$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft File: a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft (raw, json) Hash identifier: HZVjpusap+jR857WhkBbwCpB8x3Q6byk0LW93YJ7ERk= Subject key identifier: A4:99:AA:D1:7A:4B:F5:EA:96:8E:28:CE:9D:74:93:04:4F:4C:F3:B3 Authority key identifier: 8E:77:51:52:A4:F7:0A:15:0B:C1:51:33:43:B1:3B:CC:34:B0:C7:32 Certificate issuer: /CN=a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0 Certificate serial: 010D0C9F4328584B95301F15A3025D1C36DE8000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft Manifest number: 010D0C9F43285847B636238E70960D59741F0EA3 Signing time: Mon 20 Oct 2025 09:00:03 +0000 Manifest this update: Mon 20 Oct 2025 09:00:03 +0000 Manifest next update: Wed 22 Oct 2025 09:00:00 +0000 Files and hashes: 1: a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl (hash: PpN/O/sIoSIG2s5r8wNDXbURTQxqltcymLFc96SWSK4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:30:1f:15:a3:02:5d:1c:36:de:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0 Validity Not Before: Oct 20 09:00:03 2025 GMT Not After : Oct 22 09:00:00 2025 GMT Subject: CN=113bd726-569c-4df5-9b58-df52edef2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:2c:fc:8d:46:bf:bc:31:da:b3:47:02:20: af:8f:c8:3b:42:0d:17:49:ca:c4:ad:8a:21:65:c7: fb:ed:0e:2a:d2:49:7c:20:7f:5e:e7:55:74:5d:59: f5:bf:5f:9c:70:45:49:ad:cd:b8:3f:db:de:93:60: 0b:97:62:bb:00:9c:bf:8f:08:30:bf:95:53:c3:82: 26:00:7e:08:62:43:81:21:a7:08:b7:cb:61:7d:84: f7:23:9f:45:46:09:d7:71:26:7a:0d:84:ca:fa:a1: b8:5a:23:d3:68:f8:ea:ce:52:4b:4e:72:ae:81:96: bd:05:65:60:75:70:a4:38:e5:1b:24:7a:99:a5:09: e4:63:4a:fb:f6:27:bc:20:39:1b:30:56:1c:00:99: 4d:88:da:b0:79:c5:1d:49:ba:d1:69:cc:71:bc:3f: e0:bb:be:bf:c8:10:e0:d4:c5:10:17:0e:89:c8:9d: 51:9f:f2:5a:f7:fb:e8:1e:6f:22:4a:47:ec:d9:88: 6f:d8:fe:fc:af:bf:59:f7:49:46:f0:40:96:ba:b5: 3f:a1:a6:ac:93:ae:e1:a6:4d:90:d4:01:f3:c8:60: 73:bc:68:b6:b2:fa:39:ab:75:9f:26:5b:9a:c3:7a: 43:d9:99:0f:14:da:aa:51:67:cf:17:0e:3f:95:71: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:AA:D1:7A:4B:F5:EA:96:8E:28:CE:9D:74:93:04:4F:4C:F3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl X509v3 Authority Key Identifier: keyid:8E:77:51:52:A4:F7:0A:15:0B:C1:51:33:43:B1:3B:CC:34:B0:C7:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f9:25:c8:1f:33:db:6c:a0:38:ba:cd:12:3b:d1:16:0e:3e: ae:01:ec:6d:83:0c:aa:bb:71:ff:53:b1:18:78:ed:a6:74:66: b7:93:88:18:87:ad:88:76:fd:a5:a8:45:69:32:06:f8:d5:50: 04:07:fa:5f:9f:1a:92:40:9e:d4:cf:aa:ff:9f:b3:0f:aa:c8: 73:04:07:65:7c:89:55:5a:21:0e:6a:84:89:c0:6a:95:6b:29: 77:91:f5:c6:40:17:63:91:cc:ec:fd:fc:51:6d:54:83:d2:08: 15:fb:bc:28:1e:0a:df:9d:81:c5:02:65:e0:77:0f:81:62:37: 0e:f9:4e:0a:ee:28:fa:d9:f1:01:77:5f:93:63:95:dd:5c:a4: 4a:ae:1d:fa:79:aa:eb:f8:6b:93:a4:ca:4e:32:3e:98:d9:18: c0:77:67:b3:53:53:57:44:b3:4f:f0:fe:d2:f2:11:55:4c:c9: 9f:89:5e:2f:c4:56:7b:d2:6e:81:0c:9b:2c:1d:cd:66:5a:05: 2b:77:42:02:f2:34:6e:85:73:d7:aa:16:a6:7b:c7:be:74:fb: dc:78:c6:05:00:d4:f7:1a:45:7d:8d:14:18:ab:67:d0:7f:14: fb:0a:f4:80:55:3d:53:a0:24:9c:b2:6b:14:d4:48:ae:a0:e1: 8b:5d:d7:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVMB8VowJdHDbegAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJkMDljOTgtZGM4MC00ZjljLWE2YmMtODYxN2E3YWEy N2UwMB4XDTI1MTAyMDA5MDAwM1oXDTI1MTAyMjA5MDAwMFowLzEtMCsGA1UEAxMk MTEzYmQ3MjYtNTY5Yy00ZGY1LTliNTgtZGY1MmVkZWYyMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg8s/I1Gv7wx2rNHAiCvj8g7Qg0XScrErYoh Zcf77Q4q0kl8IH9e51V0XVn1v1+ccEVJrc24P9vek2ALl2K7AJy/jwgwv5VTw4Im AH4IYkOBIacIt8thfYT3I59FRgnXcSZ6DYTK+qG4WiPTaPjqzlJLTnKugZa9BWVg dXCkOOUbJHqZpQnkY0r79ie8IDkbMFYcAJlNiNqwecUdSbrRacxxvD/gu76/yBDg 1MUQFw6JyJ1Rn/Ja9/voHm8iSkfs2Yhv2P78r79Z90lG8ECWurU/oaask67hpk2Q 1AHzyGBzvGi2svo5q3WfJluaw3pD2ZkPFNqqUWfPFw4/lXHCTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKSZqtF6S/Xqlo4ozp10kwRPTPOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMmQw OWM5OC1kYzgwLTRmOWMtYTZiYy04NjE3YTdhYTI3ZTAvYTJkMDljOTgtZGM4MC00 ZjljLWE2YmMtODYxN2E3YWEyN2UwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTJkMDljOTgtZGM4MC00ZjljLWE2 YmMtODYxN2E3YWEyN2UwL2EyZDA5Yzk4LWRjODAtNGY5Yy1hNmJjLTg2MTdhN2Fh MjdlMC5jcmwwHwYDVR0jBBgwFoAUjndRUqT3ChULwVEzQ7E7zDSwxzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMmQwOWM5OC1kYzgwLTRmOWMtYTZiYy04NjE3 YTdhYTI3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC+SXIHzPbbKA4us0SO9EW Dj6uAextgwyqu3H/U7EYeO2mdGa3k4gYh62Idv2lqEVpMgb41VAEB/pfnxqSQJ7U z6r/n7MPqshzBAdlfIlVWiEOaoSJwGqVayl3kfXGQBdjkczs/fxRbVSD0ggV+7wo HgrfnYHFAmXgdw+BYjcO+U4K7ij62fEBd1+TY5XdXKRKrh36earr+GuTpMpOMj6Y 2RjAd2ezU1NXRLNP8P7S8hFVTMmfiV4vxFZ70m6BDJssHc1mWgUrd0IC8jRuhXPX qhame8e+dPvceMYFANT3GkV9jRQYq2fQfxT7CvSAVT1ToCScsmsU1EiuoOGLXdcw -----END CERTIFICATE-----Generated at Mon Oct 20 13:27:55 2025 by rpki-client