$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.mft File: 2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.mft (raw, json) Hash identifier: 36H7/YO3tL5z1WG+Ip5vOwD+zM9s+nfhB80foVGIgTM= Subject key identifier: 90:29:F1:2A:4B:A7:0F:3C:69:C9:D3:8E:5E:DB:8A:C8:D9:5A:2D:81 Authority key identifier: 66:BD:FF:B3:A9:BB:A2:81:D4:5E:E8:B4:A2:E3:8C:BA:04:61:76:C4 Certificate issuer: /CN=2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3 Certificate serial: 010D0C9F4328584BC075C35E27AD3DF9A8E7BA10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.mft Manifest number: 010D0C9F432858490681C9BA6BAACD0F60B4A67A Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.crl (hash: VPIXOOcrcaO4PvjedFUl5Ak0ILOy6Qnjeu50e+DgAeg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:5e:27:ad:3d:f9:a8:e7:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=bc7d04fa-eb03-4b91-9422-8983e9a2fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3b:96:13:ce:8b:46:48:9b:0c:81:45:47:e2: 4e:11:96:37:19:6c:e4:88:b9:89:0f:8a:73:1a:84: 19:ac:62:a6:46:6a:c1:c3:de:93:ed:81:31:18:47: bc:ec:30:aa:8e:ef:96:d5:6b:d9:68:46:ab:72:a4: d7:6c:ab:93:0e:45:a4:71:86:09:ca:85:d4:dd:a0: e8:9f:ec:73:e7:21:ae:e0:36:82:98:a6:4e:7b:e2: 7e:13:88:61:ef:0d:4c:09:b1:85:61:40:79:89:c9: 03:43:89:f4:6e:10:c3:5d:5c:5d:7b:44:f4:29:0f: b3:80:43:e0:11:5a:f5:87:38:bb:01:38:53:98:95: d7:7c:a0:d6:3c:6d:42:8b:5d:7f:57:e9:f5:a6:13: e7:fc:14:1f:9f:2f:68:12:25:b8:5c:0a:a2:d4:2a: d3:ce:2d:48:4f:3c:a5:e2:ff:31:94:48:6d:a9:89: b7:58:4d:93:f6:d6:9d:ee:da:7e:45:06:a9:72:f1: e5:50:17:b3:0b:be:d0:ab:0b:cc:37:51:a6:c6:c6: 64:9f:8b:fd:94:f1:6e:40:b5:ab:a6:20:33:79:cf: 87:7c:ca:d2:14:0f:25:46:ea:80:3c:d8:8d:67:c2: 5c:bc:62:24:a9:22:04:2d:17:cd:c6:f7:64:e5:36: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:29:F1:2A:4B:A7:0F:3C:69:C9:D3:8E:5E:DB:8A:C8:D9:5A:2D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.crl X509v3 Authority Key Identifier: keyid:66:BD:FF:B3:A9:BB:A2:81:D4:5E:E8:B4:A2:E3:8C:BA:04:61:76:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d472a06-10d7-4e1f-a1ca-0ac2632ac2f3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:54:f2:34:8e:99:c5:52:cd:03:42:c5:c7:02:fe:ac:23:01: bc:e9:da:b3:ed:f3:6f:c0:57:ee:06:77:93:60:63:ca:06:0d: c4:35:73:14:db:07:42:1a:6e:e5:ea:21:40:38:2d:98:9a:77: d7:49:e1:a6:e3:a8:0e:10:47:13:4c:c8:96:d1:cc:2e:4b:a8: 83:b6:0e:28:b0:95:45:c6:96:9c:7b:fd:aa:9a:a7:79:13:38: 3d:2d:4d:15:8e:2a:ed:61:9e:2a:6a:da:c5:23:f0:fc:1e:53: 7c:ee:a8:31:58:67:9a:6c:55:a6:2b:73:e1:66:40:84:b0:90: 8f:c8:3d:cc:df:f7:50:b8:ca:bb:0d:5e:45:d0:da:50:5f:e1: 70:a3:11:f8:16:be:f2:1c:08:09:18:72:a8:9a:0f:06:29:2f: 16:b3:de:6e:4e:0e:6a:5e:23:07:ae:e8:48:6c:6b:36:d3:57: a2:85:09:3a:c1:bb:27:34:af:b4:59:1c:26:20:77:e5:72:81: a7:56:28:f2:5c:65:d4:e6:d0:8f:b7:c2:e3:64:fb:35:8a:24: a0:0a:01:8b:02:25:bd:90:27:a3:ee:7f:c6:70:9f:94:e3:a0: 08:4c:0a:69:67:51:76:e3:76:75:d4:aa:0e:89:17:81:d6:16: 46:38:9b:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcNeJ609+ajnuhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NzJhMDYtMTBkNy00ZTFmLWExY2EtMGFjMjYzMmFj MmYzMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk YmM3ZDA0ZmEtZWIwMy00YjkxLTk0MjItODk4M2U5YTJmYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDuWE86LRkibDIFFR+JOEZY3GWzkiLmJD4pz GoQZrGKmRmrBw96T7YExGEe87DCqju+W1WvZaEarcqTXbKuTDkWkcYYJyoXU3aDo n+xz5yGu4DaCmKZOe+J+E4hh7w1MCbGFYUB5ickDQ4n0bhDDXVxde0T0KQ+zgEPg EVr1hzi7AThTmJXXfKDWPG1Ci11/V+n1phPn/BQfny9oEiW4XAqi1CrTzi1ITzyl 4v8xlEhtqYm3WE2T9tad7tp+RQapcvHlUBezC77QqwvMN1GmxsZkn4v9lPFuQLWr piAzec+HfMrSFA8lRuqAPNiNZ8JcvGIkqSIELRfNxvdk5TZo4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJAp8SpLpw88acnTjl7bisjZWi2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDQ3 MmEwNi0xMGQ3LTRlMWYtYTFjYS0wYWMyNjMyYWMyZjMvMmQ0NzJhMDYtMTBkNy00 ZTFmLWExY2EtMGFjMjYzMmFjMmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ0NzJhMDYtMTBkNy00ZTFmLWEx Y2EtMGFjMjYzMmFjMmYzLzJkNDcyYTA2LTEwZDctNGUxZi1hMWNhLTBhYzI2MzJh YzJmMy5jcmwwHwYDVR0jBBgwFoAUZr3/s6m7ooHUXui0ouOMugRhdsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDQ3MmEwNi0xMGQ3LTRlMWYtYTFjYS0wYWMy NjMyYWMyZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRVPI0jpnFUs0DQsXHAv6s IwG86dqz7fNvwFfuBneTYGPKBg3ENXMU2wdCGm7l6iFAOC2YmnfXSeGm46gOEEcT TMiW0cwuS6iDtg4osJVFxpace/2qmqd5Ezg9LU0VjirtYZ4qatrFI/D8HlN87qgx WGeabFWmK3PhZkCEsJCPyD3M3/dQuMq7DV5F0NpQX+FwoxH4Fr7yHAgJGHKomg8G KS8Ws95uTg5qXiMHruhIbGs201eihQk6wbsnNK+0WRwmIHflcoGnVijyXGXU5tCP t8LjZPs1iiSgCgGLAiW9kCej7n/GcJ+U46AITAppZ1F243Z11KoOiReB1hZGOJui -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:05 2025 by rpki-client