$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.mft File: d3205242-50ad-4525-a54e-e6d9d3d1325f.mft (raw, json) Hash identifier: OGX1JNtc5crU3RiASvWryJdzNvbsQ0OgKnOEjAKe6e4= Subject key identifier: 9C:D7:3F:03:7D:02:A8:F5:45:04:B3:7D:15:F4:9B:0C:17:6A:DA:86 Authority key identifier: C5:AA:FF:68:53:ED:EF:78:A6:35:FC:22:09:80:EA:CE:FA:C5:54:6C Certificate issuer: /CN=d3205242-50ad-4525-a54e-e6d9d3d1325f Certificate serial: 010D0C9F4328584B92A10941C80CCF3FBC98F380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.mft Manifest number: 010D0C9F4328584A3B40E0746C9E786E7FE1027B Signing time: Sun 19 Oct 2025 11:00:08 +0000 Manifest this update: Sun 19 Oct 2025 11:00:08 +0000 Manifest next update: Tue 21 Oct 2025 11:00:00 +0000 Files and hashes: 1: d3205242-50ad-4525-a54e-e6d9d3d1325f.crl (hash: m1Pt+ECB6QvHQ/kciVJ0yjHOfGs+mXDa7tUmbL76rAc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:a1:09:41:c8:0c:cf:3f:bc:98:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3205242-50ad-4525-a54e-e6d9d3d1325f Validity Not Before: Oct 19 11:00:08 2025 GMT Not After : Oct 21 11:00:00 2025 GMT Subject: CN=795d7f23-18cf-40c2-a936-8b9954c40f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:55:4f:b7:44:16:91:2c:a2:07:2c:5a:b0: df:cb:a6:11:62:ef:79:f2:d4:f0:5b:29:a2:0f:93: e0:b9:4a:7b:a9:ae:de:60:5a:77:82:97:d4:b4:19: 2e:34:c3:c1:d6:97:9c:c9:db:78:70:54:5f:e5:ec: 18:20:30:4e:02:51:07:23:f9:85:91:b6:94:ac:38: 94:09:18:69:63:df:9a:0d:57:57:65:4e:4e:2e:a3: 5c:5e:50:27:cf:0b:bc:15:f9:13:f7:01:f6:c4:a7: f3:20:c3:b6:ec:fa:00:ee:ad:2f:71:1b:dc:b1:74: a3:c6:48:c7:34:b3:f3:76:97:f7:7a:ae:8c:8b:12: 54:e4:6f:ca:bc:e6:ff:ad:9c:0b:fb:ca:a7:c8:be: d0:6a:1f:ef:0d:62:e6:f9:26:9e:b0:56:cb:ef:2d: 8d:49:6f:4e:c5:ac:9d:a0:01:99:82:6f:94:ac:51: e8:fd:99:b5:51:4b:82:72:f0:21:d4:c1:f9:04:54: bb:fd:aa:76:b7:45:e1:36:12:b7:d7:ac:31:d6:1b: df:ca:4c:dc:a1:0b:74:de:3a:67:f1:50:8e:5b:2b: 5c:a1:34:39:a3:7b:9b:7b:28:9f:00:e7:45:c1:dd: 9f:78:7f:62:4d:1c:7c:be:54:20:66:2c:14:a8:b7: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:3F:03:7D:02:A8:F5:45:04:B3:7D:15:F4:9B:0C:17:6A:DA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f/d3205242-50ad-4525-a54e-e6d9d3d1325f.crl X509v3 Authority Key Identifier: keyid:C5:AA:FF:68:53:ED:EF:78:A6:35:FC:22:09:80:EA:CE:FA:C5:54:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3205242-50ad-4525-a54e-e6d9d3d1325f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:12:2b:0c:fb:39:f3:41:3e:91:53:43:bb:bd:7a:fd:f3:32: da:19:e4:52:b3:67:95:88:d0:c6:d2:f8:83:23:34:db:d6:6e: 81:fe:25:29:82:7c:8e:79:2c:8c:47:54:50:08:2c:05:04:f8: b2:49:b9:5a:04:a7:63:ae:db:e9:82:11:46:43:ac:a8:85:d6: 8e:10:05:95:a3:4c:59:af:e7:00:fd:cf:03:46:83:9d:b2:7c: 89:67:70:6a:30:1a:44:e4:26:6a:32:b2:95:4d:ef:7d:ba:c8: 4e:ce:ba:d0:1b:ea:dc:7e:cf:c9:1a:65:77:2b:05:00:1d:dd: 70:eb:a6:fa:53:c1:c4:08:15:b8:f7:4a:dd:86:8e:5b:6c:3a: 09:0f:1b:66:22:a6:d2:95:ce:d0:54:a3:4f:96:76:ae:35:65: 99:dc:b2:64:91:f1:e4:06:d1:82:fa:d0:04:c5:17:a3:5b:3d: 5f:4f:b8:bc:b5:85:e5:c9:6d:91:a2:08:19:53:56:24:76:d1: 22:cc:fa:20:bb:8c:10:1a:bf:ef:87:7e:26:e1:5e:c8:4d:a4: c4:9f:5f:6a:c2:b3:5f:89:fc:77:53:7a:81:3c:61:0b:ac:68: ce:06:17:d7:f8:f2:ac:e7:d2:e3:f9:dc:92:86:34:94:94:2a: f3:5e:e3:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSoQlByAzPP7yY84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyMDUyNDItNTBhZC00NTI1LWE1NGUtZTZkOWQzZDEz MjVmMB4XDTI1MTAxOTExMDAwOFoXDTI1MTAyMTExMDAwMFowLzEtMCsGA1UEAxMk Nzk1ZDdmMjMtMThjZi00MGMyLWE5MzYtOGI5OTU0YzQwZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjhVT7dEFpEsogcsWrDfy6YRYu958tTwWymi D5PguUp7qa7eYFp3gpfUtBkuNMPB1pecydt4cFRf5ewYIDBOAlEHI/mFkbaUrDiU CRhpY9+aDVdXZU5OLqNcXlAnzwu8FfkT9wH2xKfzIMO27PoA7q0vcRvcsXSjxkjH NLPzdpf3eq6MixJU5G/KvOb/rZwL+8qnyL7Qah/vDWLm+SaesFbL7y2NSW9Oxayd oAGZgm+UrFHo/Zm1UUuCcvAh1MH5BFS7/ap2t0XhNhK316wx1hvfykzcoQt03jpn 8VCOWytcoTQ5o3ubeyifAOdFwd2feH9iTRx8vlQgZiwUqLemdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzXPwN9Aqj1RQSzfRX0mwwXatqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMzIw NTI0Mi01MGFkLTQ1MjUtYTU0ZS1lNmQ5ZDNkMTMyNWYvZDMyMDUyNDItNTBhZC00 NTI1LWE1NGUtZTZkOWQzZDEzMjVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDMyMDUyNDItNTBhZC00NTI1LWE1 NGUtZTZkOWQzZDEzMjVmL2QzMjA1MjQyLTUwYWQtNDUyNS1hNTRlLWU2ZDlkM2Qx MzI1Zi5jcmwwHwYDVR0jBBgwFoAUxar/aFPt73imNfwiCYDqzvrFVGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMzIwNTI0Mi01MGFkLTQ1MjUtYTU0ZS1lNmQ5 ZDNkMTMyNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDEisM+znzQT6RU0O7vXr9 8zLaGeRSs2eViNDG0viDIzTb1m6B/iUpgnyOeSyMR1RQCCwFBPiySblaBKdjrtvp ghFGQ6yohdaOEAWVo0xZr+cA/c8DRoOdsnyJZ3BqMBpE5CZqMrKVTe99ushOzrrQ G+rcfs/JGmV3KwUAHd1w66b6U8HECBW490rdho5bbDoJDxtmIqbSlc7QVKNPlnau NWWZ3LJkkfHkBtGC+tAExRejWz1fT7i8tYXlyW2RoggZU1YkdtEizPogu4wQGr/v h34m4V7ITaTEn19qwrNfifx3U3qBPGELrGjOBhfX+PKs59Lj+dyShjSUlCrzXuMj -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:58 2025 by rpki-client