$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft File: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft (raw, json) Hash identifier: LYr9QtOqnnQxZJTdIkFCCx6Uo4OaF5PSC8ekA4fXpO4= Subject key identifier: 55:9E:52:CD:CB:74:8B:F4:20:8F:C4:63:F1:2A:86:BE:89:11:A5:ED Authority key identifier: 87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 Certificate issuer: /CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Certificate serial: 010D0C9F4328584BBE9945508AF1C97807902700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft Manifest number: 010D0C9F4328584073A83F34E4ED172CC784020C Signing time: Tue 04 Nov 2025 05:00:03 +0000 Manifest this update: Tue 04 Nov 2025 05:00:03 +0000 Manifest next update: Thu 06 Nov 2025 05:00:00 +0000 Files and hashes: 1: 8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl (hash: 700iysCR/Eb+tAFy92Ny41QAW0oG3avtk3Xfd+nS2Ak=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:99:45:50:8a:f1:c9:78:07:90:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8696c5f3-5de6-49a7-9f0a-e398033b6edf Validity Not Before: Nov 4 05:00:03 2025 GMT Not After : Nov 6 05:00:00 2025 GMT Subject: CN=bb0d1e77-8e22-4c9b-8e96-ff2bcdb0d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:0b:ce:dd:c0:2f:d5:4c:40:69:7f:67:3d: e3:0b:a1:73:d5:5f:b9:2c:9f:9f:55:2f:68:1e:5a: de:18:02:5e:f2:df:fd:90:a1:34:cf:d8:34:b0:93: 3c:8f:b2:f3:8b:49:81:d3:1d:66:ce:47:e3:77:a4: 29:b0:03:d2:05:c5:a2:c9:cf:e5:fd:c3:18:6d:d5: b7:4c:3c:39:01:e3:1b:fe:e8:42:17:ee:76:40:a8: c9:f6:2f:6c:1b:0e:fb:1a:78:23:5a:20:e5:48:f9: 0c:0d:1e:56:25:c3:e0:3f:b0:df:b9:d0:81:58:16: 5d:16:b8:b1:a4:c8:e7:0d:43:37:cc:68:87:45:d0: 4d:3e:59:58:d2:b9:44:4e:a7:35:fb:b4:17:62:c5: d5:e2:e1:3b:f0:28:b6:61:95:44:ba:5d:0c:66:b9: fe:bd:04:dd:92:44:61:7e:39:fa:fc:0d:65:46:d7: e7:76:8a:8e:f0:56:1a:ac:67:83:7b:1b:62:e8:4e: 41:ce:6f:bb:9b:13:62:48:18:72:e2:54:e3:82:21: 42:be:89:e0:87:76:33:61:48:16:73:7e:b0:01:43: 1d:99:18:c4:6a:76:94:16:0d:3b:fe:c4:fe:4f:b4: 29:8c:ab:d2:70:7b:3d:f9:5c:76:aa:cd:83:53:87: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:52:CD:CB:74:8B:F4:20:8F:C4:63:F1:2A:86:BE:89:11:A5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf/8696c5f3-5de6-49a7-9f0a-e398033b6edf.crl X509v3 Authority Key Identifier: keyid:87:BD:E0:D7:D0:41:35:9E:AF:04:BF:F6:59:35:4A:29:0E:A5:FB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8696c5f3-5de6-49a7-9f0a-e398033b6edf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0f:4b:b6:50:02:28:de:4b:72:4a:25:02:b3:2d:fa:08:df: 