$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: C8Rpt7zi0CvRueMCG2/z94QMgJeBLgvtK4kF0J/IDBM= Subject key identifier: AD:87:79:EA:35:11:AA:C0:7E:BB:F2:D7:75:29:47:E7:D9:81:C6:9D Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F4328584B93ACFF5721B0E65206683700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F7812466B Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Tue 21 Oct 2025 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: M6Ezz67EPyI/FY81K0Wh3zjurRHbMboTgi1jm72LJvI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ac:ff:57:21:b0:e6:52:06:68:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 21 20:00:00 2025 GMT Subject: CN=8e8dff0d-656d-43f4-ba22-5a30211fb283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:24:87:e8:8f:a4:bf:86:ec:07:99:0a:05: 24:42:a3:26:78:59:7f:f7:c5:0a:62:f5:b3:c9:7a: 11:cb:72:d0:ac:ea:d2:93:31:9a:b7:ca:6a:49:91: 5f:bd:58:7e:2d:a6:fd:4c:20:80:ca:5f:b9:18:9c: 72:1d:2a:20:9f:f4:c8:7d:b9:a6:67:a1:39:8c:7f: b7:6b:8c:30:97:0f:5f:90:00:87:18:0e:a5:02:01: bf:bd:cd:e5:de:a8:ee:ec:12:ec:be:c3:cc:f0:b4: 66:34:04:e7:22:f7:c5:f0:70:14:3c:a5:09:e4:f6: 5d:25:11:72:29:de:a8:83:65:4a:76:ea:4d:37:1d: a0:de:60:a2:00:05:a1:a2:88:b7:b9:c4:43:db:fb: 74:9d:b4:8c:be:e0:da:ad:2e:70:fd:2b:4e:66:6a: ef:50:14:b5:f1:0f:1a:e7:16:49:f8:b1:b1:1a:a2: 59:0a:35:b6:9d:dc:a3:75:08:54:de:ca:57:16:bb: 47:56:d4:48:82:42:79:b2:2b:e0:89:6d:96:96:7e: 5f:6e:2b:03:c4:c9:7a:c5:a2:6a:5c:72:31:ac:45: f4:a0:57:94:2f:29:43:17:f1:e9:da:de:29:ee:d6: 4d:56:87:38:90:55:14:6c:15:10:4d:7f:71:0a:f2: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:87:79:EA:35:11:AA:C0:7E:BB:F2:D7:75:29:47:E7:D9:81:C6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6c:21:66:ae:60:04:53:de:3e:2b:ff:0d:7a:b3:9d:cb:25: 7f:07:cd:c2:46:c4:ff:e0:5d:86:b5:dc:2f:87:47:73:ea:f0: 5b:a3:c3:5f:61:54:84:63:3e:d3:9f:81:1e:bd:dd:fe:db:d9: 2e:bb:3a:73:b6:7d:0b:46:fd:b1:f6:85:85:a9:ab:ef:af:b4: a7:01:19:77:90:ef:65:a5:41:22:3e:d4:c2:0c:68:ba:12:d0: 7f:91:ee:9e:21:60:86:e1:5c:78:fd:5a:30:59:eb:90:5c:f2: 6d:05:a8:da:c1:e1:42:fd:b9:2f:ca:12:70:31:a0:d6:26:88: fc:a1:94:3b:0d:3e:7b:67:ae:11:12:ec:e8:cd:3b:ff:66:17: d6:15:06:a0:a6:fd:85:d0:e9:dc:06:ba:a2:0f:a1:51:5d:d4: 31:e3:ad:5f:d7:ff:1c:fc:db:81:03:9c:4f:e3:9f:71:bf:64: 32:7e:6d:d5:bd:8d:9f:ea:41:4b:0e:a8:9d:8e:4b:25:f4:54: e4:b9:16:59:87:60:ea:88:5c:95:72:2a:85:4d:31:e4:de:d5: b7:65:11:e3:0f:54:b6:e7:c8:d0:ed:c3:de:84:b8:5f:14:a9: 9f:2a:7c:04:0a:d2:3c:d1:71:ea:07:ba:86:11:55:8d:fb:4a: ec:d2:63:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrP9XIbDmUgZoNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMTIwMDAwMFowLzEtMCsGA1UEAxMk OGU4ZGZmMGQtNjU2ZC00M2Y0LWJhMjItNWEzMDIxMWZiMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumkkh+iPpL+G7AeZCgUkQqMmeFl/98UKYvWz yXoRy3LQrOrSkzGat8pqSZFfvVh+Lab9TCCAyl+5GJxyHSogn/TIfbmmZ6E5jH+3 a4wwlw9fkACHGA6lAgG/vc3l3qju7BLsvsPM8LRmNATnIvfF8HAUPKUJ5PZdJRFy Kd6og2VKdupNNx2g3mCiAAWhooi3ucRD2/t0nbSMvuDarS5w/StOZmrvUBS18Q8a 5xZJ+LGxGqJZCjW2ndyjdQhU3spXFrtHVtRIgkJ5sivgiW2Wln5fbisDxMl6xaJq XHIxrEX0oFeULylDF/Hp2t4p7tZNVoc4kFUUbBUQTX9xCvJpPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK2Heeo1EarAfrvy13UpR+fZgcadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYbCFmrmAEU94+K/8NerOd yyV/B83CRsT/4F2Gtdwvh0dz6vBbo8NfYVSEYz7Tn4Eevd3+29kuuzpztn0LRv2x 9oWFqavvr7SnARl3kO9lpUEiPtTCDGi6EtB/ke6eIWCG4Vx4/VowWeuQXPJtBaja weFC/bkvyhJwMaDWJoj8oZQ7DT57Z64REuzozTv/ZhfWFQagpv2F0OncBrqiD6FR XdQx461f1/8c/NuBA5xP459xv2Qyfm3VvY2f6kFLDqidjksl9FTkuRZZh2DqiFyV ciqFTTHk3tW3ZRHjD1S258jQ7cPehLhfFKmfKnwECtI80XHqB7qGEVWN+0rs0mMV -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:35 2025 by rpki-client