$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft File: 9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft (raw, json) Hash identifier: 0Cdnrm48zsf8REpD5vWlXMOubFTT62tyWlhhGazFcEM= Subject key identifier: FA:BF:E9:DA:7C:0D:DE:72:3C:F4:02:48:D8:4C:FD:B2:05:E6:9A:4B Authority key identifier: B1:3A:47:F5:BA:47:C0:64:69:5C:E7:D8:07:49:CE:B7:69:A6:73:2D Certificate issuer: /CN=9681c311-90a2-4cfa-9ad0-e1185cd22f1d Certificate serial: 010D0C9F4328584BC09381F2D17B666392C6BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft Manifest number: 010D0C9F4328584073A82B52917758A48D80DC0C Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 9681c311-90a2-4cfa-9ad0-e1185cd22f1d.crl (hash: d/BZyMI7p9kDhg/zeE3Ess/NetnQJVLyAu4XF51sD5A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:81:f2:d1:7b:66:63:92:c6:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9681c311-90a2-4cfa-9ad0-e1185cd22f1d Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=8662d16f-d991-4a4c-af00-3f0f4c69fefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:41:c8:28:b2:91:c5:cd:3f:04:71:84:95: a6:10:e0:a6:f7:96:ed:a0:05:e7:fc:12:7e:8c:ab: ac:62:d3:5f:48:2f:bd:ab:b0:43:60:b2:08:5c:05: a1:fd:be:79:3a:f6:59:e6:9d:12:46:f4:79:89:2d: 32:2a:f2:95:35:f2:98:33:aa:8a:04:60:0a:7a:af: 3f:d7:dd:6e:db:b5:b7:09:06:2e:2b:99:be:0c:e7: f7:c1:98:49:69:54:5e:16:41:78:38:64:c7:3e:78: 7d:d1:65:2d:f7:b8:75:39:71:13:5b:fc:84:0a:5e: b6:32:db:f3:c0:6b:81:0b:08:cd:0f:db:41:45:e8: fb:22:e7:dd:a3:ad:46:c9:11:e7:96:3e:4e:5d:ad: 7c:fc:cf:e0:ec:ca:2f:b9:55:ec:05:21:db:66:0c: 3b:a5:ac:09:a5:66:14:6c:d4:eb:01:65:b3:2f:96: 06:d8:c8:2b:99:10:28:84:fb:f0:3e:e6:0d:19:a3: bb:51:72:58:b8:e8:ea:2b:e2:ad:47:4a:f3:2d:36: 16:42:e5:6e:cc:ba:fa:e6:90:e8:8d:e6:4d:d5:5e: 51:7e:6d:27:ca:7d:57:7f:e2:ac:3b:9b:72:c2:81: 16:b8:da:db:35:18:2a:d2:00:b1:2e:cf:40:ef:ed: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:E9:DA:7C:0D:DE:72:3C:F4:02:48:D8:4C:FD:B2:05:E6:9A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.crl X509v3 Authority Key Identifier: keyid:B1:3A:47:F5:BA:47:C0:64:69:5C:E7:D8:07:49:CE:B7:69:A6:73:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:33:c7:e8:b4:29:30:4f:92:54:4f:2b:60:a1:45:1d:52:96: f0:f7:9c:e3:e0:27:b1:38:32:63:47:b6:70:e9:14:d4:69:83: b4:4c:8f:17:7c:34:eb:3d:b4:62:61:00:43:af:a6:c5:c1:b2: bc:86:bf:7b:85:6c:8a:c8:dc:2f:76:2d:4d:8b:98:86:32:b2: 58:1f:2c:de:f1:04:86:9a:5d:1c:b6:fd:ae:11:32:43:1b:a2: 58:d1:41:f8:e0:dd:7d:27:39:49:17:43:4f:8e:56:da:be:8f: 89:5b:1f:0a:fd:94:13:e7:40:b3:6a:bc:66:4d:bd:d1:27:86: d7:80:e6:17:2f:ac:5c:72:d4:d1:3d:75:80:ee:5e:76:92:91: a1:9e:da:9b:43:00:37:fe:44:71:3d:60:ab:44:ad:0b:a4:83: ec:f2:a3:1c:37:0d:77:bf:1d:81:1d:75:75:bb:43:1a:5f:d5: 5c:b9:64:6d:62:24:d7:00:35:a3:2a:ff:f8:ec:39:4f:4a:6a: bf:28:a7:f6:fe:54:a8:b2:e7:d0:61:9a:76:b1:56:22:16:2e: e8:59:4f:3e:60:4b:13:e2:35:c2:78:99:4b:40:de:1b:0a:bc: 96:f5:10:08:12:83:c1:78:db:4b:82:ed:2e:08:13:9e:0c:36: 98:fd:93:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4Hy0XtmY5LGv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4MWMzMTEtOTBhMi00Y2ZhLTlhZDAtZTExODVjZDIy ZjFkMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk ODY2MmQxNmYtZDk5MS00YTRjLWFmMDAtM2YwZjRjNjlmZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWVByCiykcXNPwRxhJWmEOCm95btoAXn/BJ+ jKusYtNfSC+9q7BDYLIIXAWh/b55OvZZ5p0SRvR5iS0yKvKVNfKYM6qKBGAKeq8/ 191u27W3CQYuK5m+DOf3wZhJaVReFkF4OGTHPnh90WUt97h1OXETW/yECl62Mtvz wGuBCwjND9tBRej7Iufdo61GyRHnlj5OXa18/M/g7MovuVXsBSHbZgw7pawJpWYU bNTrAWWzL5YG2MgrmRAohPvwPuYNGaO7UXJYuOjqK+KtR0rzLTYWQuVuzLr65pDo jeZN1V5Rfm0nyn1Xf+KsO5tywoEWuNrbNRgq0gCxLs9A7+3N2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPq/6dp8Dd5yPPQCSNhM/bIF5ppLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njgx YzMxMS05MGEyLTRjZmEtOWFkMC1lMTE4NWNkMjJmMWQvOTY4MWMzMTEtOTBhMi00 Y2ZhLTlhZDAtZTExODVjZDIyZjFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY4MWMzMTEtOTBhMi00Y2ZhLTlh ZDAtZTExODVjZDIyZjFkLzk2ODFjMzExLTkwYTItNGNmYS05YWQwLWUxMTg1Y2Qy MmYxZC5jcmwwHwYDVR0jBBgwFoAUsTpH9bpHwGRpXOfYB0nOt2mmcy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjgxYzMxMS05MGEyLTRjZmEtOWFkMC1lMTE4 NWNkMjJmMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/M8fotCkwT5JUTytgoUUd Upbw95zj4CexODJjR7Zw6RTUaYO0TI8XfDTrPbRiYQBDr6bFwbK8hr97hWyKyNwv di1Ni5iGMrJYHyze8QSGml0ctv2uETJDG6JY0UH44N19JzlJF0NPjlbavo+JWx8K /ZQT50CzarxmTb3RJ4bXgOYXL6xcctTRPXWA7l52kpGhntqbQwA3/kRxPWCrRK0L pIPs8qMcNw13vx2BHXV1u0MaX9VcuWRtYiTXADWjKv/47DlPSmq/KKf2/lSosufQ YZp2sVYiFi7oWU8+YEsT4jXCeJlLQN4bCryW9RAIEoPBeNtLgu0uCBOeDDaY/ZNM -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:16 2025 by rpki-client