$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft File: 09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft (raw, json) Hash identifier: /1Sqqc1M4JhB5CTAzCbheC9Anrw4p1JxX6fqa6nHhzQ= Subject key identifier: 84:AC:21:00:92:0D:95:4E:E4:7C:51:99:31:BE:B9:FA:CA:48:E8:7A Authority key identifier: C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE Certificate issuer: /CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Certificate serial: 010D0C9F4328584B93CAC87AA5B6763D07DD84C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft Manifest number: 010D0C9F4328584957897D5944C2A1FC74D595E3 Signing time: Sun 19 Oct 2025 21:00:03 +0000 Manifest this update: Sun 19 Oct 2025 21:00:03 +0000 Manifest next update: Tue 21 Oct 2025 21:00:00 +0000 Files and hashes: 1: 09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl (hash: WcfzWQCdKtHlGlm0jAGE37i3RjdBDOpds/+QFAe+y7I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ca:c8:7a:a5:b6:76:3d:07:dd:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Validity Not Before: Oct 19 21:00:03 2025 GMT Not After : Oct 21 21:00:00 2025 GMT Subject: CN=5405a0de-61d3-48a7-a3f4-fd572318c0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:9c:04:7f:96:a1:6e:a4:8f:57:c8:90:37: c4:75:c6:66:e5:68:18:31:97:c6:f7:ea:f9:d8:ce: 42:91:83:cd:07:41:c8:47:3f:97:66:20:97:22:e7: f3:3b:ad:17:59:b1:b9:39:14:87:89:a7:07:df:87: fa:7c:c7:ae:df:7f:f2:6e:3c:fb:7b:6e:eb:16:e9: 5b:6f:e1:d2:5c:80:59:9e:1b:08:73:3e:5d:7e:97: 98:8d:60:80:da:b0:c7:29:d5:d1:6e:f6:bd:2c:c5: 20:bc:fc:10:16:39:c1:57:62:e3:20:79:f8:f6:15: 34:24:57:f1:d1:cf:c2:74:69:c2:cd:42:a9:57:55: 3a:83:0c:7a:dd:c7:d7:5a:42:e4:c0:ca:a5:cf:11: 38:74:e2:19:ef:4f:78:04:ab:39:bb:81:db:78:a1: 9d:01:67:25:e0:63:e9:c4:28:c1:84:b0:cb:de:32: 11:a6:63:0b:07:1c:a2:1b:ba:4b:97:4f:3d:97:48: 24:c5:ea:49:76:aa:22:fc:a5:81:f2:2d:8d:c5:ed: 3b:11:b0:e2:bf:38:07:ad:44:b8:d5:0d:e0:7a:4c: fb:32:9d:2f:46:b1:88:2a:03:e1:3a:cc:e7:0c:0f: ba:a1:08:98:f0:ee:d5:48:c8:6a:81:d9:19:75:c3: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AC:21:00:92:0D:95:4E:E4:7C:51:99:31:BE:B9:FA:CA:48:E8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl X509v3 Authority Key Identifier: keyid:C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:9f:35:80:b6:05:7f:20:fb:d5:b3:f3:9f:7d:18:08:45:9d: ec:04:c8:3f:f3:e6:71:c4:eb:50:7f:9f:89:ed:1a:40:38:2e: cb:88:d6:1e:45:d5:a2:22:e2:60:38:b0:52:9f:69:32:53:52: 9b:42:01:80:7d:85:9c:c7:df:d5:97:05:eb:91:44:09:df:90: e4:d5:8f:97:8f:75:fa:c3:53:9f:60:eb:90:08:56:5f:50:ae: 04:c7:72:99:d8:cd:ec:bc:8f:a3:36:e0:ad:f3:b2:3b:63:ab: ff:c6:6d:5f:63:c9:7e:c2:05:d3:1b:02:63:85:ec:67:2c:4d: 96:40:9e:2e:52:1f:de:d6:3b:e0:23:d0:ef:a3:94:0c:e5:eb: 5b:fc:0c:52:0f:72:fd:7c:96:5c:f2:6f:ca:7d:42:49:10:68: 0a:9f:b9:a8:a5:5f:37:51:4e:b1:5e:03:b0:b4:11:60:92:24: 50:1b:9a:1e:07:61:a4:23:1a:76:86:cf:24:fb:ef:62:bd:ff: 3d:75:13:f6:d9:ef:0a:e2:10:7b:97:6f:0f:f8:86:a2:14:53: 03:c1:d9:77:fc:4a:a2:93:a0:5f:a6:3a:65:8e:94:08:dd:b1: c3:5a:02:35:31:bc:69:8b:81:78:2d:5e:40:5f:20:48:2e:40: d4:e5:6e:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTysh6pbZ2PQfdhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDliN2UyZDgtZTk5Yy00MmE1LWEwNWUtYzBlNTcyMzdm MDAzMB4XDTI1MTAxOTIxMDAwM1oXDTI1MTAyMTIxMDAwMFowLzEtMCsGA1UEAxMk NTQwNWEwZGUtNjFkMy00OGE3LWEzZjQtZmQ1NzIzMThjMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliWcBH+WoW6kj1fIkDfEdcZm5WgYMZfG9+r5 2M5CkYPNB0HIRz+XZiCXIufzO60XWbG5ORSHiacH34f6fMeu33/ybjz7e27rFulb b+HSXIBZnhsIcz5dfpeYjWCA2rDHKdXRbva9LMUgvPwQFjnBV2LjIHn49hU0JFfx 0c/CdGnCzUKpV1U6gwx63cfXWkLkwMqlzxE4dOIZ7094BKs5u4HbeKGdAWcl4GPp xCjBhLDL3jIRpmMLBxyiG7pLl089l0gkxepJdqoi/KWB8i2Nxe07EbDivzgHrUS4 1Q3gekz7Mp0vRrGIKgPhOsznDA+6oQiY8O7VSMhqgdkZdcNYdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFISsIQCSDZVO5HxRmTG+ufrKSOh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3 ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1NzIzN2YwMDMvMDliN2UyZDgtZTk5Yy00 MmE1LWEwNWUtYzBlNTcyMzdmMDAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDliN2UyZDgtZTk5Yy00MmE1LWEw NWUtYzBlNTcyMzdmMDAzLzA5YjdlMmQ4LWU5OWMtNDJhNS1hMDVlLWMwZTU3MjM3 ZjAwMy5jcmwwHwYDVR0jBBgwFoAUxjhFU/2OLR5BZvsRtHrhpkBZS94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1 NzIzN2YwMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC+nzWAtgV/IPvVs/OffRgI RZ3sBMg/8+ZxxOtQf5+J7RpAOC7LiNYeRdWiIuJgOLBSn2kyU1KbQgGAfYWcx9/V lwXrkUQJ35Dk1Y+Xj3X6w1OfYOuQCFZfUK4Ex3KZ2M3svI+jNuCt87I7Y6v/xm1f Y8l+wgXTGwJjhexnLE2WQJ4uUh/e1jvgI9Dvo5QM5etb/AxSD3L9fJZc8m/KfUJJ EGgKn7mopV83UU6xXgOwtBFgkiRQG5oeB2GkIxp2hs8k++9ivf89dRP22e8K4hB7 l28P+IaiFFMDwdl3/Eqik6BfpjpljpQI3bHDWgI1Mbxpi4F4LV5AXyBILkDU5W6a -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:03 2025 by rpki-client