$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft File: a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft (raw, json) Hash identifier: yRxOPsn/F68Q6enVIhKoeoMNZ/z4yrC6UjCoBMgSlwc= Subject key identifier: 20:2B:67:39:69:18:82:80:02:8B:A9:FD:EB:A4:06:20:3C:14:02:72 Authority key identifier: 34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 Certificate issuer: /CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Certificate serial: 010D0C9F4328584BC03A2D66321D2EA618B58240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft Manifest number: 010D0C9F4328584B66F92A46BDA7C1973DEC98E0 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl (hash: /uekL+VH65lVH56kfJ78Mk+BTnu2XqmcDNxmumDOIdg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:66:32:1d:2e:a6:18:b5:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a290c80a-d6fb-4b33-a574-d5eb1b510d00 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=b346a45d-f629-4091-af8e-05b6bf4fac2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:82:9d:7b:16:e7:ed:07:aa:24:49:bb:54: d1:4a:a3:cf:a9:19:1b:79:48:0e:ee:cd:b4:47:9d: 28:76:e7:9b:9f:20:95:7b:04:ad:fd:68:0d:66:63: 1e:91:b4:90:89:56:6e:79:5b:ed:60:9e:29:26:aa: f7:c5:88:40:99:da:ad:43:5f:76:00:d7:e4:15:31: 99:90:13:2f:47:ff:94:fa:56:de:04:9f:14:8c:93: 08:47:b3:7e:0e:7a:e3:05:75:8e:91:87:9b:9d:12: 66:43:69:73:08:3e:eb:e0:e5:c5:36:83:32:0c:f8: 8d:99:27:f3:95:a1:a8:a2:8c:dc:32:b9:5f:93:92: 6d:5c:3d:e1:d1:35:8a:85:a7:28:3c:c1:7e:aa:bf: df:60:13:6d:50:aa:62:c5:fc:bc:e8:a1:0a:a6:67: 3a:8d:c6:e5:66:ef:5f:9f:55:0d:0f:ba:7c:42:b6: dc:f5:3e:4e:f7:c1:6a:a2:ed:55:ed:83:db:1d:3b: c1:2e:27:64:69:5c:7d:76:40:89:f3:39:66:57:f3: 10:e6:36:96:08:7e:89:0e:c0:8b:13:c2:34:66:a2: ba:e9:d1:a2:d8:79:d2:2f:7b:7f:d0:cc:b7:de:85: 06:ae:f7:71:cc:8c:b8:bd:5c:11:b2:fc:0d:f6:04: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2B:67:39:69:18:82:80:02:8B:A9:FD:EB:A4:06:20:3C:14:02:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00/a290c80a-d6fb-4b33-a574-d5eb1b510d00.crl X509v3 Authority Key Identifier: keyid:34:41:E4:5E:3F:ED:3C:C7:72:52:1E:31:2B:50:81:E6:B0:BD:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a290c80a-d6fb-4b33-a574-d5eb1b510d00.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e0:28:32:fa:03:79:58:41:e7:0c:f1:35:59:f1:e5:3b:ae: 50:30:46:da:63:cb:db:45:3b:9b:df:4b:fb:e0:25:69:b2:6f: c9:b4:de:3f:d7:d4:e7:fc:70:70:85:39:6b:c5:35:d9:97:8e: 3a:25:03:d0:96:c0:ea:b9:13:2e:e0:f4:4b:0d:93:4c:c8:ae: dc:86:d4:48:63:c3:68:25:47:e3:19:b7:3a:ea:11:4e:6d:d5: fa:5d:82:43:7d:db:6a:3d:58:86:38:76:28:0e:49:71:94:46: c8:7f:4d:78:a3:99:1f:67:23:ac:0e:d1:a1:67:f9:2b:d4:75: 55:54:aa:e3:b8:b2:28:39:59:b6:7a:ce:5a:b6:98:12:e2:86: e9:fb:6a:0a:1b:fd:6a:b8:91:0c:61:59:dc:d7:16:ff:fe:20: fc:4a:14:29:fb:e0:c6:83:8e:ab:c8:16:d3:1c:d5:df:87:b2: 4c:a3:91:40:20:20:af:ea:6c:12:d7:8b:3e:22:a8:b7:16:86: 40:08:fb:f6:ca:55:af:6e:0c:96:aa:9f:5a:b1:4b:0a:08:a9: 36:0f:71:b6:41:3e:ef:40:8d:a0:73:91:70:cf:73:25:61:9d: bb:f1:72:72:eb:9c:45:ad:8f:4b:4c:c2:64:9e:f3:7a:5b:e6: b3:de:bc:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi1mMh0uphi1gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5MGM4MGEtZDZmYi00YjMzLWE1NzQtZDVlYjFiNTEw ZDAwMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk YjM0NmE0NWQtZjYyOS00MDkxLWFmOGUtMDViNmJmNGZhYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO2CnXsW5+0HqiRJu1TRSqPPqRkbeUgO7s20 R50oduebnyCVewSt/WgNZmMekbSQiVZueVvtYJ4pJqr3xYhAmdqtQ192ANfkFTGZ kBMvR/+U+lbeBJ8UjJMIR7N+DnrjBXWOkYebnRJmQ2lzCD7r4OXFNoMyDPiNmSfz laGooozcMrlfk5JtXD3h0TWKhacoPMF+qr/fYBNtUKpixfy86KEKpmc6jcblZu9f n1UND7p8Qrbc9T5O98Fqou1V7YPbHTvBLidkaVx9dkCJ8zlmV/MQ5jaWCH6JDsCL E8I0ZqK66dGi2HnSL3t/0My33oUGrvdxzIy4vVwRsvwN9gTDRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCArZzlpGIKAAoup/eukBiA8FAJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkw YzgwYS1kNmZiLTRiMzMtYTU3NC1kNWViMWI1MTBkMDAvYTI5MGM4MGEtZDZmYi00 YjMzLWE1NzQtZDVlYjFiNTEwZDAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTI5MGM4MGEtZDZmYi00YjMzLWE1 NzQtZDVlYjFiNTEwZDAwL2EyOTBjODBhLWQ2ZmItNGIzMy1hNTc0LWQ1ZWIxYjUx MGQwMC5jcmwwHwYDVR0jBBgwFoAUNEHkXj/tPMdyUh4xK1CB5rC9Z1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMjkwYzgwYS1kNmZiLTRiMzMtYTU3NC1kNWVi MWI1MTBkMDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx4Cgy+gN5WEHnDPE1WfHl O65QMEbaY8vbRTub30v74CVpsm/JtN4/19Tn/HBwhTlrxTXZl446JQPQlsDquRMu 4PRLDZNMyK7chtRIY8NoJUfjGbc66hFObdX6XYJDfdtqPViGOHYoDklxlEbIf014 o5kfZyOsDtGhZ/kr1HVVVKrjuLIoOVm2es5atpgS4obp+2oKG/1quJEMYVnc1xb/ /iD8ShQp++DGg46ryBbTHNXfh7JMo5FAICCv6mwS14s+Iqi3FoZACPv2ylWvbgyW qp9asUsKCKk2D3G2QT7vQI2gc5Fwz3MlYZ278XJy65xFrY9LTMJknvN6W+az3rws -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:30 2025 by rpki-client