$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft File: caa8771d-81d7-474e-8d02-b2c215e51102.mft (raw, json) Hash identifier: 2GqntP+DPpBEH+HLwRabsBT29hvyIHe+yA+7tWwvqFM= Subject key identifier: AB:03:28:D9:D5:B9:6F:D9:5A:27:26:34:FA:FA:1D:F1:42:A3:3B:88 Authority key identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Certificate issuer: /CN=caa8771d-81d7-474e-8d02-b2c215e51102 Certificate serial: 010D0C9F4328584BBF69BA84B50AA2E38E073680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft Manifest number: 010D0C9F4328584073A85231683698E27AB79D92 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: caa8771d-81d7-474e-8d02-b2c215e51102.crl (hash: LV4xzPiJ8F508PxXft9nuzDIB8j+pSM0lS3yCh/5M0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:ba:84:b5:0a:a2:e3:8e:07:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caa8771d-81d7-474e-8d02-b2c215e51102 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=ea9c0bd8-a22a-4b9c-b872-bd51aed83ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:bd:b2:43:21:52:ff:a4:8c:4d:d8:92:fa: 05:72:ad:b5:08:9a:12:49:00:e9:d4:6c:62:e0:6f: e1:50:3a:38:71:cf:77:bc:77:7c:8d:3e:b2:ee:54: 85:2f:5c:ec:27:c1:5d:50:dd:1b:47:2e:9a:c1:a7: 90:1f:0d:29:76:aa:1e:ae:4c:85:d4:72:52:7b:6e: 56:b0:37:26:9c:4f:ee:99:77:c5:1d:7d:c3:1e:e1: 94:f6:d2:1e:1f:b7:3b:ad:1d:01:9f:3c:48:1c:fc: d4:de:bc:2a:98:ef:19:c2:43:3a:3c:30:17:48:52: 38:6f:8e:74:92:f1:79:e4:d6:81:9f:45:1b:13:63: 23:ad:0f:b0:1f:55:f9:7d:75:3d:cc:53:51:66:e8: e0:3a:d3:ce:1d:1a:a6:9e:be:86:7d:a7:62:bf:47: 2c:93:e1:af:62:cb:c8:63:44:68:10:43:e8:21:b9: ff:da:66:bc:20:f3:59:78:6e:e4:9e:99:1e:cd:ee: 62:cd:32:77:61:c2:8e:e5:b7:50:95:a0:f5:d8:7e: 66:e4:45:8d:5b:da:74:e9:a9:fb:e8:42:81:d1:71: 7e:2b:2b:50:4b:c8:12:f7:45:40:82:c7:39:0c:70: f3:36:e4:91:2d:79:47:58:8d:db:c7:9e:bd:8f:be: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:28:D9:D5:B9:6F:D9:5A:27:26:34:FA:FA:1D:F1:42:A3:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.crl X509v3 Authority Key Identifier: keyid:5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:22:b0:8a:52:42:9d:cc:16:f0:8a:b4:3a:a0:a1:eb:2d:96: ca:b4:78:4c:54:83:af:69:d7:1c:f9:8f:b3:29:77:90:54:f2: 0d:cc:82:13:3a:31:12:ee:38:e0:0d:5f:3f:ec:44:6e:52:5c: cd:b9:b6:40:bf:1b:3a:5d:59:40:f6:73:81:84:ba:1b:59:77: e8:3a:35:9e:45:0f:5e:ce:d0:bc:a9:b2:f4:22:23:8b:4e:f1: 6f:7e:d2:57:06:d4:6e:5f:d8:85:67:bf:bb:a1:bf:77:22:f6: 45:97:2d:d9:ce:b1:51:79:36:9e:2b:e1:d4:7e:98:57:69:85: ee:48:c3:ec:75:02:78:ef:f0:e9:fa:2a:74:2a:f0:f5:1f:d6: 04:c7:f2:de:16:c2:21:e6:4c:f9:9a:38:ce:8e:30:dc:79:93: 66:09:83:5e:dd:e0:23:35:37:09:cd:86:4f:32:b7:f3:14:a9: 73:89:63:c1:02:09:e5:30:40:e7:88:a2:17:6d:f3:69:3d:c0: 07:59:f3:f2:f3:ba:d3:32:2e:c2:a7:31:24:9c:6f:38:9b:cb: 0d:c1:72:c4:e8:a7:59:fa:1a:0c:a4:2d:17:2e:1b:a2:61:35: 5c:06:22:13:1b:c6:e7:4b:57:d8:32:7c:20:94:73:a5:a7:2c: 3d:60:2b:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abqEtQqi444HNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FhODc3MWQtODFkNy00NzRlLThkMDItYjJjMjE1ZTUx MTAyMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk ZWE5YzBiZDgtYTIyYS00YjljLWI4NzItYmQ1MWFlZDgzYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKS9skMhUv+kjE3YkvoFcq21CJoSSQDp1Gxi 4G/hUDo4cc93vHd8jT6y7lSFL1zsJ8FdUN0bRy6awaeQHw0pdqoerkyF1HJSe25W sDcmnE/umXfFHX3DHuGU9tIeH7c7rR0BnzxIHPzU3rwqmO8ZwkM6PDAXSFI4b450 kvF55NaBn0UbE2MjrQ+wH1X5fXU9zFNRZujgOtPOHRqmnr6Gfadiv0csk+GvYsvI Y0RoEEPoIbn/2ma8IPNZeG7knpkeze5izTJ3YcKO5bdQlaD12H5m5EWNW9p06an7 6EKB0XF+KytQS8gS90VAgsc5DHDzNuSRLXlHWI3bx569j77GwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKsDKNnVuW/ZWicmNPr6HfFCozuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4 NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVlNTExMDIvY2FhODc3MWQtODFkNy00 NzRlLThkMDItYjJjMjE1ZTUxMTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FhODc3MWQtODFkNy00NzRlLThk MDItYjJjMjE1ZTUxMTAyL2NhYTg3NzFkLTgxZDctNDc0ZS04ZDAyLWIyYzIxNWU1 MTEwMi5jcmwwHwYDVR0jBBgwFoAUWvsWnlpwW/ChpwXjWloJB6t5gnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMy MTVlNTExMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfIrCKUkKdzBbwirQ6oKHr LZbKtHhMVIOvadcc+Y+zKXeQVPINzIITOjES7jjgDV8/7ERuUlzNubZAvxs6XVlA 9nOBhLobWXfoOjWeRQ9eztC8qbL0IiOLTvFvftJXBtRuX9iFZ7+7ob93IvZFly3Z zrFReTaeK+HUfphXaYXuSMPsdQJ47/Dp+ip0KvD1H9YEx/LeFsIh5kz5mjjOjjDc eZNmCYNe3eAjNTcJzYZPMrfzFKlziWPBAgnlMEDniKIXbfNpPcAHWfPy87rTMi7C pzEknG84m8sNwXLE6KdZ+hoMpC0XLhuiYTVcBiITG8bnS1fYMnwglHOlpyw9YCvb -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:39 2025 by rpki-client