$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft File: 081bd66e-b1d1-405a-8a32-c830ec790ce5.mft (raw, json) Hash identifier: fK084GchTeY4EGVnLK5M8Q/JE75ep3vrB99v8G0XAv4= Subject key identifier: 01:73:EA:9B:76:B5:0D:D2:99:9E:AF:23:58:30:2B:55:0E:62:09:7B Authority key identifier: 70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 Certificate issuer: /CN=081bd66e-b1d1-405a-8a32-c830ec790ce5 Certificate serial: 010D0C9F4328584BBEB717807518D4B717BEE400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft Manifest number: 010D0C9F43285843D4013DEE5DBCE74AE6F1F318 Signing time: Tue 04 Nov 2025 06:00:08 +0000 Manifest this update: Tue 04 Nov 2025 06:00:08 +0000 Manifest next update: Fri 07 Nov 2025 06:00:00 +0000 Files and hashes: 1: 081bd66e-b1d1-405a-8a32-c830ec790ce5.crl (hash: tbvyeo+DurSCSVRflezisAuz+2kM3qSRa7IZMPtNZcA=) 2: 9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer (hash: yGu77U+OWGUyfXd8bYcezHuA1wT0EXdubbJ7ufL3xRQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:b7:17:80:75:18:d4:b7:17:be:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081bd66e-b1d1-405a-8a32-c830ec790ce5 Validity Not Before: Nov 4 06:00:08 2025 GMT Not After : Nov 7 06:00:00 2025 GMT Subject: CN=7a0e6e92-4dd3-4ccc-9652-fa66398309f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:b6:17:a4:3a:e1:c9:de:3e:f5:88:c4:ff: 94:ab:65:ef:d4:04:af:b7:93:52:e7:c9:9f:f7:d3: 4a:d6:46:58:65:5e:0b:56:99:b8:10:15:c1:ef:65: 62:8a:fa:5e:43:07:32:fc:41:c8:0f:55:04:7e:78: 1e:88:e7:bd:05:e1:0f:1d:c8:ac:85:fe:e7:cd:c2: bd:77:80:89:7b:f7:60:aa:23:63:5e:b6:da:50:a7: cc:db:71:be:11:40:28:35:27:c9:bf:f6:dc:61:f2: e9:d7:d8:14:a2:a8:6b:d0:bb:7a:ff:1c:2d:8e:a8: ff:31:c9:9e:10:84:c2:46:d3:3b:af:b1:82:51:c7: 0e:56:8a:13:e6:2b:86:51:4b:6b:27:d2:34:74:c4: 51:f5:b3:92:4b:0f:1a:01:72:09:b9:e1:d9:13:98: 9d:ab:ea:e7:3a:c8:2a:69:16:f5:5a:f3:81:d5:78: bf:17:ad:21:7b:2c:45:29:c7:fd:7c:7c:3c:2c:dd: cc:02:9e:e6:73:04:d7:83:81:30:2c:f5:01:9c:1d: ee:23:12:20:b5:26:95:ea:e4:65:e0:0a:d3:dc:4e: 03:43:c4:30:4c:c3:56:36:25:d3:3c:51:d3:1c:be: d5:8a:48:c1:cf:4f:d6:23:fa:f0:7a:5d:1d:b6:46: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:73:EA:9B:76:B5:0D:D2:99:9E:AF:23:58:30:2B:55:0E:62:09:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl X509v3 Authority Key Identifier: keyid:70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8a:cb:57:34:af:58:dd:3d:c2:f1:18:3c:5f:46:f1:38:0f: