$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft File: f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft (raw, json) Hash identifier: yPq4QgwGmplfgq1Su/h11TAlXHVfn1sRcuNeDUYZufA= Subject key identifier: AB:67:B5:CF:E9:32:C7:12:62:B9:0B:5B:FC:EB:2C:BE:8D:B8:C5:F0 Authority key identifier: 79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 Certificate issuer: /CN=f421b0e5-f1f1-43bc-9512-cc17251b2b77 Certificate serial: 010D0C9F4328584BBFC30C5B69EDE192BE40FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft Manifest number: 010D0C9F4328584378DFC540DD075196E427AF17 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: f421b0e5-f1f1-43bc-9512-cc17251b2b77.crl (hash: xeZu8XjAkGHjYZiQ4VLM25rfMMGXBexDwmO5s4iWiCw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0c:5b:69:ed:e1:92:be:40:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f421b0e5-f1f1-43bc-9512-cc17251b2b77 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=bc572914-f896-4ce1-90a6-a205e13d6f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:04:45:3a:0d:d8:71:e5:00:45:73:10:1a: 26:3a:0f:51:9e:db:85:8b:d4:be:1b:d2:b2:e0:2d: 60:b7:a4:53:2f:07:78:e7:87:c2:d4:20:05:d6:7c: 14:91:97:c7:e6:c6:31:14:52:a3:d8:70:6a:16:73: bb:c5:8e:00:28:e7:40:01:a3:e9:3c:c7:96:0e:4f: ab:ff:0d:d2:02:fb:b4:4f:ca:b7:ac:93:f5:b9:d5: a5:7c:4a:2c:ca:e5:da:73:c1:45:76:bc:24:22:21: 39:87:5c:28:9f:80:3c:be:00:2a:b8:03:4f:90:d6: bc:af:5d:cd:2c:18:00:a2:ef:3b:f7:76:3c:d6:c5: 97:84:a2:fd:bf:b1:7e:5f:c6:a7:b0:24:36:e8:4f: 20:5e:fc:24:1e:10:86:f0:ed:50:fc:8d:5e:d9:cf: 1b:ef:66:77:31:5c:42:b6:6c:e2:ba:9a:40:8d:05: 63:1f:a5:cd:39:bf:8d:f9:7c:e2:e6:5f:d3:49:98: fc:81:64:40:6a:ae:8c:05:4a:b8:c2:a7:cf:3e:4f: 1d:19:e7:5a:c4:22:a9:df:71:1b:32:65:63:37:65: 13:a2:dc:a0:c7:06:05:17:12:6d:a6:24:57:8f:9d: 61:d9:86:3f:9b:c0:b0:2c:d8:51:d0:be:1d:95:c0: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:B5:CF:E9:32:C7:12:62:B9:0B:5B:FC:EB:2C:BE:8D:B8:C5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.crl X509v3 Authority Key Identifier: keyid:79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9d:de:ca:17:8d:6e:98:be:e1:bd:f2:84:6f:cc:e5:85:38: 25:f9:3a:8a:14:a5:8f:fe:1e:84:9f:80:9d:d3:8e:ec:c8:e3: 68:1e:0d:3f:e0:b2:a4:27:3e:28:67:4d:03:41:54:8f:af:f5: 81:47:ab:f8:74:0d:22:90:b2:33:3e:c4:89:f2:b2:54:f6:ed: 23:a3:e5:85:df:cb:b5:7f:97:9e:2b:0b:03:e0:32:35:06:95: 45:d6:dc:2a:61:7e:8d:3f:51:3a:1d:39:5a:6e:54:57:88:25: b6:32:ff:a7:d3:81:2f:02:2d:ac:4f:6a:ce:75:ff:6e:bc:36: cb:9b:b6:39:ef:d8:85:68:9a:70:79:47:7d:64:10:7c:30:20: 8a:9f:19:00:06:4e:ad:85:f1:9a:0c:ed:86:52:1e:0f:a0:d0: 34:35:5e:e5:61:b8:ee:97:89:0d:ca:7a:43:75:41:c6:87:50: c7:0a:71:e1:38:02:e8:72:e8:f9:64:e6:bf:79:82:93:83:15: c8:24:4e:5e:3e:a3:38:d4:7c:f4:12:bb:92:98:46:61:f8:e4: e9:52:c4:6c:63:36:a6:c8:4f:e9:57:8c:81:bc:28:d3:a4:91: 15:d7:3e:66:2d:5c:46:fe:a1:1c:47:c5:71:08:67:3d:78:90: 59:1e:4f:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wwxbae3hkr5A/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQyMWIwZTUtZjFmMS00M2JjLTk1MTItY2MxNzI1MWIy Yjc3MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk YmM1NzI5MTQtZjg5Ni00Y2UxLTkwYTYtYTIwNWUxM2Q2ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW4ERToN2HHlAEVzEBomOg9RntuFi9S+G9Ky 4C1gt6RTLwd454fC1CAF1nwUkZfH5sYxFFKj2HBqFnO7xY4AKOdAAaPpPMeWDk+r /w3SAvu0T8q3rJP1udWlfEosyuXac8FFdrwkIiE5h1won4A8vgAquANPkNa8r13N LBgAou8793Y81sWXhKL9v7F+X8ansCQ26E8gXvwkHhCG8O1Q/I1e2c8b72Z3MVxC tmziuppAjQVjH6XNOb+N+Xzi5l/TSZj8gWRAaq6MBUq4wqfPPk8dGedaxCKp33Eb MmVjN2UTotygxwYFFxJtpiRXj51h2YY/m8CwLNhR0L4dlcBEiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKtntc/pMscSYrkLW/zrLL6NuMXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mNDIx YjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3MjUxYjJiNzcvZjQyMWIwZTUtZjFmMS00 M2JjLTk1MTItY2MxNzI1MWIyYjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjQyMWIwZTUtZjFmMS00M2JjLTk1 MTItY2MxNzI1MWIyYjc3L2Y0MjFiMGU1LWYxZjEtNDNiYy05NTEyLWNjMTcyNTFi MmI3Ny5jcmwwHwYDVR0jBBgwFoAUeQODK0dVC98Kt5Lvms6TE/VdIagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mNDIxYjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3 MjUxYjJiNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGnd7KF41umL7hvfKEb8zl hTgl+TqKFKWP/h6En4Cd047syONoHg0/4LKkJz4oZ00DQVSPr/WBR6v4dA0ikLIz PsSJ8rJU9u0jo+WF38u1f5eeKwsD4DI1BpVF1twqYX6NP1E6HTlablRXiCW2Mv+n 04EvAi2sT2rOdf9uvDbLm7Y579iFaJpweUd9ZBB8MCCKnxkABk6thfGaDO2GUh4P oNA0NV7lYbjul4kNynpDdUHGh1DHCnHhOALocuj5ZOa/eYKTgxXIJE5ePqM41Hz0 EruSmEZh+OTpUsRsYzamyE/pV4yBvCjTpJEV1z5mLVxG/qEcR8VxCGc9eJBZHk8u -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:43 2025 by rpki-client