$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft File: 9649fa89-0c65-41f5-b212-91670d3c5fbe.mft (raw, json) Hash identifier: 8ZRRIMO5lWC0rBlCo7BUa60xedpJ1qSHo9XKaF8kVh4= Subject key identifier: 32:A7:1D:18:F2:29:4A:46:E4:E8:7D:73:42:7E:34:1B:8C:8F:F8:D9 Authority key identifier: 7D:83:94:2F:63:B0:98:BC:ED:28:2D:EE:9B:76:7D:89:78:2E:D3:AB Certificate issuer: /CN=9649fa89-0c65-41f5-b212-91670d3c5fbe Certificate serial: 010D0C9F4328584BC075C4F209A04CCCDC2738C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft Manifest number: 010D0C9F43285844ACB2A0634024333F37B1CBCD Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 9649fa89-0c65-41f5-b212-91670d3c5fbe.crl (hash: ePnI+snVFPjorxns+xJu9Ed8+8nB+ABLg9A0EGqpLLc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c4:f2:09:a0:4c:cc:dc:27:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9649fa89-0c65-41f5-b212-91670d3c5fbe Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=b19c8f12-80c5-48ac-b90d-599330b44fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:ff:83:e1:b0:0c:b1:62:b7:94:a3:8c:4c: b6:b3:36:3b:00:de:4b:4c:0e:cf:57:25:b4:c5:0f: 26:c4:f4:12:df:09:6d:e2:09:13:eb:ce:66:cc:66: f0:4a:8c:ad:48:5a:a5:10:1b:2e:3b:56:b5:84:35: d6:a5:02:39:ff:c5:3d:1a:5b:c5:de:d0:36:21:e9: fd:d2:9d:2a:b1:94:68:c0:d4:6c:94:50:3d:eb:77: 34:5b:3d:25:0a:b0:af:b5:8e:07:1e:d1:82:2b:85: 65:4d:3f:0c:98:80:7c:b4:f2:bf:84:62:e5:44:a4: 1b:b1:d2:ec:9e:47:6c:e9:e9:01:56:9d:3c:a6:74: dd:d4:fc:db:4a:89:f3:6d:b4:53:e0:4b:3d:60:5b: 41:d4:dd:60:65:28:88:8f:ce:da:86:78:85:c5:39: a1:31:ec:33:30:46:ea:b1:fa:3b:cb:30:be:77:f8: 0d:4d:9c:ea:c1:6b:aa:2a:d7:a0:b8:91:cc:c3:1f: 1b:12:ed:d8:b0:a9:a6:c4:7b:bf:07:23:c6:52:52: 4e:b0:4d:3a:ea:f9:a5:97:f8:8d:08:ba:eb:e9:dc: cf:4e:26:c9:c7:83:67:3d:b4:ec:59:db:48:b3:a2: 8b:b9:69:a4:1a:d5:88:42:1c:2a:60:f4:17:27:b6: 06:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A7:1D:18:F2:29:4A:46:E4:E8:7D:73:42:7E:34:1B:8C:8F:F8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.crl X509v3 Authority Key Identifier: keyid:7D:83:94:2F:63:B0:98:BC:ED:28:2D:EE:9B:76:7D:89:78:2E:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7a:53:e0:10:21:29:3b:67:8d:cd:f5:2a:70:03:be:97:61: a8:c0:f3:9e:90:5c:8f:bb:23:e9:40:3e:3f:2e:c3:89:c3:c0: 4a:ef:ab:d0:c4:72:d6:ed:00:af:15:ff:92:8f:c2:11:f8:ec: cb:e9:77:ec:2a:fc:3b:68:c5:41:3e:38:47:cb:b8:c3:7e:06: 68:02:55:64:63:a4:e6:8e:48:b5:af:66:f3:07:62:f8:ce:80: 19:72:93:93:cd:38:34:07:c8:60:ce:61:7d:e1:fa:6c:71:42: b7:0b:93:9f:9f:1e:1d:49:20:85:07:f9:25:89:d0:3e:53:48: dd:a5:03:3e:3e:ac:28:a3:ae:8e:91:fe:47:e8:99:2c:0b:d2: a0:d5:03:1e:17:2b:80:1f:0e:96:88:ba:fb:b5:ca:f7:e3:80: 5b:cc:93:f7:38:31:9e:82:26:1a:9a:40:e9:4d:51:4d:38:31: 62:f3:84:7a:15:8d:d2:6e:64:39:be:b8:57:e5:31:e9:9e:15: 52:a1:aa:dc:7a:3f:db:08:80:da:75:f8:69:0a:44:f5:ed:e8: 8e:9d:32:a3:6d:aa:59:1c:7a:eb:b3:be:e0:06:e8:e0:0a:18: 93:1d:e1:45:48:03:53:86:3f:de:6c:a0:d1:1d:63:e9:31:65: dc:0b:f4:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcTyCaBMzNwnOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY0OWZhODktMGM2NS00MWY1LWIyMTItOTE2NzBkM2M1 ZmJlMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk YjE5YzhmMTItODBjNS00OGFjLWI5MGQtNTk5MzMwYjQ0ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTr/g+GwDLFit5SjjEy2szY7AN5LTA7PVyW0 xQ8mxPQS3wlt4gkT685mzGbwSoytSFqlEBsuO1a1hDXWpQI5/8U9GlvF3tA2Ien9 0p0qsZRowNRslFA963c0Wz0lCrCvtY4HHtGCK4VlTT8MmIB8tPK/hGLlRKQbsdLs nkds6ekBVp08pnTd1PzbSonzbbRT4Es9YFtB1N1gZSiIj87ahniFxTmhMewzMEbq sfo7yzC+d/gNTZzqwWuqKteguJHMwx8bEu3YsKmmxHu/ByPGUlJOsE066vmll/iN CLrr6dzPTibJx4NnPbTsWdtIs6KLuWmkGtWIQhwqYPQXJ7YGAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKnHRjyKUpG5Oh9c0J+NBuMj/jZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NjQ5 ZmE4OS0wYzY1LTQxZjUtYjIxMi05MTY3MGQzYzVmYmUvOTY0OWZhODktMGM2NS00 MWY1LWIyMTItOTE2NzBkM2M1ZmJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTY0OWZhODktMGM2NS00MWY1LWIy MTItOTE2NzBkM2M1ZmJlLzk2NDlmYTg5LTBjNjUtNDFmNS1iMjEyLTkxNjcwZDNj NWZiZS5jcmwwHwYDVR0jBBgwFoAUfYOUL2OwmLztKC3um3Z9iXgu06swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85NjQ5ZmE4OS0wYzY1LTQxZjUtYjIxMi05MTY3 MGQzYzVmYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcelPgECEpO2eNzfUqcAO+ l2GowPOekFyPuyPpQD4/LsOJw8BK76vQxHLW7QCvFf+Sj8IR+OzL6XfsKvw7aMVB PjhHy7jDfgZoAlVkY6Tmjki1r2bzB2L4zoAZcpOTzTg0B8hgzmF94fpscUK3C5Of nx4dSSCFB/klidA+U0jdpQM+Pqwoo66Okf5H6JksC9Kg1QMeFyuAHw6WiLr7tcr3 44BbzJP3ODGegiYamkDpTVFNODFi84R6FY3SbmQ5vrhX5THpnhVSoarcej/bCIDa dfhpCkT17eiOnTKjbapZHHrrs77gBujgChiTHeFFSANThj/ebKDRHWPpMWXcC/QB -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:05 2025 by rpki-client