$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft File: ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft (raw, json) Hash identifier: tpVDktX02CQVDUh6RTBKXT7LwT/PTGUgLwxAaaLyed0= Subject key identifier: 12:09:28:AC:7C:65:20:24:CC:75:CE:71:DE:A5:FC:63:BE:A6:1B:46 Authority key identifier: F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 Certificate issuer: /CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Certificate serial: 010D0C9F4328584B9353AD6ABDDC0A4059827040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft Manifest number: 010D0C9F4328584073A8202BE01C1A656D2DB4FC Signing time: Sun 19 Oct 2025 17:00:03 +0000 Manifest this update: Sun 19 Oct 2025 17:00:03 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl (hash: WDQiHk8GsI5Yz+oHGeNvvi+0eWx39oSamTyqi+/v8aY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:53:ad:6a:bd:dc:0a:40:59:82:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff23475a-9e1e-4026-8e3c-0d65d40abca5 Validity Not Before: Oct 19 17:00:03 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=27ba2c5d-4689-4f7f-95cb-3e0d603108a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:f6:dc:6b:fe:03:bc:e8:17:df:f4:2f:34: 59:f2:7d:93:b7:7f:ab:f1:1e:0f:72:b8:b1:cf:38: 44:42:45:43:6f:ca:f6:0c:37:84:67:d3:22:f6:9f: dd:3e:4e:6c:66:43:58:f9:4f:e3:68:49:72:36:f6: 53:ef:d1:e7:2d:71:81:07:16:98:0a:17:19:a7:60: 4d:55:02:c9:1b:fe:61:3b:ea:a5:08:93:2b:6c:36: ac:41:71:7b:ad:7b:51:27:d6:07:f9:91:f6:54:51: 1a:79:20:c1:c2:27:7f:8f:6a:75:48:6f:5c:e4:ed: f6:42:71:b9:c3:37:85:8e:4d:63:67:96:cd:e5:27: 33:25:7f:06:1b:ed:d6:56:95:99:d0:1f:21:0e:09: fc:39:2b:db:35:82:b5:c4:56:fa:91:54:f9:03:82: fd:47:65:da:ae:4d:c8:0c:6b:d8:8c:15:1c:23:fe: 0c:cf:79:32:4c:20:73:21:89:5a:0e:75:e6:6d:b1: 24:5e:36:0b:4c:ac:9f:23:75:86:1f:63:e7:33:a1: 41:fe:14:2a:7f:7b:08:93:22:34:cf:c6:69:f9:dd: 87:72:a9:5c:b7:92:dd:a7:f5:65:3f:09:56:64:cc: 36:92:74:e6:bd:db:58:fe:3b:06:b4:b3:c9:75:35: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:28:AC:7C:65:20:24:CC:75:CE:71:DE:A5:FC:63:BE:A6:1B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5/ff23475a-9e1e-4026-8e3c-0d65d40abca5.crl X509v3 Authority Key Identifier: keyid:F0:AD:F0:FF:0C:E7:C1:48:F4:80:21:C2:AC:2D:90:87:7D:0E:16:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff23475a-9e1e-4026-8e3c-0d65d40abca5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2d:9f:aa:c8:94:94:8f:26:61:8d:bb:da:bd:f4:d1:89:a8: 03:39:93:96:f4:c1:9a:b5:d8:ee:3f:55:27:9c:ed:c5:3d:f4: 5d:b8:59:34:15:ee:c5:95:37:86:5f:e2:00:45:c6:25:ee:6f: df:cd:7a:08:65:ac:d8:79:67:aa:00:25:1a:46:47:32:91:22: 9c:25:f3:0f:15:a5:bd:79:37:03:86:94:81:6d:d8:a3:ce:7d: 6a:2a:0f:20:cf:f3:90:c0:66:4a:71:c5:b1:f3:4a:be:fd:32: 5d:93:8a:34:87:26:77:ea:70:88:e1:6a:5c:3c:de:a0:6e:ed: 24:6d:d2:f4:18:0e:92:28:6f:0a:46:af:39:d0:95:99:29:c8: fb:c5:68:5e:d1:c6:43:04:07:78:b9:b3:36:44:7c:01:3c:70: b7:c2:d8:5b:58:27:d7:5d:e5:27:39:92:cf:13:20:d7:3d:43: e9:7a:13:3a:d3:a3:3a:d5:31:bf:1c:2a:d8:f0:45:99:e3:a1: f2:52:4a:51:48:14:2f:a5:c3:76:c9:6a:69:dc:a4:1d:bc:4e: ef:ef:33:31:17:ff:ad:7f:ca:f6:78:b6:d0:d4:2b:e9:db:91: 8f:97:11:82:4b:3c:ca:fe:a6:c7:5a:2d:a5:57:84:9c:5d:36: e9:cf:fb:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTU61qvdwKQFmCcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMzQ3NWEtOWUxZS00MDI2LThlM2MtMGQ2NWQ0MGFi Y2E1MB4XDTI1MTAxOTE3MDAwM1oXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk MjdiYTJjNWQtNDY4OS00ZjdmLTk1Y2ItM2UwZDYwMzEwOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2L23Gv+A7zoF9/0LzRZ8n2Tt3+r8R4Pcrix zzhEQkVDb8r2DDeEZ9Mi9p/dPk5sZkNY+U/jaElyNvZT79HnLXGBBxaYChcZp2BN VQLJG/5hO+qlCJMrbDasQXF7rXtRJ9YH+ZH2VFEaeSDBwid/j2p1SG9c5O32QnG5 wzeFjk1jZ5bN5SczJX8GG+3WVpWZ0B8hDgn8OSvbNYK1xFb6kVT5A4L9R2Xark3I DGvYjBUcI/4Mz3kyTCBzIYlaDnXmbbEkXjYLTKyfI3WGH2PnM6FB/hQqf3sIkyI0 z8Zp+d2Hcqlct5Ldp/VlPwlWZMw2knTmvdtY/jsGtLPJdTXNHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBIJKKx8ZSAkzHXOcd6l/GO+phtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIz NDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1ZDQwYWJjYTUvZmYyMzQ3NWEtOWUxZS00 MDI2LThlM2MtMGQ2NWQ0MGFiY2E1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMzQ3NWEtOWUxZS00MDI2LThl M2MtMGQ2NWQ0MGFiY2E1L2ZmMjM0NzVhLTllMWUtNDAyNi04ZTNjLTBkNjVkNDBh YmNhNS5jcmwwHwYDVR0jBBgwFoAU8K3w/wznwUj0gCHCrC2Qh30OFgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIzNDc1YS05ZTFlLTQwMjYtOGUzYy0wZDY1 ZDQwYWJjYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBLZ+qyJSUjyZhjbvavfTR iagDOZOW9MGatdjuP1UnnO3FPfRduFk0Fe7FlTeGX+IARcYl7m/fzXoIZazYeWeq ACUaRkcykSKcJfMPFaW9eTcDhpSBbdijzn1qKg8gz/OQwGZKccWx80q+/TJdk4o0 hyZ36nCI4WpcPN6gbu0kbdL0GA6SKG8KRq850JWZKcj7xWhe0cZDBAd4ubM2RHwB PHC3wthbWCfXXeUnOZLPEyDXPUPpehM606M61TG/HCrY8EWZ46HyUkpRSBQvpcN2 yWpp3KQdvE7v7zMxF/+tf8r2eLbQ1Cvp25GPlxGCSzzK/qbHWi2lV4ScXTbpz/tO -----END CERTIFICATE-----Generated at Mon Oct 20 04:12:15 2025 by rpki-client