$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft File: a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft (raw, json) Hash identifier: G4D1uA2+hBH30bfR1wq36vmCLq3QSK2BKjHOwFylbqE= Subject key identifier: 4A:99:E9:C9:80:72:FD:64:F6:21:B1:71:24:99:41:B5:F4:81:56:03 Authority key identifier: 35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA Certificate issuer: /CN=a20fe800-abb3-4f4b-a5be-6e36a478c95f Certificate serial: 010D0C9F4328584BAA3E068932048EF7E84DB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft Manifest number: 010D0C9F43285849763E0340556EB72C77A7E46A Signing time: Mon 27 Oct 2025 22:00:03 +0000 Manifest this update: Mon 27 Oct 2025 22:00:03 +0000 Manifest next update: Thu 30 Oct 2025 22:00:00 +0000 Files and hashes: 1: a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl (hash: 4epg3BxyG9TQKKWyPQcwGOgQQrQp5eZzL5PGrrhzXcg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:3e:06:89:32:04:8e:f7:e8:4d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20fe800-abb3-4f4b-a5be-6e36a478c95f Validity Not Before: Oct 27 22:00:03 2025 GMT Not After : Oct 30 22:00:00 2025 GMT Subject: CN=9ac0ecca-0d53-405c-852f-872842eb67eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:2c:69:a5:c0:2c:6e:dc:81:cc:88:be:f9: ae:71:de:65:6a:4b:30:4f:bd:13:ce:e4:f6:c1:d2: fe:2a:da:f4:7a:5c:24:6f:f6:4a:7e:23:6e:50:ad: 80:c8:59:f6:88:b8:23:1f:35:9e:26:75:97:2b:81: 9b:ee:d3:be:37:82:70:96:5b:02:89:a9:fd:da:59: d1:59:70:fc:e7:cf:4d:b5:aa:61:6d:34:94:2f:9f: ab:2f:ef:8e:a3:ab:9a:01:38:48:81:7a:1d:1a:31: 2d:15:d4:bb:84:94:a6:ae:b3:e6:59:c9:1b:85:40: 01:76:db:da:7e:e8:a9:47:d0:57:3c:6d:c4:5b:43: b7:9c:ec:a5:d8:fd:76:17:ef:5a:7c:6e:b3:b7:a2: 77:f3:3b:db:31:ca:df:96:53:33:5d:c1:72:06:d7: 43:5a:49:87:62:85:e4:ec:9d:b6:d2:cc:89:60:fd: f9:d9:a0:88:95:7b:21:6a:e6:7f:33:4c:f2:f9:fc: 3c:2f:36:0b:61:b0:25:53:6a:ea:5d:a8:3d:41:54: 93:cc:44:c2:87:e6:b0:e7:1c:b0:20:97:f2:13:87: 7d:74:b7:a5:1e:ba:65:d4:7c:17:3d:c2:5d:67:8d: d9:9c:cd:35:02:09:d1:31:5b:6e:36:60:cf:2d:66: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:99:E9:C9:80:72:FD:64:F6:21:B1:71:24:99:41:B5:F4:81:56:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f/a20fe800-abb3-4f4b-a5be-6e36a478c95f.crl X509v3 Authority Key Identifier: keyid:35:1D:42:87:DA:37:2A:71:0C:3F:13:03:E8:05:3C:9D:74:B2:21:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a20fe800-abb3-4f4b-a5be-6e36a478c95f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e7:47:bc:f1:09:63:28:ed:b9:b8:72:22:97:47:f6:92:dd: