$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.mft File: 8d91932d-91cf-41fd-aa31-2a177e383b6f.mft (raw, json) Hash identifier: Xa/qjjM5PSG0NlIvzIAfJ+OCZZ/xYogipdaWhp+6mNw= Subject key identifier: 96:72:AF:14:A7:C4:B3:6A:8F:65:8E:54:6D:37:95:B1:ED:E8:07:66 Authority key identifier: 31:47:48:8D:AE:A3:F3:51:65:60:9D:90:35:7F:54:40:40:6C:2B:AF Certificate issuer: /CN=8d91932d-91cf-41fd-aa31-2a177e383b6f Certificate serial: 010D0C9F4328584BC53AB2B26B8536F58BF90E30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.mft Manifest number: 010D0C9F4328584073A857E6E6A5D11003BA920D Signing time: Thu 06 Nov 2025 14:00:08 +0000 Manifest this update: Thu 06 Nov 2025 14:00:08 +0000 Manifest next update: Sat 08 Nov 2025 14:00:00 +0000 Files and hashes: 1: 8d91932d-91cf-41fd-aa31-2a177e383b6f.crl (hash: RcaAF5hY0Xm31xAL1tN4jr+30k+2eeIaDIsBFxmmV4w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:b2:b2:6b:85:36:f5:8b:f9:0e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d91932d-91cf-41fd-aa31-2a177e383b6f Validity Not Before: Nov 6 14:00:08 2025 GMT Not After : Nov 8 14:00:00 2025 GMT Subject: CN=2b95057a-cc9c-488c-8ee3-7d215a7bcec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:31:6f:3a:ea:95:e5:a3:41:fc:05:6d:ed: ac:ce:ed:50:78:6d:35:19:61:2f:08:d7:b9:5e:f2: 5a:5e:67:e6:a6:a6:81:1a:59:2f:a5:bc:ef:8c:f7: 9d:7f:7c:b8:43:a6:86:71:b6:4d:20:69:bb:4b:44: f0:19:8d:39:38:a8:dc:fb:da:f2:e8:0f:c9:ca:e1: 36:a2:23:dd:26:5e:05:82:e2:cd:91:a8:39:83:62: cb:36:6b:7c:0f:5a:9b:28:04:54:c5:f5:1e:b5:9d: 33:3b:48:d1:d0:1e:77:e4:08:26:59:01:2e:85:68: 74:f1:ca:79:9c:27:3d:01:01:8a:9c:f4:33:6d:91: ae:b4:11:b4:c2:56:09:ca:2b:55:a7:7c:56:3e:d6: 71:71:2b:02:4d:5b:2e:23:98:25:cd:b6:a4:6d:e5: a7:c7:fc:4c:a4:63:90:e8:69:fd:37:c9:f1:6d:5a: 43:47:49:ba:88:4d:b7:33:f1:c9:1d:e7:0a:d4:4f: ac:ee:c0:d7:d9:37:53:25:b8:5d:eb:35:dd:ed:3f: bd:91:46:df:f6:ac:01:c2:07:a5:41:fc:44:2f:b6: 08:ba:3a:95:3b:53:4c:78:1d:9a:b0:d7:9a:0a:d0: 41:3f:0a:9f:07:15:e2:57:06:14:0c:5b:90:a1:1d: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:AF:14:A7:C4:B3:6A:8F:65:8E:54:6D:37:95:B1:ED:E8:07:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f/8d91932d-91cf-41fd-aa31-2a177e383b6f.crl X509v3 Authority Key Identifier: keyid:31:47:48:8D:AE:A3:F3:51:65:60:9D:90:35:7F:54:40:40:6C:2B:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d91932d-91cf-41fd-aa31-2a177e383b6f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:aa:12:dd:e7:70:a9:32:22:23:18:5c:dc:fd:08:a2:60:24: c2:8f:34:b0:28:ff:70:e6:54:38:3f:7a:73:48:59:a9:96:72: 73:37:a7:84:de:0b:45:97:d6:9f:90:28:7d:ba:20:0a:3a:60: 41:52:c5:12:81:da:50:8b:76:39:77:53:9e:1f:09:f7:da:cd: 3c:3a:53:b4:3e:77:9e:4f:8a:4c:ae:9b:64:52:24:48:78:cc: 56:d3:85:d0:2b:02:9b:69:76:6a:fb:17:16:1b:01:7a:31:a4: 6b:0b:f4:ed:43:71:ff:b0:5c:0f:1a:ed:4f:d3:41:29:cd:19: db:f0:5b:99:9b:1c:89:23:86:b4:9c:fe:64:fa:d3:bf:05:4f: 68:5f:75:7f:40:d9:63:cb:4f:63:4b:9a:9f:8f:f1:97:9d:1c: a3:13:f0:66:f4:fb:65:f5:ca:7c:be:39:ee:e7:88:70:0c:ab: f4:a4:52:7d:ba:95:58:10:76:e9:4e:f8:5c:c6:4d:8e:36:91: 4e:ac:80:16:ed:7a:7f:88:39:a4:da:92:36:4b:0e:62:11:4e: 8c:0e:69:01:c3:a3:dd:af:16:03:bb:96:46:6a:8b:05:1d:52: 61:95:de:77:51:bf:8c:67:16:ea:0f:c6:cc:67:12:66:1b:31: ad:b0:f7:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvFOrKya4U29Yv5DjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5MTkzMmQtOTFjZi00MWZkLWFhMzEtMmExNzdlMzgz YjZmMB4XDTI1MTEwNjE0MDAwOFoXDTI1MTEwODE0MDAwMFowLzEtMCsGA1UEAxMk MmI5NTA1N2EtY2M5Yy00ODhjLThlZTMtN2QyMTVhN2JjZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcMxbzrqleWjQfwFbe2szu1QeG01GWEvCNe5 XvJaXmfmpqaBGlkvpbzvjPedf3y4Q6aGcbZNIGm7S0TwGY05OKjc+9ry6A/JyuE2 oiPdJl4FguLNkag5g2LLNmt8D1qbKARUxfUetZ0zO0jR0B535AgmWQEuhWh08cp5 nCc9AQGKnPQzbZGutBG0wlYJyitVp3xWPtZxcSsCTVsuI5glzbakbeWnx/xMpGOQ 6Gn9N8nxbVpDR0m6iE23M/HJHecK1E+s7sDX2TdTJbhd6zXd7T+9kUbf9qwBwgel QfxEL7YIujqVO1NMeB2asNeaCtBBPwqfBxXiVwYUDFuQoR2YaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJZyrxSnxLNqj2WOVG03lbHt6AdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZDkx OTMyZC05MWNmLTQxZmQtYWEzMS0yYTE3N2UzODNiNmYvOGQ5MTkzMmQtOTFjZi00 MWZkLWFhMzEtMmExNzdlMzgzYjZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGQ5MTkzMmQtOTFjZi00MWZkLWFh MzEtMmExNzdlMzgzYjZmLzhkOTE5MzJkLTkxY2YtNDFmZC1hYTMxLTJhMTc3ZTM4 M2I2Zi5jcmwwHwYDVR0jBBgwFoAUMUdIja6j81FlYJ2QNX9UQEBsK68wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZDkxOTMyZC05MWNmLTQxZmQtYWEzMS0yYTE3 N2UzODNiNmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASqhLd53CpMiIjGFzc/Qii YCTCjzSwKP9w5lQ4P3pzSFmplnJzN6eE3gtFl9afkCh9uiAKOmBBUsUSgdpQi3Y5 d1OeHwn32s08OlO0PneeT4pMrptkUiRIeMxW04XQKwKbaXZq+xcWGwF6MaRrC/Tt Q3H/sFwPGu1P00EpzRnb8FuZmxyJI4a0nP5k+tO/BU9oX3V/QNljy09jS5qfj/GX nRyjE/Bm9Ptl9cp8vjnu54hwDKv0pFJ9upVYEHbpTvhcxk2ONpFOrIAW7Xp/iDmk 2pI2Sw5iEU6MDmkBw6PdrxYDu5ZGaosFHVJhld53Ub+MZxbqD8bMZxJmGzGtsPcE -----END CERTIFICATE-----Generated at Fri Nov 7 03:11:25 2025 by rpki-client