$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.mft File: f35aa71e-73b0-4221-ba87-a5050b0f6b2c.mft (raw, json) Hash identifier: 68PEVETEVI2nHcO9PaS5m2KRa+BU838PoiLC4eJtp7U= Subject key identifier: BC:67:1E:0F:14:7D:D9:F8:1A:6E:8A:08:53:D7:1F:24:08:CD:66:EA Authority key identifier: 0A:62:03:1D:56:72:79:BC:37:9D:92:1C:07:A8:BC:94:E9:52:04:26 Certificate issuer: /CN=f35aa71e-73b0-4221-ba87-a5050b0f6b2c Certificate serial: 010D0C9F4328584B74BBF87A00EC6AAC0BCE0960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.mft Manifest number: 010D0C9F4328584B4DB43D6F0052EC0317530B8E Signing time: Wed 08 Oct 2025 18:00:08 +0000 Manifest this update: Wed 08 Oct 2025 18:00:08 +0000 Manifest next update: Sat 11 Oct 2025 18:00:00 +0000 Files and hashes: 1: f35aa71e-73b0-4221-ba87-a5050b0f6b2c.crl (hash: LZ+PFtVcRMBSqAWP4cUv8AQbyNqhA2uJ2xSTr45gHfg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:bb:f8:7a:00:ec:6a:ac:0b:ce:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35aa71e-73b0-4221-ba87-a5050b0f6b2c Validity Not Before: Oct 8 18:00:08 2025 GMT Not After : Oct 11 18:00:00 2025 GMT Subject: CN=f89240fc-af46-4af2-873c-1788135eb235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:1b:9b:fd:82:df:ea:9e:9c:d5:cc:03:2f: bf:54:c3:9e:7d:36:55:6b:d3:3f:41:9f:e9:89:0e: 52:41:2b:a9:40:6f:13:36:a5:63:80:cf:78:9b:a4: c7:9c:6e:6c:51:a4:66:d5:c4:3c:19:a8:cb:1d:2b: 34:95:49:f2:ac:35:01:78:7e:05:a1:8d:10:90:2b: 22:bb:3c:10:13:49:23:99:b8:c7:f6:da:80:44:bc: 9e:cd:15:9a:83:d6:33:91:7a:04:96:2a:b7:4a:0e: b1:34:73:89:bf:c4:ea:58:3f:73:f6:33:32:94:ff: c3:62:e3:81:41:c8:94:79:f1:da:c0:d0:95:81:7d: f9:74:3b:e3:d9:0d:67:50:bb:19:e9:f8:8e:0f:55: 74:40:ca:4b:96:1d:0b:07:e1:f9:8c:f3:22:bf:1b: d7:64:0c:a4:82:c8:a5:71:81:a8:eb:25:54:ff:22: 94:fb:2b:13:33:4d:55:55:27:fd:11:bb:3d:eb:4c: 4c:b5:b8:ed:ee:74:dc:78:38:37:8e:35:8e:aa:af: cf:3c:bf:d6:15:54:fb:f9:f2:40:67:81:3d:05:11: c7:28:cc:24:4c:4f:4b:15:19:8c:4b:c2:a5:f7:99: d3:25:5f:a1:28:cf:a3:03:f7:5c:31:1e:9d:99:b6: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:67:1E:0F:14:7D:D9:F8:1A:6E:8A:08:53:D7:1F:24:08:CD:66:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.crl X509v3 Authority Key Identifier: keyid:0A:62:03:1D:56:72:79:BC:37:9D:92:1C:07:A8:BC:94:E9:52:04:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f35aa71e-73b0-4221-ba87-a5050b0f6b2c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:1c:8f:86:24:f2:ea:97:d8:6e:16:65:a1:7e:68:13:ae: 