$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft File: 2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft (raw, json) Hash identifier: YKsD73A+Ut4wVh9yHW+M4+y0bKOdN+dubPFLU8lrepA= Subject key identifier: 5D:26:06:2E:0A:43:DB:E1:85:AB:67:A0:76:EC:40:97:3E:B7:A0:62 Authority key identifier: 3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A Certificate issuer: /CN=2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d Certificate serial: 010D0C9F4328584B960092C408D5235838B41340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft Manifest number: 010D0C9F4328584758165EBA5A0C5E4DD759CD05 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl (hash: Kn9XECi48WVjqMvfV8aPsLda7yuwR9LW2YP+uw3EVtY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:92:c4:08:d5:23:58:38:b4:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=f4df0e73-05f0-468c-8a7c-73b0fa2b87ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:b4:6d:d5:1d:d3:2a:8d:68:d1:7c:5d:ec: c0:e9:f2:52:2a:a9:82:9a:25:95:4d:b0:53:98:50: 64:4d:96:a9:1f:56:13:8e:b4:66:e3:50:3a:04:df: 8d:e4:e1:e7:bc:a5:86:00:17:4b:41:31:88:22:00: 49:5a:b7:ec:5f:c8:94:aa:f3:14:8f:d8:0d:01:a1: 45:f3:e0:b9:50:84:cb:07:aa:2b:63:a2:28:f8:55: 3b:c3:bb:31:6e:18:7e:72:6c:80:f8:06:e7:fa:f8: 8a:c6:0a:68:37:f8:fa:5f:d4:21:6b:0e:40:63:1f: 0d:6a:9d:95:4e:66:49:a2:fb:7d:54:ad:58:54:c4: d8:56:c1:a9:c3:ea:e5:5b:f4:5a:09:82:40:17:53: 30:90:32:c9:17:97:da:00:1f:ef:5b:4b:40:be:a8: 29:19:58:83:49:30:bc:22:7e:70:d6:2f:a3:4a:9b: d1:41:21:d7:ae:d2:8f:2a:81:bf:75:81:c9:b6:ab: e8:e8:93:72:75:51:43:3e:82:1c:7c:63:09:39:30: a8:a4:6a:c1:aa:40:64:a2:1b:3a:e8:2e:af:ed:4c: 00:2f:97:09:3c:b1:6a:08:dd:4d:e0:e2:4c:6a:37: 49:33:84:44:9e:0c:95:dc:b9:cd:2e:3a:36:57:48: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:06:2E:0A:43:DB:E1:85:AB:67:A0:76:EC:40:97:3E:B7:A0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.crl X509v3 Authority Key Identifier: keyid:3D:F4:29:73:E8:33:31:4F:1B:DD:BF:04:91:2F:A4:35:96:E9:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e1bac50-1d8a-433e-bbf5-ee2b0c717e5d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5b:ca:7c:75:7c:0b:0a:40:90:69:88:15:13:6c:41:4a:41: 25:06:7e:1d:76:15:eb:43:e2:4b:b7:f7:c5:fc:1d:ba:ae:41: 9f:b4:70:bc:27:64:eb:51:ea:62:94:c3:51:c4:24:62:b6:17: 24:8e:46:c1:97:79:e1:e9:e4:f9:c4:b1:38:c3:59:9d:cb:15: d2:5b:f3:fa:c5:36:2f:bb:48:87:7b:f1:a7:5d:93:51:8f:94: 8c:c0:3a:1c:39:18:3d:5c:62:dc:62:93:3a:8a:9f:ad:d9:93: da:9e:fc:e8:13:ba:56:36:44:96:fa:a7:08:03:cb:8a:ba:5d: fb:ad:dd:96:a7:29:71:a8:b6:1f:19:93:33:3d:ec:e9:6c:31: 74:9e:52:d8:a0:07:a6:fa:af:b0:c3:48:a3:a3:ce:4f:27:2f: fa:0b:8a:32:13:e4:40:54:9f:cf:76:e8:5e:29:77:cc:07:3b: 5b:30:d9:c8:02:b9:06:38:60:bf:10:6e:42:d1:20:a2:d6:c3: b0:64:fc:02:ad:b8:68:d5:21:e3:85:a7:71:e8:c0:75:d8:34: 21:7d:08:65:37:85:89:f3:3a:b0:19:b4:f2:2f:5f:11:ac:a3: fb:1b:ad:9d:b0:4a:36:1a:5b:c1:4e:ef:44:08:48:8a:84:ad: dd:ac:64:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJLECNUjWDi0E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUxYmFjNTAtMWQ4YS00MzNlLWJiZjUtZWUyYjBjNzE3 ZTVkMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk ZjRkZjBlNzMtMDVmMC00NjhjLThhN2MtNzNiMGZhMmI4N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAK0bdUd0yqNaNF8XezA6fJSKqmCmiWVTbBT mFBkTZapH1YTjrRm41A6BN+N5OHnvKWGABdLQTGIIgBJWrfsX8iUqvMUj9gNAaFF 8+C5UITLB6orY6Io+FU7w7sxbhh+cmyA+Abn+viKxgpoN/j6X9Qhaw5AYx8Nap2V TmZJovt9VK1YVMTYVsGpw+rlW/RaCYJAF1MwkDLJF5faAB/vW0tAvqgpGViDSTC8 In5w1i+jSpvRQSHXrtKPKoG/dYHJtqvo6JNydVFDPoIcfGMJOTCopGrBqkBkohs6 6C6v7UwAL5cJPLFqCN1N4OJMajdJM4REngyV3LnNLjo2V0h7/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0mBi4KQ9vhhatnoHbsQJc+t6BiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTFi YWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJiMGM3MTdlNWQvMmUxYmFjNTAtMWQ4YS00 MzNlLWJiZjUtZWUyYjBjNzE3ZTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmUxYmFjNTAtMWQ4YS00MzNlLWJi ZjUtZWUyYjBjNzE3ZTVkLzJlMWJhYzUwLTFkOGEtNDMzZS1iYmY1LWVlMmIwYzcx N2U1ZC5jcmwwHwYDVR0jBBgwFoAUPfQpc+gzMU8b3b8EkS+kNZbpTpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTFiYWM1MC0xZDhhLTQzM2UtYmJmNS1lZTJi MGM3MTdlNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZW8p8dXwLCkCQaYgVE2xB SkElBn4ddhXrQ+JLt/fF/B26rkGftHC8J2TrUepilMNRxCRithckjkbBl3nh6eT5 xLE4w1mdyxXSW/P6xTYvu0iHe/GnXZNRj5SMwDocORg9XGLcYpM6ip+t2ZPanvzo E7pWNkSW+qcIA8uKul37rd2WpylxqLYfGZMzPezpbDF0nlLYoAem+q+ww0ijo85P Jy/6C4oyE+RAVJ/PduheKXfMBztbMNnIArkGOGC/EG5C0SCi1sOwZPwCrbho1SHj hadx6MB12DQhfQhlN4WJ8zqwGbTyL18RrKP7G62dsEo2GlvBTu9ECEiKhK3drGRM -----END CERTIFICATE-----Generated at Tue Oct 21 10:45:34 2025 by rpki-client