$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft File: 89f46e33-a45d-4efe-8e7f-94df4343f1be.mft (raw, json) Hash identifier: 3YNrIXGfxe1/bde9V9TuKPGhGRD59c0ArmqgKAPwUXU= Subject key identifier: AE:9C:A7:B7:DD:2F:C5:72:84:A3:B1:E0:D5:DD:B0:CA:0B:7F:C6:92 Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584B96009508A8BC27B5A15F5000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft Manifest number: 010D0C9F432858419BA974F3424D7851A3CF48F3 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 89f46e33-a45d-4efe-8e7f-94df4343f1be.crl (hash: XtEld68ece90agLWbsjHCEIj3lVzMCyw/lKrVSzDYFY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:95:08:a8:bc:27:b5:a1:5f:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=86f43474-a3d1-450d-bfbe-37003e61bf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:2d:e3:c9:50:c3:54:a4:e6:01:47:41:6c: e8:ad:92:a4:48:1d:24:77:a3:99:58:6f:65:c7:59: 1b:85:16:5c:1a:5e:4e:b0:84:b2:9d:6f:4a:fd:b5: c1:d2:1e:7a:84:8b:25:c8:60:4a:5e:84:20:fa:fc: 34:d4:90:d3:4f:d7:61:b9:0a:b4:97:4c:0e:51:91: f9:b5:64:21:d8:79:c3:a0:ca:65:2e:0e:bb:3f:20: 6d:41:bc:86:12:7f:a2:91:dd:3c:ec:3f:3b:17:17: e3:30:7b:37:0c:28:b3:35:01:ec:a8:55:f4:f5:37: 69:ac:b4:4c:77:51:77:fc:f5:b7:c9:66:7e:f5:45: 86:b6:84:26:7b:2f:a2:ee:cd:28:e1:60:c1:fe:e6: cb:aa:cf:1f:cc:04:02:27:27:9b:24:d8:69:ad:ee: 4e:16:a2:95:af:97:a7:6c:fb:ab:55:4b:87:83:1d: 7b:3b:8c:a0:88:cb:00:82:f0:cd:e7:78:a0:b5:bd: 36:5f:42:f3:15:55:f9:b0:19:8a:61:31:d7:02:6c: 3e:f3:85:0d:4f:6a:fe:9a:da:35:6e:08:b5:29:a0: 23:8b:93:f2:ca:53:88:ae:a4:54:d0:58:48:45:a4: 2e:91:e7:0f:da:68:0a:7a:4e:76:9c:5c:c2:63:b7: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:A7:B7:DD:2F:C5:72:84:A3:B1:E0:D5:DD:B0:CA:0B:7F:C6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6a:b2:10:02:be:50:2b:2f:a1:37:e0:4e:cb:10:6f:d9:6c: 71:29:16:34:49:fc:8b:bc:47:80:45:99:7b:d3:0e:98:ce:8c: e6:f6:75:2c:c8:e0:ba:22:74:9a:77:06:0e:73:25:69:34:3c: ec:5c:55:c8:56:4c:d1:e3:69:3c:21:ac:e2:eb:d3:f7:cf:51: d3:d2:7f:a6:62:df:49:14:7d:3b:75:30:3f:85:b9:7f:92:71: 6e:94:67:7e:20:a5:72:ab:74:00:e9:71:9c:5e:b1:69:f2:fe: 91:6c:fc:2b:44:64:75:ec:f3:cd:5e:44:81:f9:98:6d:fa:0c: 42:db:a3:19:ae:f4:5a:4e:dc:4f:d4:90:4d:c8:00:65:22:59: 0b:0a:7b:62:0d:84:ec:f4:d4:4b:cd:39:28:5c:1f:0c:09:7c: 11:e1:f9:50:c6:7d:10:de:2d:74:ef:a6:25:fd:3e:5b:01:23: 4d:3f:8e:b8:57:df:ed:6c:0b:85:df:64:2d:f0:e1:8b:ac:c1: db:ad:58:cc:95:63:06:6a:3a:f9:0f:16:43:02:8b:f0:60:9f: d8:68:4a:ae:a5:89:7f:85:0a:a3:8c:7d:5c:1c:be:72:74:43: db:5a:e8:44:43:65:72:35:2f:d4:02:05:ea:85:9d:34:7c:e2: 99:86:b3:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJUIqLwntaFfUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk ODZmNDM0NzQtYTNkMS00NTBkLWJmYmUtMzcwMDNlNjFiZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkct48lQw1Sk5gFHQWzorZKkSB0kd6OZWG9l x1kbhRZcGl5OsISynW9K/bXB0h56hIslyGBKXoQg+vw01JDTT9dhuQq0l0wOUZH5 tWQh2HnDoMplLg67PyBtQbyGEn+ikd087D87FxfjMHs3DCizNQHsqFX09TdprLRM d1F3/PW3yWZ+9UWGtoQmey+i7s0o4WDB/ubLqs8fzAQCJyebJNhpre5OFqKVr5en bPurVUuHgx17O4ygiMsAgvDN53igtb02X0LzFVX5sBmKYTHXAmw+84UNT2r+mto1 bgi1KaAji5PyylOIrqRU0FhIRaQukecP2mgKek52nFzCY7c0+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK6cp7fdL8VyhKOx4NXdsMoLf8aSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvODlmNDZlMzMtYTQ1ZC00 ZWZlLThlN2YtOTRkZjQzNDNmMWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKarIQAr5QKy+hN+BOyxBv 2WxxKRY0SfyLvEeARZl70w6Yzozm9nUsyOC6InSadwYOcyVpNDzsXFXIVkzR42k8 Iazi69P3z1HT0n+mYt9JFH07dTA/hbl/knFulGd+IKVyq3QA6XGcXrFp8v6RbPwr RGR17PPNXkSB+Zht+gxC26MZrvRaTtxP1JBNyABlIlkLCntiDYTs9NRLzTkoXB8M CXwR4flQxn0Q3i1076Yl/T5bASNNP464V9/tbAuF32Qt8OGLrMHbrVjMlWMGajr5 DxZDAovwYJ/YaEqupYl/hQqjjH1cHL5ydEPbWuhEQ2VyNS/UAgXqhZ00fOKZhrOB -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:01 2025 by rpki-client