZ+whsrtNM rKvIS7W5FMrKPUr0rGcagsWAsz3VwWVi5iFr5LCf16FGV/MTV8WMUut8MHUwhw71 7Pj/WBQxcUVdfaT9Fy0X/0wU0+/qiqNOaDLZnI+igWHdYJHTOD9l1nGVHjchzV/J vWsrxVcqhv3BSpO/CFvrpW+BuxwtD6Yk8Hi92NFO/XY3T+UishJshi+IohDvqUOp -----END CERTIFICATE-----Generated at Tue Oct 21 15:16:23 2025 by rpki-client