f4:2d:64:b9:52:08:57:93:bc:cf:29:56:3e:dd:61:00:a3:6e: 0c:52:06:71:45:d0:50:36:bc:d7:b7:f8:f4:48:f7:fc:1a:a0: a1:f3:c7:20:41:4e:67:6e:e1:c1:09:98:e5:fc:28:23:fa:aa: 52:a5:32:bd:63:6f:df:f1:b0:4d:36:56:9b:6a:b6:62:49:c6: 8f:c7:d8:80:29:41:89:3d:63:51:83:43:41:67:5b:80:ac:e0: e3:b6:56:ed:d5:79:7e:30:3f:bd:70:6b:df:98:5f:98:1c:6f: fd:b0:1e:4b:58:54:e6:0b:5b:3e:09:77:3c:90:05:5a:84:fd: c8:f8:b2:a0:0a:23:d1:0b:16:19:a7:6e:b3:d0:ff:b7:c2:85: 57:d5:3a:08:9e:5d:c3:bf:b5:4a:79:3c:10:fd:c0:0c:ee:bf: 1f:c4:c1:d7:43:dc:00:83:a3:f0:51:9f:4e:6e:dd:59:62:35: 01:b2:9e:73:c4:91:39:12:f6:5f:5e:21:67:bc:c8:d3:f1:b1: 54:0c:78:c8:e9:20:85:fe:62:55:d6:89:37:a9:d2:c4:d9:b0: 58:f2:b8:25:eb:b8:d0:74:4e:77:36:27:ec:a0:31:9b:53:8d: 67:f9:84:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuqPgaJMgSO9+hNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwZmU4MDAtYWJiMy00ZjRiLWE1YmUtNmUzNmE0Nzhj OTVmMB4XDTI1MTAyNzIyMDAwM1oXDTI1MTAzMDIyMDAwMFowLzEtMCsGA1UEAxMk OWFjMGVjY2EtMGQ1My00MDVjLTg1MmYtODcyODQyZWI2N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQksaaXALG7cgcyIvvmucd5lakswT70TzuT2 wdL+Ktr0elwkb/ZKfiNuUK2AyFn2iLgjHzWeJnWXK4Gb7tO+N4JwllsCian92lnR WXD8589NtaphbTSUL5+rL++Oo6uaAThIgXodGjEtFdS7hJSmrrPmWckbhUABdtva fuipR9BXPG3EW0O3nOyl2P12F+9afG6zt6J38zvbMcrfllMzXcFyBtdDWkmHYoXk 7J220syJYP352aCIlXshauZ/M0zy+fw8LzYLYbAlU2rqXag9QVSTzETCh+aw5xyw IJfyE4d9dLelHrpl1HwXPcJdZ43ZnM01AgnRMVtuNmDPLWbIzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqZ6cmAcv1k9iGxcSSZQbX0gVYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjBm ZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2YTQ3OGM5NWYvYTIwZmU4MDAtYWJiMy00 ZjRiLWE1YmUtNmUzNmE0NzhjOTVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTIwZmU4MDAtYWJiMy00ZjRiLWE1 YmUtNmUzNmE0NzhjOTVmL2EyMGZlODAwLWFiYjMtNGY0Yi1hNWJlLTZlMzZhNDc4 Yzk1Zi5jcmwwHwYDVR0jBBgwFoAUNR1Ch9o3KnEMPxMD6AU8nXSyIdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjBmZTgwMC1hYmIzLTRmNGItYTViZS02ZTM2 YTQ3OGM5NWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA550e88QljKO25uHIil0f2 kt30LWS5UghXk7zPKVY+3WEAo24MUgZxRdBQNrzXt/j0SPf8GqCh88cgQU5nbuHB CZjl/Cgj+qpSpTK9Y2/f8bBNNlabarZiScaPx9iAKUGJPWNRg0NBZ1uArODjtlbt 1Xl+MD+9cGvfmF+YHG/9sB5LWFTmC1s+CXc8kAVahP3I+LKgCiPRCxYZp26z0P+3 woVX1ToInl3Dv7VKeTwQ/cAM7r8fxMHXQ9wAg6PwUZ9Obt1ZYjUBsp5zxJE5EvZf XiFnvMjT8bFUDHjI6SCF/mJV1ok3qdLE2bBY8rgl67jQdE53NifsoDGbU41n+YQ9 -----END CERTIFICATE-----Generated at Tue Oct 28 02:37:58 2025 by rpki-client