$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft File: 71b34d11-5c74-4013-a0ad-639513ebea8c.mft (raw, json) Hash identifier: dSosQn62m2NVS3Tee6sHV0uO/7UXjmKOzzQTgfb6q90= Subject key identifier: D3:A8:04:CA:2F:98:31:64:27:24:0C:56:D2:EA:CD:FC:FC:1D:47:D0 Authority key identifier: 4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD Certificate issuer: /CN=71b34d11-5c74-4013-a0ad-639513ebea8c Certificate serial: 010D0C9F4328584B945FAD7FE7E8E42496777280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft Manifest number: 010D0C9F432858436EF7A31578DE66DC7ECED2FE Signing time: Mon 20 Oct 2025 02:00:03 +0000 Manifest this update: Mon 20 Oct 2025 02:00:03 +0000 Manifest next update: Wed 22 Oct 2025 02:00:00 +0000 Files and hashes: 1: 71b34d11-5c74-4013-a0ad-639513ebea8c.crl (hash: yjtgNzGT2OY3k3z5dSSYzI/XnkrpibmvyLTnCtb9yDY=) 2: aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa (hash: EtFSEzM0DtvOH5qI+UydNeFT5iUvYvLoNUM255tfTlM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:5f:ad:7f:e7:e8:e4:24:96:77:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b34d11-5c74-4013-a0ad-639513ebea8c Validity Not Before: Oct 20 02:00:03 2025 GMT Not After : Oct 22 02:00:00 2025 GMT Subject: CN=78f6ef9f-7951-45be-ade7-6c85ead6270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:aa:1b:fe:2e:7b:2e:f2:ff:90:6b:8f:9a:7b: 60:d5:8c:d3:da:84:4a:2a:9f:a7:17:e5:37:10:ca: e4:21:ce:2d:62:b9:c7:05:1b:7d:48:82:56:40:2b: 5f:06:9a:3c:54:09:ec:e8:52:74:2a:fc:f6:a5:35: 58:a0:de:b6:8f:e7:94:35:51:99:08:69:5e:39:3a: 5e:6c:f3:a3:27:16:dc:44:9a:8a:5c:28:24:8e:78: a2:e7:c1:d6:ba:3d:3f:a9:29:50:2f:bf:32:6c:20: 59:62:d3:f7:cc:97:72:f6:10:96:31:40:64:1f:69: a2:e1:fd:75:5a:d5:b8:85:55:b9:55:c8:79:34:3d: 5b:da:9f:72:1a:5e:69:8d:7f:64:86:87:e1:3e:0b: 78:df:04:4d:b8:64:de:bd:40:d2:fe:69:44:d2:a7: dd:3e:2f:60:c0:9a:6f:25:a4:1a:cb:12:92:f3:0e: a7:be:eb:2b:a0:4a:8b:62:8c:75:01:c9:77:54:4a: 64:8b:56:6b:61:bf:a3:ba:4b:e0:cc:79:7d:84:5a: 48:72:d8:2c:63:cd:66:cf:a5:06:9b:91:fd:f5:1b: cc:ec:62:e8:d7:db:d8:79:16:fe:da:a7:1c:5d:2e: 9d:e2:4b:7f:95:79:94:e2:38:c3:b1:0c:9a:77:f2: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:04:CA:2F:98:31:64:27:24:0C:56:D2:EA:CD:FC:FC:1D:47:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl X509v3 Authority Key Identifier: keyid:4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0f:05:67:d1:c7:2d:36:d6:74:3e:ab:50:f7:25:ac:83:23: 