b5:38:80:74:04:4d:af:9a:c2:ae:bd:59:c3:11:be:dc:1a:8a: 6c:9e:04:34:77:1a:4e:c6:78:b6:cb:9d:01:e2:64:4f:09:b4: d8:59:2c:d0:a4:be:06:86:29:79:ce:c4:b8:4f:69:44:67:ed: ee:f8:68:bd:41:ab:0b:3b:25:4f:fb:ef:36:98:ef:9a:c0:44: 59:71:f4:a7:5e:b6:4a:38:92:0c:f8:35:8c:c3:06:77:2e:09: b1:50:02:69:14:e3:65:0f:47:06:f9:20:b0:5b:4e:d9:92:d7: 82:62:77:8f:5a:63:aa:39:7e:d1:71:fe:7e:d5:89:36:f7:e2: 3d:1f:e0:0f:ad:23:06:97:e2:2f:29:6b:d9:96:08:52:da:b7: 21:c2:5e:a1:21:2e:0a:4f:31:de:a4:dc:c9:80:76:b2:93:33: 5a:e7:2c:f5:58:25:e9:b5:1c:db:e2:e0:52:cc:4f:b4:22:3f: 4f:08:07:73:87:22:6f:95:9e:68:c0:41:f2:cc:24:26:0e:d4: ca:81:a6:c2:5d:4a:91:24:dd:06:81:6c:c4:cf:07:7d:93:2d: a1:0f:86:50:25:f6:e6:1d:dc:2d:5c:97:bb:26:16:58:81:2a: 61:b6:f2:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+txeAdRjUtxe+5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgxYmQ2NmUtYjFkMS00MDVhLThhMzItYzgzMGVjNzkw Y2U1MB4XDTI1MTEwNDA2MDAwOFoXDTI1MTEwNzA2MDAwMFowLzEtMCsGA1UEAxMk N2EwZTZlOTItNGRkMy00Y2NjLTk2NTItZmE2NjM5ODMwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9O2F6Q64cnePvWIxP+Uq2Xv1ASvt5NS58mf 99NK1kZYZV4LVpm4EBXB72ViivpeQwcy/EHID1UEfngeiOe9BeEPHcishf7nzcK9 d4CJe/dgqiNjXrbaUKfM23G+EUAoNSfJv/bcYfLp19gUoqhr0Lt6/xwtjqj/Mcme EITCRtM7r7GCUccOVooT5iuGUUtrJ9I0dMRR9bOSSw8aAXIJueHZE5idq+rnOsgq aRb1WvOB1Xi/F60heyxFKcf9fHw8LN3MAp7mcwTXg4EwLPUBnB3uIxIgtSaV6uRl 4ArT3E4DQ8QwTMNWNiXTPFHTHL7VikjBz0/WI/rwel0dtkbvFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFz6pt2tQ3SmZ6vI1gwK1UOYgl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wODFi ZDY2ZS1iMWQxLTQwNWEtOGEzMi1jODMwZWM3OTBjZTUvMDgxYmQ2NmUtYjFkMS00 MDVhLThhMzItYzgzMGVjNzkwY2U1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDgxYmQ2NmUtYjFkMS00MDVhLThh MzItYzgzMGVjNzkwY2U1LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5 MGNlNS5jcmwwHwYDVR0jBBgwFoAUcM9aI1UM8a7PwzOo3zcEs88N/jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wODFiZDY2ZS1iMWQxLTQwNWEtOGEzMi1jODMw ZWM3OTBjZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3istXNK9Y3T3C8Rg8X0bx OA+1OIB0BE2vmsKuvVnDEb7cGopsngQ0dxpOxni2y50B4mRPCbTYWSzQpL4Ghil5 zsS4T2lEZ+3u+Gi9QasLOyVP++82mO+awERZcfSnXrZKOJIM+DWMwwZ3LgmxUAJp FONlD0cG+SCwW07ZkteCYnePWmOqOX7Rcf5+1Yk29+I9H+APrSMGl+IvKWvZlghS 2rchwl6hIS4KTzHepNzJgHaykzNa5yz1WCXptRzb4uBSzE+0Ij9PCAdzhyJvlZ5o wEHyzCQmDtTKgabCXUqRJN0GgWzEzwd9ky2hD4ZQJfbmHdwtXJe7JhZYgSphtvK8 -----END CERTIFICATE-----Generated at Tue Nov 4 23:39:46 2025 by rpki-client