$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft File: 823d4627-1a90-4c5f-a8f6-425e39047cb1.mft (raw, json) Hash identifier: CNrMcAHpPx8NVGWKVqFft8XfKT6xAs43QT1b2OBRKPA= Subject key identifier: E5:10:BE:65:49:B7:52:7D:36:10:BE:BC:EF:6C:0D:1A:CA:2B:6C:64 Authority key identifier: 7B:C2:C1:F3:E8:4F:52:55:53:87:8B:22:8B:89:33:10:6D:C9:3E:FE Certificate issuer: /CN=823d4627-1a90-4c5f-a8f6-425e39047cb1 Certificate serial: 010D0C9F4328584BC0ECE45AE895B8E88D334D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft Manifest number: 010D0C9F4328584073A834BA931DB801CC6C29EC Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 823d4627-1a90-4c5f-a8f6-425e39047cb1.crl (hash: viK5P9qUsQV1SCiCRAkMxvMvl6A9i4WeiwmS/TqZmQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e4:5a:e8:95:b8:e8:8d:33:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823d4627-1a90-4c5f-a8f6-425e39047cb1 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=9f45a5e8-a90d-41a7-b4da-9dab961d1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:c3:fc:30:e3:64:10:30:b1:ae:9d:48:db: 96:9f:b3:2e:1c:29:1d:c1:e5:6e:fa:24:f6:82:9e: df:97:47:d5:61:2a:a5:3e:2c:5b:1b:56:3e:1f:de: b0:a6:cb:e9:11:8d:72:7e:52:0b:95:67:87:f0:53: fc:1b:86:2f:3a:0c:48:b9:92:42:f6:7c:17:b5:db: 21:69:82:9e:47:7a:a3:a9:a3:26:74:70:84:90:02: f5:2d:96:2c:39:72:80:18:9b:b1:ea:d5:6a:dd:a0: 1b:c9:40:2a:4b:f5:b2:4a:7c:38:5e:15:f3:71:a4: 45:f4:c8:fb:5d:d7:86:e0:cd:57:66:de:a7:c0:57: 26:15:1d:60:b0:38:21:93:39:55:e0:9f:b1:fb:a0: 75:b1:c5:72:9e:de:c8:dc:aa:52:10:4d:35:7a:37: 2d:1a:f4:0a:ab:4c:9b:72:d6:e6:8a:34:57:63:21: a3:cc:57:b5:14:fb:63:e5:af:45:07:b5:74:12:6e: 01:1f:84:e3:fe:d1:d3:db:5b:7f:74:ab:a1:a8:29: 99:8d:93:c0:a5:61:40:7d:9b:89:dd:3e:ac:f4:2d: 9f:32:a2:db:b9:be:23:8c:a8:28:50:35:94:68:ec: 75:3b:71:40:8e:c0:ec:15:36:13:34:7f:48:66:99: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:10:BE:65:49:B7:52:7D:36:10:BE:BC:EF:6C:0D:1A:CA:2B:6C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1/823d4627-1a90-4c5f-a8f6-425e39047cb1.crl X509v3 Authority Key Identifier: keyid:7B:C2:C1:F3:E8:4F:52:55:53:87:8B:22:8B:89:33:10:6D:C9:3E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/823d4627-1a90-4c5f-a8f6-425e39047cb1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7a:56:27:ed:9a:e1:d0:c9:c5:af:9b:ff:ce:dd:df:c7:af: 12:45:0f:05:47:c6:00:b1:a2:94:78:6f:60:d0:48:8c:8e:71: 