39:66:79:ae:4e:c1:b2:67:cd:cf:dc:f6:84:35:9e:52:7f:56: c3:10:43:51:3f:e1:31:40:c6:17:01:1b:2f:fd:dc:b6:e7:74: 05:a5:e6:f1:78:a5:cf:f8:61:60:35:1f:85:da:68:95:67:1b: 44:3c:ed:4b:d5:c0:89:ea:50:8a:70:2b:f0:41:a3:fa:5d:10: f3:1e:5b:e9:8c:6a:c4:d2:95:9e:3a:9f:33:d8:bb:2d:14:ed: 10:76:c7:b2:99:40:aa:04:e9:98:07:ef:ca:a6:f7:fe:8e:e7: c5:da:35:1f:39:fb:dd:42:99:e0:2e:d9:d8:17:76:42:d1:e7: 75:ca:d1:e9:91:f3:10:bc:a6:bb:e5:bd:c3:85:ab:0e:3f:09: e4:27:b7:38:da:8a:79:c7:09:fe:d3:6f:3c:f4:e9:2f:f8:31: 71:a0:73:0a:25:e6:be:3a:86:1e:f1:8e:b6:e3:a8:a6:06:0b: 01:5c:04:c2:fb:09:7a:fc:b9:ce:fd:db:41:e3:2d:f4:92:14: 3b:fc:d8:7e:b0:44:45:bd:23:32:08:72:22:19:12:34:41:4c: e2:c9:14:32:64:48:8b:0b:56:fe:54:62:1c:53:28:53:20:12: c7:db:26:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0u/h6AOxqrAvOCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1YWE3MWUtNzNiMC00MjIxLWJhODctYTUwNTBiMGY2 YjJjMB4XDTI1MTAwODE4MDAwOFoXDTI1MTAxMTE4MDAwMFowLzEtMCsGA1UEAxMk Zjg5MjQwZmMtYWY0Ni00YWYyLTg3M2MtMTc4ODEzNWViMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPAbm/2C3+qenNXMAy+/VMOefTZVa9M/QZ/p iQ5SQSupQG8TNqVjgM94m6THnG5sUaRm1cQ8GajLHSs0lUnyrDUBeH4FoY0QkCsi uzwQE0kjmbjH9tqARLyezRWag9YzkXoEliq3Sg6xNHOJv8TqWD9z9jMylP/DYuOB QciUefHawNCVgX35dDvj2Q1nULsZ6fiOD1V0QMpLlh0LB+H5jPMivxvXZAykgsil cYGo6yVU/yKU+ysTM01VVSf9Ebs960xMtbjt7nTceDg3jjWOqq/PPL/WFVT7+fJA Z4E9BRHHKMwkTE9LFRmMS8Kl95nTJV+hKM+jA/dcMR6dmbZZ4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLxnHg8Ufdn4Gm6KCFPXHyQIzWbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMzVh YTcxZS03M2IwLTQyMjEtYmE4Ny1hNTA1MGIwZjZiMmMvZjM1YWE3MWUtNzNiMC00 MjIxLWJhODctYTUwNTBiMGY2YjJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjM1YWE3MWUtNzNiMC00MjIxLWJh ODctYTUwNTBiMGY2YjJjL2YzNWFhNzFlLTczYjAtNDIyMS1iYTg3LWE1MDUwYjBm NmIyYy5jcmwwHwYDVR0jBBgwFoAUCmIDHVZyebw3nZIcB6i8lOlSBCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMzVhYTcxZS03M2IwLTQyMjEtYmE4Ny1hNTA1 MGIwZjZiMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdMRyPhiTy6pfYbhZloX5o E645ZnmuTsGyZ83P3PaENZ5Sf1bDEENRP+ExQMYXARsv/dy253QFpebxeKXP+GFg NR+F2miVZxtEPO1L1cCJ6lCKcCvwQaP6XRDzHlvpjGrE0pWeOp8z2LstFO0Qdsey mUCqBOmYB+/Kpvf+jufF2jUfOfvdQpngLtnYF3ZC0ed1ytHpkfMQvKa75b3DhasO PwnkJ7c42op5xwn+02889Okv+DFxoHMKJea+OoYe8Y6246imBgsBXATC+wl6/LnO /dtB4y30khQ7/Nh+sERFvSMyCHIiGRI0QUziyRQyZEiLC1b+VGIcUyhTIBLH2yby -----END CERTIFICATE-----Generated at Wed Oct 8 19:18:03 2025 by rpki-client