$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft File: c76d0de5-b885-4437-8fa9-b267f0f3d228.mft (raw, json) Hash identifier: k8UwnKKLoTPC2h732FBVVQlQwVchfPhsVRVmvJYqrfk= Subject key identifier: 53:98:8B:98:19:F5:FD:E9:6B:7E:03:F2:F7:3F:70:C5:A5:0A:EC:92 Authority key identifier: F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F Certificate issuer: /CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Certificate serial: 010D0C9F4328584BC2E71D8EEEFB34A3925D0180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft Manifest number: 010D0C9F4328584073A81EBF9692F9371DAE908D Signing time: Wed 05 Nov 2025 18:00:08 +0000 Manifest this update: Wed 05 Nov 2025 18:00:08 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: c76d0de5-b885-4437-8fa9-b267f0f3d228.crl (hash: ql5bsOZ3aeBWYBidEPRm9laYF9HCZ4dnk7Y8YVFJ0GA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:e7:1d:8e:ee:fb:34:a3:92:5d:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Validity Not Before: Nov 5 18:00:08 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=6cf4bf3c-a7d5-4ebf-b802-b0cae7967d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:1c:10:a9:4d:a1:82:0a:b2:d1:1a:4c:4a: 23:e0:df:4b:ee:93:66:33:8b:b0:0b:1b:d3:fd:37: 9e:62:5e:6f:e1:d1:69:f0:24:d5:cb:aa:e8:5a:c4: 3d:ba:7f:15:5c:64:47:c4:e3:22:4d:84:99:32:33: 98:96:0c:ae:f4:70:0e:94:06:36:c9:63:d0:28:46: c6:c8:e6:1f:ec:d7:cd:ac:ab:98:de:b7:bf:44:b2: eb:b7:50:65:bc:b6:5b:c4:92:1f:86:a4:46:82:e3: 4d:6c:96:34:8f:66:64:a5:8f:a1:35:1f:c7:8c:81: 03:81:11:aa:c2:4a:01:a5:b8:b6:ba:08:8c:a5:36: f6:2c:9c:a4:67:79:e4:47:e4:69:a8:37:13:01:6a: a6:d2:65:29:0e:7f:65:9c:e4:70:c5:5b:4f:84:42: f6:10:09:17:f4:b3:5b:ef:e9:31:be:fa:35:48:d2: f7:bd:ad:fc:3e:47:7b:80:f8:20:cc:05:04:16:a5: 92:cf:3b:ee:01:f5:3a:8e:4e:9e:f3:c9:a2:5a:cf: fe:46:69:e3:5e:15:62:56:f2:b6:0a:16:5c:e1:3e: d4:79:1a:14:53:42:84:ec:f4:d8:51:66:cd:73:91: 7b:bf:8b:a1:66:78:3c:82:dd:66:96:f8:54:b2:f0: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:98:8B:98:19:F5:FD:E9:6B:7E:03:F2:F7:3F:70:C5:A5:0A:EC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl X509v3 Authority Key Identifier: keyid:F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e8:4c:dd:17:8a:d5:ee:81:56:3d:74:a1:3f:da:21:3c:41: 23:be:16:94:9d:0e:57:44:42:f0:4f:a6:94:fe:9c:a2:23:1a: 41:44:98:06:b2:43:10:95:e7:dc:cc:e4:43:d5:e9:13:b5:db: e7:8d:ec:66:9c:d8:a6:67:16:e3:d4:69:1a:d2:4b:a3:4d:f1: c0:ad:5b:65:ac:67:0f:46:1f:63:b0:1e:78:e7:13:10:00:a9: 12:10:56:3b:52:63:bc:e1:be:61:f0:c4:81:d1:66:d0:2a:b5: f9:97:ec:e9:4d:fc:4c:e6:ae:48:9c:f7:42:08:62:c3:9e:27: 68:da:82:ce:6b:71:a3:1a:ff:f1:05:3c:ca:f8:5e:c4:7c:a3: 2b:d8:bc:1f:cd:fb:7f:38:60:b5:0e:98:76:b8:21:f0:d9:41: b1:84:ca:7c:76:3d:f8:34:ec:48:b0:80:5c:0a:b4:e5:4c:31: 25:fb:db:b9:e3:d7:f0:74:d3:a1:99:6a:8e:33:a2:be:d7:81: 5f:ac:db:3a:21:20:44:9b:d7:39:88:28:42:79:b3:40:c7:60: 2d:a6:d0:b8:04:6a:c2:cb:50:0f:c1:86:6b:f5:9d:26:0f:d9: 3c:62:fd:15:b9:fb:16:58:55:89:d9:e4:cb:8a:2f:42:79:b0: 03:fa:62:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvC5x2O7vs0o5JdAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2ZDBkZTUtYjg4NS00NDM3LThmYTktYjI2N2YwZjNk MjI4MB4XDTI1MTEwNTE4MDAwOFoXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk NmNmNGJmM2MtYTdkNS00ZWJmLWI4MDItYjBjYWU3OTY3ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSUcEKlNoYIKstEaTEoj4N9L7pNmM4uwCxvT /TeeYl5v4dFp8CTVy6roWsQ9un8VXGRHxOMiTYSZMjOYlgyu9HAOlAY2yWPQKEbG yOYf7NfNrKuY3re/RLLrt1BlvLZbxJIfhqRGguNNbJY0j2ZkpY+hNR/HjIEDgRGq wkoBpbi2ugiMpTb2LJykZ3nkR+RpqDcTAWqm0mUpDn9lnORwxVtPhEL2EAkX9LNb 7+kxvvo1SNL3va38Pkd7gPggzAUEFqWSzzvuAfU6jk6e88miWs/+RmnjXhViVvK2 ChZc4T7UeRoUU0KE7PTYUWbNc5F7v4uhZng8gt1mlvhUsvA0aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFOYi5gZ9f3pa34D8vc/cMWlCuySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZk MGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3ZjBmM2QyMjgvYzc2ZDBkZTUtYjg4NS00 NDM3LThmYTktYjI2N2YwZjNkMjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzc2ZDBkZTUtYjg4NS00NDM3LThm YTktYjI2N2YwZjNkMjI4L2M3NmQwZGU1LWI4ODUtNDQzNy04ZmE5LWIyNjdmMGYz ZDIyOC5jcmwwHwYDVR0jBBgwFoAU8SjItB4JoDD+2BjufLSFwamIc28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZkMGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3 ZjBmM2QyMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs6EzdF4rV7oFWPXShP9oh PEEjvhaUnQ5XRELwT6aU/pyiIxpBRJgGskMQlefczORD1ekTtdvnjexmnNimZxbj 1Gka0kujTfHArVtlrGcPRh9jsB545xMQAKkSEFY7UmO84b5h8MSB0WbQKrX5l+zp TfxM5q5InPdCCGLDnido2oLOa3GjGv/xBTzK+F7EfKMr2Lwfzft/OGC1Dph2uCHw 2UGxhMp8dj34NOxIsIBcCrTlTDEl+9u549fwdNOhmWqOM6K+14FfrNs6ISBEm9c5 iChCebNAx2AtptC4BGrCy1APwYZr9Z0mD9k8Yv0VufsWWFWJ2eTLii9CebAD+mKB -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:56 2025 by rpki-client