$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft File: a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft (raw, json) Hash identifier: o7/Sa6XAHnOhwyKs1Lzxd5qOVVGFPNKmZZ1zfzHy3fk= Subject key identifier: 12:61:51:08:52:13:45:D9:C5:B9:2F:F3:87:79:B4:BA:6E:25:0F:8D Authority key identifier: 0E:A2:DA:21:8A:06:A5:1E:81:1C:BD:BA:0C:DB:68:B4:32:65:F2:3F Certificate issuer: /CN=a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e Certificate serial: 010D0C9F4328584B9677B3A638495E67AE62C600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft Manifest number: 010D0C9F4328584B85BB8D0DF0F0AE60B100A1C6 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Thu 23 Oct 2025 20:00:00 +0000 Files and hashes: 1: a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.crl (hash: NZX9mHIv3jMP3rcVBvaldOF/h8QzFo4lj0HprnnEoPo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b3:a6:38:49:5e:67:ae:62:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 23 20:00:00 2025 GMT Subject: CN=ead93bc6-bc54-4bed-a340-bfbf6d093ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:d6:a6:d3:98:c9:8d:11:1a:78:a1:8d:5a: 8b:9f:58:c8:81:52:6a:fc:84:81:41:eb:cd:35:9f: b1:cf:81:44:3a:01:6b:17:15:f9:06:3b:9a:e4:42: fe:5d:67:00:12:2b:0c:ed:ac:e2:21:88:aa:3b:a0: 2a:c0:d4:f9:9f:16:60:67:80:15:24:52:7b:a6:f6: e6:7a:98:23:76:8f:fc:75:0c:36:57:e9:f8:10:a6: 9a:32:9e:19:25:fb:2f:70:6c:10:cf:f4:5c:d3:e7: 61:33:48:bc:62:ab:04:72:10:ae:a9:96:32:7c:9e: 2b:9d:90:39:4d:c9:2f:ce:39:0e:95:15:f9:45:3b: a5:16:29:3e:bc:4b:80:d1:14:6a:b8:3b:0b:de:78: ac:57:f7:5b:37:0a:6b:6f:b7:5b:a9:e4:00:48:fb: ef:b5:b3:15:5f:3d:e8:ae:88:2c:b9:a0:21:99:87: 01:9c:60:d5:22:37:d1:5a:6b:7f:fb:fc:b2:ea:0e: f6:2c:1d:47:af:31:35:5c:80:47:d1:71:44:72:e4: bc:98:5d:39:8a:52:0e:60:a6:18:86:da:2c:aa:be: 34:10:c8:3c:0f:d7:ad:d9:1b:2c:8f:31:ac:60:b1: d6:7b:d7:b0:fc:44:8a:90:e9:08:19:ca:6f:79:b8: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:61:51:08:52:13:45:D9:C5:B9:2F:F3:87:79:B4:BA:6E:25:0F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.crl X509v3 Authority Key Identifier: keyid:0E:A2:DA:21:8A:06:A5:1E:81:1C:BD:BA:0C:DB:68:B4:32:65:F2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4b58961-b23c-4480-aa1c-f2ec6f4a8d7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:16:2b:d9:04:77:e5:39:75:d3:45:1e:38:ca:97:64:68:1f: b4:26:28:f9:a8:49:99:46:19:00:2f:f6:f2:73:ec:62:d4:26: a7:68:b0:b1:27:35:b0:e0:8f:67:c8:ea:8f:73:fe:3f:50:81: 7f:35:b2:d0:d6:fb:75:e6:34:19:15:32:2f:99:e3:56:02:21: af:01:60:71:59:5e:ec:4c:06:e5:92:e5:e6:67:19:78:84:ca: 8f:4a:5a:24:4c:60:07:60:84:3b:40:08:cc:56:53:9f:ad:6c: b3:a5:a5:2d:ec:34:b6:66:a6:b7:05:45:d2:ca:2a:48:d9:64: 87:2d:d3:12:c2:f6:ea:d8:ee:f4:1b:e3:08:83:b0:32:26:6d: 6a:f7:36:25:bd:e1:9b:63:60:18:5d:05:71:a8:90:76:a0:2e: f7:6f:1f:54:3b:ab:e6:e5:76:73:55:36:e4:56:2f:2d:6c:b2: c2:2e:50:48:5f:0e:44:76:67:65:58:83:0a:54:4b:bd:b6:43: ce:11:6d:d6:97:b2:1c:9d:4d:46:1f:5f:da:5d:55:2e:e2:42: 5b:33:02:6a:0a:f8:38:e3:81:35:f3:5b:63:17:7c:9c:c6:a3: a7:7f:81:44:22:84:c3:8a:03:2f:45:00:29:3f:ad:0e:65:91: 9c:1e:2f:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7OmOEleZ65ixgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiNTg5NjEtYjIzYy00NDgwLWFhMWMtZjJlYzZmNGE4 ZDdlMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMzIwMDAwMFowLzEtMCsGA1UEAxMk ZWFkOTNiYzYtYmM1NC00YmVkLWEzNDAtYmZiZjZkMDkzZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIbWptOYyY0RGnihjVqLn1jIgVJq/ISBQevN NZ+xz4FEOgFrFxX5Bjua5EL+XWcAEisM7aziIYiqO6AqwNT5nxZgZ4AVJFJ7pvbm epgjdo/8dQw2V+n4EKaaMp4ZJfsvcGwQz/Rc0+dhM0i8YqsEchCuqZYyfJ4rnZA5 TckvzjkOlRX5RTulFik+vEuA0RRquDsL3nisV/dbNwprb7dbqeQASPvvtbMVXz3o rogsuaAhmYcBnGDVIjfRWmt/+/yy6g72LB1HrzE1XIBH0XFEcuS8mF05ilIOYKYY htosqr40EMg8D9et2RssjzGsYLHWe9ew/ESKkOkIGcpvebiFmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBJhUQhSE0XZxbkv84d5tLpuJQ+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGI1 ODk2MS1iMjNjLTQ0ODAtYWExYy1mMmVjNmY0YThkN2UvYTRiNTg5NjEtYjIzYy00 NDgwLWFhMWMtZjJlYzZmNGE4ZDdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiNTg5NjEtYjIzYy00NDgwLWFh MWMtZjJlYzZmNGE4ZDdlL2E0YjU4OTYxLWIyM2MtNDQ4MC1hYTFjLWYyZWM2ZjRh OGQ3ZS5jcmwwHwYDVR0jBBgwFoAUDqLaIYoGpR6BHL26DNtotDJl8j8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGI1ODk2MS1iMjNjLTQ0ODAtYWExYy1mMmVj NmY0YThkN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiFivZBHflOXXTRR44ypdk aB+0Jij5qEmZRhkAL/byc+xi1CanaLCxJzWw4I9nyOqPc/4/UIF/NbLQ1vt15jQZ FTIvmeNWAiGvAWBxWV7sTAblkuXmZxl4hMqPSlokTGAHYIQ7QAjMVlOfrWyzpaUt 7DS2Zqa3BUXSyipI2WSHLdMSwvbq2O70G+MIg7AyJm1q9zYlveGbY2AYXQVxqJB2 oC73bx9UO6vm5XZzVTbkVi8tbLLCLlBIXw5EdmdlWIMKVEu9tkPOEW3Wl7IcnU1G H1/aXVUu4kJbMwJqCvg444E181tjF3ycxqOnf4FEIoTDigMvRQApP60OZZGcHi8X -----END CERTIFICATE-----Generated at Tue Oct 21 04:15:32 2025 by rpki-client