$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft File: 41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft (raw, json) Hash identifier: sj8bb4Pv0LnQbePlaHr93W8zJX7FTFPoGhzT8b058e0= Subject key identifier: 4A:B8:52:BC:A7:3F:83:51:3B:DC:DE:56:87:67:62:16:3F:4F:A9:80 Authority key identifier: 58:40:1C:01:A4:DF:DA:92:6E:83:56:D0:51:E0:04:EB:70:0F:3A:07 Certificate issuer: /CN=41fa6fa6-1b05-4e52-b6c3-e45c19d51305 Certificate serial: 010D0C9F4328584B95302087E01E40A0A04E30E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft Manifest number: 010D0C9F43285846CE68878CDB52856D365CACB6 Signing time: Mon 20 Oct 2025 09:00:03 +0000 Manifest this update: Mon 20 Oct 2025 09:00:03 +0000 Manifest next update: Thu 23 Oct 2025 09:00:00 +0000 Files and hashes: 1: 41fa6fa6-1b05-4e52-b6c3-e45c19d51305.crl (hash: KzFnOjlXNwmZmnOcLoRyhcW1EiPUUTRjI6fjCkicHOM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:30:20:87:e0:1e:40:a0:a0:4e:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fa6fa6-1b05-4e52-b6c3-e45c19d51305 Validity Not Before: Oct 20 09:00:03 2025 GMT Not After : Oct 23 09:00:00 2025 GMT Subject: CN=c6ccdedf-afb0-4573-a28f-f5ac6e9f3d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:b2:c8:9b:5b:03:c5:e9:8a:49:cc:23:bd: 3d:16:96:65:98:aa:a2:af:ba:7e:ad:10:e9:2c:9d: 09:39:cc:76:9c:03:1e:4b:47:74:8f:25:af:2c:ed: 09:62:11:64:82:d7:22:54:5c:bc:f5:a2:48:b3:0c: c0:1c:90:08:78:25:e9:ad:f2:90:1e:f9:42:f6:32: 35:18:b6:35:fc:c2:3a:1d:97:8f:9a:82:08:51:47: 6b:60:3f:25:28:c4:94:32:9a:a3:e8:cf:bc:86:d0: 06:83:24:b2:2e:85:13:87:90:09:bf:9f:be:ed:f0: b5:d4:59:a1:09:49:68:91:32:bf:73:10:39:ab:1d: 97:59:e1:c6:f2:cc:06:a5:35:bc:86:59:fb:2a:37: 10:2c:3e:76:bd:0e:f3:32:cd:b0:2c:8d:c6:fd:32: 8a:1d:d0:0b:9b:f3:06:af:7e:06:bd:be:f6:8b:e8: 26:ed:29:fd:53:f5:20:e8:79:9c:05:b2:83:ad:5e: e2:ca:98:a2:ba:9b:b4:2e:2f:41:2f:51:17:da:89: b5:aa:bd:a8:12:f1:c9:14:85:92:1f:01:74:9c:ba: 07:97:1e:43:b2:6c:f9:8a:64:aa:e9:7c:78:18:5f: 6b:10:7f:c1:1f:fd:ea:bb:a7:fd:62:a1:78:8f:84: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:52:BC:A7:3F:83:51:3B:DC:DE:56:87:67:62:16:3F:4F:A9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.crl X509v3 Authority Key Identifier: keyid:58:40:1C:01:A4:DF:DA:92:6E:83:56:D0:51:E0:04:EB:70:0F:3A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:63:73:50:f4:fb:e2:8c:a6:10:a8:f2:21:b9:5a:a6:9e:31: 78:c5:d5:e2:01:5c:fa:2f:4b:1a:f4:e3:2d:f3:97:a8:0d:12: 