$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft File: 28301e07-2824-4e0b-9659-f5da81f88222.mft (raw, json) Hash identifier: azDIPBKi9AsGruakvPNFUgMlRzDXAaQ6XHlvaF9g5Vg= Subject key identifier: A0:A9:EB:A3:4E:06:59:E4:0D:7C:7C:F1:6A:9C:41:9D:0D:2C:D7:6A Authority key identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Certificate issuer: /CN=28301e07-2824-4e0b-9659-f5da81f88222 Certificate serial: 010D0C9F4328584B956BACAEB1D465F185DFB380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft Manifest number: 010D0C9F432858424DB17E22A8AD455770943353 Signing time: Mon 20 Oct 2025 11:00:03 +0000 Manifest this update: Mon 20 Oct 2025 11:00:03 +0000 Manifest next update: Wed 22 Oct 2025 11:00:00 +0000 Files and hashes: 1: 28301e07-2824-4e0b-9659-f5da81f88222.crl (hash: uQyzl0eZGsYvLexJ05EzA1cy6iKpCCrYbHggTBVdAQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:6b:ac:ae:b1:d4:65:f1:85:df:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28301e07-2824-4e0b-9659-f5da81f88222 Validity Not Before: Oct 20 11:00:03 2025 GMT Not After : Oct 22 11:00:00 2025 GMT Subject: CN=02fee27f-748a-42e5-88e4-ea809bc8e16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:0b:d4:a6:3e:64:3c:9b:01:26:e2:c0:c2: 71:31:cd:5a:17:95:8a:31:2e:56:a4:07:17:6f:c2: 56:94:b5:ec:e4:7d:a0:d5:9c:f5:8d:63:37:7a:ba: ed:ee:31:13:0c:c0:fb:77:29:38:ef:79:05:cc:94: cf:27:a7:7f:f9:e0:c5:96:1a:20:eb:f2:51:5b:46: 75:56:a4:5f:6d:21:59:f5:72:97:b3:c6:6f:2b:53: 32:18:34:bd:17:ee:4a:cb:0b:8d:c9:a3:a2:fa:74: 50:c9:94:f6:40:ae:cd:f7:35:9e:9d:8f:31:0a:87: d4:9d:a2:a6:7a:75:4c:a7:85:c2:c4:8c:63:97:0a: 49:f6:ca:a9:11:59:27:aa:4d:5d:da:44:29:bc:48: b5:de:60:42:f3:00:b9:86:97:d5:99:55:8f:64:b5: ed:9d:90:b5:2f:49:70:cd:32:b3:ec:e1:7d:2a:7d: 2f:16:d4:d9:d9:2d:4f:56:f7:d9:0f:66:64:8f:f0: 99:ed:36:1e:0c:31:09:24:6a:39:d6:61:3c:cf:f3: 7f:e6:9d:ce:4c:e1:2a:07:1a:f8:3b:85:a7:54:85: d6:f3:4e:03:a3:f4:61:8e:fe:4f:ac:60:54:04:f9: cb:3c:32:8b:5d:44:5b:ac:55:00:20:47:08:61:ae: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:EB:A3:4E:06:59:E4:0D:7C:7C:F1:6A:9C:41:9D:0D:2C:D7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl X509v3 Authority Key Identifier: keyid:FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9b:de:4a:96:91:16:3f:60:25:fa:0b:5a:4c:bc:bb:ea:1c: 36:0d:29:7c:07:62:55:35:42:4b:e9:95:16:db:59:ce:91:b5: 1e:37:06:21:20:73:24:86:82:e9:b0:44:e9:36:e8:58:8f:61: ef:7f:1a:52:2b:f3:3f:8b:c0:34:7a:04:1c:3c:45:c0:ce:f5: 5b:53:6a:1e:64:cf:a1:98:c4:ad:ce:d6:01:40:95:30:ac:81: a3:b4:93:9e:f2:4e:ac:05:92:bd:2a:5e:04:bd:88:62:72:cf: 91:6e:b1:e4:62:f3:7e:ba:3b:43:8f:c8:19:9c:7b:ac:1e:23: 16:89:4d:80:39:5d:2c:41:65:a0:c2:eb:36:f6:55:d2:4e:e1: a3:93:1a:b3:d9:b5:17:34:61:57:3d:d6:2b:69:4f:f4:dc:27: fa:43:d1:75:d5:c6:ee:8d:ab:a2:d3:2c:bf:ad:b5:a5:41:aa: 63:be:97:3d:65:c9:8a:a0:e7:d3:d2:6b:5b:17:82:f2:9f:f3: e1:56:38:19:41:a7:4d:c5:33:9d:0c:a4:64:3c:08:58:e0:41: 69:cd:67:6d:51:61:52:c7:4a:57:7a:7f:85:a1:15:bb:35:97: ca:4a:67:4a:f4:3e:15:13:8c:ca:08:b9:93:8d:a0:2d:05:7e: 64:37:e5:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVa6yusdRl8YXfs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMDFlMDctMjgyNC00ZTBiLTk2NTktZjVkYTgxZjg4 MjIyMB4XDTI1MTAyMDExMDAwM1oXDTI1MTAyMjExMDAwMFowLzEtMCsGA1UEAxMk MDJmZWUyN2YtNzQ4YS00MmU1LTg4ZTQtZWE4MDliYzhlMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSYL1KY+ZDybASbiwMJxMc1aF5WKMS5WpAcX b8JWlLXs5H2g1Zz1jWM3errt7jETDMD7dyk473kFzJTPJ6d/+eDFlhog6/JRW0Z1 VqRfbSFZ9XKXs8ZvK1MyGDS9F+5KywuNyaOi+nRQyZT2QK7N9zWenY8xCofUnaKm enVMp4XCxIxjlwpJ9sqpEVknqk1d2kQpvEi13mBC8wC5hpfVmVWPZLXtnZC1L0lw zTKz7OF9Kn0vFtTZ2S1PVvfZD2Zkj/CZ7TYeDDEJJGo51mE8z/N/5p3OTOEqBxr4 O4WnVIXW804Do/Rhjv5PrGBUBPnLPDKLXURbrFUAIEcIYa5t2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCp66NOBlnkDXx88WqcQZ0NLNdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yODMw MWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFmODgyMjIvMjgzMDFlMDctMjgyNC00 ZTBiLTk2NTktZjVkYTgxZjg4MjIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjgzMDFlMDctMjgyNC00ZTBiLTk2 NTktZjVkYTgxZjg4MjIyLzI4MzAxZTA3LTI4MjQtNGUwYi05NjU5LWY1ZGE4MWY4 ODIyMi5jcmwwHwYDVR0jBBgwFoAU+0qM4/OBBZOx2BYJQ8KMpSahSWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRh ODFmODgyMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAim95KlpEWP2Al+gtaTLy7 6hw2DSl8B2JVNUJL6ZUW21nOkbUeNwYhIHMkhoLpsETpNuhYj2HvfxpSK/M/i8A0 egQcPEXAzvVbU2oeZM+hmMStztYBQJUwrIGjtJOe8k6sBZK9Kl4EvYhics+RbrHk YvN+ujtDj8gZnHusHiMWiU2AOV0sQWWgwus29lXSTuGjkxqz2bUXNGFXPdYraU/0 3Cf6Q9F11cbujaui0yy/rbWlQapjvpc9ZcmKoOfT0mtbF4Lyn/PhVjgZQadNxTOd DKRkPAhY4EFpzWdtUWFSx0pXen+FoRW7NZfKSmdK9D4VE4zKCLmTjaAtBX5kN+Ug -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:57 2025 by rpki-client