$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft File: db841f95-5e7a-4808-a239-7276e9c28008.mft (raw, json) Hash identifier: cb3HwfBePD/9nsoj3OCRP8ZHHY48ijiOLmJIhpA61AY= Subject key identifier: FB:67:BD:38:AF:AB:4E:CE:3D:53:05:DE:11:3F:BE:74:0C:66:79:F9 Authority key identifier: 13:DD:03:58:0D:4E:8F:56:B7:F9:6A:BE:1B:2F:F5:D0:66:C4:A4:22 Certificate issuer: /CN=db841f95-5e7a-4808-a239-7276e9c28008 Certificate serial: 010D0C9F4328584BBFC31239959A1445E611EF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft Manifest number: 010D0C9F4328584187FDE9D61003BEF9F450F2B5 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: db841f95-5e7a-4808-a239-7276e9c28008.crl (hash: x8DtqLVljjTVGNMFVt4kmApBMEsRvxsKEIN04/4GuiA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:12:39:95:9a:14:45:e6:11:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db841f95-5e7a-4808-a239-7276e9c28008 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=385f0898-fbe3-4803-a1d3-d5b867ba17d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e3:a0:e6:79:f0:50:6b:db:5b:40:90:8e:37: 05:14:e5:5a:4b:b9:f3:a6:bc:82:1c:10:99:21:97: 7e:47:59:63:c3:23:f9:4d:06:7a:b6:30:e8:e3:1f: 94:e6:43:c4:8b:3b:35:68:00:a8:03:06:be:fd:fa: 59:3c:81:dd:3c:f5:cd:4a:a4:ba:5c:c3:0a:f6:8f: 8f:be:bf:9f:0f:c9:bf:f9:39:f4:a1:dd:cb:46:75: 50:1f:3f:87:48:ef:fb:4a:0b:a5:3f:af:2f:cc:9b: 31:c8:aa:99:5f:9b:e0:ea:76:92:7c:33:ae:27:43: bf:67:71:a9:fc:08:8d:93:9d:90:38:b3:36:24:aa: 5c:50:47:61:a1:41:b7:43:da:93:12:a2:28:3f:b9: 08:64:10:b4:08:9d:ed:0d:69:02:5a:a7:a2:5e:60: c2:28:f8:83:f7:5a:47:4b:34:48:ca:ac:d2:1c:b1: 86:9d:39:bf:dc:e0:07:1a:7a:d5:9a:fe:ac:42:b5: 15:4c:71:9f:c2:57:b2:75:0b:30:84:e4:72:f4:01: 86:ed:0c:c8:02:a9:5a:c3:4c:50:8b:d6:fe:4c:ae: 31:46:9c:ee:12:0c:d2:09:0b:13:d3:4a:db:d2:cb: 32:0c:f4:02:79:a2:69:1e:51:4f:2c:c3:24:d8:60: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:BD:38:AF:AB:4E:CE:3D:53:05:DE:11:3F:BE:74:0C:66:79:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008/db841f95-5e7a-4808-a239-7276e9c28008.crl X509v3 Authority Key Identifier: keyid:13:DD:03:58:0D:4E:8F:56:B7:F9:6A:BE:1B:2F:F5:D0:66:C4:A4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db841f95-5e7a-4808-a239-7276e9c28008.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8d:8a:40:32:71:1e:4e:4d:5c:82:4e:c6:f7:b9:94:1f:cf: 9d:40:3b:c3:98:81:b6:53:b4:4f:28:42:f2:47:07:f8:47:b4: 4b:7d:cc:06:c2:9f:12:12:d5:48:94:02:9e:e8:d6:01:85:30: 2e:68:b5:89:0f:a6:a5:d2:50:a2:a6:05:0d:14:18:f4:48:72: d4:df:fa:12:65:11:29:16:f9:26:3e:94:df:2a:f1:6b:20:d4: 77:ea:68:4c:cc:6e:7b:6d:10:86:86:a9:e1:c7:35:dc:da:33: ab:74:6f:ad:49:9a:75:9b:d1:d1:9e:c5:5d:23:4d:49:2e:23: 68:e7:29:53:ce:bf:3f:51:7c:1e:c1:e0:67:34:c0:f2:e0:7a: 56:fb:bf:83:10:c0:ba:92:97:d9:45:41:12:32:c7:43:da:1c: 0d:43:d4:f7:90:08:fc:e8:92:51:ab:fc:ea:2c:2d:f4:eb:67: 9b:ae:cd:e9:1d:01:aa:00:0f:21:c5:05:ae:71:98:fb:8c:1d: 5a:c9:c7:fb:d8:89:54:c7:06:a3:b6:b4:d1:ea:2f:3a:0b:48: 0c:54:64:96:6d:86:3a:a5:5e:8c:a2:c1:e1:93:66:31:d1:e9: 85:75:88:ab:78:35:b5:a3:38:5c:d3:f2:9d:aa:e0:0b:35:f6: 82:a3:2d:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxI5lZoUReYR74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NDFmOTUtNWU3YS00ODA4LWEyMzktNzI3NmU5YzI4 MDA4MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk Mzg1ZjA4OTgtZmJlMy00ODAzLWExZDMtZDViODY3YmExN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuOg5nnwUGvbW0CQjjcFFOVaS7nzpryCHBCZ IZd+R1ljwyP5TQZ6tjDo4x+U5kPEizs1aACoAwa+/fpZPIHdPPXNSqS6XMMK9o+P vr+fD8m/+Tn0od3LRnVQHz+HSO/7SgulP68vzJsxyKqZX5vg6naSfDOuJ0O/Z3Gp /AiNk52QOLM2JKpcUEdhoUG3Q9qTEqIoP7kIZBC0CJ3tDWkCWqeiXmDCKPiD91pH SzRIyqzSHLGGnTm/3OAHGnrVmv6sQrUVTHGfwleydQswhORy9AGG7QzIAqlaw0xQ i9b+TK4xRpzuEgzSCQsT00rb0ssyDPQCeaJpHlFPLMMk2GASuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPtnvTivq07OPVMF3hE/vnQMZnn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYjg0 MWY5NS01ZTdhLTQ4MDgtYTIzOS03Mjc2ZTljMjgwMDgvZGI4NDFmOTUtNWU3YS00 ODA4LWEyMzktNzI3NmU5YzI4MDA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGI4NDFmOTUtNWU3YS00ODA4LWEy MzktNzI3NmU5YzI4MDA4L2RiODQxZjk1LTVlN2EtNDgwOC1hMjM5LTcyNzZlOWMy ODAwOC5jcmwwHwYDVR0jBBgwFoAUE90DWA1Oj1a3+Wq+Gy/10GbEpCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYjg0MWY5NS01ZTdhLTQ4MDgtYTIzOS03Mjc2 ZTljMjgwMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARjYpAMnEeTk1cgk7G97mU H8+dQDvDmIG2U7RPKELyRwf4R7RLfcwGwp8SEtVIlAKe6NYBhTAuaLWJD6al0lCi pgUNFBj0SHLU3/oSZREpFvkmPpTfKvFrINR36mhMzG57bRCGhqnhxzXc2jOrdG+t SZp1m9HRnsVdI01JLiNo5ylTzr8/UXweweBnNMDy4HpW+7+DEMC6kpfZRUESMsdD 2hwNQ9T3kAj86JJRq/zqLC3062ebrs3pHQGqAA8hxQWucZj7jB1aycf72IlUxwaj trTR6i86C0gMVGSWbYY6pV6MosHhk2Yx0emFdYireDW1ozhc0/KdquALNfaCoy1c -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:15 2025 by rpki-client