$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft File: d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft (raw, json) Hash identifier: ZwynRl73JDEpdCn5jfArXlQZ/tUEx+j2ReQ7ZqV+sak= Subject key identifier: 32:2A:F5:C4:AD:D3:14:67:1B:B0:35:0C:AC:44:1B:97:FE:5D:8B:64 Authority key identifier: DB:4C:64:33:D9:E2:FD:6A:C3:BE:2E:95:BD:EF:FF:5B:0F:7B:39:8F Certificate issuer: /CN=d20efc30-2cdf-4e2a-b771-679644d5f2b9 Certificate serial: 010D0C9F4328584BC19F83D4BE0DC1A313F09100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft Manifest number: 010D0C9F4328584073A846126535735C13F6A74C Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Sat 08 Nov 2025 07:00:00 +0000 Files and hashes: 1: d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl (hash: s0C1cGwN1XnM/rmr9z+uVdceYCeGEkFQ5VROso1pGo4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:83:d4:be:0d:c1:a3:13:f0:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20efc30-2cdf-4e2a-b771-679644d5f2b9 Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 8 07:00:00 2025 GMT Subject: CN=04fa51d9-83e7-4d55-85f9-42c10e010e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:11:43:f0:7b:3c:e3:02:3e:0e:8a:8a:8d: c4:1e:52:d1:62:f1:01:a2:bb:ff:78:2b:75:fb:04: 2a:70:f7:a0:51:12:d2:80:40:66:12:6f:68:92:95: 67:c4:16:7a:c5:07:ae:78:b9:ad:46:80:ee:0b:44: 88:27:7f:8a:ef:d0:c3:d2:71:2c:eb:56:44:9a:41: c2:d1:0c:5f:12:c9:4c:11:b6:3d:23:aa:fc:20:99: 1c:aa:93:b4:db:f2:55:a4:82:0a:3a:77:65:14:83: 3e:d5:ec:64:a8:1d:85:46:2c:55:7a:78:28:3d:b9: 40:47:e3:7e:48:9f:78:c3:9f:12:67:cd:1f:e0:9a: 9f:85:39:42:71:0a:36:92:17:9f:17:5a:47:a7:37: 13:3a:02:2f:d7:98:b3:cc:6d:72:c7:bd:71:f1:08: 9f:ca:be:b9:7d:24:63:13:8c:53:ba:80:16:ed:4c: c6:8d:c6:65:ee:3c:b7:d9:b4:6c:13:e5:63:89:2a: 80:2b:8d:d6:75:7d:be:bf:9c:95:ed:f1:0d:42:d0: 4e:35:f0:8e:b9:cc:a1:96:b9:40:c9:e8:7b:2d:1a: 5e:67:54:a8:60:23:4b:1f:29:a8:b4:6d:f9:68:e0: 42:cc:02:8e:29:c5:66:57:97:0e:c5:f5:26:2d:50: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:F5:C4:AD:D3:14:67:1B:B0:35:0C:AC:44:1B:97:FE:5D:8B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9/d20efc30-2cdf-4e2a-b771-679644d5f2b9.crl X509v3 Authority Key Identifier: keyid:DB:4C:64:33:D9:E2:FD:6A:C3:BE:2E:95:BD:EF:FF:5B:0F:7B:39:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d20efc30-2cdf-4e2a-b771-679644d5f2b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7c:79:4f:8b:58:3b:f1:44:c4:f9:82:ab:13:60:ef:aa:1b: f7:ac:36:48:68:e0:3e:ed:52:58:18:1e:52:6e:d2:fc:5a:e9: 62:88:60:4a:cc:ae:88:74:60:0f:5d:15:b5:c5:8e:34:29:f6: 3f:87:88:94:9c:b1:99:ea:04:2f:98:ac:94:e3:31:4a:12:9a: 0b:5d:a7:7a:74:01:a9:bc:a6:dd:60:40:18:6a:3d:5e:93:15: 18:9b:63:1b:96:2f:94:5e:da:f2:f4:a4:39:b8:56:99:91:ec: 8d:3c:98:25:fd:a1:99:bb:21:f7:bc:44:9b:4f:3a:88:bd:fd: 0f:58:4d:cd:77:09:b3:c4:31:b1:59:54:24:9a:36:66:87:ea: d1:f8:8e:1a:e5:e7:a4:60:f7:7c:5e:f8:03:4a:52:9b:af:62: 25:4e:f2:b1:50:49:e4:18:90:f5:53:a1:9a:70:15:68:b9:2f: 50:7b:a2:1e:6c:ba:c2:d0:e9:2b:3c:3c:5f:6b:fd:74:8c:5a: 05:c2:de:91:6a:bf:ea:14:5c:ae:e0:8f:fb:f6:9f:72:64:93: 22:8b:1a:87:d3:d7:2e:ed:02:6b:9d:00:d3:99:15:76:13:ff: 80:17:b8:f1:d0:15:32:97:93:b5:75:24:22:a2:8e:ec:68:85: 87:d3:9f:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4PUvg3BoxPwkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwZWZjMzAtMmNkZi00ZTJhLWI3NzEtNjc5NjQ0ZDVm MmI5MB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwODA3MDAwMFowLzEtMCsGA1UEAxMk MDRmYTUxZDktODNlNy00ZDU1LTg1ZjktNDJjMTBlMDEwZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ARQ/B7POMCPg6Kio3EHlLRYvEBorv/eCt1 +wQqcPegURLSgEBmEm9okpVnxBZ6xQeueLmtRoDuC0SIJ3+K79DD0nEs61ZEmkHC 0QxfEslMEbY9I6r8IJkcqpO02/JVpIIKOndlFIM+1exkqB2FRixVengoPblAR+N+ SJ94w58SZ80f4JqfhTlCcQo2khefF1pHpzcTOgIv15izzG1yx71x8Qifyr65fSRj E4xTuoAW7UzGjcZl7jy32bRsE+VjiSqAK43WdX2+v5yV7fENQtBONfCOucyhlrlA yeh7LRpeZ1SoYCNLHymotG35aOBCzAKOKcVmV5cOxfUmLVA8dQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIq9cSt0xRnG7A1DKxEG5f+XYtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjBl ZmMzMC0yY2RmLTRlMmEtYjc3MS02Nzk2NDRkNWYyYjkvZDIwZWZjMzAtMmNkZi00 ZTJhLWI3NzEtNjc5NjQ0ZDVmMmI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIwZWZjMzAtMmNkZi00ZTJhLWI3 NzEtNjc5NjQ0ZDVmMmI5L2QyMGVmYzMwLTJjZGYtNGUyYS1iNzcxLTY3OTY0NGQ1 ZjJiOS5jcmwwHwYDVR0jBBgwFoAU20xkM9ni/WrDvi6Vve//Ww97OY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjBlZmMzMC0yY2RmLTRlMmEtYjc3MS02Nzk2 NDRkNWYyYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2fHlPi1g78UTE+YKrE2Dv qhv3rDZIaOA+7VJYGB5SbtL8WuliiGBKzK6IdGAPXRW1xY40KfY/h4iUnLGZ6gQv mKyU4zFKEpoLXad6dAGpvKbdYEAYaj1ekxUYm2Mbli+UXtry9KQ5uFaZkeyNPJgl /aGZuyH3vESbTzqIvf0PWE3NdwmzxDGxWVQkmjZmh+rR+I4a5eekYPd8XvgDSlKb r2IlTvKxUEnkGJD1U6GacBVouS9Qe6IebLrC0OkrPDxfa/10jFoFwt6Rar/qFFyu 4I/79p9yZJMiixqH09cu7QJrnQDTmRV2E/+AF7jx0BUyl5O1dSQioo7saIWH05+2 -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:33 2025 by rpki-client