$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft File: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft (raw, json) Hash identifier: a/Uo6ogb/EBnUvzOCEwoB6BX66duDr4W230AdARftkw= Subject key identifier: F2:38:9C:16:87:86:B7:78:5D:DD:8D:0D:A7:0F:C9:EB:37:9B:94:10 Authority key identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Certificate issuer: /CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Certificate serial: 010D0C9F4328584B92DC8D6B3533EA52B8A9E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft Manifest number: 010D0C9F4328584073A854DB5F74B2A9424A767B Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl (hash: G93/M8nVs871f9/Yt166d/FBftxPuYKs3hRFGd4TOeg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8d:6b:35:33:ea:52:b8:a9:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=83d3f056-f88f-4bca-abd6-1ddae578dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:de:f1:fa:cd:c5:c9:20:ca:5b:79:a0:1e: d9:9f:97:1f:9f:d8:bb:a1:e0:4a:7c:1c:2b:9a:27: ee:52:b1:18:f3:f1:75:9d:99:a8:b7:1e:93:61:05: 93:7c:8d:ff:58:89:41:34:7d:b9:ca:c6:d4:e5:61: 42:64:f2:95:5d:e8:93:1c:17:0c:b9:47:f7:b2:11: c1:53:2b:f9:f6:5b:e9:6f:a0:19:97:fe:4b:a9:e2: 08:ca:9d:bb:f1:72:f3:12:21:3b:f8:9d:1e:66:3c: 1f:79:e1:a5:34:0d:01:6d:e3:f4:56:92:7a:56:a3: 9c:07:79:f0:55:6d:5e:47:1e:57:ae:2d:36:46:f8: db:4b:0f:30:94:e6:53:c8:65:0b:33:42:8f:1e:da: dc:82:6c:80:b8:8f:85:5c:86:ff:18:1c:68:b5:03: e4:5c:f7:a6:da:9c:e6:16:be:06:e6:2d:a7:d0:96: c6:c4:1a:3d:84:b4:a7:b3:8a:0f:a4:c7:54:6c:17: b6:0b:66:7c:62:8b:6b:12:83:3f:22:24:26:12:3a: ad:50:c1:79:4f:84:97:be:16:e7:e4:e6:67:ab:0a: 7e:1e:bb:b8:36:6d:1a:07:c1:70:a0:e4:06:33:5a: f3:78:ca:05:a3:6d:3e:5b:09:5c:7c:3d:aa:d4:0a: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:9C:16:87:86:B7:78:5D:DD:8D:0D:A7:0F:C9:EB:37:9B:94:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl X509v3 Authority Key Identifier: keyid:C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e8:a1:2d:4d:b1:5c:48:79:c0:28:a9:99:ae:55:56:79:b1: 83:5f:00:ac:56:34:6f:9b:be:dd:a5:ac:ec:3b:7b:99:f3:23: ae:f5:9c:f4:47:5e:34:d2:79:12:6f:e6:ea:0e:6f:12:3f:28: b2:a7:1b:55:5b:8e:a0:19:1d:27:91:49:e7:37:db:73:44:d2: 4b:32:55:7d:c1:57:fc:89:1f:da:85:1e:0a:65:18:ec:29:d8: 42:7e:e5:a9:00:c6:0a:a2:d9:3d:ba:8c:ef:60:72:69:b6:86: 25:e9:72:73:47:06:9d:00:cb:28:62:02:70:27:93:86:14:01: 91:07:00:44:f1:e8:66:2a:eb:69:db:1e:36:b7:67:9c:d8:98: 83:88:11:89:38:07:7d:03:79:0f:9a:10:a3:4e:85:b1:32:60: d8:95:9d:09:92:23:d9:18:00:3d:fc:fb:b9:fe:92:1f:b0:cb: c7:0f:2f:2e:3d:ff:11:14:4c:d5:9f:e7:46:55:2b:05:cb:62: 38:f3:b0:c2:9d:ad:42:e1:a9:08:07:1c:e3:78:41:1f:7b:fa: 7d:6f:45:cd:6f:a6:3b:8f:c0:d1:15:8d:91:ad:05:1b:a8:f3: 9b:4e:9e:63:43:8f:0d:57:e5:cc:2d:d5:f2:48:c8:55:55:bd: d8:09:24:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3I1rNTPqUrip4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNkMWVkZWMtYzM4NS00OWE4LTgyMmYtZDRkY2JlNWUw ZTRkMB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk ODNkM2YwNTYtZjg4Zi00YmNhLWFiZDYtMWRkYWU1NzhkZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNbe8frNxckgylt5oB7Zn5cfn9i7oeBKfBwr mifuUrEY8/F1nZmotx6TYQWTfI3/WIlBNH25ysbU5WFCZPKVXeiTHBcMuUf3shHB Uyv59lvpb6AZl/5LqeIIyp278XLzEiE7+J0eZjwfeeGlNA0BbeP0VpJ6VqOcB3nw VW1eRx5Xri02RvjbSw8wlOZTyGULM0KPHtrcgmyAuI+FXIb/GBxotQPkXPem2pzm Fr4G5i2n0JbGxBo9hLSns4oPpMdUbBe2C2Z8YotrEoM/IiQmEjqtUMF5T4SXvhbn 5OZnqwp+Hru4Nm0aB8FwoOQGM1rzeMoFo20+WwlcfD2q1AqfAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPI4nBaHhrd4Xd2NDacPyes3m5QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Qx ZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1ZTBlNGQvZGNkMWVkZWMtYzM4NS00 OWE4LTgyMmYtZDRkY2JlNWUwZTRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNkMWVkZWMtYzM4NS00OWE4LTgy MmYtZDRkY2JlNWUwZTRkL2RjZDFlZGVjLWMzODUtNDlhOC04MjJmLWQ0ZGNiZTVl MGU0ZC5jcmwwHwYDVR0jBBgwFoAUwAz0vQZvXQXZZqbcKLmsvL2rkpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRj YmU1ZTBlNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs6KEtTbFcSHnAKKmZrlVW ebGDXwCsVjRvm77dpazsO3uZ8yOu9Zz0R1400nkSb+bqDm8SPyiypxtVW46gGR0n kUnnN9tzRNJLMlV9wVf8iR/ahR4KZRjsKdhCfuWpAMYKotk9uozvYHJptoYl6XJz RwadAMsoYgJwJ5OGFAGRBwBE8ehmKutp2x42t2ec2JiDiBGJOAd9A3kPmhCjToWx MmDYlZ0JkiPZGAA9/Pu5/pIfsMvHDy8uPf8RFEzVn+dGVSsFy2I487DCna1C4akI BxzjeEEfe/p9b0XNb6Y7j8DRFY2RrQUbqPObTp5jQ48NV+XMLdXySMhVVb3YCSTc -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:29 2025 by rpki-client