$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft File: de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft (raw, json) Hash identifier: eQowneLQ+8aFkIe6tE4d6EVTxfD82Msjaz4X70sahpQ= Subject key identifier: E5:8C:AD:E6:C6:00:71:E4:A1:14:F1:7A:77:AD:5D:6A:F6:5D:8A:7E Authority key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 Certificate issuer: /CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Certificate serial: 010D0C9F4328584B91B2CFD07BADCC738A0F3500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft Manifest number: 010D0C9F4328584B115E2C5A6011513878C12CAE Signing time: Sun 19 Oct 2025 03:00:08 +0000 Manifest this update: Sun 19 Oct 2025 03:00:08 +0000 Manifest next update: Wed 22 Oct 2025 03:00:00 +0000 Files and hashes: 1: de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl (hash: +ikdWzP2W4HRqpkJOUA98SAtZrnNFPcoCKVZeulyn1I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:b2:cf:d0:7b:ad:cc:73:8a:0f:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Validity Not Before: Oct 19 03:00:08 2025 GMT Not After : Oct 22 03:00:00 2025 GMT Subject: CN=aa9d22c4-ed3b-4eb0-aeac-e25f7f875bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:bb:a0:12:e1:36:d5:45:96:58:9f:26:be: 32:89:b4:1e:76:7e:92:fa:0d:1b:57:ec:b3:fd:e1: 9f:0e:80:aa:35:e7:7b:69:03:06:82:a9:31:08:d6: b0:36:64:1a:4b:0a:36:cd:3d:fb:fa:be:32:80:26: 31:18:87:28:4a:fc:99:78:bd:6d:6c:2c:7e:19:0d: a1:99:62:63:11:52:55:1f:05:d1:2c:2d:d1:b3:5b: 2d:6f:b2:0b:c4:20:23:4c:80:42:7f:72:7e:0d:69: 24:6f:32:7c:93:0b:40:2e:00:e7:64:13:fc:f0:d0: ce:7c:80:88:90:54:47:d1:e4:82:10:6d:d0:9c:b3: f3:eb:25:1c:ce:55:10:50:12:ee:37:45:e0:ba:f6: aa:72:af:f6:a3:76:46:4a:4b:a6:08:f4:4a:a8:30: 6e:7f:4f:ab:e3:4c:cf:45:4a:a1:4f:91:d3:7a:dd: 1c:73:66:4e:c5:d9:70:ab:c6:4d:24:f4:cd:7b:60: be:f0:0f:48:a0:8f:89:9c:49:10:66:9f:84:42:28: e3:31:89:4e:3e:a3:f0:a8:db:32:c3:49:0c:48:f0: ec:40:be:13:8d:a8:c8:21:35:31:c1:7c:3d:bf:51: 87:7f:94:94:c1:32:ae:37:c6:2f:a3:36:27:b7:0e: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8C:AD:E6:C6:00:71:E4:A1:14:F1:7A:77:AD:5D:6A:F6:5D:8A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl X509v3 Authority Key Identifier: keyid:6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:29:4c:4b:4e:d1:cc:ba:db:29:c4:e3:57:77:38:6a:b0:89: 99:2a:eb:3c:54:61:54:e6:aa:25:36:dc:e9:ab:97:5d:3f:5e: a1:08:02:1a:38:55:d0:a3:a8:84:ab:46:8f:7b:71:6e:23:d1: f0:bf:77:ff:2b:dc:8c:7b:a5:ea:ee:10:36:c9:22:79:15:2d: dc:31:f9:4b:ac:d5:be:b6:0e:69:24:65:35:a0:88:4a:9d:64: 28:83:82:60:12:90:cc:2b:8f:38:cd:a3:3a:d4:77:54:a7:2f: d7:b4:1c:dc:84:c1:a0:0e:30:f3:2d:73:1d:4f:b6:1e:86:00: 07:d2:f8:8a:ff:c4:57:ca:ab:cd:e4:f6:09:bb:cc:33:26:ea: 41:00:b1:ee:cf:50:b3:47:48:bf:b5:20:47:a1:7d:e0:96:46: af:4c:7a:7c:66:56:dc:07:bf:15:35:ce:dc:5c:09:4a:29:40: 1e:1c:99:ee:67:4f:2c:a4:a4:8f:66:53:41:18:df:db:02:4c: 8f:cd:ea:3f:7f:c1:b4:c8:01:a4:c8:ad:16:08:af:25:9b:b2: 1a:02:4b:75:a3:ca:04:4e:96:86:fd:15:d9:73:02:4f:ff:4e: c1:de:b2:7d:0e:c3:72:83:11:e9:07:1e:cc:fe:b9:9b:51:61: bb:d7:46:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRss/Qe63Mc4oPNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU5ZDlmZTgtM2E1My00OWEwLTk1NWItY2M0ZGZlZWI5 ZjdiMB4XDTI1MTAxOTAzMDAwOFoXDTI1MTAyMjAzMDAwMFowLzEtMCsGA1UEAxMk YWE5ZDIyYzQtZWQzYi00ZWIwLWFlYWMtZTI1ZjdmODc1YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6G7oBLhNtVFllifJr4yibQedn6S+g0bV+yz /eGfDoCqNed7aQMGgqkxCNawNmQaSwo2zT37+r4ygCYxGIcoSvyZeL1tbCx+GQ2h mWJjEVJVHwXRLC3Rs1stb7ILxCAjTIBCf3J+DWkkbzJ8kwtALgDnZBP88NDOfICI kFRH0eSCEG3QnLPz6yUczlUQUBLuN0Xguvaqcq/2o3ZGSkumCPRKqDBuf0+r40zP RUqhT5HTet0cc2ZOxdlwq8ZNJPTNe2C+8A9IoI+JnEkQZp+EQijjMYlOPqPwqNsy w0kMSPDsQL4TjajIITUxwXw9v1GHf5SUwTKuN8YvozYntw7XmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOWMrebGAHHkoRTxenetXWr2XYp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlk OWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRkZmVlYjlmN2IvZGU5ZDlmZTgtM2E1My00 OWEwLTk1NWItY2M0ZGZlZWI5ZjdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU5ZDlmZTgtM2E1My00OWEwLTk1 NWItY2M0ZGZlZWI5ZjdiL2RlOWQ5ZmU4LTNhNTMtNDlhMC05NTViLWNjNGRmZWVi OWY3Yi5jcmwwHwYDVR0jBBgwFoAUbsFZvBJZyxrvgap1C6yMwnNINxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlkOWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRk ZmVlYjlmN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3KUxLTtHMutspxONXdzhq sImZKus8VGFU5qolNtzpq5ddP16hCAIaOFXQo6iEq0aPe3FuI9Hwv3f/K9yMe6Xq 7hA2ySJ5FS3cMflLrNW+tg5pJGU1oIhKnWQog4JgEpDMK484zaM61HdUpy/XtBzc hMGgDjDzLXMdT7YehgAH0viK/8RXyqvN5PYJu8wzJupBALHuz1CzR0i/tSBHoX3g lkavTHp8ZlbcB78VNc7cXAlKKUAeHJnuZ08spKSPZlNBGN/bAkyPzeo/f8G0yAGk yK0WCK8lm7IaAkt1o8oETpaG/RXZcwJP/07B3rJ9DsNygxHpBx7M/rmbUWG710YS -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:14 2025 by rpki-client