$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.mft File: dfa41315-9acc-4745-a94f-474e3cbcbefc.mft (raw, json) Hash identifier: suRqbvKm2s0amgNCiMS+jVofzybXERvNPMm12JksLBY= Subject key identifier: 85:CA:AD:B0:3B:A0:5E:C2:96:8E:9E:AB:2C:AE:75:54:F3:43:A8:C3 Authority key identifier: 80:D6:0C:BB:BD:4F:02:D8:E9:38:91:25:AC:80:5D:FB:A5:6C:07:B7 Certificate issuer: /CN=dfa41315-9acc-4745-a94f-474e3cbcbefc Certificate serial: 010D0C9F4328584BC0ECE0B19CD8637D2D121B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.mft Manifest number: 010D0C9F4328584073A833AF5302D07F3A00C00C Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: dfa41315-9acc-4745-a94f-474e3cbcbefc.crl (hash: PNCuH+Cs9QHkmwY35YQrFB7lLjsk7bqjnPCCx4pFxIg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e0:b1:9c:d8:63:7d:2d:12:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa41315-9acc-4745-a94f-474e3cbcbefc Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=1b7ec33f-5797-4a72-847e-61a4a85ecab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:97:e2:ce:5c:22:8e:08:26:f7:53:1d:72: 59:72:9a:cd:8c:3b:fd:74:56:c5:69:0a:c9:a5:e2: 0b:78:98:38:69:f5:f9:bc:10:9b:e0:99:43:fd:56: e9:9f:e5:9f:c1:1b:40:4f:e4:3b:71:4e:07:f9:92: 47:be:d3:91:8a:ec:f7:c6:ee:1e:af:3d:3b:4e:81: 12:37:95:f9:f1:a3:7a:0e:a9:47:6f:1f:d0:f7:de: ed:5a:ab:7f:dc:55:29:87:52:10:37:67:f3:db:ee: 0a:04:7c:9d:0b:be:fe:2e:b4:5e:e6:00:50:5a:3b: ff:37:28:33:58:c7:54:2c:c8:94:85:aa:6f:53:fb: 52:6b:d3:ab:5e:c2:51:cf:d2:d9:7a:1b:3a:99:4b: ad:c2:13:c9:34:60:7e:61:61:54:50:53:db:f9:ae: c2:00:e9:59:71:b6:8a:16:b8:3d:1b:47:10:4b:f9: 1c:12:7b:b9:f4:28:7d:fe:f0:5a:39:6a:58:f4:a1: 9f:72:d5:27:77:24:12:07:94:ef:a8:5f:11:2d:f4: e6:bf:b3:6f:9e:a4:ef:d1:b4:d9:9c:2c:d0:1b:cf: b9:2c:6a:12:c5:f8:1f:f9:55:dc:ae:e4:e0:46:a8: 6f:da:29:99:bf:51:86:52:fd:f7:74:61:e5:78:9f: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:AD:B0:3B:A0:5E:C2:96:8E:9E:AB:2C:AE:75:54:F3:43:A8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc/dfa41315-9acc-4745-a94f-474e3cbcbefc.crl X509v3 Authority Key Identifier: keyid:80:D6:0C:BB:BD:4F:02:D8:E9:38:91:25:AC:80:5D:FB:A5:6C:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dfa41315-9acc-4745-a94f-474e3cbcbefc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f5:62:30:5e:9b:41:2f:59:ea:0b:3f:b6:37:f4:6a:48:95: 48:b8:dd:00:7c:f2:ba:49:83:de:ff:6f:b2:7a:d9:55:27:e9: be:b1:f5:16:e2:87:83:64:d6:71:2d:6b:60:ed:80:f2:fa:f5: 48:36:fd:07:b8:51:a3:50:75:0a:3c:04:74:df:ba:98:7a:71: 40:68:dc:df:68:9c:96:c3:0e:ea:bf:b4:28:85:cd:ba:a8:88: d6:a7:16:fa:0a:a3:e0:c5:f6:5e:63:c7:cc:fa:2c:d8:23:82: 19:73:2a:1a:c8:40:59:27:a2:87:9d:12:ad:29:83:63:cc:53: 12:e5:02:76:e6:36:67:f5:ab:7f:ed:99:8c:67:ce:ff:98:63: 08:50:51:7f:f1:1b:33:42:b8:df:dc:0a:62:bf:24:71:1a:2f: b2:af:8b:3b:4a:ed:2c:9a:2e:c4:8d:54:e9:23:68:73:ef:b7: ce:34:31:09:d6:c4:b1:7e:bf:7f:d2:97:5d:f1:66:13:e2:9b: 8c:0e:38:2f:ea:a9:66:31:a6:6a:b2:fd:f9:76:5d:b5:e6:ee: 33:a6:79:db:60:e7:f0:15:b2:8c:e9:3f:14:fc:de:61:2e:60: 35:f0:6b:f0:51:05:72:91:29:b2:ed:ef:d9:58:8c:5e:e3:99: e3:00:df:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OCxnNhjfS0SG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZhNDEzMTUtOWFjYy00NzQ1LWE5NGYtNDc0ZTNjYmNi ZWZjMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk MWI3ZWMzM2YtNTc5Ny00YTcyLTg0N2UtNjFhNGE4NWVjYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/KX4s5cIo4IJvdTHXJZcprNjDv9dFbFaQrJ peILeJg4afX5vBCb4JlD/Vbpn+WfwRtAT+Q7cU4H+ZJHvtORiuz3xu4erz07ToES N5X58aN6DqlHbx/Q997tWqt/3FUph1IQN2fz2+4KBHydC77+LrRe5gBQWjv/Nygz WMdULMiUhapvU/tSa9OrXsJRz9LZehs6mUutwhPJNGB+YWFUUFPb+a7CAOlZcbaK Frg9G0cQS/kcEnu59Ch9/vBaOWpY9KGfctUndyQSB5TvqF8RLfTmv7NvnqTv0bTZ nCzQG8+5LGoSxfgf+VXcruTgRqhv2imZv1GGUv33dGHleJ9N4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIXKrbA7oF7Clo6eqyyudVTzQ6jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZmE0 MTMxNS05YWNjLTQ3NDUtYTk0Zi00NzRlM2NiY2JlZmMvZGZhNDEzMTUtOWFjYy00 NzQ1LWE5NGYtNDc0ZTNjYmNiZWZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGZhNDEzMTUtOWFjYy00NzQ1LWE5 NGYtNDc0ZTNjYmNiZWZjL2RmYTQxMzE1LTlhY2MtNDc0NS1hOTRmLTQ3NGUzY2Jj YmVmYy5jcmwwHwYDVR0jBBgwFoAUgNYMu71PAtjpOJElrIBd+6VsB7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZmE0MTMxNS05YWNjLTQ3NDUtYTk0Zi00NzRl M2NiY2JlZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz9WIwXptBL1nqCz+2N/Rq SJVIuN0AfPK6SYPe/2+yetlVJ+m+sfUW4oeDZNZxLWtg7YDy+vVINv0HuFGjUHUK PAR037qYenFAaNzfaJyWww7qv7Qohc26qIjWpxb6CqPgxfZeY8fM+izYI4IZcyoa yEBZJ6KHnRKtKYNjzFMS5QJ25jZn9at/7ZmMZ87/mGMIUFF/8RszQrjf3ApivyRx Gi+yr4s7Su0smi7EjVTpI2hz77fONDEJ1sSxfr9/0pdd8WYT4puMDjgv6qlmMaZq sv35dl215u4zpnnbYOfwFbKM6T8U/N5hLmA18GvwUQVykSmy7e/ZWIxe45njAN9y -----END CERTIFICATE-----Generated at Wed Nov 5 15:08:58 2025 by rpki-client