$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.mft File: 4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.mft (raw, json) Hash identifier: KglzgORf3jkg8KtZg7DH/atUM81M6EAFI6pqo4Q59EA= Subject key identifier: E3:FE:7A:4A:7A:A3:17:61:81:80:B6:E6:FF:30:60:D6:7F:7F:51:A3 Authority key identifier: 81:1A:72:AC:32:9B:AD:AE:C6:C1:42:26:EC:27:76:80:6E:E6:9D:92 Certificate issuer: /CN=4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb Certificate serial: 010D0C9F4328584B972A64CFAEBC982F208B0E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.mft Manifest number: 010D0C9F4328584073A83817F6D0AC7B49D331BE Signing time: Tue 21 Oct 2025 02:00:08 +0000 Manifest this update: Tue 21 Oct 2025 02:00:08 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.crl (hash: 2FbNCgCcJJLmZ0QcKs2HsIZ+SPWFTe6ejoZb9s85dd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:2a:64:cf:ae:bc:98:2f:20:8b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb Validity Not Before: Oct 21 02:00:08 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=89e3bcfb-3139-4f86-b2ec-723d64331aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:39:74:a2:64:a0:42:1b:be:fa:7d:13:fe: ed:e9:c5:c9:b9:bd:5a:da:1d:47:7e:27:76:a1:8a: 00:ba:69:70:5e:30:de:dd:a6:7e:b6:6c:d1:46:67: 98:1e:14:c7:4e:b5:b5:4d:a8:33:5a:5d:02:56:88: ab:ba:02:e4:e9:3e:89:13:5f:52:4c:3c:83:8e:53: 38:35:01:b6:82:66:74:57:88:70:3f:3a:c4:b5:32: 3f:4e:bb:3b:c9:50:a9:eb:68:a7:70:89:ad:4e:61: 35:d8:9f:ae:73:7f:25:ef:fd:0a:95:5c:b0:36:f6: 06:87:57:20:8a:c5:37:d6:b7:03:a6:6f:4f:23:7e: 27:d5:3c:d1:e9:45:56:4c:03:f1:35:9a:7c:c9:b1: 99:e8:12:04:f1:7a:bf:fd:86:b3:63:92:b0:2f:0d: 67:c4:12:f2:55:2d:13:c7:a4:9e:4f:8d:34:66:d3: 9a:e9:f6:58:70:a2:90:ab:0c:a8:1e:14:51:09:71: d7:98:a8:54:3b:25:51:22:33:b7:25:1f:4c:53:8e: 35:0f:f5:5f:d9:61:5c:be:37:ec:94:e5:b6:a1:c2: cb:22:43:94:57:ff:b3:09:b6:d4:fe:86:73:f5:7c: b9:42:ee:31:e2:1a:d1:6f:43:c2:bd:df:16:b9:a9: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FE:7A:4A:7A:A3:17:61:81:80:B6:E6:FF:30:60:D6:7F:7F:51:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.crl X509v3 Authority Key Identifier: keyid:81:1A:72:AC:32:9B:AD:AE:C6:C1:42:26:EC:27:76:80:6E:E6:9D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e8:36:4b:b0:0a:10:64:b0:53:83:17:0b:57:b1:6f:72:bf: f6:e1:c3:11:c9:cb:ca:d0:5a:4e:ea:65:0e:2f:37:d5:a4:76: f3:83:34:ad:da:cb:ba:5d:b8:d3:27:6d:1a:bf:fa:41:8d:ac: 84:2c:7a:95:17:2f:14:d3:40:62:0d:48:25:90:71:28:fc:bb: 30:93:ed:8e:6e:e9:1f:3d:08:9a:b0:36:17:12:7e:f3:3d:7e: 06:20:2d:85:4d:ff:ac:56:02:5f:a2:48:68:1b:f8:0a:78:fc: 2c:57:ee:df:d5:b0:ff:22:22:b1:ec:48:38:23:fe:a8:92:d4: ae:c3:8c:d0:83:e2:fe:cc:0d:31:30:0b:6c:f6:33:41:e9:f0: 66:4b:25:7d:35:17:ff:33:33:09:41:11:93:bf:23:0e:45:25: 65:61:38:45:4d:03:e2:40:51:08:3f:c1:fd:2a:1b:88:61:e5: 25:12:42:bc:c1:37:7c:3b:41:7c:a4:cb:1e:c5:ac:05:a6:91: 76:09:de:fb:db:9c:b0:ef:dd:1c:6b:71:e8:75:37:9e:0c:f6: e5:9a:1c:06:e4:fe:bd:be:b5:8c:2d:68:01:97:45:fc:38:5f: f9:a4:d8:38:b1:30:70:51:49:0f:ee:a8:0c:de:f5:1e:af:7f: 0d:ec:aa:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXKmTPrryYLyCLDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3MGY3M2UtN2QyYi00ZGU1LWI2ZDYtZWQyODliNWJk YWJiMB4XDTI1MTAyMTAyMDAwOFoXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk ODllM2JjZmItMzEzOS00Zjg2LWIyZWMtNzIzZDY0MzMxYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPY5dKJkoEIbvvp9E/7t6cXJub1a2h1Hfid2 oYoAumlwXjDe3aZ+tmzRRmeYHhTHTrW1TagzWl0CVoirugLk6T6JE19STDyDjlM4 NQG2gmZ0V4hwPzrEtTI/Trs7yVCp62incImtTmE12J+uc38l7/0KlVywNvYGh1cg isU31rcDpm9PI34n1TzR6UVWTAPxNZp8ybGZ6BIE8Xq//YazY5KwLw1nxBLyVS0T x6SeT400ZtOa6fZYcKKQqwyoHhRRCXHXmKhUOyVRIjO3JR9MU441D/Vf2WFcvjfs lOW2ocLLIkOUV/+zCbbU/oZz9Xy5Qu4x4hrRb0PCvd8WuanFIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOP+ekp6oxdhgYC25v8wYNZ/f1GjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YTcw ZjczZS03ZDJiLTRkZTUtYjZkNi1lZDI4OWI1YmRhYmIvNGE3MGY3M2UtN2QyYi00 ZGU1LWI2ZDYtZWQyODliNWJkYWJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGE3MGY3M2UtN2QyYi00ZGU1LWI2 ZDYtZWQyODliNWJkYWJiLzRhNzBmNzNlLTdkMmItNGRlNS1iNmQ2LWVkMjg5YjVi ZGFiYi5jcmwwHwYDVR0jBBgwFoAUgRpyrDKbra7GwUIm7Cd2gG7mnZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YTcwZjczZS03ZDJiLTRkZTUtYjZkNi1lZDI4 OWI1YmRhYmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO6DZLsAoQZLBTgxcLV7Fv cr/24cMRycvK0FpO6mUOLzfVpHbzgzSt2su6XbjTJ20av/pBjayELHqVFy8U00Bi DUglkHEo/Lswk+2ObukfPQiasDYXEn7zPX4GIC2FTf+sVgJfokhoG/gKePwsV+7f 1bD/IiKx7Eg4I/6oktSuw4zQg+L+zA0xMAts9jNB6fBmSyV9NRf/MzMJQRGTvyMO RSVlYThFTQPiQFEIP8H9KhuIYeUlEkK8wTd8O0F8pMsexawFppF2Cd7725yw790c a3HodTeeDPblmhwG5P69vrWMLWgBl0X8OF/5pNg4sTBwUUkP7qgM3vUer38N7Kq+ -----END CERTIFICATE-----Generated at Tue Oct 21 15:35:52 2025 by rpki-client