$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft File: c440a43c-775a-4623-b6c5-4e27f05b38e6.mft (raw, json) Hash identifier: f8itMxGGKHOPGH042yS8L47B5EfTTFOKfw483a1AKpw= Subject key identifier: 8F:23:1E:0B:04:74:14:AB:61:3E:45:10:BE:E4:41:0D:1E:9E:35:E9 Authority key identifier: 61:19:97:CE:6E:BC:A7:E5:7F:C9:DE:1C:DA:EF:36:8E:05:B7:C2:9B Certificate issuer: /CN=c440a43c-775a-4623-b6c5-4e27f05b38e6 Certificate serial: 010D0C9F4328584B96EECDFB9D9D1DA6CCA22DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft Manifest number: 010D0C9F43285845574DC51171BA4632A74C455D Signing time: Tue 21 Oct 2025 00:00:03 +0000 Manifest this update: Tue 21 Oct 2025 00:00:03 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: c440a43c-775a-4623-b6c5-4e27f05b38e6.crl (hash: SmjuYlODjPMuHnXKYD2oflFCr+Cc3n9l3eMlyyrpmAE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:ee:cd:fb:9d:9d:1d:a6:cc:a2:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c440a43c-775a-4623-b6c5-4e27f05b38e6 Validity Not Before: Oct 21 00:00:03 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=e7c649bb-875f-49ca-a711-9af433141973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:79:41:a6:95:a0:0d:27:7e:42:8a:fe:54: a0:6d:36:a1:06:02:82:d2:60:07:f7:bc:61:3a:5f: a0:1f:21:55:24:e2:94:64:73:ed:cb:d7:e0:81:33: d5:cd:b8:f1:dd:5b:10:54:fd:ed:8f:3d:58:38:37: 64:36:49:b7:cb:07:4b:f9:fa:c1:a6:14:21:07:2c: 2a:d4:2b:d4:72:1e:d6:ea:4e:5a:d3:5c:cc:a0:b7: 5f:cb:9b:35:2f:47:ef:a3:98:2f:00:e6:a5:d1:61: e7:6c:8d:63:d1:aa:a9:c3:34:a4:2b:b1:5f:a3:f3: c2:aa:9e:a7:f5:1e:57:64:d2:23:24:7c:81:01:19: 40:89:a7:a4:16:f4:42:3b:36:bb:05:29:8b:97:61: 70:95:45:37:82:88:9b:95:72:b6:c7:e9:a3:c7:20: 81:b1:65:0c:2a:c6:e1:09:e9:2c:25:be:09:84:66: 62:15:81:e8:fc:e3:24:fb:89:b0:aa:34:1e:63:77: a6:ec:8f:f6:30:18:56:3c:e4:74:93:4e:d6:d7:82: 67:05:10:69:38:b3:07:c6:c1:c5:60:4b:bc:32:72: 73:d1:31:91:2f:68:f4:44:c5:4d:a5:d2:ff:a0:fd: b2:10:5c:62:0b:db:9c:38:9a:76:e7:02:28:27:64: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:1E:0B:04:74:14:AB:61:3E:45:10:BE:E4:41:0D:1E:9E:35:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6/c440a43c-775a-4623-b6c5-4e27f05b38e6.crl X509v3 Authority Key Identifier: keyid:61:19:97:CE:6E:BC:A7:E5:7F:C9:DE:1C:DA:EF:36:8E:05:B7:C2:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c440a43c-775a-4623-b6c5-4e27f05b38e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e7:3e:67:4a:15:f5:18:7b:23:c7:52:12:e7:12:e2:f3:9f: