$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft File: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft (raw, json) Hash identifier: EH+F8Ji3Z5mly9vKD7G5tC7D36noaICA/CxSTafIRio= Subject key identifier: D6:44:EE:B1:E0:36:7D:CF:C2:7A:53:78:1D:35:98:DF:3C:31:7B:4C Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584B96009354CF22375535909580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft Manifest number: 010D0C9F432858453FC397D9677135A132B02845 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl (hash: 1+kizDKym5S/ny2o0H6I2mOh99IpkahepM1ID2NKAhE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:93:54:cf:22:37:55:35:90:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=5d9f7278-fa56-4204-93ca-6f2775e1f647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:b5:8d:d8:81:47:76:9a:0f:06:f9:5a:25: 35:ca:06:22:15:98:aa:2c:83:54:85:b5:bc:b2:1a: 61:6e:10:8e:3e:bb:f1:6e:72:3a:8a:73:d8:7c:b3: 71:25:f2:95:27:a1:52:c2:f6:a3:67:00:35:d2:85: 06:92:08:a2:11:ce:84:18:f0:59:3f:e8:5b:9c:bd: 8f:d6:4f:20:5c:bb:8b:59:41:40:90:63:1b:80:48: d6:82:d2:7e:b0:2e:c5:f4:67:40:e6:6b:01:dd:12: 8a:e3:33:fc:d0:22:46:a0:f2:4b:b3:37:47:84:49: 15:0f:c7:d7:cc:50:a7:c7:5a:0f:7e:3c:1e:b0:3a: db:f6:6b:9b:d0:d6:dc:ba:fd:9a:bc:7b:98:59:46: 61:fe:81:2e:10:96:96:10:d7:11:22:21:62:93:19: 49:c0:77:15:1b:8f:20:48:77:6c:df:35:b2:63:a4: 7e:c6:8b:98:0c:5a:37:fb:0c:7f:00:44:59:cf:bc: 76:1a:21:ef:d0:46:44:47:5c:8b:45:c9:a2:d0:a2: e8:62:d0:21:d3:7f:17:19:29:04:1b:54:ae:84:ec: 4a:e9:13:51:7a:60:2e:b1:a1:17:0e:78:30:68:72: fc:8d:33:b0:f4:2c:a6:36:d7:b2:5a:31:10:8e:52: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:EE:B1:E0:36:7D:CF:C2:7A:53:78:1D:35:98:DF:3C:31:7B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:53:8c:d9:62:75:f0:ae:e2:17:01:c9:c0:56:28:91:73:a9: 9b:1f:e7:f6:8f:26:62:6a:3d:43:45:13:34:4e:cc:70:85:a1: 4f:6d:07:3e:89:cc:9e:a8:75:b4:e0:2f:61:39:5d:b7:ab:77: 4a:1c:1f:82:96:8f:02:b7:21:cb:8b:d6:3f:83:57:10:a9:f0: fc:f0:d4:1a:d6:b2:56:7a:c7:ff:d2:c3:8c:ff:ff:32:4e:2f: b7:1f:e2:7d:e9:7e:54:1f:bd:2e:c8:40:c0:8b:67:6c:74:9b: 33:65:8d:16:bb:ed:fe:4e:8a:82:a3:69:fe:e4:d4:40:29:6f: 81:86:b0:cf:b0:5d:9f:93:cd:cd:24:1c:c6:f1:61:f2:91:6a: b7:3b:1a:90:f7:a7:d7:95:48:3b:37:ca:2f:b9:e1:95:64:c1: df:5a:63:4f:bb:f2:ce:bd:5d:4f:11:0c:da:46:0d:9b:83:32: 97:d2:49:a0:2c:84:b8:ee:49:7e:df:b0:c9:d8:a0:b8:a1:95: a9:84:26:45:34:36:cf:f3:6f:6e:1f:46:22:0c:78:b3:0e:81: cc:18:c5:02:2a:44:9f:90:59:5d:76:9a:e6:83:31:22:59:55: 96:12:de:71:7c:e7:90:97:6c:7b:36:fd:da:2f:2c:bb:7c:36: 9f:4f:5c:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJNUzyI3VTWQlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk NWQ5ZjcyNzgtZmE1Ni00MjA0LTkzY2EtNmYyNzc1ZTFmNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY21jdiBR3aaDwb5WiU1ygYiFZiqLINUhbW8 shphbhCOPrvxbnI6inPYfLNxJfKVJ6FSwvajZwA10oUGkgiiEc6EGPBZP+hbnL2P 1k8gXLuLWUFAkGMbgEjWgtJ+sC7F9GdA5msB3RKK4zP80CJGoPJLszdHhEkVD8fX zFCnx1oPfjwesDrb9mub0Nbcuv2avHuYWUZh/oEuEJaWENcRIiFikxlJwHcVG48g SHds3zWyY6R+xouYDFo3+wx/AERZz7x2GiHv0EZER1yLRcmi0KLoYtAh038XGSkE G1SuhOxK6RNRemAusaEXDngwaHL8jTOw9CymNteyWjEQjlIFZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNZE7rHgNn3PwnpTeB01mN88MXtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvY2YwYThhOWItMzY0NS00 MzhhLWE2ZTYtZTAzODViZmZjZmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSU4zZYnXwruIXAcnAViiR c6mbH+f2jyZiaj1DRRM0TsxwhaFPbQc+icyeqHW04C9hOV23q3dKHB+Clo8CtyHL i9Y/g1cQqfD88NQa1rJWesf/0sOM//8yTi+3H+J96X5UH70uyEDAi2dsdJszZY0W u+3+ToqCo2n+5NRAKW+BhrDPsF2fk83NJBzG8WHykWq3OxqQ96fXlUg7N8ovueGV ZMHfWmNPu/LOvV1PEQzaRg2bgzKX0kmgLIS47kl+37DJ2KC4oZWphCZFNDbP829u H0YiDHizDoHMGMUCKkSfkFlddprmgzEiWVWWEt5xfOeQl2x7Nv3aLyy7fDafT1wW -----END CERTIFICATE-----Generated at Tue Oct 21 15:23:55 2025 by rpki-client