$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft File: 71effefa-6381-4c3d-8487-95f07e37a7cf.mft (raw, json) Hash identifier: FlVlDb7Pj9FSoTX+nohyKLIDBhDhp1OVt/rQyyGj5ow= Subject key identifier: EB:A9:65:49:40:F5:A3:ED:7E:C7:41:5B:FB:9D:AC:2B:A8:BB:5A:D1 Authority key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Certificate issuer: /CN=71effefa-6381-4c3d-8487-95f07e37a7cf Certificate serial: 010D0C9F4328584B9247B5BECE399A5D4D728EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft Manifest number: 010D0C9F4328584073A84657CD0005EEFC67F2FD Signing time: Sun 19 Oct 2025 08:00:09 +0000 Manifest this update: Sun 19 Oct 2025 08:00:09 +0000 Manifest next update: Tue 21 Oct 2025 08:00:00 +0000 Files and hashes: 1: 71effefa-6381-4c3d-8487-95f07e37a7cf.crl (hash: r8REjD6Cfx37MUI9S8hGQ9zyfx7vy2rGwJqXTErnbp4=) 2: d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer (hash: MFx/Zq+SYIVCL/sxvVRDYD1z03EMN0j5Nry9JFEDSkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:47:b5:be:ce:39:9a:5d:4d:72:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Validity Not Before: Oct 19 08:00:09 2025 GMT Not After : Oct 21 08:00:00 2025 GMT Subject: CN=30dd0ec3-7fff-4981-b720-f76c61a4a25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:41:31:c1:24:be:e4:6e:60:d1:a7:88:a1: ea:82:cf:9d:18:b6:6b:16:fc:e8:c1:a7:62:b8:d6: 04:7a:71:c0:75:8d:5f:43:90:fb:a4:71:7d:53:54: 23:bf:74:ea:85:93:c7:ab:c7:cf:cb:ca:95:1c:ad: 10:60:8c:c9:d7:f3:6b:43:6f:65:aa:c1:87:36:92: f0:a6:8f:02:e4:c7:b7:98:9c:8e:c8:e1:b1:3d:eb: 2b:08:f6:5b:70:6d:7d:16:af:e3:bb:60:a4:10:3c: f8:5f:8e:47:a4:74:a0:d2:e4:38:77:2b:d2:d0:78: b8:71:96:80:21:38:3d:eb:e9:a4:c2:b4:d9:22:73: 29:d6:d4:04:d9:8c:cb:29:6a:24:cb:c9:a8:4d:73: 07:6c:6d:be:55:42:12:cf:cb:3b:29:0e:f1:79:14: 90:aa:1e:ef:d4:92:31:39:27:06:e2:57:20:6e:9f: 49:b5:eb:38:7a:05:c5:1f:11:2c:3c:de:9f:af:0d: b9:1c:24:67:bd:39:93:c3:07:7e:d1:01:7f:18:6f: 8f:db:90:f7:21:9c:2e:3d:37:47:e3:56:89:41:ec: de:33:87:7f:05:52:04:fd:bf:fd:8e:91:b9:4f:9f: 2c:2a:b5:4a:c0:a5:f2:a7:2f:84:4b:f0:8d:aa:68: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:65:49:40:F5:A3:ED:7E:C7:41:5B:FB:9D:AC:2B:A8:BB:5A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl X509v3 Authority Key Identifier: keyid:CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:36:03:30:56:3b:68:bf:86:2c:f3:40:d4:23:d7:52:f3:2e: 1f:e7:1c:e9:e3:26:58:61:34:5c:37:1b:03:59:45:84:d9:eb: c6:a0:03:50:47:44:76:dd:4d:07:58:01:ea:67:b4:b8:36:62: 07:0e:33:e7:ef:b6:36:40:36:7a:12:07:f9:64:42:c9:6e:c7: 2c:64:b3:1a:84:35:ec:5d:fd:a8:b5:cf:ae:e2:59:0a:fd:b6: e9:79:5e:9c:56:59:28:12:76:91:99:0d:b6:cf:b9:d9:b8:48: cd:bf:d0:d9:32:55:e8:1b:07:77:5a:e8:b0:c7:c7:b3:40:33: 7d:49:0e:86:91:e2:6d:df:1a:a2:dc:45:88:1d:4d:aa:a7:5c: 80:76:5e:23:13:83:38:ee:15:8a:43:3c:7a:e5:b3:54:43:a2: a9:db:9b:b6:91:c0:6a:09:35:c3:be:43:8b:74:13:16:47:68: 62:4b:0e:75:6e:1b:05:5c:dc:4e:20:b2:ec:4c:4a:d2:ff:eb: 9f:cf:9d:e6:1f:3a:64:43:fd:06:be:c1:a6:ca:40:fe:4c:a0: 33:50:71:fe:88:eb:35:2e:31:24:ea:2b:ef:b5:cb:a3:26:3a: 05:90:f9:cf:9e:e6:2c:54:4c:b1:ed:e8:0a:b1:b2:db:06:01: f2:b9:05:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSR7W+zjmaXU1yjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdh N2NmMB4XDTI1MTAxOTA4MDAwOVoXDTI1MTAyMTA4MDAwMFowLzEtMCsGA1UEAxMk MzBkZDBlYzMtN2ZmZi00OTgxLWI3MjAtZjc2YzYxYTRhMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzZBMcEkvuRuYNGniKHqgs+dGLZrFvzowadi uNYEenHAdY1fQ5D7pHF9U1Qjv3TqhZPHq8fPy8qVHK0QYIzJ1/NrQ29lqsGHNpLw po8C5Me3mJyOyOGxPesrCPZbcG19Fq/ju2CkEDz4X45HpHSg0uQ4dyvS0Hi4cZaA ITg96+mkwrTZInMp1tQE2YzLKWoky8moTXMHbG2+VUISz8s7KQ7xeRSQqh7v1JIx OScG4lcgbp9Jtes4egXFHxEsPN6frw25HCRnvTmTwwd+0QF/GG+P25D3IZwuPTdH 41aJQezeM4d/BVIE/b/9jpG5T58sKrVKwKXypy+ES/CNqmiyRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOupZUlA9aPtfsdBW/udrCuou1rRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MWVm ZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvNzFlZmZlZmEtNjM4MS00 YzNkLTg0ODctOTVmMDdlMzdhN2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzFlZmZlZmEtNjM4MS00YzNkLTg0 ODctOTVmMDdlMzdhN2NmLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi5jcmwwHwYDVR0jBBgwFoAUzqZHU53go10NUniHlU3Mg/czf9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYw N2UzN2E3Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5NgMwVjtov4Ys80DUI9dS 8y4f5xzp4yZYYTRcNxsDWUWE2evGoANQR0R23U0HWAHqZ7S4NmIHDjPn77Y2QDZ6 Egf5ZELJbscsZLMahDXsXf2otc+u4lkK/bbpeV6cVlkoEnaRmQ22z7nZuEjNv9DZ MlXoGwd3Wuiwx8ezQDN9SQ6GkeJt3xqi3EWIHU2qp1yAdl4jE4M47hWKQzx65bNU Q6Kp25u2kcBqCTXDvkOLdBMWR2hiSw51bhsFXNxOILLsTErS/+ufz53mHzpkQ/0G vsGmykD+TKAzUHH+iOs1LjEk6ivvtcujJjoFkPnPnuYsVEyx7egKsbLbBgHyuQWs -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:48 2025 by rpki-client