$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft File: 09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft (raw, json) Hash identifier: 6BA2E+hcoROKmSRcuWV8RkgNq7TYHDmqpSEdA0xvgxo= Subject key identifier: 20:BD:01:8D:B1:5A:5C:F7:43:C2:8E:30:47:9C:03:51:3B:ED:8E:3D Authority key identifier: C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE Certificate issuer: /CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Certificate serial: 010D0C9F4328584BAA2053B399A333475144DEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft Manifest number: 010D0C9F4328584957897D5944C2A1FC74D595EB Signing time: Mon 27 Oct 2025 21:00:09 +0000 Manifest this update: Mon 27 Oct 2025 21:00:09 +0000 Manifest next update: Wed 29 Oct 2025 21:00:00 +0000 Files and hashes: 1: 09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl (hash: Mcx5yxz8wPPeCvwLuYwVsY2WjqgshkW0aBOS3wQabV4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:20:53:b3:99:a3:33:47:51:44:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Validity Not Before: Oct 27 21:00:09 2025 GMT Not After : Oct 29 21:00:00 2025 GMT Subject: CN=3590a2cf-7897-4c7a-a75e-ffb485e93d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:4e:6d:12:f1:4b:df:d5:79:4b:24:e6:d7: e4:60:1c:d0:18:55:f9:50:28:6f:63:d6:2b:f6:c8: 95:09:e5:d2:63:5f:34:2e:1b:60:9f:54:ed:c1:db: 67:cc:7d:25:41:99:f9:39:c7:fd:7d:5e:63:49:ef: 46:a9:20:95:56:26:69:0a:1d:c4:d1:ca:61:48:3a: ac:64:c5:6e:74:5f:45:b6:a4:7f:99:be:b9:f6:88: 9a:3f:3d:a1:4a:05:c4:08:cd:e2:1b:6a:4b:a0:ab: ee:a4:8f:29:43:21:79:c9:90:56:5e:40:84:f8:60: 15:6e:cc:bc:7b:81:f4:d7:1d:91:a0:c8:25:b0:b0: a2:7b:bf:0d:03:e6:9b:f4:df:31:0b:fd:8a:38:26: 74:3a:b2:33:8a:72:88:1e:e2:0c:64:8f:d9:0c:02: e1:0e:77:96:3e:17:f1:66:fc:d1:e2:74:ad:08:43: 2c:cf:ea:db:c5:b7:e5:47:01:e6:1f:4b:44:46:e5: 20:a4:cd:2c:d6:b8:6d:7e:fb:87:0d:a0:32:6f:6a: 24:d8:b7:37:36:4f:52:9d:19:84:a9:dc:54:7f:e8: e9:fa:45:2e:19:5e:26:bf:8f:2f:41:ce:d6:35:65: 3d:9e:a6:fa:d4:f5:39:2c:8e:7e:c4:8e:df:da:42: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BD:01:8D:B1:5A:5C:F7:43:C2:8E:30:47:9C:03:51:3B:ED:8E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl X509v3 Authority Key Identifier: keyid:C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:55:ae:e0:ad:4e:3c:59:ee:81:19:e4:a7:d9:7f:5b:3a:04: 03:9d:b7:fd:f5:d2:2e:da:14:ad:e7:d1:a8:ef:cf:73:5c:c8: 16:05:7d:92:f3:aa:80:9a:9f:58:74:83:78:27:5d:90:ec:10: 2d:15:fb:d2:5d:bd:f0:ed:5e:96:2b:0b:aa:6f:f4:6b:87:07: 98:91:c0:bd:d5:84:fc:a3:b4:8a:be:93:b2:61:fb:2d:79:3f: e2:02:fa:f1:eb:86:9f:24:42:75:67:60:d1:44:f7:a4:e0:6c: af:02:29:53:f0:0b:cf:51:7b:6c:28:42:b5:46:e2:34:fd:ba: bf:16:84:1b:a1:c9:b5:bf:c4:04:89:5d:45:e0:ae:bf:08:44: 13:a8:e9:ce:d1:07:5d:14:36:14:7a:b9:23:25:19:b3:af:52: 8f:83:9b:77:13:87:91:ad:f9:f0:d0:5f:25:19:03:f7:09:b8: d0:15:27:7a:e2:0d:63:f3:45:5c:9d:e6:f9:94:33:6f:94:12: 6c:af:58:db:d8:69:a6:59:35:e6:b4:0d:8b:b8:c6:55:6e:9f: 2f:93:a2:09:3c:98:3a:40:c0:ba:b4:f0:d8:95:e0:0a:54:dd: d1:78:bc:96:a2:b4:18:03:40:d5:00:36:c3:c4:93:0b:cc:a0: 1f:3d:17:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuqIFOzmaMzR1FE3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDliN2UyZDgtZTk5Yy00MmE1LWEwNWUtYzBlNTcyMzdm MDAzMB4XDTI1MTAyNzIxMDAwOVoXDTI1MTAyOTIxMDAwMFowLzEtMCsGA1UEAxMk MzU5MGEyY2YtNzg5Ny00YzdhLWE3NWUtZmZiNDg1ZTkzZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWJObRLxS9/VeUsk5tfkYBzQGFX5UChvY9Yr 9siVCeXSY180Lhtgn1TtwdtnzH0lQZn5Ocf9fV5jSe9GqSCVViZpCh3E0cphSDqs ZMVudF9FtqR/mb659oiaPz2hSgXECM3iG2pLoKvupI8pQyF5yZBWXkCE+GAVbsy8 e4H01x2RoMglsLCie78NA+ab9N8xC/2KOCZ0OrIzinKIHuIMZI/ZDALhDneWPhfx ZvzR4nStCEMsz+rbxbflRwHmH0tERuUgpM0s1rhtfvuHDaAyb2ok2Lc3Nk9SnRmE qdxUf+jp+kUuGV4mv48vQc7WNWU9nqb61PU5LI5+xI7f2kK87wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCC9AY2xWlz3Q8KOMEecA1E77Y49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3 ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1NzIzN2YwMDMvMDliN2UyZDgtZTk5Yy00 MmE1LWEwNWUtYzBlNTcyMzdmMDAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDliN2UyZDgtZTk5Yy00MmE1LWEw NWUtYzBlNTcyMzdmMDAzLzA5YjdlMmQ4LWU5OWMtNDJhNS1hMDVlLWMwZTU3MjM3 ZjAwMy5jcmwwHwYDVR0jBBgwFoAUxjhFU/2OLR5BZvsRtHrhpkBZS94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1 NzIzN2YwMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCVa7grU48We6BGeSn2X9b OgQDnbf99dIu2hSt59Go789zXMgWBX2S86qAmp9YdIN4J12Q7BAtFfvSXb3w7V6W Kwuqb/RrhweYkcC91YT8o7SKvpOyYfsteT/iAvrx64afJEJ1Z2DRRPek4GyvAilT 8AvPUXtsKEK1RuI0/bq/FoQbocm1v8QEiV1F4K6/CEQTqOnO0QddFDYUerkjJRmz r1KPg5t3E4eRrfnw0F8lGQP3CbjQFSd64g1j80Vcneb5lDNvlBJsr1jb2GmmWTXm tA2LuMZVbp8vk6IJPJg6QMC6tPDYleAKVN3ReLyWorQYA0DVADbDxJMLzKAfPRcH -----END CERTIFICATE-----Generated at Tue Oct 28 03:06:46 2025 by rpki-client