$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft File: a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft (raw, json) Hash identifier: Jc14NHvaLOoZEGo0snlz5HU2Xx5YSbi5Pd9DWcXfYQU= Subject key identifier: D8:AD:B9:6A:53:2D:A3:61:71:61:48:B7:2B:A3:4B:80:23:A4:B8:C3 Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5 Certificate serial: 010D0C9F4328584BC12870857B5AF59383B35180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft Manifest number: 010D0C9F4328584073A8395F6D4B70DD67F5BE0C Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl (hash: qDEzq9eMAGj+dUxgey1ojUzFM72A/8vaV3yTkeVJjnc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:70:85:7b:5a:f5:93:83:b3:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=f46c35dc-fe5b-4ce8-b3cc-e948f7c9ad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:b1:e6:2b:10:3d:4b:7a:3c:29:df:0b:f4: 6e:b4:4b:8a:82:97:e8:00:a5:9c:b9:5a:3c:36:a8: 3c:e4:3f:ae:f6:dc:9a:1a:85:91:f7:3e:53:9e:ba: 39:1d:2b:be:0b:0c:60:8e:79:d7:00:e1:4b:84:b9: 39:00:48:7b:4c:f2:ed:90:f6:e1:28:ff:eb:17:5a: ff:1f:01:82:2d:09:50:db:98:fd:75:08:60:3a:4c: 9a:57:a3:a8:df:c8:3f:f0:91:79:0d:0b:b2:45:c8: 5a:43:1b:00:54:82:87:c6:37:a2:22:04:39:30:4a: 45:fc:3d:af:0f:f5:ce:c4:6f:cb:bb:f1:8a:a8:82: ea:f5:02:42:06:55:18:6d:e0:ba:30:20:d8:ec:85: 04:91:c8:20:ea:d3:71:6a:a3:92:28:d2:4c:23:99: 41:f0:8f:4d:cd:28:69:0c:ce:bf:c6:60:15:04:fc: 9d:73:2f:84:ea:07:46:a6:4a:62:af:ec:83:fd:4e: 1c:6a:30:bc:7b:65:d8:d6:c2:61:d4:59:3f:a4:f0: 30:29:d6:70:bd:8a:40:e3:f4:d6:7c:73:5f:0a:c5: 61:97:b0:e0:7d:3b:c5:86:97:b3:f4:db:7a:8c:b1: af:46:f0:9b:b8:3b:7c:7e:ad:a0:ad:62:33:c8:6d: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:B9:6A:53:2D:A3:61:71:61:48:B7:2B:A3:4B:80:23:A4:B8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl X509v3 Authority Key Identifier: keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:0a:f6:7a:4f:37:a8:29:4a:4a:d6:e6:cf:b7:e5:e9:19:e6: 24:48:e7:02:41:dc:72:03:21:73:d6:74:ac:43:57:ae:54:81: 27:ae:44:b6:05:ea:db:98:98:c1:10:57:91:c6:cd:02:ac:bb: d6:ad:b8:fc:e5:d0:fa:a0:f0:79:7a:37:3f:2e:df:24:7d:f9: 1c:81:c9:3c:5e:28:97:af:4d:18:be:fe:7d:df:b1:4e:ff:54: d7:dd:e0:18:c2:80:72:db:a6:4c:08:d0:c9:49:c0:ce:57:56: 47:40:da:43:0b:c3:c9:ed:6e:43:50:a7:ac:f1:32:d4:c5:79: d5:62:d6:4c:11:55:98:38:dc:2f:82:25:40:e3:72:3d:11:b5: fd:af:22:3d:0e:f1:22:3d:bb:f6:b7:86:2a:3c:71:a2:c5:ef: 95:0d:11:7a:5b:41:6e:f6:9e:9b:a6:a1:c1:ab:52:bc:c2:18: 4f:e3:e7:42:b2:a0:f4:37:b0:92:e7:62:ee:3d:cd:09:e9:e3: 6b:e7:fe:c6:b2:f0:be:dc:66:e0:84:1f:ff:0e:aa:34:ab:c4: 29:7f:5f:9b:90:5d:44:cd:03:60:38:43:bd:c4:b8:34:7b:04: f2:bb:7b:48:18:70:ce:28:37:bc:44:3c:0b:0a:fe:db:42:2e: 21:8c:28:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHCFe1r1k4OzUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmOGY4Y2ItNWU3Yi00ZTAyLWIyN2UtYzY5NjM0Nzll OGI1MB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk ZjQ2YzM1ZGMtZmU1Yi00Y2U4LWIzY2MtZTk0OGY3YzlhZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBux5isQPUt6PCnfC/RutEuKgpfoAKWcuVo8 Nqg85D+u9tyaGoWR9z5Tnro5HSu+CwxgjnnXAOFLhLk5AEh7TPLtkPbhKP/rF1r/ HwGCLQlQ25j9dQhgOkyaV6Oo38g/8JF5DQuyRchaQxsAVIKHxjeiIgQ5MEpF/D2v D/XOxG/Lu/GKqILq9QJCBlUYbeC6MCDY7IUEkcgg6tNxaqOSKNJMI5lB8I9NzShp DM6/xmAVBPydcy+E6gdGpkpir+yD/U4cajC8e2XY1sJh1Fk/pPAwKdZwvYpA4/TW fHNfCsVhl7DgfTvFhpez9Nt6jLGvRvCbuDt8fq2grWIzyG3bKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNituWpTLaNhcWFItyujS4AjpLjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOGY4 ZjhjYi01ZTdiLTRlMDItYjI3ZS1jNjk2MzQ3OWU4YjUvYThmOGY4Y2ItNWU3Yi00 ZTAyLWIyN2UtYzY5NjM0NzllOGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYThmOGY4Y2ItNWU3Yi00ZTAyLWIy N2UtYzY5NjM0NzllOGI1L2E4ZjhmOGNiLTVlN2ItNGUwMi1iMjdlLWM2OTYzNDc5 ZThiNS5jcmwwHwYDVR0jBBgwFoAUwEaMet1v5t816Sa81RFdJzx/Uo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOGY4ZjhjYi01ZTdiLTRlMDItYjI3ZS1jNjk2 MzQ3OWU4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKCvZ6TzeoKUpK1ubPt+Xp GeYkSOcCQdxyAyFz1nSsQ1euVIEnrkS2BerbmJjBEFeRxs0CrLvWrbj85dD6oPB5 ejc/Lt8kffkcgck8XiiXr00Yvv5937FO/1TX3eAYwoBy26ZMCNDJScDOV1ZHQNpD C8PJ7W5DUKes8TLUxXnVYtZMEVWYONwvgiVA43I9EbX9ryI9DvEiPbv2t4YqPHGi xe+VDRF6W0Fu9p6bpqHBq1K8whhP4+dCsqD0N7CS52LuPc0J6eNr5/7GsvC+3Gbg hB//Dqo0q8Qpf1+bkF1EzQNgOEO9xLg0ewTyu3tIGHDOKDe8RDwLCv7bQi4hjCi3 -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:32 2025 by rpki-client