$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.mft File: 4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.mft (raw, json) Hash identifier: qp0coAh2bSMB/JsLFC7Db47QBTvNLbwArsqznvkxt1U= Subject key identifier: 97:44:1E:71:34:72:44:47:F5:78:E1:8A:A2:E8:08:73:FB:42:1B:A7 Authority key identifier: CB:79:8B:EE:30:D7:8F:42:21:E7:2C:87:4E:DA:11:C1:F4:58:83:91 Certificate issuer: /CN=4108ecfc-2722-47d6-8d6c-c8ab43dd90f1 Certificate serial: 010D0C9F4328584B95E2D041CFA126F1322405E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.mft Manifest number: 010D0C9F43285848C2D7A032053C56BB83148583 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.crl (hash: XlryknlzpFRPWHP9dpxV4sJhFoeD+rRBno7HZzhzcsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:d0:41:cf:a1:26:f1:32:24:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4108ecfc-2722-47d6-8d6c-c8ab43dd90f1 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=513da8f7-0c85-439d-9bc6-4c7e7b51d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:68:54:7d:1a:ba:00:75:67:2e:ec:4e:7f:34: df:46:50:a1:42:17:29:e0:4d:ec:6c:df:12:0a:1c: 46:61:e0:6e:95:5e:3f:a4:43:05:67:b7:fd:7b:ab: bb:7c:b0:2a:ef:43:a5:40:59:63:b0:0a:b8:52:7a: 75:0e:6c:68:2d:7c:f0:a3:e9:43:05:47:85:11:a9: d4:ab:df:58:df:17:14:62:70:1d:01:c9:3c:c8:8a: 6e:35:e4:51:56:61:49:9e:4c:c4:39:fe:9b:30:87: 8a:82:2e:25:67:96:fa:e1:cf:84:77:e5:cc:28:18: cd:59:7a:bb:ad:6a:d3:7b:3c:70:ef:6b:d2:42:4f: 2d:cc:ee:6b:ad:74:fa:94:5f:05:ea:03:1e:d2:85: 4e:12:e0:0b:b4:b3:d9:0d:94:9f:e7:56:f2:2f:6d: 52:79:37:e6:1f:5a:c5:36:05:83:f6:cd:e5:4c:c1: bc:de:96:bc:12:3e:7f:c8:48:1b:1d:87:da:ec:54: 85:9b:9f:96:e3:b2:c1:5d:18:dd:65:f8:3b:26:7d: ae:8f:04:42:91:bb:89:88:7a:ce:b5:e9:04:65:0b: bb:48:97:29:1e:75:98:c1:16:02:d3:50:28:04:3e: 17:bf:a8:54:6d:8f:56:d3:bd:70:03:94:eb:0e:cd: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:1E:71:34:72:44:47:F5:78:E1:8A:A2:E8:08:73:FB:42:1B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.crl X509v3 Authority Key Identifier: keyid:CB:79:8B:EE:30:D7:8F:42:21:E7:2C:87:4E:DA:11:C1:F4:58:83:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4108ecfc-2722-47d6-8d6c-c8ab43dd90f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:d2:4e:93:69:0b:8c:43:e0:8a:be:b1:95:6b:b8:85:8c: a3:d7:f4:4d:09:1c:93:68:96:8c:dd:07:c7:6d:82:14:4f:46: 55:ea:34:96:09:6f:1d:5b:ec:b0:e0:6c:c6:c1:68:ad:96:5d: 73:3e:e0:51:27:42:fd:55:ce:a7:e4:13:fe:b5:72:09:a2:98: a1:3b:37:ab:e9:5a:97:66:b2:17:32:10:4d:0c:5c:83:a2:38: ba:1e:c6:c5:89:9c:63:a3:6d:01:4b:00:7d:45:ec:aa:55:42: 78:63:1d:82:8c:9e:30:26:de:3a:76:ff:ea:c1:b5:57:a5:8d: 0b:19:76:f3:da:e2:d0:b0:db:3c:7c:34:91:c7:af:53:ac:79: 8e:66:8a:bb:6f:fb:53:b3:9b:f5:a7:ff:d4:0f:91:68:85:ed: 86:a8:7f:cf:05:45:68:63:2a:41:24:3d:9a:b3:ab:73:53:fd: 27:54:11:29:5b:8d:2a:be:0b:6f:c9:1e:89:e4:4b:e4:75:31: db:22:f6:62:98:ff:3e:a2:49:82:da:30:82:ac:84:3c:43:a4: 76:2d:50:f5:0a:d1:13:b3:25:9b:44:38:dc:34:cb:f4:2c:6c: 3f:07:d9:cc:47:65:38:f6:aa:fb:d6:27:ea:0d:ef:e7:22:4a: 03:a7:68:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4tBBz6Em8TIkBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEwOGVjZmMtMjcyMi00N2Q2LThkNmMtYzhhYjQzZGQ5 MGYxMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk NTEzZGE4ZjctMGM4NS00MzlkLTliYzYtNGM3ZTdiNTFkOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmhUfRq6AHVnLuxOfzTfRlChQhcp4E3sbN8S ChxGYeBulV4/pEMFZ7f9e6u7fLAq70OlQFljsAq4Unp1DmxoLXzwo+lDBUeFEanU q99Y3xcUYnAdAck8yIpuNeRRVmFJnkzEOf6bMIeKgi4lZ5b64c+Ed+XMKBjNWXq7 rWrTezxw72vSQk8tzO5rrXT6lF8F6gMe0oVOEuALtLPZDZSf51byL21SeTfmH1rF NgWD9s3lTMG83pa8Ej5/yEgbHYfa7FSFm5+W47LBXRjdZfg7Jn2ujwRCkbuJiHrO tekEZQu7SJcpHnWYwRYC01AoBD4Xv6hUbY9W071wA5TrDs3DzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJdEHnE0ckRH9XjhiqLoCHP7QhunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTA4 ZWNmYy0yNzIyLTQ3ZDYtOGQ2Yy1jOGFiNDNkZDkwZjEvNDEwOGVjZmMtMjcyMi00 N2Q2LThkNmMtYzhhYjQzZGQ5MGYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDEwOGVjZmMtMjcyMi00N2Q2LThk NmMtYzhhYjQzZGQ5MGYxLzQxMDhlY2ZjLTI3MjItNDdkNi04ZDZjLWM4YWI0M2Rk OTBmMS5jcmwwHwYDVR0jBBgwFoAUy3mL7jDXj0Ih5yyHTtoRwfRYg5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTA4ZWNmYy0yNzIyLTQ3ZDYtOGQ2Yy1jOGFi NDNkZDkwZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBurdJOk2kLjEPgir6xlWu4 hYyj1/RNCRyTaJaM3QfHbYIUT0ZV6jSWCW8dW+yw4GzGwWitll1zPuBRJ0L9Vc6n 5BP+tXIJopihOzer6VqXZrIXMhBNDFyDoji6HsbFiZxjo20BSwB9ReyqVUJ4Yx2C jJ4wJt46dv/qwbVXpY0LGXbz2uLQsNs8fDSRx69TrHmOZoq7b/tTs5v1p//UD5Fo he2GqH/PBUVoYypBJD2as6tzU/0nVBEpW40qvgtvyR6J5EvkdTHbIvZimP8+okmC 2jCCrIQ8Q6R2LVD1CtETsyWbRDjcNMv0LGw/B9nMR2U49qr71ifqDe/nIkoDp2h8 -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:54 2025 by rpki-client