$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft (raw, json) Hash identifier: L8D7yPmi7e/BWO7INvTavaaZyeEYiTESnQyuaQ3k7FY= Subject key identifier: 14:D9:F2:94:0A:FF:90:2D:3D:97:AE:55:F9:1B:32:2A:09:E9:99:21 Authority key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Certificate issuer: /CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Certificate serial: 010D0C9F4328584BBFE0D93A205DD64473144B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft Manifest number: 010D0C9F4328584073A81AEA59FA9E40F91E9DA2 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl (hash: CInPHnOZ74EzZAc8Dkc8MOKLujuUFqxJcyPpJ4GX4Ms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d9:3a:20:5d:d6:44:73:14:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=ed83b5da-6779-4cc8-9f70-8103e756787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:5e:a0:78:62:c9:4e:61:0e:00:62:29:f3: 89:3a:b5:f2:f2:ff:6e:e6:ee:71:e0:d0:27:1b:8f: 5f:3c:6a:4c:14:ec:95:c3:cc:80:5d:17:c6:72:6a: d0:74:88:7f:56:cb:38:43:ad:4c:34:ad:a3:3a:df: bb:24:47:58:41:fd:c2:b3:ed:86:b4:a0:eb:60:be: 5d:71:0c:91:65:1c:dd:65:3f:c4:52:fa:57:2d:6d: 0b:5f:24:97:a8:e0:20:6b:8c:2b:31:9f:98:59:77: 7f:bd:28:b6:2a:dd:20:b8:94:c9:4c:f2:95:40:f9: d3:cb:34:a2:f5:26:e5:0f:77:cc:e6:41:0b:3a:b3: cf:36:62:bd:52:6b:30:58:83:0b:60:8e:57:e1:5f: 29:38:40:9d:fd:04:cf:35:e3:c1:48:06:f1:4a:8c: f2:13:e4:08:2c:1e:bb:ba:78:ac:2c:70:de:45:32: f6:d1:20:68:9a:59:05:f4:d3:ff:27:93:db:68:77: 82:1b:88:d3:c4:ec:6a:14:f1:2f:e9:82:2d:82:6f: 92:4b:5e:1f:ec:09:3e:a3:a3:61:f2:d5:21:12:d9: 77:04:23:8d:dd:d6:f0:ff:fc:36:e9:64:50:59:4c: e6:6c:fe:c2:7d:9c:e4:90:98:1b:9c:bb:e4:55:da: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:F2:94:0A:FF:90:2D:3D:97:AE:55:F9:1B:32:2A:09:E9:99:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl X509v3 Authority Key Identifier: keyid:4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:92:e9:54:ae:07:3e:9b:4c:a1:65:21:14:78:2e:3b:38:8e: 15:ae:44:90:ae:65:b7:12:92:5d:36:4c:9c:54:a4:00:0a:a7: 82:f4:98:1d:bf:d8:7d:6b:af:0c:32:e5:46:dd:1d:a3:00:53: 72:16:28:40:19:47:a1:f6:a4:a4:0c:0a:bf:75:9b:60:8d:5e: df:57:23:b1:d6:4e:ff:9f:7c:4c:bb:5c:19:41:92:4f:05:49: 6d:7b:2b:b9:51:53:c1:da:d0:e6:eb:50:6b:74:0d:93:67:d8: ae:4e:81:b7:24:e1:3f:3b:b8:fc:13:0d:2e:b2:31:3e:80:54: 63:5e:88:80:36:89:8f:a5:4b:45:90:d4:a5:15:1b:46:a8:27: 9d:3c:18:6a:26:2b:01:66:25:dc:fe:c0:ec:25:2f:cb:7c:a2: 7f:be:91:6b:e5:36:d6:26:ce:a1:5e:eb:b0:10:5b:9a:35:ec: ba:c7:ea:a4:02:c1:06:63:11:18:a5:85:1e:bb:42:d5:28:e0: c9:f3:55:d5:b3:53:c6:4a:d8:d2:7a:11:9a:1b:b0:9f:20:d4: 30:ab:58:bb:04:63:c2:e3:4e:53:98:f3:98:43:47:f5:51:3c: c8:df:e9:ad:e1:b1:aa:ad:34:c0:27:19:f6:64:ed:26:8f:3e: 3e:a4:de:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nk6IF3WRHMUSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0 YzJiMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZWQ4M2I1ZGEtNjc3OS00Y2M4LTlmNzAtODEwM2U3NTY3ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAJeoHhiyU5hDgBiKfOJOrXy8v9u5u5x4NAn G49fPGpMFOyVw8yAXRfGcmrQdIh/Vss4Q61MNK2jOt+7JEdYQf3Cs+2GtKDrYL5d cQyRZRzdZT/EUvpXLW0LXySXqOAga4wrMZ+YWXd/vSi2Kt0guJTJTPKVQPnTyzSi 9SblD3fM5kELOrPPNmK9UmswWIMLYI5X4V8pOECd/QTPNePBSAbxSozyE+QILB67 unisLHDeRTL20SBomlkF9NP/J5PbaHeCG4jTxOxqFPEv6YItgm+SS14f7Ak+o6Nh 8tUhEtl3BCON3dbw//w26WRQWUzmbP7CfZzkkJgbnLvkVdpP7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBTZ8pQK/5AtPZeuVfkbMioJ6ZkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNj ODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvYTVjYzg5ZDYtNzA5ZS00 MzJiLTlhNmUtMjhhN2UzZmU0YzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVjYzg5ZDYtNzA5ZS00MzJiLTlh NmUtMjhhN2UzZmU0YzJiL2E1Y2M4OWQ2LTcwOWUtNDMyYi05YTZlLTI4YTdlM2Zl NGMyYi5jcmwwHwYDVR0jBBgwFoAUSxjjDquN2CmZTm2IMA/HVfYu+zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3 ZTNmZTRjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmkulUrgc+m0yhZSEUeC47 OI4VrkSQrmW3EpJdNkycVKQACqeC9Jgdv9h9a68MMuVG3R2jAFNyFihAGUeh9qSk DAq/dZtgjV7fVyOx1k7/n3xMu1wZQZJPBUlteyu5UVPB2tDm61BrdA2TZ9iuToG3 JOE/O7j8Ew0usjE+gFRjXoiANomPpUtFkNSlFRtGqCedPBhqJisBZiXc/sDsJS/L fKJ/vpFr5TbWJs6hXuuwEFuaNey6x+qkAsEGYxEYpYUeu0LVKODJ81XVs1PGStjS ehGaG7CfINQwq1i7BGPC405TmPOYQ0f1UTzI3+mt4bGqrTTAJxn2ZO0mjz4+pN7h -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:42 2025 by rpki-client