$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft File: 31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft (raw, json) Hash identifier: Ri4Nh3Olda5jonN5tn70m+qx2McH/kbbbVkFo517eHI= Subject key identifier: C1:7E:2C:CF:A5:0D:B1:6C:63:8C:91:DE:16:00:73:06:6E:D1:03:8B Authority key identifier: 06:A3:22:13:09:A1:78:C0:9D:D9:6E:83:88:C8:AB:91:19:7B:DF:0D Certificate issuer: /CN=31ef5a98-3668-4f92-93d2-2a6fa75f2b3d Certificate serial: 010D0C9F4328584B95E2CEAD6ED4083C0FED2100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft Manifest number: 010D0C9F43285841E411959AE6C92D2FAB122279 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl (hash: bCwWPolsGruOesL7BTPXNPkPD3Qz4SaarZ+8RtH4j10=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ce:ad:6e:d4:08:3c:0f:ed:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ef5a98-3668-4f92-93d2-2a6fa75f2b3d Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=20aa7c3d-aaa0-47e5-af1b-1042226038c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:36:33:96:ce:81:c2:d4:a2:ad:77:84:6d: dd:5f:00:f3:b7:f5:ea:a2:51:74:54:32:79:dd:ea: 88:d3:c5:63:db:77:52:2a:6b:6a:1a:6d:da:f2:fd: 19:ce:59:d8:53:41:72:fb:b1:5b:5a:4a:d2:c3:c5: f8:8e:be:7a:f0:d8:ef:87:39:ac:64:a1:f5:a8:00: d2:4e:5a:39:9e:0d:a9:88:bf:25:25:41:59:27:ee: ab:69:72:44:a0:de:a1:99:e9:7d:73:5c:ec:c1:f3: 3d:cc:86:27:99:2f:a9:c7:70:22:ce:ce:69:e9:4d: 34:3f:2c:33:a5:b4:f7:58:53:d1:8b:8b:ea:a4:97: 13:b1:99:5b:00:4e:d9:a3:fa:d4:c6:12:a1:a5:76: e0:fe:00:ec:09:c3:34:91:b2:b7:a4:24:00:9b:60: 4b:c7:fa:8c:81:8c:c1:4f:2c:5a:89:dc:12:b4:e0: 8c:23:ab:d7:fa:a1:12:05:e6:1d:87:b6:51:0e:8b: fc:dd:8b:cd:a4:8e:6c:72:bb:29:97:c3:a7:73:34: dd:35:73:1a:54:ba:42:09:8c:45:20:25:e9:b0:a9: 75:d2:e3:cf:8d:a0:ac:a2:40:0d:b4:79:83:56:55: 77:33:93:d5:22:1b:26:52:6f:d1:f6:64:6f:c9:c6: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:2C:CF:A5:0D:B1:6C:63:8C:91:DE:16:00:73:06:6E:D1:03:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl X509v3 Authority Key Identifier: keyid:06:A3:22:13:09:A1:78:C0:9D:D9:6E:83:88:C8:AB:91:19:7B:DF:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d8:6e:ac:19:89:ad:59:ab:af:54:9e:a9:71:27:1b:83:54: 20:9a:85:49:20:45:2d:1d:6b:60:6b:61:ac:fa:14:f4:65:a1: d5:22:6d:a6:c4:dd:50:a2:a3:ee:33:c7:b9:05:c7:f2:45:09: 65:fd:c3:a6:e5:9d:f6:1e:3e:06:67:10:62:3c:92:c9:5c:9a: e6:6a:40:e7:d3:56:16:39:4f:09:ae:be:77:c2:89:61:f9:30: 64:a6:1e:a0:e4:ac:6d:87:49:0c:b0:a5:71:f2:8f:8e:e7:41: 3c:ac:56:3b:af:6e:fc:eb:fb:1d:e6:27:1d:a3:79:ce:08:70: a6:95:76:8c:35:dd:63:85:46:30:a5:9b:a7:bc:63:7d:0b:78: 33:d6:aa:8b:a4:42:8b:93:32:83:2d:42:a8:10:ec:1b:81:ee: cf:c4:76:11:cb:78:06:b0:86:16:27:77:d7:e2:20:06:d1:dd: 26:31:59:b3:6c:96:41:4b:10:d3:8f:0f:69:9d:b8:6b:d2:b8: 1b:9b:a1:c6:3e:87:bf:af:96:21:1e:ba:83:1d:52:61:6b:cd: 8b:1f:4a:32:35:82:f7:f8:14:92:2d:f2:1b:e3:e0:c3:0f:c9: 56:56:1a:d7:53:08:ac:44:b1:0b:ab:cd:2e:c7:2f:fe:5f:bd: 3f:c4:e3:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s6tbtQIPA/tIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFlZjVhOTgtMzY2OC00ZjkyLTkzZDItMmE2ZmE3NWYy YjNkMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk MjBhYTdjM2QtYWFhMC00N2U1LWFmMWItMTA0MjIyNjAzOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RU2M5bOgcLUoq13hG3dXwDzt/XqolF0VDJ5 3eqI08Vj23dSKmtqGm3a8v0ZzlnYU0Fy+7FbWkrSw8X4jr568NjvhzmsZKH1qADS Tlo5ng2piL8lJUFZJ+6raXJEoN6hmel9c1zswfM9zIYnmS+px3Aizs5p6U00Pywz pbT3WFPRi4vqpJcTsZlbAE7Zo/rUxhKhpXbg/gDsCcM0kbK3pCQAm2BLx/qMgYzB TyxaidwStOCMI6vX+qESBeYdh7ZRDov83YvNpI5scrspl8OnczTdNXMaVLpCCYxF ICXpsKl10uPPjaCsokANtHmDVlV3M5PVIhsmUm/R9mRvycbY7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMF+LM+lDbFsY4yR3hYAcwZu0QOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMWVm NWE5OC0zNjY4LTRmOTItOTNkMi0yYTZmYTc1ZjJiM2QvMzFlZjVhOTgtMzY2OC00 ZjkyLTkzZDItMmE2ZmE3NWYyYjNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzFlZjVhOTgtMzY2OC00ZjkyLTkz ZDItMmE2ZmE3NWYyYjNkLzMxZWY1YTk4LTM2NjgtNGY5Mi05M2QyLTJhNmZhNzVm MmIzZC5jcmwwHwYDVR0jBBgwFoAUBqMiEwmheMCd2W6DiMirkRl73w0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMWVmNWE5OC0zNjY4LTRmOTItOTNkMi0yYTZm YTc1ZjJiM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs2G6sGYmtWauvVJ6pcScb g1QgmoVJIEUtHWtga2Gs+hT0ZaHVIm2mxN1QoqPuM8e5BcfyRQll/cOm5Z32Hj4G ZxBiPJLJXJrmakDn01YWOU8Jrr53wolh+TBkph6g5Kxth0kMsKVx8o+O50E8rFY7 r2786/sd5icdo3nOCHCmlXaMNd1jhUYwpZunvGN9C3gz1qqLpEKLkzKDLUKoEOwb ge7PxHYRy3gGsIYWJ3fX4iAG0d0mMVmzbJZBSxDTjw9pnbhr0rgbm6HGPoe/r5Yh HrqDHVJha82LH0oyNYL3+BSSLfIb4+DDD8lWVhrXUwisRLELq80uxy/+X70/xOO3 -----END CERTIFICATE-----Generated at Tue Oct 21 15:29:44 2025 by rpki-client