$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: BhJJUCusi9gaYVtbnpsKgqKuSvTH7MuWDgKtp3aCO/w= Subject key identifier: 5E:92:11:51:C2:42:74:2F:AF:FB:8C:A0:46:B7:A7:C9:46:9D:D7:D5 Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584B920C1B206561FAD4CEE96340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88CFB Signing time: Sun 19 Oct 2025 06:00:03 +0000 Manifest this update: Sun 19 Oct 2025 06:00:03 +0000 Manifest next update: Tue 21 Oct 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: pQt4onDTS+W3YW0v5FPq5Ph8nXda1dgr1gGraIEL1XA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:0c:1b:20:65:61:fa:d4:ce:e9:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Oct 19 06:00:03 2025 GMT Not After : Oct 21 06:00:00 2025 GMT Subject: CN=5bc70908-deb8-4c7f-a1c1-bdb04c00bf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:bc:a5:48:b6:d2:3f:25:0e:af:40:1c:f0: e9:8e:75:b4:ef:e1:88:80:0a:36:51:5e:bb:3f:e0: 45:88:35:84:de:cd:c8:6a:9e:b1:fe:93:55:71:be: 66:d6:4e:24:7d:61:ed:0b:d4:9b:97:2d:2d:d1:9a: a4:18:b6:3c:e2:90:87:b6:b5:ec:21:0f:8d:11:e8: 72:67:88:9b:27:74:79:a4:f7:0f:22:53:56:1f:76: 8e:46:cd:63:ea:83:c5:06:ac:3b:c1:af:80:23:14: 05:e5:a7:61:67:26:f5:03:e2:9f:9c:70:5b:7d:45: 8d:9a:55:53:eb:42:dd:e5:ff:3e:b0:91:53:72:6b: 5d:4d:08:6d:e4:f6:48:0c:f9:0d:3b:85:51:3d:7c: a9:b0:de:a8:ef:5b:81:fa:d9:2f:6a:f3:16:d2:26: 84:e3:69:ec:51:bb:ad:11:7a:a7:21:81:3e:f2:95: ee:4d:1b:e9:92:82:4a:cb:10:a4:57:dc:93:60:62: d6:40:9c:45:01:c5:70:83:f6:31:3a:0c:dd:90:ab: fc:99:57:87:f3:3c:5a:05:3e:d4:78:f1:8f:fe:db: ae:cc:ca:a5:02:57:30:15:76:91:35:32:c4:e3:bf: bf:df:ab:84:27:14:0c:05:3a:1e:8c:96:8e:a7:ab: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:11:51:C2:42:74:2F:AF:FB:8C:A0:46:B7:A7:C9:46:9D:D7:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:11:01:af:9a:2c:81:1c:8d:24:86:34:0d:bd:7e:40:cd:15: d7:f8:8e:09:de:b9:f0:c5:c6:54:c8:5b:0d:5b:6b:97:15:45: 52:50:8a:75:d1:10:1b:36:db:81:29:9b:ef:8f:fb:61:70:be: c4:c7:3a:0e:54:5e:72:cf:1c:1a:21:fd:d3:41:86:e3:75:e8: 7b:2b:f1:34:e7:a9:1f:e7:17:68:58:c8:9c:54:d1:fe:f1:c3: f1:ca:ab:c3:3b:9e:ac:a9:be:b3:a8:a2:45:53:0f:2a:44:7a: 12:b4:20:db:a2:4c:b8:98:f1:c1:f7:df:78:ba:53:92:57:1e: 2f:f0:a0:f3:d6:fb:b7:80:a0:a5:11:b7:e4:7e:46:ca:b8:fb: e2:62:5a:e2:e5:58:6b:03:d8:15:ae:12:12:85:76:a6:14:02: 58:67:4b:0a:c6:8d:5c:a2:e1:99:b7:17:76:e6:cf:49:3d:4e: 62:3f:d3:18:9c:93:18:2f:c0:4f:1c:07:aa:51:bd:ee:cd:ab: 76:e5:ad:5c:ed:b7:1c:3a:b6:59:f4:39:56:33:ce:54:97:9e: 1b:c1:f4:66:d3:bd:bb:a8:2b:e6:2d:3a:90:03:4a:0b:6e:9b: 11:51:d2:7b:02:1b:7b:38:54:93:a9:0b:e6:8a:5c:dd:ee:c5: f5:dd:ef:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSDBsgZWH61M7pY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MTAxOTA2MDAwM1oXDTI1MTAyMTA2MDAwMFowLzEtMCsGA1UEAxMk NWJjNzA5MDgtZGViOC00YzdmLWExYzEtYmRiMDRjMDBiZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMC8pUi20j8lDq9AHPDpjnW07+GIgAo2UV67 P+BFiDWE3s3Iap6x/pNVcb5m1k4kfWHtC9Sbly0t0ZqkGLY84pCHtrXsIQ+NEehy Z4ibJ3R5pPcPIlNWH3aORs1j6oPFBqw7wa+AIxQF5adhZyb1A+KfnHBbfUWNmlVT 60Ld5f8+sJFTcmtdTQht5PZIDPkNO4VRPXypsN6o71uB+tkvavMW0iaE42nsUbut EXqnIYE+8pXuTRvpkoJKyxCkV9yTYGLWQJxFAcVwg/YxOgzdkKv8mVeH8zxaBT7U ePGP/tuuzMqlAlcwFXaRNTLE47+/36uEJxQMBToejJaOp6sR6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF6SEVHCQnQvr/uMoEa3p8lGndfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5EQGvmiyBHI0khjQNvX5A zRXX+I4J3rnwxcZUyFsNW2uXFUVSUIp10RAbNtuBKZvvj/thcL7ExzoOVF5yzxwa If3TQYbjdeh7K/E056kf5xdoWMicVNH+8cPxyqvDO56sqb6zqKJFUw8qRHoStCDb oky4mPHB9994ulOSVx4v8KDz1vu3gKClEbfkfkbKuPviYlri5VhrA9gVrhIShXam FAJYZ0sKxo1couGZtxd25s9JPU5iP9MYnJMYL8BPHAeqUb3uzat25a1c7bccOrZZ 9DlWM85Ul54bwfRm0727qCvmLTqQA0oLbpsRUdJ7Aht7OFSTqQvmilzd7sX13e+a -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:57 2025 by rpki-client