$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft File: fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft (raw, json) Hash identifier: pwSuZcCwg8ZgR1oyAZ1XzC+tB9Juf0hLjhn1iyb54+8= Subject key identifier: A9:00:19:87:B4:22:BD:3C:64:7B:B6:47:05:56:82:41:B8:AC:86:7C Authority key identifier: 28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18 Certificate issuer: /CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39 Certificate serial: 010D0C9F4328584B93E890326F145A13D4DFACE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft Manifest number: 010D0C9F43285846CA6A21724570BDDE810A2AB7 Signing time: Sun 19 Oct 2025 22:00:03 +0000 Manifest this update: Sun 19 Oct 2025 22:00:03 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl (hash: z/DMkMOzXpBtp0IxEOxtzdSY4YvNhMFdRjcDHxlUwUI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:e8:90:32:6f:14:5a:13:d4:df:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2421d2-a693-440e-a9e0-ece2b7cd2b39 Validity Not Before: Oct 19 22:00:03 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=339ce414-b612-4d1a-9c0f-db2abd7d1f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:e7:97:2e:d5:ca:25:bd:f1:1f:5b:3c:b7: b2:92:dc:d7:25:af:99:c7:2f:c3:b3:99:22:59:ef: 25:87:d4:01:4f:45:a6:c6:da:4c:f6:8a:36:dc:da: a8:c2:5b:22:b3:f2:09:4d:4b:16:39:65:dc:da:25: 64:d0:da:b8:5a:ab:64:f4:37:8a:2a:e0:63:9c:1e: bb:80:f6:65:98:fa:7b:85:61:45:2d:5e:08:3b:99: 24:12:6c:5d:35:ea:48:8f:c9:19:c4:2c:e4:cc:0a: 80:a3:81:26:3d:dc:e2:53:2d:99:5e:aa:0b:87:8f: 07:37:07:c4:5d:f6:74:35:84:34:9a:a9:77:ee:2b: 68:76:84:d9:0d:dd:d4:77:98:fa:da:e1:3e:43:a8: 3a:21:69:18:87:86:da:92:d9:50:b8:6e:82:6f:13: 75:8e:0a:1c:4d:93:11:94:ad:2f:5e:59:31:0c:05: 8a:3f:22:d7:71:d3:27:16:a8:c0:cb:9c:b6:7c:97: 34:ab:55:13:0f:a0:8b:9d:6c:2d:e9:3e:dc:29:39: d1:97:90:26:e5:d0:94:96:09:98:df:e7:95:7f:61: 5e:40:19:a8:e3:fb:0d:36:63:fb:d9:77:6a:d6:45: 52:32:9a:8d:f3:c3:33:7f:18:93:89:6d:b9:4b:de: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:00:19:87:B4:22:BD:3C:64:7B:B6:47:05:56:82:41:B8:AC:86:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.crl X509v3 Authority Key Identifier: keyid:28:CB:CF:8C:5D:59:FF:0D:87:AD:65:20:6D:F4:11:B9:8F:AB:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd2421d2-a693-440e-a9e0-ece2b7cd2b39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:95:99:55:cb:06:69:48:00:38:28:41:1e:ef:b1:66:41:80: d3:ea:97:98:da:75:32:28:3b:d5:31:da:27:73:a6:31:f7:d2: 87:3f:89:e3:11:bb:33:19:a2:2e:38:02:5f:65:9b:fb:1b:f5: 29:23:ce:9d:7d:75:63:7e:8e:8e:15:c9:fb:e4:83:8f:42:73: 61:92:d1:3e:e7:57:bb:a7:b4:15:94:75:64:d2:a9:35:bc:40: 37:fb:f8:49:64:5d:14:4a:b4:e1:e8:8e:d3:a8:b2:f9:e3:fe: 9a:2c:7b:a3:29:de:cb:66:7d:ac:3b:a0:20:01:48:24:0f:d9: 4d:46:2c:c6:6d:b3:2e:d9:49:64:e0:48:3a:3f:b4:09:2a:6c: b0:d2:fc:a1:b2:57:2a:a2:fc:72:32:66:2e:2e:19:28:ad:ca: 14:dd:10:bd:2f:42:91:65:37:6c:30:3a:34:f1:5d:fa:74:d6: 29:75:23:4c:f0:e1:61:5e:d9:41:9e:e1:04:16:a3:69:88:60: 0e:04:53:93:0e:e0:32:c6:5a:ec:ff:96:43:90:e9:a4:69:26: d2:f8:ec:5b:42:c6:73:86:21:6e:89:bb:9f:c8:d6:75:26:0a: f9:ee:47:e8:7f:b3:43:3b:81:31:b3:fb:69:0a:a7:1a:82:5d: 10:f6:a1:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuT6JAybxRaE9TfrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyNDIxZDItYTY5My00NDBlLWE5ZTAtZWNlMmI3Y2Qy YjM5MB4XDTI1MTAxOTIyMDAwM1oXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk MzM5Y2U0MTQtYjYxMi00ZDFhLTljMGYtZGIyYWJkN2QxZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNnnly7VyiW98R9bPLeyktzXJa+Zxy/Ds5ki We8lh9QBT0WmxtpM9oo23Nqowlsis/IJTUsWOWXc2iVk0Nq4Wqtk9DeKKuBjnB67 gPZlmPp7hWFFLV4IO5kkEmxdNepIj8kZxCzkzAqAo4EmPdziUy2ZXqoLh48HNwfE XfZ0NYQ0mql37itodoTZDd3Ud5j62uE+Q6g6IWkYh4baktlQuG6CbxN1jgocTZMR lK0vXlkxDAWKPyLXcdMnFqjAy5y2fJc0q1UTD6CLnWwt6T7cKTnRl5Am5dCUlgmY 3+eVf2FeQBmo4/sNNmP72Xdq1kVSMpqN88MzfxiTiW25S95qMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKkAGYe0Ir08ZHu2RwVWgkG4rIZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mZDI0 MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2UyYjdjZDJiMzkvZmQyNDIxZDItYTY5My00 NDBlLWE5ZTAtZWNlMmI3Y2QyYjM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmQyNDIxZDItYTY5My00NDBlLWE5 ZTAtZWNlMmI3Y2QyYjM5L2ZkMjQyMWQyLWE2OTMtNDQwZS1hOWUwLWVjZTJiN2Nk MmIzOS5jcmwwHwYDVR0jBBgwFoAUKMvPjF1Z/w2HrWUgbfQRuY+rsxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mZDI0MjFkMi1hNjkzLTQ0MGUtYTllMC1lY2Uy YjdjZDJiMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1lZlVywZpSAA4KEEe77Fm QYDT6peY2nUyKDvVMdonc6Yx99KHP4njEbszGaIuOAJfZZv7G/UpI86dfXVjfo6O Fcn75IOPQnNhktE+51e7p7QVlHVk0qk1vEA3+/hJZF0USrTh6I7TqLL54/6aLHuj Kd7LZn2sO6AgAUgkD9lNRizGbbMu2Ulk4Eg6P7QJKmyw0vyhslcqovxyMmYuLhko rcoU3RC9L0KRZTdsMDo08V36dNYpdSNM8OFhXtlBnuEEFqNpiGAOBFOTDuAyxlrs /5ZDkOmkaSbS+OxbQsZzhiFuibufyNZ1Jgr57kfof7NDO4Exs/tpCqcagl0Q9qFp -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:42 2025 by rpki-client