$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft File: 89f46e33-a45d-4efe-8e7f-94df4343f1be.mft (raw, json) Hash identifier: YuRIiJySoFfIVj1E/SuhIwYEfT7+F0h7Kv1kY3MvTmM= Subject key identifier: 98:89:D6:F0:0F:77:01:03:47:1C:39:DA:28:88:E5:22:04:DC:69:27 Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584B98CB4176058C5051BF9E2440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft Manifest number: 010D0C9F432858419BA974F3424D7851A3CF48F4 Signing time: Tue 21 Oct 2025 16:00:03 +0000 Manifest this update: Tue 21 Oct 2025 16:00:03 +0000 Manifest next update: Fri 24 Oct 2025 16:00:00 +0000 Files and hashes: 1: 89f46e33-a45d-4efe-8e7f-94df4343f1be.crl (hash: 7jW89+iaE4nAyXL90ITsOxxrYxkDrWX6Re8r2+/hul8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:cb:41:76:05:8c:50:51:bf:9e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: Oct 21 16:00:03 2025 GMT Not After : Oct 24 16:00:00 2025 GMT Subject: CN=c52570ca-7c83-4c45-b920-199b84f87eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:59:b8:2e:84:d2:9f:90:4a:3b:93:dd:5c: 43:6c:d2:44:75:bf:53:dd:c7:34:1e:6f:31:b0:ea: 1d:b6:92:e7:f3:77:ad:94:46:b5:4c:2f:79:20:c5: 7f:1e:2a:8e:43:3f:7e:ea:37:c1:b6:b6:e1:fe:89: c4:ee:08:64:28:73:8e:f1:93:bb:97:e3:11:f4:4a: 27:52:f9:a2:ee:c6:e3:9a:5b:d1:60:01:42:c0:75: 5f:64:a0:5a:72:57:a0:3a:79:42:4b:fc:8b:9d:19: 44:68:3f:81:b8:07:8d:1c:6b:ef:bf:ad:37:9b:57: be:f5:5b:b0:2b:d6:db:e2:ce:75:66:a9:9c:cc:9b: 87:22:57:0a:0a:81:3f:26:0c:03:4b:08:e7:47:8d: 49:6f:71:d6:53:5e:16:24:54:02:d9:a4:a2:41:e4: 4c:b6:da:fa:55:d4:f3:80:5d:61:a7:bf:a7:eb:77: 8c:86:bf:da:42:c8:ed:5a:24:82:b0:d0:ee:1a:43: aa:43:8b:03:c4:7e:8f:76:1c:18:e0:82:90:09:15: 5a:18:9d:c1:11:ca:a6:d8:0a:42:a4:3c:89:4c:e8: 9a:42:75:d9:62:f7:db:cb:a4:f3:88:cf:92:68:57: 0e:ab:15:36:5a:78:1d:fb:0d:f4:3e:1f:c0:ce:3f: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:D6:F0:0F:77:01:03:47:1C:39:DA:28:88:E5:22:04:DC:69:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9f:71:f9:39:2a:11:c4:00:67:24:70:ca:bc:2d:f9:c5:e1: 43:5c:fc:8c:0a:b8:a0:20:5e:57:82:5d:b1:36:9e:1a:4c:b7: 2c:12:0d:5e:4c:6d:e9:31:0c:d0:2e:c8:0a:d1:b5:72:f3:8a: c4:7c:06:1a:b8:72:9d:22:6c:85:3c:1a:22:7f:fd:90:31:46: 39:07:e6:1b:33:ae:ae:ac:eb:60:bf:65:ee:16:34:f9:af:66: a5:32:0a:b8:00:d6:41:28:89:00:d8:1b:be:26:d0:43:f0:7d: fe:41:84:fb:f0:5f:5d:25:d0:3f:32:88:dd:43:f9:f6:9a:98: e9:dc:1d:64:ec:5a:03:ba:8b:89:24:2a:0c:48:56:5d:38:ad: bc:3d:44:dc:33:0d:05:fd:97:78:9f:34:d7:96:22:2d:0b:b2: 90:14:a8:92:9d:8e:48:1d:d8:50:02:15:6c:30:34:d4:68:a2: 12:9e:2d:28:35:d8:9e:24:9f:b7:f2:5a:90:9b:29:01:e2:d2: 0d:2f:60:84:0a:bd:2e:1c:ac:69:9c:eb:9c:ca:da:1a:71:0f: 30:d4:8c:c5:bc:fb:80:5e:b6:6c:f6:1e:b9:d4:94:10:a5:96: 63:2f:42:17:f5:14:23:2c:13:55:8b:f8:58:b6:40:db:a5:8b: 49:c7:3b:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuYy0F2BYxQUb+eJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI1MTAyMTE2MDAwM1oXDTI1MTAyNDE2MDAwMFowLzEtMCsGA1UEAxMk YzUyNTcwY2EtN2M4My00YzQ1LWI5MjAtMTk5Yjg0Zjg3ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4VZuC6E0p+QSjuT3VxDbNJEdb9T3cc0Hm8x sOodtpLn83etlEa1TC95IMV/HiqOQz9+6jfBtrbh/onE7ghkKHOO8ZO7l+MR9Eon Uvmi7sbjmlvRYAFCwHVfZKBaclegOnlCS/yLnRlEaD+BuAeNHGvvv603m1e+9Vuw K9bb4s51ZqmczJuHIlcKCoE/JgwDSwjnR41Jb3HWU14WJFQC2aSiQeRMttr6VdTz gF1hp7+n63eMhr/aQsjtWiSCsNDuGkOqQ4sDxH6PdhwY4IKQCRVaGJ3BEcqm2ApC pDyJTOiaQnXZYvfby6TziM+SaFcOqxU2Wngd+w30Ph/Azj/KhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJiJ1vAPdwEDRxw52iiI5SIE3GknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvODlmNDZlMzMtYTQ1ZC00 ZWZlLThlN2YtOTRkZjQzNDNmMWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApn3H5OSoRxABnJHDKvC35 xeFDXPyMCrigIF5Xgl2xNp4aTLcsEg1eTG3pMQzQLsgK0bVy84rEfAYauHKdImyF PBoif/2QMUY5B+YbM66urOtgv2XuFjT5r2alMgq4ANZBKIkA2Bu+JtBD8H3+QYT7 8F9dJdA/MojdQ/n2mpjp3B1k7FoDuouJJCoMSFZdOK28PUTcMw0F/Zd4nzTXliIt C7KQFKiSnY5IHdhQAhVsMDTUaKISni0oNdieJJ+38lqQmykB4tINL2CECr0uHKxp nOucytoacQ8w1IzFvPuAXrZs9h651JQQpZZjL0IX9RQjLBNVi/hYtkDbpYtJxzsl -----END CERTIFICATE-----Generated at Wed Oct 22 13:42:25 2025 by rpki-client