$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft File: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft (raw, json) Hash identifier: EVhaWR0X+D9VETXd0hAaQpI7UfpqaHuVOgt1vD+//x0= Subject key identifier: B0:DA:E6:85:2B:28:03:AF:02:E0:AD:BD:E9:1C:F6:56:36:A4:DF:65 Authority key identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Certificate issuer: /CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Certificate serial: 010D0C9F4328584BBF4BF32324B4281C14738580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft Manifest number: 010D0C9F43285848C53917FE1122106FF0A38291 Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl (hash: eu+kpJUKof0EgfRczCkBo3iWYYkUBfMe6lEW1e73ulg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f3:23:24:b4:28:1c:14:73:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=7223fb91-3ee2-4eaf-bd91-a29ec3ee983c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:84:12:1f:3c:d5:f2:df:f4:0e:74:5c:78: 49:bd:4c:b9:39:7a:37:02:d7:19:ed:5c:ad:d0:3d: b2:36:b2:c5:13:7e:eb:dc:05:72:7c:4d:29:07:e3: 22:46:35:5f:79:14:a2:33:cd:28:94:fe:df:43:c0: 63:8c:14:7f:17:4e:5e:72:93:bb:7d:85:79:57:6e: 58:23:ab:5c:74:11:9e:b0:16:06:43:fc:28:6e:21: d5:3c:99:30:f3:bb:ec:5e:07:db:34:35:43:ea:39: db:c8:8e:cc:f2:77:7e:f5:e9:11:e4:eb:0e:63:fe: 3c:83:41:6f:e9:c8:fe:6e:0d:72:e8:94:2f:0b:76: cc:0c:4b:9e:75:0d:6d:2e:da:fb:61:8a:dc:63:45: 0d:38:64:d7:7b:11:a3:f4:65:23:cb:ee:51:05:6e: 31:23:95:af:e8:b9:f1:64:cd:97:c5:83:02:fa:ff: 0c:4a:94:56:99:6d:c5:4f:bc:48:7b:0d:1f:c8:94: ca:a4:d7:60:0f:a2:9a:c5:59:5f:92:83:fb:84:5b: 5b:c0:9e:04:c5:1a:bb:5b:c4:53:59:5e:0f:a2:9d: 2c:6f:72:ff:ac:41:7b:b5:e1:d5:fc:1e:5f:d3:5c: 97:e8:94:d1:5e:0c:5c:c0:6d:95:f9:1f:e5:dd:20: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:E6:85:2B:28:03:AF:02:E0:AD:BD:E9:1C:F6:56:36:A4:DF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.crl X509v3 Authority Key Identifier: keyid:00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2c:b7:c5:bd:12:63:48:0d:9e:4a:51:34:96:dc:2d:f6:60: 4b:47:09:0e:a8:39:fb:79:38:16:95:76:a9:88:b3:05:a4:b9: 50:5b:78:a7:07:0d:91:29:f7:24:e4:db:79:0a:92:81:c9:5a: b0:4d:07:56:47:37:25:c9:9d:e4:09:f2:da:93:12:e2:b1:f5: 2b:95:c2:ce:68:d8:33:0a:75:8d:12:13:b5:6d:48:34:62:b3: be:7f:25:db:16:45:2c:bd:b4:2f:58:d4:de:6a:ce:19:09:58: 0b:14:e8:c2:49:7d:83:a0:cd:0d:7b:8e:c3:f5:7c:79:ec:56: 70:88:13:0c:7b:66:c6:f2:67:f7:7f:37:6f:0f:13:e9:a9:68: 5d:cf:c9:5a:39:a7:8d:e7:03:85:bb:92:66:1c:c0:f6:ae:93: b9:25:38:37:cc:83:a3:0d:c5:5f:76:7b:f2:02:1f:ae:a3:d8: 3f:b5:f3:b4:22:e9:52:3b:f7:b2:da:d4:8a:9e:c3:e4:2e:87: f3:e8:7f:62:87:95:c6:a7:18:0f:3b:c1:69:71:82:4c:89:fe: 89:b6:43:3b:f9:4c:48:61:b8:5c:7d:88:1a:2c:18:55:14:99: 9d:6d:36:69:8a:06:af:24:70:e1:1c:a1:85:33:df:38:92:f3: 7f:34:4f:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/MjJLQoHBRzhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE1MDk3YzctOGIwOS00MWIxLTg5YzYtNjZmZDg0YTJj M2Y1MB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk NzIyM2ZiOTEtM2VlMi00ZWFmLWJkOTEtYTI5ZWMzZWU5ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jmEEh881fLf9A50XHhJvUy5OXo3AtcZ7Vyt 0D2yNrLFE37r3AVyfE0pB+MiRjVfeRSiM80olP7fQ8BjjBR/F05ecpO7fYV5V25Y I6tcdBGesBYGQ/wobiHVPJkw87vsXgfbNDVD6jnbyI7M8nd+9ekR5OsOY/48g0Fv 6cj+bg1y6JQvC3bMDEuedQ1tLtr7YYrcY0UNOGTXexGj9GUjy+5RBW4xI5Wv6Lnx ZM2XxYMC+v8MSpRWmW3FT7xIew0fyJTKpNdgD6KaxVlfkoP7hFtbwJ4ExRq7W8RT WV4Pop0sb3L/rEF7teHV/B5f01yX6JTRXgxcwG2V+R/l3SB2vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLDa5oUrKAOvAuCtvekc9lY2pN9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTUw OTdjNy04YjA5LTQxYjEtODljNi02NmZkODRhMmMzZjUvZGE1MDk3YzctOGIwOS00 MWIxLTg5YzYtNjZmZDg0YTJjM2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1MDk3YzctOGIwOS00MWIxLTg5 YzYtNjZmZDg0YTJjM2Y1L2RhNTA5N2M3LThiMDktNDFiMS04OWM2LTY2ZmQ4NGEy YzNmNS5jcmwwHwYDVR0jBBgwFoAUAMxSYW0wOfvSQS9/ZNV+f4yfFtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZk ODRhMmMzZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4LLfFvRJjSA2eSlE0ltwt 9mBLRwkOqDn7eTgWlXapiLMFpLlQW3inBw2RKfck5Nt5CpKByVqwTQdWRzclyZ3k CfLakxLisfUrlcLOaNgzCnWNEhO1bUg0YrO+fyXbFkUsvbQvWNTeas4ZCVgLFOjC SX2DoM0Ne47D9Xx57FZwiBMMe2bG8mf3fzdvDxPpqWhdz8laOaeN5wOFu5JmHMD2 rpO5JTg3zIOjDcVfdnvyAh+uo9g/tfO0IulSO/ey2tSKnsPkLofz6H9ih5XGpxgP O8FpcYJMif6JtkM7+UxIYbhcfYgaLBhVFJmdbTZpigavJHDhHKGFM984kvN/NE9A -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:29 2025 by rpki-client