$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft File: 4491747a-51aa-4b4e-b4e9-53474dd898f1.mft (raw, json) Hash identifier: Yrgf+5Wj14GhqaGt+kWcPBdN7eXhs2GNX+IC+EaAzYY= Subject key identifier: E6:F3:79:83:29:FA:22:0A:3D:F2:62:4C:07:6D:92:5C:0C:B3:25:CE Authority key identifier: 1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 Certificate issuer: /CN=4491747a-51aa-4b4e-b4e9-53474dd898f1 Certificate serial: 010D0C9F4328584BC01C62BF975355B9A1F11524 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft Manifest number: 010D0C9F43285844DE989D90AD8C3F68F8F647F7 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 4491747a-51aa-4b4e-b4e9-53474dd898f1.crl (hash: DiBQnoz5bRDNiALsKjo9mP+ywD/ADZrZVPtQqCWQOaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:bf:97:53:55:b9:a1:f1:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4491747a-51aa-4b4e-b4e9-53474dd898f1 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=c63fc081-4e7a-4195-9403-295813f10d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:01:94:7f:ef:2a:51:65:06:c4:46:75:7d: 5b:a1:42:64:18:19:5b:4f:cb:b9:3a:18:74:d7:d6: 95:b0:b6:f6:ae:8f:21:85:80:b9:6c:d5:05:48:65: 30:af:c1:1a:32:44:55:17:30:a6:28:84:d7:22:9d: 59:d9:ce:79:99:1e:dd:64:20:a6:97:a5:1a:7b:d0: eb:5d:31:21:9f:fc:1d:38:89:62:77:44:27:d9:5c: dd:f8:4a:38:fd:4e:84:31:b8:80:50:d1:65:a3:5c: 96:3b:03:32:18:69:32:db:7e:a1:0b:2f:f5:b2:4c: bf:55:ed:c4:83:7e:d5:b2:a2:72:23:69:b4:ff:c0: ea:75:49:18:03:95:ad:82:71:85:c5:40:20:9f:92: e4:d2:c9:dd:64:77:0b:6c:19:77:37:c1:de:6f:01: 6c:87:aa:b5:7c:00:fa:1a:d7:dd:82:04:d7:c3:86: 09:73:1f:67:82:ef:01:13:11:c3:e4:2c:c4:92:bb: 31:90:bf:45:92:d5:04:3d:70:35:02:7b:20:7f:69: cf:a9:e1:40:aa:05:75:3f:ef:54:72:ae:ef:ae:dc: 4d:4c:0e:6b:f5:5a:ef:55:37:74:97:26:36:2c:92: 5c:a3:b8:6e:37:03:d8:4c:fb:04:d4:98:35:28:74: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:79:83:29:FA:22:0A:3D:F2:62:4C:07:6D:92:5C:0C:B3:25:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.crl X509v3 Authority Key Identifier: keyid:1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:fc:f1:ce:59:1f:53:94:fb:a2:c1:c2:2d:9f:96:b2:27:8f: 19:99:d6:33:14:23:16:02:48:3f:e6:5b:b9:6c:5c:ff:da:a3: 8a:c9:f1:ff:7c:15:81:6c:dc:9b:1c:37:33:44:0f:46:f2:8f: 77:13:d0:02:55:90:d3:69:dd:86:5f:82:00:af:ea:40:73:ff: 40:b5:79:8d:c4:d4:2e:74:a4:01:5b:0e:d5:f9:0e:0d:d8:49: 92:6d:dd:8b:75:d5:16:a6:b6:aa:40:f1:48:3e:ce:8a:3b:d0: 78:d6:7a:82:29:13:f6:4c:3b:08:17:98:12:ea:b6:31:c9:43: 39:87:4f:c2:60:8b:f5:aa:f9:3b:fe:69:1b:7f:b1:a1:f2:9f: 2e:ab:0a:5a:7b:59:2a:29:cb:59:67:8c:d5:11:68:40:02:74: d4:ee:b4:64:84:0e:0d:2c:5f:3a:bc:b5:29:29:76:aa:6d:45: 84:6f:cc:02:77:24:c7:df:c4:98:8f:84:9e:e5:2c:91:d5:fb: 44:e7:0c:12:ef:0b:03:fa:79:18:ae:e0:df:0a:97:a5:42:1b: 50:9d:da:3a:80:20:d4:06:5b:61:29:69:c2:57:30:e4:8b:c4: 5f:1f:7a:e6:72:a7:be:e3:cc:fc:bd:a9:5a:e9:12:39:66:e5: b0:bd:e4:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGK/l1NVuaHxFSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ5MTc0N2EtNTFhYS00YjRlLWI0ZTktNTM0NzRkZDg5 OGYxMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk YzYzZmMwODEtNGU3YS00MTk1LTk0MDMtMjk1ODEzZjEwZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2cBlH/vKlFlBsRGdX1boUJkGBlbT8u5Ohh0 19aVsLb2ro8hhYC5bNUFSGUwr8EaMkRVFzCmKITXIp1Z2c55mR7dZCCml6Uae9Dr XTEhn/wdOIlid0Qn2Vzd+Eo4/U6EMbiAUNFlo1yWOwMyGGky236hCy/1sky/Ve3E g37VsqJyI2m0/8DqdUkYA5WtgnGFxUAgn5Lk0sndZHcLbBl3N8HebwFsh6q1fAD6 GtfdggTXw4YJcx9ngu8BExHD5CzEkrsxkL9FktUEPXA1Ansgf2nPqeFAqgV1P+9U cq7vrtxNTA5r9VrvVTd0lyY2LJJco7huNwPYTPsE1Jg1KHTw5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFObzeYMp+iIKPfJiTAdtklwMsyXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDkx NzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3NGRkODk4ZjEvNDQ5MTc0N2EtNTFhYS00 YjRlLWI0ZTktNTM0NzRkZDg5OGYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQ5MTc0N2EtNTFhYS00YjRlLWI0 ZTktNTM0NzRkZDg5OGYxLzQ0OTE3NDdhLTUxYWEtNGI0ZS1iNGU5LTUzNDc0ZGQ4 OThmMS5jcmwwHwYDVR0jBBgwFoAUHE0IIzP9iWEi9g/vuy2nLIB8RlcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NDkxNzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3 NGRkODk4ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDd/PHOWR9TlPuiwcItn5ay J48ZmdYzFCMWAkg/5lu5bFz/2qOKyfH/fBWBbNybHDczRA9G8o93E9ACVZDTad2G X4IAr+pAc/9AtXmNxNQudKQBWw7V+Q4N2EmSbd2LddUWpraqQPFIPs6KO9B41nqC KRP2TDsIF5gS6rYxyUM5h0/CYIv1qvk7/mkbf7Gh8p8uqwpae1kqKctZZ4zVEWhA AnTU7rRkhA4NLF86vLUpKXaqbUWEb8wCdyTH38SYj4Se5SyR1ftE5wwS7wsD+nkY ruDfCpelQhtQndo6gCDUBlthKWnCVzDki8RfH3rmcqe+48z8vala6RI5ZuWwveRL -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:40 2025 by rpki-client