$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft File: 42820f2e-2eb1-4049-8630-b2760e0a03a1.mft (raw, json) Hash identifier: uZbMXzOldN5RxnON49OCzrKGoqaAR5qg+1mIedHbamc= Subject key identifier: 72:92:57:D3:5F:28:ED:53:B9:E9:50:D4:F1:CC:36:86:3E:48:E2:10 Authority key identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Certificate issuer: /CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Certificate serial: 010D0C9F4328584B938F3CB9C617FABF64A88850 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft Manifest number: 010D0C9F432858499FDDB8D8E5963D6B80EDAC33 Signing time: Sun 19 Oct 2025 19:00:03 +0000 Manifest this update: Sun 19 Oct 2025 19:00:03 +0000 Manifest next update: Tue 21 Oct 2025 19:00:00 +0000 Files and hashes: 1: 42820f2e-2eb1-4049-8630-b2760e0a03a1.crl (hash: PpgYR/5trS+jEvibfQJgmp9pG13n/NmmYeV4fpix80g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:8f:3c:b9:c6:17:fa:bf:64:a8:88:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Validity Not Before: Oct 19 19:00:03 2025 GMT Not After : Oct 21 19:00:00 2025 GMT Subject: CN=e3898905-bb82-4e67-a653-1e7d6bc28be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:b9:f1:b7:6d:52:2f:38:f2:d0:25:69:f5: d4:aa:2a:97:43:92:56:da:b4:27:c0:93:47:20:9d: 05:19:f2:55:4c:15:06:6d:e3:2a:8a:e4:20:40:e1: 9b:ad:41:d3:b1:1b:58:4e:ef:13:3e:62:5e:40:db: 7d:2c:9a:08:39:27:81:02:22:14:7a:fd:61:f3:01: 78:01:db:94:52:b7:b3:a3:9d:74:9f:88:5f:ca:44: 3a:9c:25:d9:81:b3:be:d8:f4:ef:71:9e:08:95:f6: fc:69:ec:47:56:85:e0:d1:03:00:28:d7:35:d9:c3: 7d:2e:9a:62:c6:6f:ae:ac:f5:9f:2a:8f:72:12:c4: 94:b6:50:5b:a7:ea:dd:fe:7b:66:4e:75:39:d6:88: 48:4c:47:88:79:5a:e9:bb:cc:e2:40:c9:ea:58:0d: 1d:22:c9:11:78:4e:fe:07:8b:6f:03:9e:69:e8:e6: c4:59:97:27:4f:4e:e0:9e:20:ac:5f:26:69:f2:6c: 90:b7:ee:73:ff:96:91:2a:8f:8e:db:10:e9:f9:77: f2:69:81:26:03:19:84:f1:4d:2d:00:61:a7:82:f1: 3c:ca:27:c7:bc:1f:58:c4:2f:91:fb:29:dd:ea:ab: 4c:75:28:07:97:7c:17:54:77:90:a1:3b:ad:f2:54: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:57:D3:5F:28:ED:53:B9:E9:50:D4:F1:CC:36:86:3E:48:E2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl X509v3 Authority Key Identifier: keyid:3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d8:57:3d:f9:31:25:1c:60:6c:8c:a5:ad:a1:fa:0c:04:fa: 64:c0:f5:91:dd:29:28:48:d6:7d:f5:7e:7a:50:9b:b4:1d:17: a3:d5:26:0d:87:0e:a3:f7:15:e7:32:fb:a6:47:96:45:e0:b4: 50:3f:9f:1a:a6:7a:54:6e:50:c4:12:90:2f:a1:00:b1:51:93: 6c:5a:22:88:4e:9d:c6:78:91:04:2c:99:52:3d:6b:16:a0:02: 99:5d:61:34:e5:d8:87:1e:c3:fc:08:6a:ed:19:39:bd:f6:12: 05:37:e6:2c:34:0b:3e:88:3a:ba:62:5d:66:8c:44:ab:84:db: 97:31:ee:17:64:33:cf:b9:81:d6:37:0f:4d:69:7f:21:b0:02: c4:59:15:f4:15:47:2e:27:7b:e7:33:69:f9:31:26:38:a5:6c: 49:c2:a9:83:ed:13:63:ad:2a:34:ed:6f:50:82:2c:a9:f3:ff: 11:fe:2a:23:2c:e2:86:41:c6:3d:bd:5e:cc:2d:59:4d:41:7a: 75:f6:b8:65:2c:2e:f3:52:c5:1b:3b:4b:fd:b4:98:29:08:99: 68:e3:8d:50:65:36:e1:53:d5:26:cf:00:26:3f:0d:70:1a:18: 1a:79:96:9f:d8:12:14:1e:91:13:55:5f:5c:b3:4d:39:cc:cc: d5:86:fb:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTjzy5xhf6v2SoiFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MjBmMmUtMmViMS00MDQ5LTg2MzAtYjI3NjBlMGEw M2ExMB4XDTI1MTAxOTE5MDAwM1oXDTI1MTAyMTE5MDAwMFowLzEtMCsGA1UEAxMk ZTM4OTg5MDUtYmI4Mi00ZTY3LWE2NTMtMWU3ZDZiYzI4YmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCy58bdtUi848tAlafXUqiqXQ5JW2rQnwJNH IJ0FGfJVTBUGbeMqiuQgQOGbrUHTsRtYTu8TPmJeQNt9LJoIOSeBAiIUev1h8wF4 AduUUrezo510n4hfykQ6nCXZgbO+2PTvcZ4Ilfb8aexHVoXg0QMAKNc12cN9Lppi xm+urPWfKo9yEsSUtlBbp+rd/ntmTnU51ohITEeIeVrpu8ziQMnqWA0dIskReE7+ B4tvA55p6ObEWZcnT07gniCsXyZp8myQt+5z/5aRKo+O2xDp+XfyaYEmAxmE8U0t AGGngvE8yifHvB9YxC+R+ynd6qtMdSgHl3wXVHeQoTut8lTu9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHKSV9NfKO1TuelQ1PHMNoY+SOIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Mjgy MGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUwYTAzYTEvNDI4MjBmMmUtMmViMS00 MDQ5LTg2MzAtYjI3NjBlMGEwM2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDI4MjBmMmUtMmViMS00MDQ5LTg2 MzAtYjI3NjBlMGEwM2ExLzQyODIwZjJlLTJlYjEtNDA0OS04NjMwLWIyNzYwZTBh MDNhMS5jcmwwHwYDVR0jBBgwFoAUPFZC9kPy+L6fzyFUcP9fbOoWWBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2 MGUwYTAzYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB2Fc9+TElHGBsjKWtofoM BPpkwPWR3SkoSNZ99X56UJu0HRej1SYNhw6j9xXnMvumR5ZF4LRQP58apnpUblDE EpAvoQCxUZNsWiKITp3GeJEELJlSPWsWoAKZXWE05diHHsP8CGrtGTm99hIFN+Ys NAs+iDq6Yl1mjESrhNuXMe4XZDPPuYHWNw9NaX8hsALEWRX0FUcuJ3vnM2n5MSY4 pWxJwqmD7RNjrSo07W9Qgiyp8/8R/iojLOKGQcY9vV7MLVlNQXp19rhlLC7zUsUb O0v9tJgpCJlo441QZTbhU9UmzwAmPw1wGhgaeZaf2BIUHpETVV9cs005zMzVhvsn -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:39 2025 by rpki-client