$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.mft File: c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.mft (raw, json) Hash identifier: a7Y2eNq9lcIvA3KJM9ybUW8ZtVaHyRdWonxJcRDour4= Subject key identifier: 4A:A4:4B:AD:08:07:70:AE:5F:ED:85:B1:55:EA:91:EF:06:E9:D6:CE Authority key identifier: 1E:19:2D:14:CD:DF:6A:47:90:38:FE:4B:0A:A1:72:B7:43:78:55:D5 Certificate issuer: /CN=c4de3ae0-4a8c-44fd-8ef1-b97556a1234c Certificate serial: 010D0C9F4328584BBF2E2880D5D12E6AE8B1B290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.mft Manifest number: 010D0C9F4328584073A84CC6AF9D0BE0DFF6A64B Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.crl (hash: EziXlfXRwP6cptkswcvVwKw22HXDWsV6SFU8qLSFA6g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:28:80:d5:d1:2e:6a:e8:b1:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4de3ae0-4a8c-44fd-8ef1-b97556a1234c Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=e7b750e5-f062-41dd-a8bc-9697cd3b2fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:2b:0a:b7:d7:b5:f7:02:65:7f:49:f6:6c: b7:4f:5b:be:c9:cc:df:98:0a:e4:bc:19:06:5a:45: 49:d8:3b:67:98:4d:57:1e:ed:3f:d7:dd:c0:22:a0: 00:62:58:bf:ba:c7:17:50:67:8b:22:e8:61:06:3d: a2:f1:6c:4b:10:10:33:dd:67:36:03:fc:21:0c:4a: 6a:6f:16:32:76:48:63:b9:c9:d9:65:5c:a4:cb:d1: 03:32:f3:6d:b1:6b:21:d0:39:0b:7f:38:98:82:9d: 0b:35:95:9e:5c:94:0d:be:12:57:0a:5a:b5:b1:a3: f2:0c:07:bc:09:f9:3b:9c:39:da:9f:8b:47:b5:91: f3:ba:34:61:bb:f3:36:c3:81:b0:da:60:2f:77:52: 1d:20:9c:06:66:5a:fe:cc:fa:6a:f3:70:9c:50:4a: 13:a3:b1:e1:24:2e:4f:c1:95:ba:f6:cc:7a:8d:74: 03:60:fe:62:23:25:25:e2:53:3d:60:d5:07:f1:24: 5b:80:36:a4:b5:72:7c:61:a7:70:c3:15:13:71:c2: 73:23:c0:ca:a5:8e:bc:62:01:bd:8c:07:03:80:c9: 15:ba:90:43:90:9e:2c:39:1d:8a:fd:c2:7f:3d:bc: 0e:13:f3:79:bd:e8:bf:72:6f:9d:90:31:ec:e5:8a: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:4B:AD:08:07:70:AE:5F:ED:85:B1:55:EA:91:EF:06:E9:D6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.crl X509v3 Authority Key Identifier: keyid:1E:19:2D:14:CD:DF:6A:47:90:38:FE:4B:0A:A1:72:B7:43:78:55:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c4de3ae0-4a8c-44fd-8ef1-b97556a1234c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a8:2a:0b:d5:20:47:b5:1b:4c:44:a4:59:b3:d2:b9:5d:bf: 2a:f3:62:9d:31:6b:1a:57:b6:07:fb:51:c0:a0:8f:43:94:6f: a5:b1:64:d1:42:90:44:90:d8:95:1f:3b:57:88:00:53:c2:4a: d3:b2:be:b5:bc:55:cd:82:01:1b:e9:ca:17:8e:52:55:ff:87: b1:86:52:5f:23:07:d4:11:a2:c6:d8:e2:94:62:da:e6:b3:1f: 64:37:4e:8d:b3:4f:22:a1:1f:da:a4:66:7b:65:a2:9e:2b:fb: e9:2f:08:07:7d:ec:8c:2c:43:b9:d0:1e:a0:ca:2e:df:83:1e: e3:0d:9b:e4:d8:cd:25:e5:ad:2d:b5:45:ff:ef:74:c4:6a:7f: 6d:b7:e5:7b:bb:33:6d:6b:6b:b9:0a:c7:26:c6:9d:5c:00:a9: 56:df:c8:fa:87:58:9d:65:11:52:ab:a6:0a:fd:cb:db:69:d9: b1:68:7e:a5:49:81:82:67:2d:c3:7d:0e:83:29:20:08:be:e8: ce:41:84:18:f5:01:c9:d5:f5:f0:7f:32:86:2b:e4:5c:b7:a8: b7:30:cc:59:99:4c:3a:e4:65:ce:17:7d:61:42:f1:08:d8:50: ac:35:af:2a:f2:11:23:56:0a:b6:14:16:ab:9f:17:8b:0e:9c: 17:b2:d8:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/LiiA1dEuauixspAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzRkZTNhZTAtNGE4Yy00NGZkLThlZjEtYjk3NTU2YTEy MzRjMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk ZTdiNzUwZTUtZjA2Mi00MWRkLWE4YmMtOTY5N2NkM2IyZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9orCrfXtfcCZX9J9my3T1u+yczfmArkvBkG WkVJ2DtnmE1XHu0/193AIqAAYli/uscXUGeLIuhhBj2i8WxLEBAz3Wc2A/whDEpq bxYydkhjucnZZVyky9EDMvNtsWsh0DkLfziYgp0LNZWeXJQNvhJXClq1saPyDAe8 Cfk7nDnan4tHtZHzujRhu/M2w4Gw2mAvd1IdIJwGZlr+zPpq83CcUEoTo7HhJC5P wZW69sx6jXQDYP5iIyUl4lM9YNUH8SRbgDaktXJ8YadwwxUTccJzI8DKpY68YgG9 jAcDgMkVupBDkJ4sOR2K/cJ/PbwOE/N5vei/cm+dkDHs5YqzSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqkS60IB3CuX+2FsVXqke8G6dbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNGRl M2FlMC00YThjLTQ0ZmQtOGVmMS1iOTc1NTZhMTIzNGMvYzRkZTNhZTAtNGE4Yy00 NGZkLThlZjEtYjk3NTU2YTEyMzRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzRkZTNhZTAtNGE4Yy00NGZkLThl ZjEtYjk3NTU2YTEyMzRjL2M0ZGUzYWUwLTRhOGMtNDRmZC04ZWYxLWI5NzU1NmEx MjM0Yy5jcmwwHwYDVR0jBBgwFoAUHhktFM3fakeQOP5LCqFyt0N4VdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNGRlM2FlMC00YThjLTQ0ZmQtOGVmMS1iOTc1 NTZhMTIzNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnqCoL1SBHtRtMRKRZs9K5 Xb8q82KdMWsaV7YH+1HAoI9DlG+lsWTRQpBEkNiVHztXiABTwkrTsr61vFXNggEb 6coXjlJV/4exhlJfIwfUEaLG2OKUYtrmsx9kN06Ns08ioR/apGZ7ZaKeK/vpLwgH feyMLEO50B6gyi7fgx7jDZvk2M0l5a0ttUX/73TEan9tt+V7uzNta2u5Cscmxp1c AKlW38j6h1idZRFSq6YK/cvbadmxaH6lSYGCZy3DfQ6DKSAIvujOQYQY9QHJ1fXw fzKGK+Rct6i3MMxZmUw65GXOF31hQvEI2FCsNa8q8hEjVgq2FBarnxeLDpwXstiN -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:52 2025 by rpki-client