8d:7c:23:2e:10:a4:05:b7:bc:7c:54:97:56:6e:74:9d:fb:25: 7c:d0:9e:48:1a:3a:8d:9b:94:9e:b7:d5:b8:00:05:1b:82:c4: d3:34:2e:c8:d1:a0:7d:ac:d2:17:84:2d:60:6f:2c:bd:35:6d: fe:2e:7b:90:6a:49:e3:c8:d9:d0:8e:6b:77:6d:0c:68:94:18: eb:dc:80:4a:d2:93:dc:f9:64:94:7f:5e:1e:9c:86:36:88:b4: 8e:3d:ba:e8:8f:ae:6a:a6:c8:98:17:af:c0:4c:95:e9:d4:29: f9:a6:64:b6:58:56:dd:60:b3:7e:36:bd:52:23:90:92:b1:1f: bf:ed:98:90:0e:1c:4c:d7:a1:7e:0c:00:a4:e2:4c:96:7e:0f: 09:9b:c7:b5:3d:19:52:44:14:7f:99:31:46:cb:cc:1f:7a:00: 2a:a6:45:32:a2:f4:2c:bb:6d:0e:3f:24:85:c8:57:5d:8d:10: c9:d1:32:95:70:e9:7e:12:ec:35:19:a1:55:f5:23:98:56:e0: 8a:c1:97:ea:63:ca:c0:d0:ad:8c:ab:8e:b8:44:24:1b:59:87: 71:dd:30:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7ORa6JW46I0zTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZDQ2MjctMWE5MC00YzVmLWE4ZjYtNDI1ZTM5MDQ3 Y2IxMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk OWY0NWE1ZTgtYTkwZC00MWE3LWI0ZGEtOWRhYjk2MWQxMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v/D/DDjZBAwsa6dSNuWn7MuHCkdweVu+iT2 gp7fl0fVYSqlPixbG1Y+H96wpsvpEY1yflILlWeH8FP8G4YvOgxIuZJC9nwXtdsh aYKeR3qjqaMmdHCEkAL1LZYsOXKAGJux6tVq3aAbyUAqS/WySnw4XhXzcaRF9Mj7 XdeG4M1XZt6nwFcmFR1gsDghkzlV4J+x+6B1scVynt7I3KpSEE01ejctGvQKq0yb ctbmijRXYyGjzFe1FPtj5a9FB7V0Em4BH4Tj/tHT21t/dKuhqCmZjZPApWFAfZuJ 3T6s9C2fMqLbub4jjKgoUDWUaOx1O3FAjsDsFTYTNH9IZpkN7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOUQvmVJt1J9NhC+vO9sDRrKK2xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjNk NDYyNy0xYTkwLTRjNWYtYThmNi00MjVlMzkwNDdjYjEvODIzZDQ2MjctMWE5MC00 YzVmLWE4ZjYtNDI1ZTM5MDQ3Y2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIzZDQ2MjctMWE5MC00YzVmLWE4 ZjYtNDI1ZTM5MDQ3Y2IxLzgyM2Q0NjI3LTFhOTAtNGM1Zi1hOGY2LTQyNWUzOTA0 N2NiMS5jcmwwHwYDVR0jBBgwFoAUe8LB8+hPUlVTh4sii4kzEG3JPv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjNkNDYyNy0xYTkwLTRjNWYtYThmNi00MjVl MzkwNDdjYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6elYn7Zrh0MnFr5v/zt3f x68SRQ8FR8YAsaKUeG9g0EiMjnGNfCMuEKQFt7x8VJdWbnSd+yV80J5IGjqNm5Se t9W4AAUbgsTTNC7I0aB9rNIXhC1gbyy9NW3+LnuQaknjyNnQjmt3bQxolBjr3IBK 0pPc+WSUf14enIY2iLSOPbroj65qpsiYF6/ATJXp1Cn5pmS2WFbdYLN+Nr1SI5CS sR+/7ZiQDhxM16F+DACk4kyWfg8Jm8e1PRlSRBR/mTFGy8wfegAqpkUyovQsu20O PySFyFddjRDJ0TKVcOl+Euw1GaFV9SOYVuCKwZfqY8rA0K2Mq464RCQbWYdx3TBQ -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:54 2025 by rpki-client