$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft File: 31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft (raw, json) Hash identifier: WbcVNZmYPc0Dt2cO1aeD4Wlgkm5Cl/KIopjBYHXee+g= Subject key identifier: BC:AE:7D:4C:A3:5E:B2:EC:33:F6:19:11:81:4C:8A:4B:51:C5:67:75 Authority key identifier: 06:A3:22:13:09:A1:78:C0:9D:D9:6E:83:88:C8:AB:91:19:7B:DF:0D Certificate issuer: /CN=31ef5a98-3668-4f92-93d2-2a6fa75f2b3d Certificate serial: 010D0C9F4328584BBFC30CE262AC6782E88B1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft Manifest number: 010D0C9F43285841E411959AE6C92D2FAB122288 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl (hash: L+sg2kPoh9Trcc2ssarYgl/kfOCDyljfDR7GWbQmoRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0c:e2:62:ac:67:82:e8:8b:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ef5a98-3668-4f92-93d2-2a6fa75f2b3d Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=7dd38917-640f-479d-8d66-cff592def669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:cb:2a:b2:8c:fd:a7:a8:e0:af:d6:e3:26: f8:bd:1f:1c:d1:08:5f:d4:b9:66:d3:df:1d:a5:94: e3:73:1e:2c:15:8d:9d:51:2e:6f:01:17:15:97:cc: 69:13:f9:a9:a2:f0:f0:ff:36:6b:ad:f7:87:24:4a: 09:bb:ce:ae:ee:fb:b9:25:4f:2d:ac:36:f5:4c:a5: db:c5:84:eb:2d:1c:7c:06:9b:38:7f:2c:df:8a:14: 85:ed:c5:91:bd:c3:5a:69:7c:82:48:b5:97:2f:b3: e5:3b:16:f0:84:f2:51:9c:4c:c8:35:53:f2:2c:b7: 25:df:93:c5:b1:6a:30:6c:03:ff:0e:6c:fc:80:21: 35:0e:93:ab:df:b8:52:9c:12:b2:cf:1d:00:9f:50: 9a:ca:bf:21:38:59:a7:1a:03:cb:54:32:94:00:6f: 55:fd:e8:52:4d:c3:e5:7c:c4:ec:96:78:3d:10:04: 5c:22:07:53:8d:ef:cc:21:d0:e7:77:c5:b2:bd:d9: 01:8a:d2:ba:a9:91:d3:e5:29:23:e2:18:18:32:5d: e6:93:61:9d:6a:48:36:be:ed:08:2d:03:63:71:81: 74:2c:b5:03:ba:b2:65:02:84:3a:a3:57:05:1b:3c: 9a:fe:d3:be:30:14:67:01:4e:2e:d3:fd:7d:cc:20: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AE:7D:4C:A3:5E:B2:EC:33:F6:19:11:81:4C:8A:4B:51:C5:67:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.crl X509v3 Authority Key Identifier: keyid:06:A3:22:13:09:A1:78:C0:9D:D9:6E:83:88:C8:AB:91:19:7B:DF:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/31ef5a98-3668-4f92-93d2-2a6fa75f2b3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c9:d8:00:f7:df:5a:14:f1:8f:31:40:a4:67:b1:5f:f7:30: 2b:54:2d:cd:b6:fd:ae:80:38:53:e8:de:35:33:6b:d3:4c:93: 80:fc:dd:96:0f:76:f0:ab:ec:42:53:a4:da:e7:60:97:b3:e0: 00:69:93:80:c2:18:38:2f:a5:c7:15:75:d4:a4:71:20:81:fd: 83:8f:5f:82:19:e6:d2:cb:66:8e:77:b7:f8:66:9f:dd:8a:43: 68:17:05:02:30:dc:19:16:af:23:a0:f3:cd:34:6c:be:24:2e: b9:c5:6b:de:30:4e:43:da:f5:6b:f5:49:7d:e8:f4:71:15:9e: 86:3a:4c:14:41:42:22:c8:ed:96:13:1a:bf:d4:c3:ae:1c:6d: d5:44:69:af:4d:87:d5:54:a6:37:c2:4d:86:fc:ed:2c:de:84: d4:c0:91:fc:e6:9e:6c:eb:17:f6:29:cb:58:2f:16:b4:3f:82: 32:e8:05:e2:5b:16:94:89:ba:70:6c:43:7f:7e:ee:cf:5f:81: 85:4b:67:af:a7:cd:82:45:4b:8a:d4:3c:72:40:88:b9:f8:c6: ca:7c:3e:4d:94:e5:90:46:3f:68:35:01:97:92:23:d8:08:46: 9b:b9:45:6f:24:2c:aa:11:20:43:3b:6e:d1:51:41:ea:68:86: 34:68:e5:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wwziYqxnguiLGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFlZjVhOTgtMzY2OC00ZjkyLTkzZDItMmE2ZmE3NWYy YjNkMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk N2RkMzg5MTctNjQwZi00NzlkLThkNjYtY2ZmNTkyZGVmNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0zLKrKM/aeo4K/W4yb4vR8c0Qhf1Llm098d pZTjcx4sFY2dUS5vARcVl8xpE/mpovDw/zZrrfeHJEoJu86u7vu5JU8trDb1TKXb xYTrLRx8Bps4fyzfihSF7cWRvcNaaXyCSLWXL7PlOxbwhPJRnEzINVPyLLcl35PF sWowbAP/Dmz8gCE1DpOr37hSnBKyzx0An1Cayr8hOFmnGgPLVDKUAG9V/ehSTcPl fMTslng9EARcIgdTje/MIdDnd8WyvdkBitK6qZHT5Skj4hgYMl3mk2Gdakg2vu0I LQNjcYF0LLUDurJlAoQ6o1cFGzya/tO+MBRnAU4u0/19zCCgjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLyufUyjXrLsM/YZEYFMiktRxWd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMWVm NWE5OC0zNjY4LTRmOTItOTNkMi0yYTZmYTc1ZjJiM2QvMzFlZjVhOTgtMzY2OC00 ZjkyLTkzZDItMmE2ZmE3NWYyYjNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzFlZjVhOTgtMzY2OC00ZjkyLTkz ZDItMmE2ZmE3NWYyYjNkLzMxZWY1YTk4LTM2NjgtNGY5Mi05M2QyLTJhNmZhNzVm MmIzZC5jcmwwHwYDVR0jBBgwFoAUBqMiEwmheMCd2W6DiMirkRl73w0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMWVmNWE5OC0zNjY4LTRmOTItOTNkMi0yYTZm YTc1ZjJiM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqydgA999aFPGPMUCkZ7Ff 9zArVC3Ntv2ugDhT6N41M2vTTJOA/N2WD3bwq+xCU6Ta52CXs+AAaZOAwhg4L6XH FXXUpHEggf2Dj1+CGebSy2aOd7f4Zp/dikNoFwUCMNwZFq8joPPNNGy+JC65xWve ME5D2vVr9Ul96PRxFZ6GOkwUQUIiyO2WExq/1MOuHG3VRGmvTYfVVKY3wk2G/O0s 3oTUwJH85p5s6xf2KctYLxa0P4Iy6AXiWxaUibpwbEN/fu7PX4GFS2evp82CRUuK 1DxyQIi5+MbKfD5NlOWQRj9oNQGXkiPYCEabuUVvJCyqESBDO27RUUHqaIY0aOVl -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:47 2025 by rpki-client