97:92:5c:4f:78:fd:6f:b7:11:cb:33:b6:3e:8a:5e:ba:c6:51: f8:07:d9:e5:b5:03:10:5b:1a:1e:5b:7a:96:53:eb:31:c8:14: be:d5:b2:35:97:2a:9d:92:04:11:12:29:60:58:da:29:2c:12: c1:ee:b4:af:6c:38:32:0c:f2:23:ea:1a:22:24:09:1d:40:6a: 79:b5:2f:ce:b5:ac:bf:64:2a:67:87:07:8c:a3:a6:b0:7f:1d: 6d:72:ed:65:09:50:f1:16:6d:eb:94:ba:7a:0e:5c:ca:fe:f2: 34:1e:c8:f1:df:1e:72:d7:f5:79:60:6f:78:d8:ed:1c:46:77: 09:b7:c8:ad:6b:c2:5e:25:35:3d:64:01:90:5e:91:e7:22:a7: b7:cf:2a:2d:a4:cd:83:35:a5:d3:81:01:54:64:6b:e0:d5:04: 38:e6:db:cd:98:7e:f0:b7:73:b5:2c:f4:df:ad:d0:d4:84:96: 1a:2c:ae:ab:3f:a3:14:2c:0b:24:06:db:a2:04:a5:64:46:8f: 8a:71:da:94:e3:4b:31:52:35:54:a7:c0:b8:3a:e5:00:6c:b4: 91:d3:ac:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVMCCH4B5AoKBOMOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFmYTZmYTYtMWIwNS00ZTUyLWI2YzMtZTQ1YzE5ZDUx MzA1MB4XDTI1MTAyMDA5MDAwM1oXDTI1MTAyMzA5MDAwMFowLzEtMCsGA1UEAxMk YzZjY2RlZGYtYWZiMC00NTczLWEyOGYtZjVhYzZlOWYzZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o2yyJtbA8XpiknMI709FpZlmKqir7p+rRDp LJ0JOcx2nAMeS0d0jyWvLO0JYhFkgtciVFy89aJIswzAHJAIeCXprfKQHvlC9jI1 GLY1/MI6HZePmoIIUUdrYD8lKMSUMpqj6M+8htAGgySyLoUTh5AJv5++7fC11Fmh CUlokTK/cxA5qx2XWeHG8swGpTW8hln7KjcQLD52vQ7zMs2wLI3G/TKKHdALm/MG r34Gvb72i+gm7Sn9U/Ug6HmcBbKDrV7iypiiupu0Li9BL1EX2om1qr2oEvHJFIWS HwF0nLoHlx5Dsmz5imSq6Xx4GF9rEH/BH/3qu6f9YqF4j4SsVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEq4UrynP4NRO9zeVodnYhY/T6mAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80MWZh NmZhNi0xYjA1LTRlNTItYjZjMy1lNDVjMTlkNTEzMDUvNDFmYTZmYTYtMWIwNS00 ZTUyLWI2YzMtZTQ1YzE5ZDUxMzA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDFmYTZmYTYtMWIwNS00ZTUyLWI2 YzMtZTQ1YzE5ZDUxMzA1LzQxZmE2ZmE2LTFiMDUtNGU1Mi1iNmMzLWU0NWMxOWQ1 MTMwNS5jcmwwHwYDVR0jBBgwFoAUWEAcAaTf2pJug1bQUeAE63APOgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80MWZhNmZhNi0xYjA1LTRlNTItYjZjMy1lNDVj MTlkNTEzMDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTY3NQ9PvijKYQqPIhuVqm njF4xdXiAVz6L0sa9OMt85eoDRKXklxPeP1vtxHLM7Y+il66xlH4B9nltQMQWxoe W3qWU+sxyBS+1bI1lyqdkgQREilgWNopLBLB7rSvbDgyDPIj6hoiJAkdQGp5tS/O tay/ZCpnhweMo6awfx1tcu1lCVDxFm3rlLp6DlzK/vI0Hsjx3x5y1/V5YG942O0c RncJt8ita8JeJTU9ZAGQXpHnIqe3zyotpM2DNaXTgQFUZGvg1QQ45tvNmH7wt3O1 LPTfrdDUhJYaLK6rP6MULAskBtuiBKVkRo+KcdqU40sxUjVUp8C4OuUAbLSR06ws -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:13 2025 by rpki-client