$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: qG0wQ6WkEy/YV/fhoJM/AKFpAmdPMqFoykBfZiLjlx8= Subject key identifier: 1D:9E:74:BD:BA:7F:17:C4:37:F7:47:32:5F:40:F6:30:27:7B:F4:24 Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F4328584BC057FF84436A7D322BB174C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F7812467B Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: q7LdQVAM55jCczCZ7PTFlOBvN4Y9ngCUlLS6eQY15/k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:ff:84:43:6a:7d:32:2b:b1:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=9f021c60-1baa-4d1b-8a68-718f0e3299c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:b6:77:e5:42:f9:3d:99:a3:31:69:09:e3: ab:2d:79:9a:04:5d:25:83:5b:7d:f0:0d:e5:77:7e: c4:8a:96:4e:32:1d:e7:9c:b5:92:f1:57:66:8f:32: 9e:76:5c:ed:57:3f:b9:82:f8:67:9a:3d:05:5a:9f: e1:bb:b1:fa:a3:b9:88:89:58:da:88:f7:0f:c2:5f: 80:26:ba:89:7e:e5:88:30:b1:7b:36:7c:b2:9a:f3: 5a:3a:b1:66:ba:dc:cb:e4:14:9a:e6:a0:31:00:fd: d8:62:5f:7e:98:51:52:5b:59:e7:66:82:b2:7b:8a: 55:ad:e9:1a:f9:fa:c7:0d:28:ed:06:0e:1b:c2:58: 54:ea:a6:f3:76:44:32:d4:08:f6:2f:73:2c:5c:66: cc:92:9b:2a:16:16:89:58:c3:d3:70:01:89:73:d3: c4:18:1f:e5:2a:b3:31:a7:92:40:e2:37:27:62:1d: f5:e7:92:23:d3:df:9c:ef:93:c9:7b:dc:91:31:7e: 8f:14:bc:41:4d:ec:39:e0:19:0b:80:11:a6:11:b1: 01:40:66:2e:c4:b2:57:fd:08:ed:18:8d:55:9a:b0: 8b:cd:95:c2:2c:d9:41:41:a6:be:4c:fb:5e:b0:6b: fa:f1:7d:75:52:13:a8:ae:f3:65:e6:7f:b6:1b:dc: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:74:BD:BA:7F:17:C4:37:F7:47:32:5F:40:F6:30:27:7B:F4:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5b:bc:44:43:ed:c5:4b:99:87:13:58:04:ce:5c:4d:b9:c9: 18:ce:45:b7:3f:f1:f3:7c:a3:fa:0c:73:4d:92:2a:7c:cc:4e: 80:ef:7a:82:89:f9:6e:e8:79:1a:34:48:14:72:e4:d8:d2:82: b0:5a:6c:e0:10:51:23:16:9d:30:1d:2b:e7:92:12:60:1e:f1: 06:8a:bb:cd:d8:85:5b:66:bb:5c:2e:54:4f:14:d3:59:7d:a2: e2:eb:75:6f:09:6e:3b:f8:a7:9c:dd:f8:1b:cf:fb:7e:35:c8: a5:ad:05:9a:1f:84:4e:0c:96:db:97:20:63:09:ed:10:79:2d: 28:a5:1d:b2:e2:38:09:25:70:8c:ab:ac:f7:1f:2e:88:50:f2: f8:d7:ec:a2:cf:f8:27:c1:65:50:6a:d2:b8:2b:7d:ae:1d:d1: 7e:31:56:33:e0:3d:40:bd:1d:2f:da:6e:2b:5e:64:a9:f5:fe: 19:62:5c:4d:fe:f2:94:b5:9a:41:a8:f5:de:44:74:52:e8:1a: 26:0a:1f:4a:c8:7c:44:d4:ac:dc:72:4a:d3:8b:67:81:6d:41: b5:63:33:52:6c:60:c1:3c:00:16:22:54:7f:bc:03:8a:1f:83: e7:60:e5:74:57:dc:d2:c4:d3:c7:64:a3:0f:6d:ba:c5:b5:e6: 9b:ac:64:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/+EQ2p9MiuxdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk OWYwMjFjNjAtMWJhYS00ZDFiLThhNjgtNzE4ZjBlMzI5OWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpC2d+VC+T2ZozFpCeOrLXmaBF0lg1t98A3l d37EipZOMh3nnLWS8VdmjzKedlztVz+5gvhnmj0FWp/hu7H6o7mIiVjaiPcPwl+A JrqJfuWIMLF7NnyymvNaOrFmutzL5BSa5qAxAP3YYl9+mFFSW1nnZoKye4pVreka +frHDSjtBg4bwlhU6qbzdkQy1Aj2L3MsXGbMkpsqFhaJWMPTcAGJc9PEGB/lKrMx p5JA4jcnYh3155Ij09+c75PJe9yRMX6PFLxBTew54BkLgBGmEbEBQGYuxLJX/Qjt GI1VmrCLzZXCLNlBQaa+TPtesGv68X11UhOorvNl5n+2G9zcAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB2edL26fxfEN/dHMl9A9jAne/QkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqW7xEQ+3FS5mHE1gEzlxN uckYzkW3P/HzfKP6DHNNkip8zE6A73qCiflu6HkaNEgUcuTY0oKwWmzgEFEjFp0w HSvnkhJgHvEGirvN2IVbZrtcLlRPFNNZfaLi63VvCW47+Kec3fgbz/t+NcilrQWa H4RODJbblyBjCe0QeS0opR2y4jgJJXCMq6z3Hy6IUPL41+yiz/gnwWVQatK4K32u HdF+MVYz4D1AvR0v2m4rXmSp9f4ZYlxN/vKUtZpBqPXeRHRS6BomCh9KyHxE1Kzc ckrTi2eBbUG1YzNSbGDBPAAWIlR/vAOKH4PnYOV0V9zSxNPHZKMPbbrFteabrGTW -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:33 2025 by rpki-client