$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft File: 57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft (raw, json) Hash identifier: yg3GgClffEYcSl1wb670g/cp36mw+AR0bQZDQbhD7dg= Subject key identifier: A4:02:7B:7A:94:7C:B6:D5:7A:73:EF:29:F9:EB:55:A3:5E:1C:F1:F7 Authority key identifier: 2B:79:33:F6:6D:60:F2:96:CB:5D:AD:01:DF:46:AC:06:6F:64:AA:C0 Certificate issuer: /CN=57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8 Certificate serial: 010D0C9F4328584B938F3C0F0B27422A185DE680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft Manifest number: 010D0C9F4328584073A824281CD47AF813E3C8FC Signing time: Sun 19 Oct 2025 19:00:03 +0000 Manifest this update: Sun 19 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl (hash: u36R/nQZ4AuLgHaTx58OpOZszxnEffRkWpHWO0mBCzg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:8f:3c:0f:0b:27:42:2a:18:5d:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8 Validity Not Before: Oct 19 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=07a1b00b-8483-4236-b4ca-08acdc187172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:b2:f3:1a:a9:2c:ed:0a:29:a0:df:29:86: b3:42:d9:1b:f2:71:87:c8:18:56:08:48:57:b7:88: a7:2a:01:7a:77:1f:56:fc:0c:c0:1f:17:cb:6b:07: 13:95:dd:f3:02:45:55:0a:93:0c:25:d7:f2:ff:c7: 2f:c2:3c:f0:cf:63:e9:7a:33:f5:29:f0:e4:86:65: ee:d9:05:a4:5a:8b:45:41:f8:be:f8:ca:8a:08:1c: da:8b:d7:fb:eb:6c:92:97:06:bb:2e:36:60:25:7a: 35:72:05:d3:85:48:0d:a3:71:99:95:df:bf:95:88: a3:f3:fb:91:05:3c:d4:0f:c2:02:98:d1:43:ba:fc: e5:c1:d7:e2:31:58:19:7c:b9:16:6f:c5:3e:d3:73: 7b:60:4e:ba:fa:e9:a2:52:6e:ea:cf:0e:93:ba:49: c4:96:e5:f6:b6:66:f5:4e:c0:f1:68:fb:e1:ac:7d: 60:1e:43:08:85:fb:31:32:ad:ca:ad:92:d5:84:60: b8:d9:0c:c6:c0:4f:b5:36:5d:56:8b:bf:e6:e2:b7: a5:45:81:3a:4b:a8:fc:d4:95:f4:dc:e0:57:ca:b7: cb:22:98:49:05:0b:e1:f5:a0:ad:fd:8e:0f:af:74: 33:74:8e:06:7d:50:dc:7c:4e:11:0a:5d:b8:b6:57: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:02:7B:7A:94:7C:B6:D5:7A:73:EF:29:F9:EB:55:A3:5E:1C:F1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.crl X509v3 Authority Key Identifier: keyid:2B:79:33:F6:6D:60:F2:96:CB:5D:AD:01:DF:46:AC:06:6F:64:AA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57a1f2cd-0c22-4ee4-8533-d0e4bd34efb8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:09:70:38:fa:3f:4d:9f:05:66:50:da:03:2c:e3:af:7b:d1: 0a:ab:23:fd:d0:ef:7c:84:77:0b:90:e2:43:db:a4:2a:c6:74: 9a:11:78:72:1a:54:08:0d:e3:fb:76:7a:8a:b4:e6:0d:5b:f6: 06:8c:4f:93:22:eb:85:52:91:4d:dd:67:b8:e4:35:1c:e7:f6: 33:b7:29:c0:4c:a0:4a:39:4f:14:df:c4:62:e6:61:b0:27:38: 10:d0:77:4e:95:e9:3e:fb:72:38:2b:0e:13:e9:94:98:3e:ff: 26:31:a6:4f:c8:6c:13:fe:d2:4a:9c:f7:c1:eb:19:2b:ae:d2: 24:c8:81:fb:d0:ca:d7:50:d3:96:1d:8d:c3:07:aa:d2:a8:fe: 05:e6:ed:59:4f:b0:35:e5:61:c1:50:b9:34:81:cb:96:57:82: 62:76:8e:12:1e:bd:5a:15:7f:20:6c:5d:c1:66:df:f4:73:9f: 79:6c:62:3d:0c:f8:e1:0f:2c:9b:54:87:54:6d:b5:a0:16:12: 04:0c:e9:f5:df:c8:c3:25:dc:51:ef:ee:8e:08:43:85:eb:a3: 95:7c:ec:9e:dd:0e:fe:f4:27:e8:a4:1a:bc:a0:fd:1d:5d:fb: 9b:13:b7:fc:93:b3:02:fc:32:13:b6:19:59:5c:08:39:c2:2c: 8a:dc:14:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTjzwPCydCKhhd5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdhMWYyY2QtMGMyMi00ZWU0LTg1MzMtZDBlNGJkMzRl ZmI4MB4XDTI1MTAxOTE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk MDdhMWIwMGItODQ4My00MjM2LWI0Y2EtMDhhY2RjMTg3MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ+y8xqpLO0KKaDfKYazQtkb8nGHyBhWCEhX t4inKgF6dx9W/AzAHxfLawcTld3zAkVVCpMMJdfy/8cvwjzwz2PpejP1KfDkhmXu 2QWkWotFQfi++MqKCBzai9f762ySlwa7LjZgJXo1cgXThUgNo3GZld+/lYij8/uR BTzUD8ICmNFDuvzlwdfiMVgZfLkWb8U+03N7YE66+umiUm7qzw6TuknEluX2tmb1 TsDxaPvhrH1gHkMIhfsxMq3KrZLVhGC42QzGwE+1Nl1Wi7/m4relRYE6S6j81JX0 3OBXyrfLIphJBQvh9aCt/Y4Pr3QzdI4GfVDcfE4RCl24tlf3aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKQCe3qUfLbVenPvKfnrVaNeHPH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Ex ZjJjZC0wYzIyLTRlZTQtODUzMy1kMGU0YmQzNGVmYjgvNTdhMWYyY2QtMGMyMi00 ZWU0LTg1MzMtZDBlNGJkMzRlZmI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdhMWYyY2QtMGMyMi00ZWU0LTg1 MzMtZDBlNGJkMzRlZmI4LzU3YTFmMmNkLTBjMjItNGVlNC04NTMzLWQwZTRiZDM0 ZWZiOC5jcmwwHwYDVR0jBBgwFoAUK3kz9m1g8pbLXa0B30asBm9kqsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2ExZjJjZC0wYzIyLTRlZTQtODUzMy1kMGU0 YmQzNGVmYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGCXA4+j9NnwVmUNoDLOOv e9EKqyP90O98hHcLkOJD26QqxnSaEXhyGlQIDeP7dnqKtOYNW/YGjE+TIuuFUpFN 3We45DUc5/YztynATKBKOU8U38Ri5mGwJzgQ0HdOlek++3I4Kw4T6ZSYPv8mMaZP yGwT/tJKnPfB6xkrrtIkyIH70MrXUNOWHY3DB6rSqP4F5u1ZT7A15WHBULk0gcuW V4Jido4SHr1aFX8gbF3BZt/0c595bGI9DPjhDyybVIdUbbWgFhIEDOn138jDJdxR 7+6OCEOF66OVfOye3Q7+9CfopBq8oP0dXfubE7f8k7MC/DITthlZXAg5wiyK3BQS -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:21 2025 by rpki-client