$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft File: cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft (raw, json) Hash identifier: RqCtpxvpLD2ew3Tx8v/UIYnHQ0y0KjBjq6weJZnYyHY= Subject key identifier: 3E:B2:33:54:72:00:7B:A3:7C:2D:B8:40:58:27:80:E6:9A:C4:FF:D6 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584B9335F208B4E18DB59883E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft Manifest number: 010D0C9F43285848BA9D4A601B163560813C5905 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Tue 21 Oct 2025 16:00:00 +0000 Files and hashes: 1: cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl (hash: Qkuxr0xUpy6shZt1X4GhcMbpsLJLXyxp4i0+Jq4lhuY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:f2:08:b4:e1:8d:b5:98:83:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 21 16:00:00 2025 GMT Subject: CN=5dc2fabb-3a16-461a-91e1-63e1770c77d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:af:4b:26:71:ab:5b:cc:9d:42:ac:37:f7: 29:7f:20:69:d3:f6:6d:31:ef:4c:08:08:30:64:4b: 8d:74:9a:45:09:84:d0:4f:15:ae:e1:b7:f8:be:03: 90:13:f3:6b:29:d4:2b:61:d5:36:e3:94:6d:62:88: 33:5e:3a:41:91:85:87:03:ad:10:7a:1c:c0:70:e5: 8d:0d:0a:5a:b0:87:6c:90:52:5e:a0:94:85:8e:50: 3f:18:49:5e:ee:3e:5a:08:af:ce:65:f4:be:12:d0: 91:d2:f8:64:a7:0e:d3:3d:9b:7b:2d:2e:e7:9e:32: bf:19:ea:91:a7:b9:71:f2:51:1b:13:82:1e:3d:23: 13:ba:2e:76:af:6b:e0:42:67:27:9c:14:95:ac:ef: 56:8d:2b:55:fc:c3:61:93:4b:9b:ad:41:4e:b6:ab: 83:52:f2:52:d9:d9:f4:54:28:13:85:31:dc:a0:c1: 5a:ca:f7:2c:5b:0e:9a:d4:6d:b4:28:ba:dd:df:39: aa:88:e8:3f:d6:7b:8f:fd:b2:ba:08:9a:13:85:56: 3c:08:0f:7a:66:2f:50:d8:88:8b:ac:ec:14:81:1e: 1f:fd:27:65:69:0c:98:8d:40:f4:0c:d0:02:1b:98: 64:d7:27:40:82:f8:40:d1:59:cd:96:b5:64:9d:26: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B2:33:54:72:00:7B:A3:7C:2D:B8:40:58:27:80:E6:9A:C4:FF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:f1:e5:f9:41:62:8c:75:9a:58:a0:af:12:bd:7a:14:c7: 3c:9a:02:5e:10:31:fd:3c:92:03:ce:b1:1d:05:b9:9b:7e:6c: a5:f5:71:ec:08:df:15:d8:61:69:3a:09:23:53:4d:bd:60:f8: d0:26:f1:da:75:ff:71:95:d0:81:62:76:5b:1a:a3:44:26:e0: d7:09:52:28:e9:ae:17:5e:16:95:76:0c:cc:2d:fa:b4:f6:9c: 9d:65:ea:99:9a:fe:9a:17:cc:6d:bb:b6:7d:59:29:48:a8:0e: ad:f2:1d:34:6c:9e:dd:60:aa:45:63:97:61:f5:da:69:fb:f7: 9e:3f:3a:a5:51:84:37:45:15:34:e9:30:cd:6f:8b:de:a6:7e: 22:c0:e5:33:ed:77:ef:4d:51:74:d3:e8:47:d2:43:92:55:fe: 69:7e:04:56:1c:e9:69:07:a3:a8:27:9c:aa:1a:65:c5:e0:7d: 7f:3d:52:2c:59:10:c3:9b:a2:19:a7:30:2b:17:be:ae:f6:8b: e3:8d:5b:d2:bf:1a:97:f1:26:5e:5b:8a:cf:55:1e:5e:62:5c: 3c:ba:ba:74:c2:1d:e1:68:da:7c:73:9a:e6:5d:25:64:e4:83: bb:62:9f:bc:9c:ce:31:73:1a:c5:9c:5b:29:98:80:d3:fa:f8: 50:fc:aa:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNfIItOGNtZiD5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMTE2MDAwMFowLzEtMCsGA1UEAxMk NWRjMmZhYmItM2ExNi00NjFhLTkxZTEtNjNlMTc3MGM3N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6vSyZxq1vMnUKsN/cpfyBp0/ZtMe9MCAgw ZEuNdJpFCYTQTxWu4bf4vgOQE/NrKdQrYdU245RtYogzXjpBkYWHA60QehzAcOWN DQpasIdskFJeoJSFjlA/GEle7j5aCK/OZfS+EtCR0vhkpw7TPZt7LS7nnjK/GeqR p7lx8lEbE4IePSMTui52r2vgQmcnnBSVrO9WjStV/MNhk0ubrUFOtquDUvJS2dn0 VCgThTHcoMFayvcsWw6a1G20KLrd3zmqiOg/1nuP/bK6CJoThVY8CA96Zi9Q2IiL rOwUgR4f/SdlaQyYjUD0DNACG5hk1ydAgvhA0VnNlrVknSZQ4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD6yM1RyAHujfC24QFgngOaaxP/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvY2I5ZjNkYzUtNGQ4Mi00 ZDgyLWFlMjItMzQ5Yzc1MTk1ZjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbavHl+UFijHWaWKCvEr16 FMc8mgJeEDH9PJIDzrEdBbmbfmyl9XHsCN8V2GFpOgkjU029YPjQJvHadf9xldCB YnZbGqNEJuDXCVIo6a4XXhaVdgzMLfq09pydZeqZmv6aF8xtu7Z9WSlIqA6t8h00 bJ7dYKpFY5dh9dpp+/eePzqlUYQ3RRU06TDNb4vepn4iwOUz7XfvTVF00+hH0kOS Vf5pfgRWHOlpB6OoJ5yqGmXF4H1/PVIsWRDDm6IZpzArF76u9ovjjVvSvxqX8SZe W4rPVR5eYlw8urp0wh3haNp8c5rmXSVk5IO7Yp+8nM4xcxrFnFspmIDT+vhQ/Kpl -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:23 2025 by rpki-client