bc:b4:3e:d8:38:f2:66:2b:bb:bc:21:b4:75:06:41:a6:06:95: 09:3d:26:21:12:05:04:d1:3b:09:71:de:ac:cb:b5:95:96:96: 77:da:68:ec:bb:76:f0:99:d9:b5:51:98:c4:e3:b6:72:bb:d5: ef:b2:2c:09:8c:19:70:96:53:77:b0:60:c9:55:ee:1e:09:93: 5e:ac:d2:7e:ac:f6:0e:c8:62:3c:d5:4e:29:f0:79:cb:37:bf: 34:13:d5:d7:58:fc:1b:be:b5:2c:1b:08:14:b7:ed:7b:f2:51: 20:cd:03:b7:ee:b2:51:16:3f:7a:a5:b1:87:2e:ad:85:e8:ea: e0:cf:91:0a:a3:b6:b2:ee:fa:54:25:3e:f9:6f:78:d2:dc:1a: 84:02:42:ef:5b:6e:1c:95:b5:c0:af:08:5c:ac:7c:44:97:dd: d2:39:df:5e:13:34:62:37:5c:9f:cd:0f:bf:6b:57:2f:79:0a: 8d:e8:cc:13:19:2d:15:2c:70:8f:99:36:7a:00:40:71:80:50: d5:b3:90:fe:39:93:00:52:d0:dc:b3:bb:b4:5e:a7:63:ec:80: 7e:91:d4:b1:a0:df:a6:a3:fe:d9:33:0c:a9:f0:70:cc:ff:64: 9e:04:4b:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW7s37nZ0dpsyiLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ0MGE0M2MtNzc1YS00NjIzLWI2YzUtNGUyN2YwNWIz OGU2MB4XDTI1MTAyMTAwMDAwM1oXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk ZTdjNjQ5YmItODc1Zi00OWNhLWE3MTEtOWFmNDMzMTQxOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgad5QaaVoA0nfkKK/lSgbTahBgKC0mAH97xh Ol+gHyFVJOKUZHPty9fggTPVzbjx3VsQVP3tjz1YODdkNkm3ywdL+frBphQhBywq 1CvUch7W6k5a01zMoLdfy5s1L0fvo5gvAOal0WHnbI1j0aqpwzSkK7Ffo/PCqp6n 9R5XZNIjJHyBARlAiaekFvRCOza7BSmLl2FwlUU3goiblXK2x+mjxyCBsWUMKsbh CeksJb4JhGZiFYHo/OMk+4mwqjQeY3em7I/2MBhWPOR0k07W14JnBRBpOLMHxsHF YEu8MnJz0TGRL2j0RMVNpdL/oP2yEFxiC9ucOJp25wIoJ2SJvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI8jHgsEdBSrYT5FEL7kQQ0enjXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDQw YTQzYy03NzVhLTQ2MjMtYjZjNS00ZTI3ZjA1YjM4ZTYvYzQ0MGE0M2MtNzc1YS00 NjIzLWI2YzUtNGUyN2YwNWIzOGU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQ0MGE0M2MtNzc1YS00NjIzLWI2 YzUtNGUyN2YwNWIzOGU2L2M0NDBhNDNjLTc3NWEtNDYyMy1iNmM1LTRlMjdmMDVi MzhlNi5jcmwwHwYDVR0jBBgwFoAUYRmXzm68p+V/yd4c2u82jgW3wpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDQwYTQzYy03NzVhLTQ2MjMtYjZjNS00ZTI3 ZjA1YjM4ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA95z5nShX1GHsjx1IS5xLi 85+8tD7YOPJmK7u8IbR1BkGmBpUJPSYhEgUE0TsJcd6sy7WVlpZ32mjsu3bwmdm1 UZjE47Zyu9XvsiwJjBlwllN3sGDJVe4eCZNerNJ+rPYOyGI81U4p8HnLN780E9XX WPwbvrUsGwgUt+178lEgzQO37rJRFj96pbGHLq2F6Orgz5EKo7ay7vpUJT75b3jS 3BqEAkLvW24clbXArwhcrHxEl93SOd9eEzRiN1yfzQ+/a1cveQqN6MwTGS0VLHCP mTZ6AEBxgFDVs5D+OZMAUtDcs7u0Xqdj7IB+kdSxoN+mo/7ZMwyp8HDM/2SeBEux -----END CERTIFICATE-----Generated at Tue Oct 21 15:29:45 2025 by rpki-client