$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.mft File: dfb388df-1376-43e5-afd0-907cf7e2d71f.mft (raw, json) Hash identifier: cIexhoRyEEPCHatN+cUU3EP48XkqtQgusQ12OBFDb8s= Subject key identifier: 91:A9:93:D2:14:E9:59:2F:A7:BA:2B:84:07:6A:29:23:FA:E5:53:A5 Authority key identifier: 6B:E9:1F:9A:5A:0E:73:0A:01:90:A1:88:62:69:EC:F6:2D:83:7B:ED Certificate issuer: /CN=dfb388df-1376-43e5-afd0-907cf7e2d71f Certificate serial: 010D0C9F4328584BC03A2C513098E60304BBEE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.mft Manifest number: 010D0C9F4328584073A8232838F0838D64F2344C Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: dfb388df-1376-43e5-afd0-907cf7e2d71f.crl (hash: QZPykxLsrE2Z3vSPZIkg8mFM0644/Wpd7WMtIP89z0w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2c:51:30:98:e6:03:04:bb:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb388df-1376-43e5-afd0-907cf7e2d71f Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=37981d3f-846a-4f53-84f8-5caf66c2fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:82:88:ea:dc:60:42:4c:55:5d:22:83:d5: d1:62:e3:b9:1d:22:ba:3d:a0:66:bf:29:24:db:ec: 7c:c3:76:5a:19:7c:6c:d7:d9:b0:24:4e:54:fe:90: 08:07:44:39:7f:1a:52:e7:04:24:d6:6c:15:d6:4b: a0:dc:13:d6:23:42:b3:26:3b:71:90:c2:7c:88:4b: 44:35:e7:e6:83:8a:4e:e7:99:6b:70:24:4b:22:45: 4f:47:76:1b:aa:00:f9:5f:19:bc:f5:72:d8:3f:af: 3b:38:90:cf:1d:39:e4:12:52:c8:57:00:34:4e:8a: 85:5b:1d:83:41:33:79:31:73:ff:c2:63:75:19:48: 6a:a5:74:73:c5:9f:53:d2:0a:e5:03:12:82:f9:4f: f6:01:ca:04:0f:00:c1:d9:b7:04:6e:6e:c5:cd:82: ce:af:e0:7b:61:46:b8:20:50:4f:41:d2:3d:2f:67: 59:8e:ec:60:7a:5d:75:9a:51:8e:9c:9f:a0:15:d0: 6c:04:80:d4:53:3d:6f:a3:ac:61:ef:77:8c:46:f8: 09:93:21:bc:5c:dd:a2:09:c3:f9:d1:10:11:a1:58: db:bc:ee:04:97:1b:46:9e:02:65:a4:6c:3f:54:e7: 3e:ad:c9:43:27:c6:e5:a6:b6:da:59:ec:41:83:a5: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A9:93:D2:14:E9:59:2F:A7:BA:2B:84:07:6A:29:23:FA:E5:53:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f/dfb388df-1376-43e5-afd0-907cf7e2d71f.crl X509v3 Authority Key Identifier: keyid:6B:E9:1F:9A:5A:0E:73:0A:01:90:A1:88:62:69:EC:F6:2D:83:7B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dfb388df-1376-43e5-afd0-907cf7e2d71f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3e:bd:10:9a:da:eb:75:62:3a:bb:bf:d8:ff:e2:cd:b8:8d: 84:da:57:e1:70:21:d0:a9:3b:b3:e4:9f:36:af:98:30:72:74: 