0c:99:1a:81:b1:91:6a:18:be:3a:62:c2:56:4c:32:dd:a6:c7: 55:36:8f:0d:ac:b6:be:d8:d4:58:00:5c:81:7f:c9:6a:cc:7e: 51:f2:98:7c:02:25:d4:5d:29:e9:4a:46:b4:29:39:b5:02:f2: 50:53:a9:22:eb:85:74:bc:e6:ee:41:c4:1f:28:5e:c9:bd:4a: 94:ef:1c:7e:ff:fe:42:fc:81:7b:be:12:77:f6:7c:36:17:79: 8b:9d:2c:b5:80:0c:c3:b6:f9:02:72:c4:69:6f:58:e3:18:8c: 22:b8:e3:f2:90:d4:98:8a:d5:18:3f:67:e2:2e:00:48:e9:fa: 4e:46:7b:f4:7f:ac:a7:0d:56:4a:64:84:9e:3a:c5:9b:00:50: ae:2c:1e:c7:4f:0f:bf:cd:98:57:27:15:b2:78:57:39:24:8a: f8:5b:a0:08:ff:1e:a2:69:98:95:30:17:4f:aa:bf:cb:18:61: 00:b9:eb:6b:fc:8e:48:3b:86:75:32:8b:ea:38:1e:d5:58:13: 36:e3:29:a8:9b:8b:7f:7f:48:49:09:06:be:73:f4:5f:a2:99: 62:46:17:f8:ca:1c:80:33:58:53:7f:ff:7e:36:cd:00:a7:21: 79:bf:69:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUX61/5+jkJJZ3coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFiMzRkMTEtNWM3NC00MDEzLWEwYWQtNjM5NTEzZWJl YThjMB4XDTI1MTAyMDAyMDAwM1oXDTI1MTAyMjAyMDAwMFowLzEtMCsGA1UEAxMk NzhmNmVmOWYtNzk1MS00NWJlLWFkZTctNmM4NWVhZDYyNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqob/i57LvL/kGuPmntg1YzT2oRKKp+nF+U3 EMrkIc4tYrnHBRt9SIJWQCtfBpo8VAns6FJ0Kvz2pTVYoN62j+eUNVGZCGleOTpe bPOjJxbcRJqKXCgkjnii58HWuj0/qSlQL78ybCBZYtP3zJdy9hCWMUBkH2mi4f11 WtW4hVW5Vch5ND1b2p9yGl5pjX9khofhPgt43wRNuGTevUDS/mlE0qfdPi9gwJpv JaQayxKS8w6nvusroEqLYox1Acl3VEpki1ZrYb+jukvgzHl9hFpIctgsY81mz6UG m5H99RvM7GLo19vYeRb+2qccXS6d4kt/lXmU4jjDsQyad/LzHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNOoBMovmDFkJyQMVtLqzfz8HUfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWIz NGQxMS01Yzc0LTQwMTMtYTBhZC02Mzk1MTNlYmVhOGMvNzFiMzRkMTEtNWM3NC00 MDEzLWEwYWQtNjM5NTEzZWJlYThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFiMzRkMTEtNWM3NC00MDEzLWEw YWQtNjM5NTEzZWJlYThjLzcxYjM0ZDExLTVjNzQtNDAxMy1hMGFkLTYzOTUxM2Vi ZWE4Yy5jcmwwHwYDVR0jBBgwFoAUTHHQFsoPFoFsyziFCoFpTvMR8r0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWIzNGQxMS01Yzc0LTQwMTMtYTBhZC02Mzk1 MTNlYmVhOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLDwVn0cctNtZ0PqtQ9yWs gyMMmRqBsZFqGL46YsJWTDLdpsdVNo8NrLa+2NRYAFyBf8lqzH5R8ph8AiXUXSnp Ska0KTm1AvJQU6ki64V0vObuQcQfKF7JvUqU7xx+//5C/IF7vhJ39nw2F3mLnSy1 gAzDtvkCcsRpb1jjGIwiuOPykNSYitUYP2fiLgBI6fpORnv0f6ynDVZKZISeOsWb AFCuLB7HTw+/zZhXJxWyeFc5JIr4W6AI/x6iaZiVMBdPqr/LGGEAuetr/I5IO4Z1 MovqOB7VWBM24ymom4t/f0hJCQa+c/RfopliRhf4yhyAM1hTf/9+Ns0ApyF5v2k+ -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:15 2025 by rpki-client