$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.mft File: 3af35cfc-2385-44c7-b33c-0a6ce0409bfb.mft (raw, json) Hash identifier: StZUdis0s0rSviVjxmze1Kbnsdod2ighIRuZbha8als= Subject key identifier: 8E:6C:E4:37:7D:A5:1F:35:52:8E:B9:54:1F:37:1C:69:48:85:90:9C Authority key identifier: B1:EA:79:8F:FD:1C:16:05:9B:A3:5B:AF:B2:83:6C:18:20:D7:51:8F Certificate issuer: /CN=3af35cfc-2385-44c7-b33c-0a6ce0409bfb Certificate serial: 010D0C9F4328584BC0ECE1389383935E3B705D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.mft Manifest number: 010D0C9F4328584073A833FBCA5172A62469818E Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 3af35cfc-2385-44c7-b33c-0a6ce0409bfb.crl (hash: o9kyDvo9Gt5kxhpYyxKgcAMGkjpmI+FpbxTiVjzpH/E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e1:38:93:83:93:5e:3b:70:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af35cfc-2385-44c7-b33c-0a6ce0409bfb Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=aca27546-dc26-42f8-95d1-beed4ca54fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:6d:b1:a9:90:d1:a6:3e:b2:8a:01:2b:91: 8b:06:c8:97:a5:e8:70:6c:9f:dc:a3:bd:c6:7f:f7: b9:a5:46:3f:cd:e9:8d:c9:99:b0:2e:2d:f4:83:14: be:c9:4d:02:48:62:f0:c8:73:c9:b9:cc:b1:ad:60: a2:bd:55:cc:30:fd:9f:e0:f4:1a:71:a5:2e:4e:9c: b3:f4:8f:75:b1:b2:e1:be:21:18:4d:af:f3:09:3d: c3:32:63:71:66:52:d2:a5:cb:d5:e8:99:f4:d2:fd: 90:94:bb:7d:b6:1d:c7:17:c1:3f:7d:64:13:63:8b: f4:21:ef:d5:7f:56:d4:e9:1a:e2:5b:86:96:a3:be: e8:db:06:a7:d2:98:60:d0:5e:74:7d:4f:f7:09:0b: 60:76:2b:8c:e8:bd:a0:ba:4e:86:e5:a7:93:5a:de: e2:50:0f:e9:a1:d2:ff:65:2b:a9:60:8f:98:71:9f: 39:ff:a2:b6:31:20:93:b8:8b:4c:30:17:ab:73:85: eb:05:ca:19:ab:95:4c:bd:18:c2:1d:e1:32:bc:5e: c9:e5:ff:f0:c4:dc:c5:95:bb:85:7c:b4:75:c0:d0: 58:4c:c1:9e:e6:a8:a2:e5:24:d8:ba:63:6e:70:76: ba:7f:52:d4:06:67:46:4a:98:b3:3a:70:0f:a0:7c: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:E4:37:7D:A5:1F:35:52:8E:B9:54:1F:37:1C:69:48:85:90:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.crl X509v3 Authority Key Identifier: keyid:B1:EA:79:8F:FD:1C:16:05:9B:A3:5B:AF:B2:83:6C:18:20:D7:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3af35cfc-2385-44c7-b33c-0a6ce0409bfb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:33:65:22:de:ac:09:7e:b5:dd:f0:dc:9c:82:7f:59:17:a1: dd:da:42:41:f3:5b:d2:8b:7d:65:50:3d:fb:03:2d:62:aa:35: e6:88:ca:12:ad:96:53:5d:d8:44:ee:9a:36:40:59:52:95:62: 1c:bb:39:2e:b7:e7:6e:da:02:ef:cd:8c:aa:f8:e7:74:2e:ed: 8f:ca:96:16:88:e6:da:67:b1:4a:ab:f9:e3:56:a9:55:fa:4d: 12:4f:2e:ea:76:8d:61:29:49:1b:af:8a:01:d3:f9:f3:f2:12: e3:03:c6:9a:74:fb:45:2c:c0:a3:0e:14:b3:1c:24:b0:00:2b: 30:9d:5e:7a:be:dc:c5:bb:7e:bb:a0:a3:0c:f2:ac:e3:97:f2: de:bb:55:32:fd:08:a6:5b:0d:dc:12:ae:79:d0:3b:65:2f:44: 99:2c:64:9a:a5:ce:29:74:92:9b:95:8b:fa:e5:6d:53:5f:61: 7b:18:a8:4d:8e:a1:d8:73:24:30:4b:84:c5:e2:5c:7e:e2:8a: e1:aa:a4:b9:86:8c:69:44:8e:f6:d6:a9:ca:91:6a:fa:09:aa: e4:55:bb:44:b3:d6:18:dd:10:40:b4:4d:34:1a:a9:f5:21:f9: 04:1b:5c:32:50:2d:72:8f:bd:c0:25:66:c5:c1:d5:ea:13:ef: 6a:c0:c7:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OE4k4OTXjtwXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FmMzVjZmMtMjM4NS00NGM3LWIzM2MtMGE2Y2UwNDA5 YmZiMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk YWNhMjc1NDYtZGMyNi00MmY4LTk1ZDEtYmVlZDRjYTU0ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL9tsamQ0aY+sooBK5GLBsiXpehwbJ/co73G f/e5pUY/zemNyZmwLi30gxS+yU0CSGLwyHPJucyxrWCivVXMMP2f4PQacaUuTpyz 9I91sbLhviEYTa/zCT3DMmNxZlLSpcvV6Jn00v2QlLt9th3HF8E/fWQTY4v0Ie/V f1bU6RriW4aWo77o2wan0phg0F50fU/3CQtgdiuM6L2guk6G5aeTWt7iUA/podL/ ZSupYI+YcZ85/6K2MSCTuItMMBerc4XrBcoZq5VMvRjCHeEyvF7J5f/wxNzFlbuF fLR1wNBYTMGe5qii5STYumNucHa6f1LUBmdGSpizOnAPoHxGpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI5s5Dd9pR81Uo65VB83HGlIhZCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYWYz NWNmYy0yMzg1LTQ0YzctYjMzYy0wYTZjZTA0MDliZmIvM2FmMzVjZmMtMjM4NS00 NGM3LWIzM2MtMGE2Y2UwNDA5YmZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2FmMzVjZmMtMjM4NS00NGM3LWIz M2MtMGE2Y2UwNDA5YmZiLzNhZjM1Y2ZjLTIzODUtNDRjNy1iMzNjLTBhNmNlMDQw OWJmYi5jcmwwHwYDVR0jBBgwFoAUsep5j/0cFgWbo1uvsoNsGCDXUY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYWYzNWNmYy0yMzg1LTQ0YzctYjMzYy0wYTZj ZTA0MDliZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWM2Ui3qwJfrXd8Nycgn9Z F6Hd2kJB81vSi31lUD37Ay1iqjXmiMoSrZZTXdhE7po2QFlSlWIcuzkut+du2gLv zYyq+Od0Lu2PypYWiObaZ7FKq/njVqlV+k0STy7qdo1hKUkbr4oB0/nz8hLjA8aa dPtFLMCjDhSzHCSwACswnV56vtzFu367oKMM8qzjl/Leu1Uy/QimWw3cEq550Dtl L0SZLGSapc4pdJKblYv65W1TX2F7GKhNjqHYcyQwS4TF4lx+4orhqqS5hoxpRI72 1qnKkWr6CarkVbtEs9YY3RBAtE00Gqn1IfkEG1wyUC1yj73AJWbFwdXqE+9qwMep -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:10 2025 by rpki-client