$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft File: fa43a831-b765-4adf-a0f0-2882a5c07fab.mft (raw, json) Hash identifier: BngM7eR9hIyEqIXk3ZHxj6z/In+pLoeKXANFvPQLyxE= Subject key identifier: A3:BD:A2:B1:54:47:3B:81:F2:FE:BD:34:D3:EF:95:56:0C:71:E9:85 Authority key identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Certificate issuer: /CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Certificate serial: 010D0C9F4328584B937180D495118FBD09347780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft Manifest number: 010D0C9F432858435A7F9D5337301AC5FFE31AF2 Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: fa43a831-b765-4adf-a0f0-2882a5c07fab.crl (hash: DbsJhpuE7cM4nCBnKGSDxlnVEHw7Q9fRKDaq8VCP5NM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:80:d4:95:11:8f:bd:09:34:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=82c78914-aeff-4cbb-8fe8-0ccc89a4e64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:47:7b:6b:55:09:b5:47:ef:22:e2:fc:02: 9f:35:60:dd:57:0b:8f:46:9a:88:0b:c7:72:ab:f5: 2b:9e:42:23:86:ff:ee:c9:d0:40:27:c4:68:10:08: 42:31:88:31:17:3b:b0:38:fa:55:fa:53:5d:b9:ed: 0f:06:9f:72:de:51:b8:99:f7:76:4a:46:08:98:97: a6:8e:ac:37:bd:c5:a3:50:09:dc:7a:2e:e0:a4:0b: f6:f4:dc:7e:43:4d:69:a7:26:b3:af:5d:88:2a:67: 39:a2:44:3f:ed:86:9d:9b:b3:7a:11:9c:10:78:14: eb:fd:23:ac:d5:7b:79:ec:33:33:ef:fd:7e:90:f1: a9:1b:9c:b2:21:01:1a:bd:0e:6a:38:98:88:68:75: 83:d0:d2:53:cf:e0:7d:d3:99:2a:42:32:06:2a:ca: ff:d2:ca:66:b5:b4:57:95:ce:c4:9f:54:3e:5c:db: ac:c7:79:18:f1:af:e2:e5:0a:d0:59:64:f8:85:e3: 45:be:8d:60:c7:fb:68:2f:8b:28:4e:b3:a7:97:5c: ae:2b:49:cf:37:20:32:78:8a:c9:a3:a5:76:85:f5: 56:9f:31:9d:4c:b1:a0:55:96:3c:98:53:5e:ea:0e: 26:63:a6:2e:48:86:0b:2f:cb:ba:8d:66:a9:46:da: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:A2:B1:54:47:3B:81:F2:FE:BD:34:D3:EF:95:56:0C:71:E9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.crl X509v3 Authority Key Identifier: keyid:9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1e:ca:36:60:bf:a8:67:d0:32:84:36:8b:e9:96:f6:8d:3f: 6b:ec:13:c9:1f:4c:33:03:d3:24:0d:2f:15:15:8b:32:c4:8c: c6:f1:27:8d:14:e8:63:85:3d:dd:80:d3:e1:15:61:17:cf:a9: 6d:60:8a:e8:4f:de:1d:f8:95:10:12:a1:a1:e7:45:b6:5e:9a: e0:80:1f:51:64:aa:fc:fb:4e:0b:ef:f7:d5:07:54:8a:32:db: 71:0c:17:27:27:11:db:60:56:02:9e:5a:2f:f5:b8:d5:f2:80: 26:19:d4:92:7e:2b:f1:94:0b:61:59:a8:d6:f8:f6:8f:c3:ae: 82:54:81:ca:32:fe:b0:31:ff:c8:e5:fd:54:d1:44:ba:4f:53: 0d:4e:d8:83:25:ba:6c:a6:ac:3a:85:d2:65:0a:5d:01:1d:c0: 9f:b2:a5:39:21:c2:a1:7d:d1:1a:fa:dc:5f:5d:d9:13:b0:8f: 46:9f:70:0b:ea:9e:32:4f:38:60:2e:18:ab:f9:32:48:ae:9a: 9d:84:a4:cf:d4:d7:75:34:fc:f5:c1:63:5b:24:41:74:5d:b8: 76:26:63:6d:14:57:8d:c2:9a:3c:3c:e9:c8:75:76:10:06:5b: e5:43:fd:06:71:22:96:45:27:f7:1c:cb:2c:55:c9:7d:4d:ff: b7:7b:7a:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYDUlRGPvQk0d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmE0M2E4MzEtYjc2NS00YWRmLWEwZjAtMjg4MmE1YzA3 ZmFiMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk ODJjNzg5MTQtYWVmZi00Y2JiLThmZTgtMGNjYzg5YTRlNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFHe2tVCbVH7yLi/AKfNWDdVwuPRpqIC8dy q/UrnkIjhv/uydBAJ8RoEAhCMYgxFzuwOPpV+lNdue0PBp9y3lG4mfd2SkYImJem jqw3vcWjUAncei7gpAv29Nx+Q01ppyazr12IKmc5okQ/7Yadm7N6EZwQeBTr/SOs 1Xt57DMz7/1+kPGpG5yyIQEavQ5qOJiIaHWD0NJTz+B905kqQjIGKsr/0spmtbRX lc7En1Q+XNusx3kY8a/i5QrQWWT4heNFvo1gx/toL4soTrOnl1yuK0nPNyAyeIrJ o6V2hfVWnzGdTLGgVZY8mFNe6g4mY6YuSIYLL8u6jWapRtrjfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKO9orFURzuB8v69NNPvlVYMcemFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYTQz YTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVjMDdmYWIvZmE0M2E4MzEtYjc2NS00 YWRmLWEwZjAtMjg4MmE1YzA3ZmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmE0M2E4MzEtYjc2NS00YWRmLWEw ZjAtMjg4MmE1YzA3ZmFiL2ZhNDNhODMxLWI3NjUtNGFkZi1hMGYwLTI4ODJhNWMw N2ZhYi5jcmwwHwYDVR0jBBgwFoAUnDV5RMCpzbFgsrWw68oHQh0U2pwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mYTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgy YTVjMDdmYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUHso2YL+oZ9AyhDaL6Zb2 jT9r7BPJH0wzA9MkDS8VFYsyxIzG8SeNFOhjhT3dgNPhFWEXz6ltYIroT94d+JUQ EqGh50W2XprggB9RZKr8+04L7/fVB1SKMttxDBcnJxHbYFYCnlov9bjV8oAmGdSS fivxlAthWajW+PaPw66CVIHKMv6wMf/I5f1U0US6T1MNTtiDJbpspqw6hdJlCl0B HcCfsqU5IcKhfdEa+txfXdkTsI9Gn3AL6p4yTzhgLhir+TJIrpqdhKTP1Nd1NPz1 wWNbJEF0Xbh2JmNtFFeNwpo8POnIdXYQBlvlQ/0GcSKWRSf3HMssVcl9Tf+3e3qY -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:09 2025 by rpki-client