$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft File: ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft (raw, json) Hash identifier: ceENa4vxCZTAimzO7xgXKWjL+aT9tf6V6TfdFvKLjtk= Subject key identifier: 9F:83:1D:DE:C0:C3:F8:58:F0:E8:F1:CA:93:6A:CD:43:A7:C8:0A:C2 Authority key identifier: CF:A9:AD:83:62:69:4D:25:FD:BE:48:2F:04:03:13:B4:0B:96:26:60 Certificate issuer: /CN=ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb Certificate serial: 010D0C9F4328584B95E2D102D7654C056E17F700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft Manifest number: 010D0C9F43285840FC52DD10A924CEBD36D4B0CC Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.crl (hash: hZ6bYexvY2EAtft8CdMrxgNl2xoSL83UHQZbCe8amYE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:d1:02:d7:65:4c:05:6e:17:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=a1909a2b-45b7-41dd-9917-f0ed4bd5aa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:cd:2a:f8:ba:50:4d:eb:38:49:d3:af:4a: 6e:71:26:f7:ed:67:53:a6:ca:b7:36:fc:26:8e:cc: 0c:a3:b3:ef:7b:73:1c:58:46:7d:ad:7f:3a:64:53: f7:b4:83:9f:41:11:a1:aa:1f:5a:5b:1d:0c:49:c9: d4:1b:e7:b5:63:49:ea:2f:88:24:d2:0f:f3:02:7f: 66:63:76:23:c9:41:5d:49:30:f9:7c:44:2a:74:75: a5:a0:6e:a4:e9:ec:ce:52:a8:51:06:7e:4a:fc:72: 34:23:d0:ec:c4:28:49:53:4c:8b:9e:3b:57:a3:87: 8e:6e:40:ea:13:ad:aa:a3:71:70:ae:b3:0e:74:85: ee:7c:48:c1:56:78:3b:48:fd:51:96:0c:b4:23:04: 15:85:d4:5e:e9:6c:79:21:fc:74:a3:69:e4:bd:ec: 67:cb:f5:52:d8:18:8c:99:35:e7:21:c3:05:8e:8e: 83:ea:22:e7:50:e3:91:50:a7:4d:0e:00:87:5c:f9: dd:02:30:ba:f3:d4:7e:de:0d:42:c1:26:44:19:a6: 4a:7a:ac:6e:06:3a:e1:04:dc:56:91:29:b7:2d:81: a2:74:23:99:10:e1:3c:6e:05:63:99:cf:aa:4c:a1: e8:db:4c:c2:6a:a2:56:59:4f:ec:ea:27:de:8a:c2: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:83:1D:DE:C0:C3:F8:58:F0:E8:F1:CA:93:6A:CD:43:A7:C8:0A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.crl X509v3 Authority Key Identifier: keyid:CF:A9:AD:83:62:69:4D:25:FD:BE:48:2F:04:03:13:B4:0B:96:26:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e0:63:1a:cc:d8:e7:78:fa:c7:fe:4a:65:f3:1f:aa:c3:79: cd:c8:80:05:29:c3:ad:6c:1b:a8:77:3c:7a:50:f2:16:2b:44: 58:2f:0a:31:83:2c:23:d9:da:82:ff:32:07:5a:8d:b7:d4:e0: 80:ab:e1:3f:9d:f7:f6:b2:bf:c0:1a:34:bb:47:fc:36:2a:39: 40:b7:58:61:28:b1:d0:bd:f3:bc:15:6e:c7:89:76:93:79:94: 42:a2:3c:a4:d0:16:b1:34:8b:5a:d9:4d:3d:58:73:8e:58:43: 1e:52:2a:09:94:87:1c:ed:a5:f2:df:19:c1:62:fc:1b:97:47: 58:40:70:77:e2:4d:6f:e6:a5:6c:2b:6a:bb:7b:43:b2:0c:c3: 07:77:41:2b:ab:97:86:5c:b0:29:6c:21:ab:88:fc:e5:54:17: ea:a3:ee:38:8c:9f:07:94:2d:69:85:9e:fe:79:6a:6a:52:92: f0:8b:10:1a:aa:d1:e5:18:5e:15:c8:3d:72:ba:5e:7f:7a:d9: 8b:09:bf:09:24:ec:8d:11:cb:cb:70:3f:59:d2:db:55:a0:77: f6:b5:82:40:41:27:ef:0b:f5:21:e2:1e:9c:6a:c0:34:aa:bb: 60:3e:81:6b:c1:13:fa:fd:0e:47:0d:08:88:15:31:fd:1c:ec: ad:46:27:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4tEC12VMBW4X9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEwY2Y4MWEtZTVlOC00NzAwLWE0YjQtYzM0OTY5ZWQ4 ZGNiMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk YTE5MDlhMmItNDViNy00MWRkLTk5MTctZjBlZDRiZDVhYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdHNKvi6UE3rOEnTr0pucSb37WdTpsq3Nvwm jswMo7Pve3McWEZ9rX86ZFP3tIOfQRGhqh9aWx0MScnUG+e1Y0nqL4gk0g/zAn9m Y3YjyUFdSTD5fEQqdHWloG6k6ezOUqhRBn5K/HI0I9DsxChJU0yLnjtXo4eObkDq E62qo3FwrrMOdIXufEjBVng7SP1Rlgy0IwQVhdRe6Wx5Ifx0o2nkvexny/VS2BiM mTXnIcMFjo6D6iLnUOORUKdNDgCHXPndAjC689R+3g1CwSZEGaZKeqxuBjrhBNxW kSm3LYGidCOZEOE8bgVjmc+qTKHo20zCaqJWWU/s6ifeisLcIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ+DHd7Aw/hY8OjxypNqzUOnyArCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYTBj ZjgxYS1lNWU4LTQ3MDAtYTRiNC1jMzQ5NjllZDhkY2IvZWEwY2Y4MWEtZTVlOC00 NzAwLWE0YjQtYzM0OTY5ZWQ4ZGNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWEwY2Y4MWEtZTVlOC00NzAwLWE0 YjQtYzM0OTY5ZWQ4ZGNiL2VhMGNmODFhLWU1ZTgtNDcwMC1hNGI0LWMzNDk2OWVk OGRjYi5jcmwwHwYDVR0jBBgwFoAUz6mtg2JpTSX9vkgvBAMTtAuWJmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lYTBjZjgxYS1lNWU4LTQ3MDAtYTRiNC1jMzQ5 NjllZDhkY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBb4GMazNjnePrH/kpl8x+q w3nNyIAFKcOtbBuodzx6UPIWK0RYLwoxgywj2dqC/zIHWo231OCAq+E/nff2sr/A GjS7R/w2KjlAt1hhKLHQvfO8FW7HiXaTeZRCojyk0BaxNIta2U09WHOOWEMeUioJ lIcc7aXy3xnBYvwbl0dYQHB34k1v5qVsK2q7e0OyDMMHd0Erq5eGXLApbCGriPzl VBfqo+44jJ8HlC1phZ7+eWpqUpLwixAaqtHlGF4VyD1yul5/etmLCb8JJOyNEcvL cD9Z0ttVoHf2tYJAQSfvC/Uh4h6casA0qrtgPoFrwRP6/Q5HDQiIFTH9HOytRidL -----END CERTIFICATE-----Generated at Tue Oct 21 15:29:44 2025 by rpki-client