13:f4:ef:60:88:ba:a9:c9:f6:6a:a2:6f:b9:f1:ec:21:a8:6c: 74:4e:18:47:15:fe:f5:ac:6f:f1:75:de:5d:36:4a:92:c2:cc: 23:aa:b5:ca:a4:3d:2e:1f:81:12:0a:01:5b:08:c6:f8:81:19: eb:32:fc:34:1e:bd:ee:0a:ee:c9:73:27:47:bf:54:87:13:b5: 33:21:62:0d:66:a8:3c:45:32:50:79:42:bd:20:7c:f0:4e:19: 28:ae:5d:ec:a7:0c:5f:72:34:ee:77:1a:1d:db:84:28:65:74: b0:2a:6e:8c:ff:62:ef:e4:60:f8:bf:0f:62:5e:5f:77:2e:bb: 70:65:43:24:45:57:08:dc:72:79:1b:08:db:ea:51:24:59:4a: 35:ec:a7:8f:6c:a1:12:df:36:fc:02:45:14:b7:22:bf:5d:c2: 02:80:d1:fd:5a:64:a1:cc:b3:a4:80:5a:24:8f:9a:7a:6b:45: 14:fa:b0:63:6f:56:5e:02:6c:6e:66:55:d8:db:c3:d2:c8:56: 2a:75:c8:d7:1f:78:ce:49:24:6c:9d:99:5a:91:df:00:8f:c9: 7d:af:3d:1f:b8:b9:ff:bc:3f:73:26:ac:20:61:02:c4:6b:9f: 34:b3:de:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+mUVQivHJeAeQJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5NmM1ZjMtNWRlNi00OWE3LTlmMGEtZTM5ODAzM2I2 ZWRmMB4XDTI1MTEwNDA1MDAwM1oXDTI1MTEwNjA1MDAwMFowLzEtMCsGA1UEAxMk YmIwZDFlNzctOGUyMi00YzliLThlOTYtZmYyYmNkYjBkNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGsLzt3AL9VMQGl/Zz3jC6Fz1V+5LJ+fVS9o HlreGAJe8t/9kKE0z9g0sJM8j7Lzi0mB0x1mzkfjd6QpsAPSBcWiyc/l/cMYbdW3 TDw5AeMb/uhCF+52QKjJ9i9sGw77GngjWiDlSPkMDR5WJcPgP7DfudCBWBZdFrix pMjnDUM3zGiHRdBNPllY0rlETqc1+7QXYsXV4uE78Ci2YZVEul0MZrn+vQTdkkRh fjn6/A1lRtfndoqO8FYarGeDexti6E5Bzm+7mxNiSBhy4lTjgiFCvongh3YzYUgW c36wAUMdmRjEanaUFg07/sT+T7QpjKvScHs9+Vx2qs2DU4f6XwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFWeUs3LdIv0II/EY/Eqhr6JEaXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2 YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4MDMzYjZlZGYvODY5NmM1ZjMtNWRlNi00 OWE3LTlmMGEtZTM5ODAzM2I2ZWRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODY5NmM1ZjMtNWRlNi00OWE3LTlm MGEtZTM5ODAzM2I2ZWRmLzg2OTZjNWYzLTVkZTYtNDlhNy05ZjBhLWUzOTgwMzNi NmVkZi5jcmwwHwYDVR0jBBgwFoAUh73g19BBNZ6vBL/2WTVKKQ6l+ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84Njk2YzVmMy01ZGU2LTQ5YTctOWYwYS1lMzk4 MDMzYjZlZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKD0u2UAIo3ktySiUCsy36 CN8T9O9giLqpyfZqom+58ewhqGx0ThhHFf71rG/xdd5dNkqSwswjqrXKpD0uH4ES CgFbCMb4gRnrMvw0Hr3uCu7JcydHv1SHE7UzIWINZqg8RTJQeUK9IHzwThkorl3s pwxfcjTudxod24QoZXSwKm6M/2Lv5GD4vw9iXl93LrtwZUMkRVcI3HJ5Gwjb6lEk WUo17KePbKES3zb8AkUUtyK/XcICgNH9WmShzLOkgFokj5p6a0UU+rBjb1ZeAmxu ZlXY28PSyFYqdcjXH3jOSSRsnZlakd8Aj8l9rz0fuLn/vD9zJqwgYQLEa580s97g -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:04 2025 by rpki-client