$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft File: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft (raw, json) Hash identifier: Wu/CmBnB7r2He9oCgDrge0v9Wibb69qZ0tfhnTMILGE= Subject key identifier: 22:5F:5C:77:AD:B5:2D:CF:3D:47:DF:1D:CF:97:29:D4:B2:4C:8E:36 Authority key identifier: 37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 Certificate issuer: /CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Certificate serial: 010D0C9F4328584B7A15BC93736ED8C808E0F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft Manifest number: 010D0C9F4328584073A81AFCD522FA53D685A0F3 Signing time: Fri 10 Oct 2025 16:00:03 +0000 Manifest this update: Fri 10 Oct 2025 16:00:03 +0000 Manifest next update: Sun 12 Oct 2025 16:00:00 +0000 Files and hashes: 1: 0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl (hash: 50G7n3u0mP/7B7msoRDSRd9e0C3voLEbImGHkcvAMk4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:15:bc:93:73:6e:d8:c8:08:e0:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a0128b1-e1ee-43f5-b28c-147238fdbf1f Validity Not Before: Oct 10 16:00:03 2025 GMT Not After : Oct 12 16:00:00 2025 GMT Subject: CN=e530241c-6332-41ad-8984-62aef9defc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:75:71:f3:e0:2a:64:0a:d6:0d:ce:db:8f: 42:2c:e2:98:a1:15:1f:03:84:b8:32:1d:18:f4:ae: c9:e9:da:b5:ad:e7:00:f4:bd:4d:67:d4:24:fc:3f: 2e:07:b7:fe:1f:c9:61:a1:cb:32:6f:42:60:91:ad: 7b:aa:84:30:44:6c:ee:c2:d0:ab:b3:30:2a:a5:02: 8c:8b:8d:a5:d9:05:ab:b5:ab:ca:20:52:76:7b:0b: dc:31:fb:26:41:61:2a:0a:29:cc:28:5e:eb:de:70: 58:0c:3b:e5:4d:9c:90:63:1c:10:4f:63:17:25:08: a1:fe:ca:54:f6:f2:4e:4a:52:78:60:e3:fc:fa:b9: 54:7b:29:56:0e:3e:9e:8c:3e:30:19:8f:a5:86:57: d1:6a:a2:65:1e:9e:63:91:66:3a:ed:2a:54:a3:58: 15:50:e2:72:dd:94:b2:8c:f5:c1:64:75:e2:0d:58: 8a:e9:97:f3:f3:63:91:4e:79:52:d9:e0:52:5c:26: 2b:93:74:bc:9f:97:90:7d:af:79:68:b5:25:04:b7: cd:c1:84:42:e8:72:8f:7d:d1:72:87:37:6e:93:a7: a4:32:5b:a1:5f:b9:b6:92:3e:96:cd:64:78:73:a7: b5:ce:87:05:24:4f:3b:47:48:3c:33:3a:34:0f:1d: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:5C:77:AD:B5:2D:CF:3D:47:DF:1D:CF:97:29:D4:B2:4C:8E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.crl X509v3 Authority Key Identifier: keyid:37:58:C8:27:DF:A6:58:68:B4:EE:EF:1B:19:AB:13:35:8F:72:1F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a0128b1-e1ee-43f5-b28c-147238fdbf1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:65:ec:8c:01:92:41:2f:88:6c:db:4c:c8:03:47:c3:66:e1: