$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft File: 85dd82c5-5f88-45b7-afc5-f84290d7414a.mft (raw, json) Hash identifier: 4a+yGZvUYlKdOsnQiLoahm1SDy5TtD3+CqqxbXr45D8= Subject key identifier: A3:93:F0:11:01:72:44:53:C0:DF:36:8B:26:8A:6D:EE:8C:A9:B0:80 Authority key identifier: 9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B Certificate issuer: /CN=85dd82c5-5f88-45b7-afc5-f84290d7414a Certificate serial: 010D0C9F4328584BBFA55319100DCA1E0E8E74F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft Manifest number: 010D0C9F4328584961F3A94059FF7CE927490B59 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 85dd82c5-5f88-45b7-afc5-f84290d7414a.crl (hash: dRF8XsWZw5YgUmbMmdIVEuHyXKekB4R5Brl1TnO/Xpg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:19:10:0d:ca:1e:0e:8e:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85dd82c5-5f88-45b7-afc5-f84290d7414a Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=95c50bb1-dd5c-469e-92c0-e1b83e6a4d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:9c:77:7c:ef:7c:c7:95:c8:3a:dc:07:1e: ad:3f:75:78:fe:a6:d8:75:44:86:62:af:3e:3f:89: 9f:40:09:bc:6d:e3:75:f7:28:03:10:3c:fa:8e:b2: 17:57:27:d7:4c:73:87:79:14:1f:9e:d2:32:b0:cd: 0b:c5:96:49:7a:42:39:3d:72:99:c6:6e:8c:98:f2: 1e:22:89:f5:9b:a6:2d:5e:43:23:e7:a1:f9:2a:cf: 54:0a:d8:64:61:42:62:36:a4:1a:65:1f:5f:90:a3: 5d:48:ef:b3:cd:10:2e:f2:5d:01:d6:11:d9:07:31: 74:71:7b:c1:04:96:b5:af:77:2e:13:76:2e:01:95: 62:74:e3:b1:31:1b:56:c6:a2:36:74:52:d9:4a:91: 1d:63:33:86:94:1c:d0:6e:b4:b7:ed:5b:d9:11:24: df:a0:6d:05:2c:9b:e7:5b:fe:d4:cb:98:68:8b:94: 48:2c:09:77:7f:ee:f3:3e:cf:9d:f4:0c:96:97:d3: d2:03:9e:dd:a9:89:89:da:f9:b1:05:31:61:87:f1: f9:a4:f6:af:9d:a1:86:5b:57:7b:0a:d3:42:c9:b0: 22:45:2b:7b:fe:6c:0e:d8:ce:20:9c:a2:98:a7:23: 21:f3:62:b8:ff:20:55:5e:28:17:6b:b4:a8:ea:06: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:93:F0:11:01:72:44:53:C0:DF:36:8B:26:8A:6D:EE:8C:A9:B0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.crl X509v3 Authority Key Identifier: keyid:9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3a:0b:7e:a9:6c:eb:e2:e3:9b:9e:2b:63:62:73:7c:e1:66: ff:69:28:56:5a:7e:03:c9:6f:08:22:ce:ba:82:4d:0f:09:81: 34:9d:c1:f5:09:49:76:67:a7:a6:a5:5d:8a:d4:e7:02:6e:2a: f6:41:75:9e:d3:d6:fb:67:0b:d4:76:de:07:f0:0f:62:f3:69: 33:96:ea:ca:4d:7d:74:c5:7c:29:80:0e:0f:77:8d:d0:c4:72: 0c:51:a0:cc:36:3c:1d:b7:09:7b:e3:4e:44:ba:8d:b6:cc:44: 7b:bd:ac:7b:23:69:6f:0a:bf:83:9e:b8:6b:08:32:08:e6:65: 0c:1e:46:7d:45:fa:2b:94:f2:2e:b5:2a:34:da:b8:a1:fb:ee: 0a:61:9a:ec:07:4f:9f:19:4b:41:55:e1:79:22:38:fc:9c:31: 64:90:da:cb:bc:62:31:cd:74:38:f5:3f:49:4f:fd:25:43:98: c0:af:28:ab:b4:a9:54:bd:c3:7d:2d:1b:d4:b2:0a:14:b0:94: 2c:4f:ea:67:85:94:49:f4:95:af:3e:59:42:7e:95:dc:f6:7a: 3e:4e:8b:aa:bc:33:b1:19:69:72:1a:bc:ef:d3:4f:dc:01:c0: 53:02:f4:fb:7f:a0:4a:92:88:d2:98:d6:65:1a:bf:16:43:e5: 05:f6:1d:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVMZEA3KHg6OdPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVkZDgyYzUtNWY4OC00NWI3LWFmYzUtZjg0MjkwZDc0 MTRhMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk OTVjNTBiYjEtZGQ1Yy00NjllLTkyYzAtZTFiODNlNmE0ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkCcd3zvfMeVyDrcBx6tP3V4/qbYdUSGYq8+ P4mfQAm8beN19ygDEDz6jrIXVyfXTHOHeRQfntIysM0LxZZJekI5PXKZxm6MmPIe Ion1m6YtXkMj56H5Ks9UCthkYUJiNqQaZR9fkKNdSO+zzRAu8l0B1hHZBzF0cXvB BJa1r3cuE3YuAZVidOOxMRtWxqI2dFLZSpEdYzOGlBzQbrS37VvZESTfoG0FLJvn W/7Uy5hoi5RILAl3f+7zPs+d9AyWl9PSA57dqYmJ2vmxBTFhh/H5pPavnaGGW1d7 CtNCybAiRSt7/mwO2M4gnKKYpyMh82K4/yBVXigXa7So6gZEIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKOT8BEBckRTwN82iyaKbe6MqbCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWRk ODJjNS01Zjg4LTQ1YjctYWZjNS1mODQyOTBkNzQxNGEvODVkZDgyYzUtNWY4OC00 NWI3LWFmYzUtZjg0MjkwZDc0MTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVkZDgyYzUtNWY4OC00NWI3LWFm YzUtZjg0MjkwZDc0MTRhLzg1ZGQ4MmM1LTVmODgtNDViNy1hZmM1LWY4NDI5MGQ3 NDE0YS5jcmwwHwYDVR0jBBgwFoAUntDOKQVS5OllcgNcNGoAtr5D80swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWRkODJjNS01Zjg4LTQ1YjctYWZjNS1mODQy OTBkNzQxNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHOgt+qWzr4uObnitjYnN8 4Wb/aShWWn4DyW8IIs66gk0PCYE0ncH1CUl2Z6empV2K1OcCbir2QXWe09b7ZwvU dt4H8A9i82kzlurKTX10xXwpgA4Pd43QxHIMUaDMNjwdtwl7405Euo22zER7vax7 I2lvCr+DnrhrCDII5mUMHkZ9RforlPIutSo02rih++4KYZrsB0+fGUtBVeF5Ijj8 nDFkkNrLvGIxzXQ49T9JT/0lQ5jAryirtKlUvcN9LRvUsgoUsJQsT+pnhZRJ9JWv PllCfpXc9no+TouqvDOxGWlyGrzv00/cAcBTAvT7f6BKkojSmNZlGr8WQ+UF9h2S -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:40 2025 by rpki-client