02:1f:b0:ad:88:5f:f1:78:89:96:99:08:4b:fc:c0:24:54:f9: b1:c3:5d:cf:10:3f:f6:af:ec:2d:90:54:bc:15:12:e2:2b:88: 30:df:bc:75:0d:9d:28:63:56:5b:d6:2a:cf:9f:c7:43:b1:69: 5c:23:26:d0:21:96:1f:05:74:f0:3a:e8:1e:10:40:84:7b:99: 3a:0e:37:ab:0b:1a:ee:e4:8a:6e:90:5f:ca:8c:3c:6e:52:6a: 36:35:f6:6c:a3:36:3c:d8:af:f9:c7:78:08:76:16:35:de:e5: d0:bd:30:d3:b0:53:6c:51:e3:7a:a1:4f:fd:6e:20:fb:d7:fc: 19:ed:57:1c:95:b9:b4:56:f1:9a:fb:1a:90:45:ee:fe:84:8f: de:f8:95:4c:c6:0b:4a:06:7e:2d:06:ee:4f:f3:0f:87:4e:17: 86:98:a2:62:ff:dd:b6:af:d2:3a:e6:60:ba:6d:f0:fe:91:ca: d1:2e:44:e9:7c:d3:80:b9:40:32:4e:04:60:0e:d6:f9:e0:d4: 91:4a:e1:c4:b3:36:02:0f:6b:ff:41:dc:c0:f0:f3:c1:00:da: a1:9e:f9:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOixRMJjmAwS77iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiMzg4ZGYtMTM3Ni00M2U1LWFmZDAtOTA3Y2Y3ZTJk NzFmMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk Mzc5ODFkM2YtODQ2YS00ZjUzLTg0ZjgtNWNhZjY2YzJmZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVuCiOrcYEJMVV0ig9XRYuO5HSK6PaBmvykk 2+x8w3ZaGXxs19mwJE5U/pAIB0Q5fxpS5wQk1mwV1kug3BPWI0KzJjtxkMJ8iEtE Nefmg4pO55lrcCRLIkVPR3YbqgD5Xxm89XLYP687OJDPHTnkElLIVwA0ToqFWx2D QTN5MXP/wmN1GUhqpXRzxZ9T0grlAxKC+U/2AcoEDwDB2bcEbm7FzYLOr+B7YUa4 IFBPQdI9L2dZjuxgel11mlGOnJ+gFdBsBIDUUz1vo6xh73eMRvgJkyG8XN2iCcP5 0RARoVjbvO4ElxtGngJlpGw/VOc+rclDJ8blprbaWexBg6WriwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJGpk9IU6Vkvp7orhAdqKSP65VOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZmIz ODhkZi0xMzc2LTQzZTUtYWZkMC05MDdjZjdlMmQ3MWYvZGZiMzg4ZGYtMTM3Ni00 M2U1LWFmZDAtOTA3Y2Y3ZTJkNzFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGZiMzg4ZGYtMTM3Ni00M2U1LWFm ZDAtOTA3Y2Y3ZTJkNzFmL2RmYjM4OGRmLTEzNzYtNDNlNS1hZmQwLTkwN2NmN2Uy ZDcxZi5jcmwwHwYDVR0jBBgwFoAUa+kfmloOcwoBkKGIYmns9i2De+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZmIzODhkZi0xMzc2LTQzZTUtYWZkMC05MDdj ZjdlMmQ3MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARPr0QmtrrdWI6u7/Y/+LN uI2E2lfhcCHQqTuz5J82r5gwcnQCH7CtiF/xeImWmQhL/MAkVPmxw13PED/2r+wt kFS8FRLiK4gw37x1DZ0oY1Zb1irPn8dDsWlcIybQIZYfBXTwOugeEECEe5k6Djer Cxru5IpukF/KjDxuUmo2NfZsozY82K/5x3gIdhY13uXQvTDTsFNsUeN6oU/9biD7 1/wZ7Vcclbm0VvGa+xqQRe7+hI/e+JVMxgtKBn4tBu5P8w+HTheGmKJi/922r9I6 5mC6bfD+kcrRLkTpfNOAuUAyTgRgDtb54NSRSuHEszYCD2v/QdzA8PPBANqhnvm+ -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:49 2025 by rpki-client