aa:b6:28:ea:47:0e:15:87:c7:73:9d:da:23:12:14:43:e6:25: 45:12:2d:cb:ef:1a:3c:76:b7:25:24:48:2d:23:e2:1b:cf:8d: fc:56:52:34:b3:69:5c:f4:22:03:0f:2a:5c:f6:20:1a:c4:0a: 9d:42:89:79:20:2a:6b:7e:89:89:84:84:67:e9:c8:c1:9b:20: 21:11:68:95:ec:ce:fa:71:d4:fa:78:09:07:a8:e9:34:d8:d9: 55:04:a8:a7:9a:12:e5:d6:2a:08:fa:56:a7:20:8f:80:b7:5f: 92:2c:53:a1:13:69:38:b8:9c:6c:df:57:26:51:59:db:1e:2d: a2:a1:1a:a1:ad:14:1d:9e:c8:ee:6e:26:74:8c:94:e4:af:e5: b9:aa:62:f2:72:a9:fa:3c:9a:1a:8a:56:4a:58:33:89:34:64: 8c:82:7d:4e:f5:07:7d:19:79:4e:40:28:76:fc:56:50:e6:65: 99:80:84:51:23:29:2f:a5:f9:9c:07:29:25:85:b0:24:d3:0b: 7b:34:12:3c:43:07:93:9d:5d:15:76:be:fd:ab:41:33:fd:df: 47:c7:4a:7b:75:a0:88:35:79:9e:01:3c:53:80:e4:dc:44:01: cf:2c:8d:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt6FbyTc27YyAjg8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEwMTI4YjEtZTFlZS00M2Y1LWIyOGMtMTQ3MjM4ZmRi ZjFmMB4XDTI1MTAxMDE2MDAwM1oXDTI1MTAxMjE2MDAwMFowLzEtMCsGA1UEAxMk ZTUzMDI0MWMtNjMzMi00MWFkLTg5ODQtNjJhZWY5ZGVmYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Z1cfPgKmQK1g3O249CLOKYoRUfA4S4Mh0Y 9K7J6dq1recA9L1NZ9Qk/D8uB7f+H8lhocsyb0Jgka17qoQwRGzuwtCrszAqpQKM i42l2QWrtavKIFJ2ewvcMfsmQWEqCinMKF7r3nBYDDvlTZyQYxwQT2MXJQih/spU 9vJOSlJ4YOP8+rlUeylWDj6ejD4wGY+lhlfRaqJlHp5jkWY67SpUo1gVUOJy3ZSy jPXBZHXiDViK6Zfz82ORTnlS2eBSXCYrk3S8n5eQfa95aLUlBLfNwYRC6HKPfdFy hzduk6ekMluhX7m2kj6WzWR4c6e1zocFJE87R0g8Mzo0Dx3KSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJfXHettS3PPUffHc+XKdSyTI42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAx MjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcyMzhmZGJmMWYvMGEwMTI4YjEtZTFlZS00 M2Y1LWIyOGMtMTQ3MjM4ZmRiZjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGEwMTI4YjEtZTFlZS00M2Y1LWIy OGMtMTQ3MjM4ZmRiZjFmLzBhMDEyOGIxLWUxZWUtNDNmNS1iMjhjLTE0NzIzOGZk YmYxZi5jcmwwHwYDVR0jBBgwFoAUN1jIJ9+mWGi07u8bGasTNY9yHxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTAxMjhiMS1lMWVlLTQzZjUtYjI4Yy0xNDcy MzhmZGJmMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiZeyMAZJBL4hs20zIA0fD ZuGqtijqRw4Vh8dzndojEhRD5iVFEi3L7xo8drclJEgtI+Ibz438VlI0s2lc9CID Dypc9iAaxAqdQol5ICprfomJhIRn6cjBmyAhEWiV7M76cdT6eAkHqOk02NlVBKin mhLl1ioI+lanII+At1+SLFOhE2k4uJxs31cmUVnbHi2ioRqhrRQdnsjubiZ0jJTk r+W5qmLycqn6PJoailZKWDOJNGSMgn1O9Qd9GXlOQCh2/FZQ5mWZgIRRIykvpfmc ByklhbAk0wt7NBI8QweTnV0Vdr79q0Ez/d9Hx0p7daCINXmeATxTgOTcRAHPLI0H -----END CERTIFICATE-----Generated at Fri Oct 10 17:58:44 2025 by rpki-client