$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft File: b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft (raw, json) Hash identifier: 3j1sxzn5KIzA41VOFbHs3GN2hZYWdFPBfNbpAW42Yx8= Subject key identifier: 73:60:F8:78:A9:11:02:60:15:D3:C7:BF:99:F1:DA:C7:36:AF:A4:79 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584BC2523AA8EA31119576626E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft Manifest number: 010D0C9F4328584B12731C27BB3A44E00C4A357F Signing time: Wed 05 Nov 2025 13:00:08 +0000 Manifest this update: Wed 05 Nov 2025 13:00:08 +0000 Manifest next update: Fri 07 Nov 2025 13:00:00 +0000 Files and hashes: 1: b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl (hash: 2arc3YIv683LOhRi3QhJSKJsWYhdj/d+wjlQQQ2N48k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:52:3a:a8:ea:31:11:95:76:62:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Nov 5 13:00:08 2025 GMT Not After : Nov 7 13:00:00 2025 GMT Subject: CN=7c46fea2-5722-4053-b659-4c820dc6a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:9e:dc:d2:24:3a:85:bb:65:1f:37:24:ce: a6:e1:ad:ed:26:2e:3c:c7:4f:11:69:3c:9d:26:fb: a3:66:ca:da:ea:0a:1c:85:eb:89:8a:a2:3c:53:f0: 8c:ce:ef:90:0e:52:0c:a7:aa:1d:a0:f4:35:00:03: 0b:26:2c:f1:f6:49:ef:4b:84:9f:54:cc:52:d9:7a: cc:e0:17:fc:32:df:d8:6e:b5:6c:12:a6:ea:04:93: 49:11:3d:a3:d7:97:37:95:09:8e:03:66:5f:bd:f4: 91:c6:04:fc:b1:60:31:82:10:e7:75:ad:e2:7b:f6: 9b:db:5a:ac:a3:af:f0:8a:8f:79:81:7f:a8:d7:f9: ab:d8:7d:1c:e9:37:72:8a:dc:71:ec:da:96:c4:d4: 50:e9:31:d9:b7:18:6e:16:e4:dd:c7:87:32:8a:01: e3:2d:98:d7:f0:84:5d:57:6a:a9:ec:1e:f3:0b:06: d2:c8:26:f1:19:e6:dd:d6:f1:0d:69:34:20:34:97: dc:49:4c:3f:d0:08:9b:8c:33:84:0b:78:97:57:d6: 32:b4:b8:af:e2:27:80:48:6d:0f:bf:3e:b1:31:f2: d4:a4:1d:23:34:de:f1:34:48:c9:39:bf:33:f5:b4: be:ca:a5:f8:87:97:51:0f:b7:52:62:05:30:e7:96: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:F8:78:A9:11:02:60:15:D3:C7:BF:99:F1:DA:C7:36:AF:A4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:70:cb:92:ad:6e:db:47:99:cc:50:79:87:b7:cf:0d:7a:72: 2a:f5:76:70:c7:3c:ae:5b:bf:4d:01:eb:45:b2:ac:45:e1:60: 2d:24:29:3b:df:46:3d:37:2a:db:1c:e1:a8:8a:e1:01:34:72: a3:3f:a3:bd:99:a0:4e:0b:65:90:d5:4f:da:fd:20:99:c4:3e: a7:b6:c3:08:c0:9d:7b:7c:8e:f3:99:31:d5:e4:18:91:16:d7: 98:f7:e3:52:0c:73:ad:90:52:e1:82:8a:87:c3:b0:ab:3e:5c: 51:f5:6e:0c:b7:62:9a:06:fd:45:9d:11:fd:ca:ba:18:25:28: e8:71:4d:db:fa:2b:f6:9f:13:af:ae:f7:72:40:3d:b9:0e:b0: 86:f3:7f:77:8e:1a:2d:83:f9:04:38:94:a2:ca:c0:44:a3:bf: f1:63:98:cd:60:fc:0c:c6:fa:c5:8a:52:0e:3c:15:15:59:7d: ca:b5:cd:4b:d6:ff:8b:ac:36:58:f9:40:ca:58:5a:0a:ad:c5: 5a:34:23:84:60:9d:9b:a7:ac:17:a5:ad:fd:d2:61:b2:59:44: 7f:37:4a:13:24:ba:99:03:9e:1f:05:3c:82:fc:39:da:14:82: fe:2d:b0:13:b4:3d:9f:5e:28:af:15:01:34:b7:9f:ed:13:5c: d6:3a:8e:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCUjqo6jERlXZiboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI1MTEwNTEzMDAwOFoXDTI1MTEwNzEzMDAwMFowLzEtMCsGA1UEAxMk N2M0NmZlYTItNTcyMi00MDUzLWI2NTktNGM4MjBkYzZhNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroSe3NIkOoW7ZR83JM6m4a3tJi48x08RaTyd JvujZsra6gocheuJiqI8U/CMzu+QDlIMp6odoPQ1AAMLJizx9knvS4SfVMxS2XrM 4Bf8Mt/YbrVsEqbqBJNJET2j15c3lQmOA2ZfvfSRxgT8sWAxghDnda3ie/ab21qs o6/wio95gX+o1/mr2H0c6Tdyitxx7NqWxNRQ6THZtxhuFuTdx4cyigHjLZjX8IRd V2qp7B7zCwbSyCbxGebd1vENaTQgNJfcSUw/0AibjDOEC3iXV9YytLiv4ieASG0P vz6xMfLUpB0jNN7xNEjJOb8z9bS+yqX4h5dRD7dSYgUw55Z59QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHNg+HipEQJgFdPHv5nx2sc2r6R5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYjdlNDM1N2UtMTcwZi00 ZmI5LTg4NDktM2M4NDI1N2YyYWQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjcMuSrW7bR5nMUHmHt88N enIq9XZwxzyuW79NAetFsqxF4WAtJCk730Y9NyrbHOGoiuEBNHKjP6O9maBOC2WQ 1U/a/SCZxD6ntsMIwJ17fI7zmTHV5BiRFteY9+NSDHOtkFLhgoqHw7CrPlxR9W4M t2KaBv1FnRH9yroYJSjocU3b+iv2nxOvrvdyQD25DrCG8393jhotg/kEOJSiysBE o7/xY5jNYPwMxvrFilIOPBUVWX3Ktc1L1v+LrDZY+UDKWFoKrcVaNCOEYJ2bp6wX pa390mGyWUR/N0oTJLqZA54fBTyC/DnaFIL+LbATtD2fXiivFQE0t5/tE1zWOo6m -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:47 2025 by rpki-client