$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.mft File: 71b664e2-d9de-481c-8d13-1041c564fbc8.mft (raw, json) Hash identifier: wgKm3YOw0tg8WQlmQ4/QP/Nexf35VgNoa9EnaxDMeqE= Subject key identifier: EF:85:BE:BF:62:A4:F6:84:A7:C0:82:D2:6B:55:6B:72:F3:1B:35:5C Authority key identifier: 84:1F:26:54:F5:BC:80:29:31:F0:7D:DF:FE:32:97:0B:3C:47:FE:F9 Certificate issuer: /CN=71b664e2-d9de-481c-8d13-1041c564fbc8 Certificate serial: 010D0C9F4328584BBFFEA87DF4ACDA2071706780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.mft Manifest number: 010D0C9F432858471ACA15E1979F33C78FDFB46A Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 71b664e2-d9de-481c-8d13-1041c564fbc8.crl (hash: trl4BmKDOgS4IgnjV6QrChdg0p1gFPbaPK1ll7LkmmY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a8:7d:f4:ac:da:20:71:70:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b664e2-d9de-481c-8d13-1041c564fbc8 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=129243d7-8ce8-40dd-ae69-c3c5fc3f4133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:aa:2b:e1:1d:c1:63:0f:5c:28:05:18:b2: 5e:60:6f:ca:2c:d8:f6:cf:35:af:83:ea:de:75:8c: 34:22:f4:17:03:ab:a2:5c:2f:34:d9:48:ed:81:16: 80:e6:65:1d:02:31:72:4f:08:fd:b8:fb:67:f5:cc: 37:95:49:7f:b7:5f:aa:f7:1e:01:5a:64:31:0d:65: 1e:d9:85:7b:c7:38:04:3b:f8:fc:bc:3a:de:37:e1: 54:86:55:c5:75:28:77:78:68:4d:48:60:67:c8:da: f5:6d:f5:65:be:f8:0a:dc:1e:fb:cd:6b:bd:68:2c: f7:53:57:c0:a3:10:67:5f:c5:06:36:d1:25:5b:6d: a4:ca:f4:d4:1d:c4:20:9d:42:1c:e0:35:b2:ea:4b: 56:df:30:b5:6f:5b:9a:74:6b:98:7e:7b:ac:bf:80: d2:9a:81:f6:7a:ef:d8:48:b1:e2:c5:46:50:f7:c2: d5:c5:d7:b0:62:10:5d:3f:36:5f:0d:bb:d8:32:68: 76:dd:57:86:78:28:55:03:14:19:22:4b:55:b1:91: e8:8b:e6:13:12:79:27:d3:ef:06:5a:4b:c7:dc:e7: cf:8a:da:9b:b4:a9:89:9c:42:f4:1e:df:92:88:0d: 94:42:71:b8:07:d7:e7:9e:f1:45:ad:2f:b3:de:d4: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:85:BE:BF:62:A4:F6:84:A7:C0:82:D2:6B:55:6B:72:F3:1B:35:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8/71b664e2-d9de-481c-8d13-1041c564fbc8.crl X509v3 Authority Key Identifier: keyid:84:1F:26:54:F5:BC:80:29:31:F0:7D:DF:FE:32:97:0B:3C:47:FE:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/71b664e2-d9de-481c-8d13-1041c564fbc8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f6:b5:4d:b6:3c:7f:5b:9f:cf:de:74:92:a9:8a:aa:bc:ba: 65:65:4d:56:a6:23:cb:80:28:96:85:89:7c:1a:b2:ae:59:f0: 83:2f:08:d7:e3:55:ca:19:6e:cf:24:66:f3:ee:39:a1:9a:db: fd:4b:a3:1e:fd:e2:e8:9a:87:0c:73:67:63:1f:25:9a:8d:79: 6f:f6:7e:42:b3:34:95:01:de:b6:58:a8:6a:40:5d:4f:6c:6a: 4a:00:bb:d8:6e:57:81:5b:7b:a8:79:81:ca:69:71:9a:7b:af: 5b:6a:4d:af:7f:06:75:c6:7e:37:1e:1e:8f:f3:c4:a8:8e:5f: c9:78:cf:06:de:2d:c3:62:7a:26:36:b4:82:c8:1d:81:a9:eb: 22:05:b8:e4:64:8c:c5:93:0e:f9:41:cb:71:87:e7:63:fb:2f: 1e:2d:04:3f:8c:65:28:cf:0e:a1:fb:e0:fd:da:45:97:6b:24: 2e:d2:73:68:61:cd:9e:4c:be:09:62:79:05:a3:00:22:cd:d9: eb:48:8e:f3:7c:83:3d:ae:46:37:47:76:c8:ca:53:c1:c7:99: 76:50:86:b1:8e:d5:57:09:77:72:ae:ae:25:2b:e3:c1:ff:7a: 6c:18:64:e2:8c:aa:53:0d:73:74:35:e0:a9:56:5d:9e:5b:7a: 3c:7e:19:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qh99KzaIHFwZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFiNjY0ZTItZDlkZS00ODFjLThkMTMtMTA0MWM1NjRm YmM4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MTI5MjQzZDctOGNlOC00MGRkLWFlNjktYzNjNWZjM2Y0MTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBmqK+EdwWMPXCgFGLJeYG/KLNj2zzWvg+re dYw0IvQXA6uiXC802UjtgRaA5mUdAjFyTwj9uPtn9cw3lUl/t1+q9x4BWmQxDWUe 2YV7xzgEO/j8vDreN+FUhlXFdSh3eGhNSGBnyNr1bfVlvvgK3B77zWu9aCz3U1fA oxBnX8UGNtElW22kyvTUHcQgnUIc4DWy6ktW3zC1b1uadGuYfnusv4DSmoH2eu/Y SLHixUZQ98LVxdewYhBdPzZfDbvYMmh23VeGeChVAxQZIktVsZHoi+YTEnkn0+8G WkvH3OfPitqbtKmJnEL0Ht+SiA2UQnG4B9fnnvFFrS+z3tT6uwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO+Fvr9ipPaEp8CC0mtVa3LzGzVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MWI2 NjRlMi1kOWRlLTQ4MWMtOGQxMy0xMDQxYzU2NGZiYzgvNzFiNjY0ZTItZDlkZS00 ODFjLThkMTMtMTA0MWM1NjRmYmM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzFiNjY0ZTItZDlkZS00ODFjLThk MTMtMTA0MWM1NjRmYmM4LzcxYjY2NGUyLWQ5ZGUtNDgxYy04ZDEzLTEwNDFjNTY0 ZmJjOC5jcmwwHwYDVR0jBBgwFoAUhB8mVPW8gCkx8H3f/jKXCzxH/vkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MWI2NjRlMi1kOWRlLTQ4MWMtOGQxMy0xMDQx YzU2NGZiYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCf9rVNtjx/W5/P3nSSqYqq vLplZU1WpiPLgCiWhYl8GrKuWfCDLwjX41XKGW7PJGbz7jmhmtv9S6Me/eLomocM c2djHyWajXlv9n5CszSVAd62WKhqQF1PbGpKALvYbleBW3uoeYHKaXGae69bak2v fwZ1xn43Hh6P88Sojl/JeM8G3i3DYnomNrSCyB2BqesiBbjkZIzFkw75Qctxh+dj +y8eLQQ/jGUozw6h++D92kWXayQu0nNoYc2eTL4JYnkFowAizdnrSI7zfIM9rkY3 R3bIylPBx5l2UIaxjtVXCXdyrq4lK+PB/3psGGTijKpTDXN0NeCpVl2eW3o8fhkZ -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:29 2025 by rpki-client