$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft File: a316d791-42be-46db-a9be-4bfacf99332c.mft (raw, json) Hash identifier: EvdACcMU5jc086YTtYFCGkImC7x2d6LuKoeamzEgR9U= Subject key identifier: F2:CD:42:28:5D:A8:2A:05:72:7D:E5:B0:99:E5:FF:9A:91:43:6D:7B Authority key identifier: 4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 Certificate issuer: /CN=a316d791-42be-46db-a9be-4bfacf99332c Certificate serial: 010D0C9F4328584BC01C62510446F0D651FC3E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft Manifest number: 010D0C9F43285845833E1B28A28271A6029CFEBC Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: a316d791-42be-46db-a9be-4bfacf99332c.crl (hash: g8cappM9lRyhSVpYwrqhDbYMmcJ2aEy8zvlH3c8Ybvk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:51:04:46:f0:d6:51:fc:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316d791-42be-46db-a9be-4bfacf99332c Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=5cc1bd9a-d3f7-4540-b31e-8580488267f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:51:d3:71:5d:1e:93:65:ed:36:56:cb:c5: ac:e5:ec:13:0a:00:8d:f1:6f:6f:fe:50:18:a1:d1: 76:c2:90:90:b9:ed:8e:a0:53:f5:d1:6e:eb:b6:cf: d8:dd:3a:ed:0d:2e:0a:26:b5:95:e6:12:1d:9a:f4: e6:b8:1c:a4:05:34:ad:62:55:8a:b4:fb:bd:96:be: bd:42:a9:a5:8c:8c:36:3d:56:a9:f1:d1:a2:c7:2f: 3c:3e:dc:22:d6:c1:61:75:37:06:c3:31:c5:8c:e2: 6e:68:b3:a6:50:2f:1b:b1:39:4a:82:1b:31:4b:92: db:1d:88:b4:98:6f:c8:f5:1c:40:32:45:2d:26:36: e5:8e:88:ab:f5:8b:e3:fb:e9:10:a8:ef:b3:02:4a: 2c:fc:96:53:f4:bc:2f:41:e3:06:5e:6b:e1:bd:d4: ef:89:fb:f2:55:37:71:de:28:55:50:11:d5:58:3d: 9f:ed:4c:15:aa:d3:90:ac:9c:93:38:5e:ef:4f:27: 14:ac:af:8c:d6:7c:64:a8:52:8e:f5:48:c6:ba:fd: 1f:e8:d5:6a:0f:3d:4f:7f:2b:94:60:68:f9:29:fe: f1:77:28:26:fb:bd:cb:ad:0f:0e:96:39:53:be:d9: 2e:99:95:4c:3f:c8:d2:fd:ed:c2:14:f3:e3:d2:a6: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:42:28:5D:A8:2A:05:72:7D:E5:B0:99:E5:FF:9A:91:43:6D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c/a316d791-42be-46db-a9be-4bfacf99332c.crl X509v3 Authority Key Identifier: keyid:4E:CE:A2:81:DC:95:A1:1D:38:6D:20:7E:C9:61:75:95:CA:94:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a316d791-42be-46db-a9be-4bfacf99332c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a9:f0:05:33:1e:31:25:d8:ca:3e:b9:87:11:9b:35:cd:32: bd:ed:05:42:af:c7:14:24:51:e2:5d:b5:53:6d:8f:bf:47:00: 7d:29:39:2c:0e:cb:f5:f1:a4:80:94:63:44:48:24:b3:50:f5: db:66:cd:c1:8e:42:33:6f:b3:a6:5f:32:d7:b1:27:a3:f6:6f: 10:9e:de:fa:f4:25:cd:b3:d4:9f:ad:72:e0:32:98:27:8d:ae: 67:c1:ce:14:2f:e0:e3:cb:bd:1a:7f:af:1a:26:ec:3f:98:84: 20:56:e2:be:c3:44:be:27:2b:75:34:bf:0e:ab:6e:99:ad:a6: d7:db:e4:66:6f:60:e7:f7:6c:80:9f:ed:65:00:61:b8:2c:41: 6a:f9:96:d2:3f:d2:fa:e1:45:2b:e8:98:77:5d:ba:fe:d9:10: 3c:a3:54:e5:15:fb:7c:3e:5a:0f:fa:65:73:f1:f0:60:84:89: 78:c2:69:7d:0c:07:90:ae:89:ad:f9:d3:68:08:00:f9:88:3b: 81:27:07:00:c1:e0:e7:73:f8:b1:1f:40:b9:3f:f3:08:22:ae: 2d:f9:25:28:be:a2:7c:9a:67:e8:f3:69:cd:6b:b4:f7:f8:bc: d5:f9:59:a0:9c:69:9f:f5:88:df:d2:ed:2d:eb:30:29:a8:11: 00:22:cf:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGJRBEbw1lH8PiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMxNmQ3OTEtNDJiZS00NmRiLWE5YmUtNGJmYWNmOTkz MzJjMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk NWNjMWJkOWEtZDNmNy00NTQwLWIzMWUtODU4MDQ4ODI2N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIlR03FdHpNl7TZWy8Ws5ewTCgCN8W9v/lAY odF2wpCQue2OoFP10W7rts/Y3TrtDS4KJrWV5hIdmvTmuBykBTStYlWKtPu9lr69 QqmljIw2PVap8dGixy88Ptwi1sFhdTcGwzHFjOJuaLOmUC8bsTlKghsxS5LbHYi0 mG/I9RxAMkUtJjbljoir9Yvj++kQqO+zAkos/JZT9LwvQeMGXmvhvdTvifvyVTdx 3ihVUBHVWD2f7UwVqtOQrJyTOF7vTycUrK+M1nxkqFKO9UjGuv0f6NVqDz1PfyuU YGj5Kf7xdygm+73LrQ8OljlTvtkumZVMP8jS/e3CFPPj0qboWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPLNQihdqCoFcn3lsJnl/5qRQ217MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzE2 ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZhY2Y5OTMzMmMvYTMxNmQ3OTEtNDJiZS00 NmRiLWE5YmUtNGJmYWNmOTkzMzJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTMxNmQ3OTEtNDJiZS00NmRiLWE5 YmUtNGJmYWNmOTkzMzJjL2EzMTZkNzkxLTQyYmUtNDZkYi1hOWJlLTRiZmFjZjk5 MzMyYy5jcmwwHwYDVR0jBBgwFoAUTs6igdyVoR04bSB+yWF1lcqU8pgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzE2ZDc5MS00MmJlLTQ2ZGItYTliZS00YmZh Y2Y5OTMzMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5qfAFMx4xJdjKPrmHEZs1 zTK97QVCr8cUJFHiXbVTbY+/RwB9KTksDsv18aSAlGNESCSzUPXbZs3BjkIzb7Om XzLXsSej9m8Qnt769CXNs9SfrXLgMpgnja5nwc4UL+Djy70af68aJuw/mIQgVuK+ w0S+Jyt1NL8Oq26ZrabX2+Rmb2Dn92yAn+1lAGG4LEFq+ZbSP9L64UUr6Jh3Xbr+ 2RA8o1TlFft8PloP+mVz8fBghIl4wml9DAeQromt+dNoCAD5iDuBJwcAweDnc/ix H0C5P/MIIq4t+SUovqJ8mmfo82nNa7T3+LzV+VmgnGmf9Yjf0u0t6zApqBEAIs8/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:56 2025 by rpki-client