$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: EBglZfZN3K7Ej6+I334r33NB8lovluWKLyZN97ZwaYM= Subject key identifier: DD:9F:0C:CB:52:B5:B2:B8:61:B9:D5:EC:87:10:5D:AF:F0:42:00:F8 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584BC1BD568E5B359B6F34BAD260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D7F4 Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Sat 08 Nov 2025 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: U7YWO725IKcwto9PZ96FfyJWZspupzfB2yxWjObY8yY=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: 1KkHxXPxhupZmmXrlWspc4e2Kqrsk7EthvYdDwKXXpo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:56:8e:5b:35:9b:6f:34:ba:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 8 08:00:00 2025 GMT Subject: CN=f741db24-e17f-4389-9446-958a552b836d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:47:d5:0d:1f:e0:56:68:f5:1b:91:1c:cf: 32:ea:dc:a6:56:44:45:17:a2:2e:9e:3c:4f:62:86: b5:fc:b7:5f:9b:4c:0c:0d:d3:22:5d:cf:ec:de:5a: 8d:bc:cb:ce:07:9c:45:b4:f6:8f:cf:25:74:61:9c: cc:b4:5e:dc:6e:35:49:6e:58:e9:73:ac:08:4f:dc: 79:79:53:29:da:fe:18:03:7b:d5:db:f9:1d:82:b8: 74:0f:ed:df:8c:2b:c8:ba:19:2a:cb:ca:f8:1e:99: de:a4:2e:b6:a6:24:69:83:d9:fb:c4:77:97:d9:31: 0e:85:6b:bc:ef:75:58:6c:41:a1:19:d4:59:e5:d7: 8f:b3:4c:9f:76:47:bb:13:b0:ca:28:f6:7d:9f:84: 41:6a:ae:b1:b9:c5:0c:1a:6b:b1:0b:53:1b:02:1b: 8c:6e:0a:ff:e3:92:7c:82:2f:30:9d:20:65:56:d9: ac:b4:9f:8d:69:da:d6:53:b5:37:dc:8c:80:fb:c1: 0f:9d:e7:03:87:05:b2:d5:fd:fe:ae:04:af:0b:4d: fb:ee:a2:15:b3:f1:77:4f:6f:a3:2a:b6:73:42:9f: 05:2a:70:f8:20:7b:cb:42:1b:17:a5:4a:48:60:fe: 1d:8f:e0:76:9c:ba:f2:93:fb:a1:81:30:94:fd:bb: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9F:0C:CB:52:B5:B2:B8:61:B9:D5:EC:87:10:5D:AF:F0:42:00:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:30:16:53:28:68:9d:5d:ce:b6:c9:3d:ed:93:ce:79:99:12: f6:d0:45:0b:f5:2b:28:84:8d:4e:d3:24:ac:64:c0:56:a2:61: 6f:46:61:d5:95:f8:e2:6d:c9:a2:fb:e1:b3:a5:e8:86:c0:26: 5a:60:7f:20:61:80:0f:88:4a:e5:b8:46:4c:10:cd:fe:14:13: 77:3e:c8:6a:d9:82:40:4b:2f:26:b6:71:30:f2:84:f4:63:57: e8:b5:e1:4f:66:e9:6c:51:93:62:47:79:38:dc:dd:36:5a:fa: 5b:db:4b:3a:2f:ff:b1:7f:a5:d0:a7:3b:52:86:65:80:1b:7b: 6e:ac:67:93:b3:22:4d:ea:f3:ea:54:ed:84:06:fa:c0:5a:b2: 39:96:58:ac:8b:a7:c1:ad:86:64:2f:31:a6:0a:60:6d:28:52: d2:bc:e7:88:95:8b:c9:b7:fb:74:8e:14:79:d3:c4:04:c4:e8: a6:91:ff:c1:36:e9:71:42:22:87:c4:bf:1e:6a:b0:c1:3d:99: b8:55:83:99:cc:63:07:c8:8c:1b:92:f8:86:13:82:ff:dc:37: cb:a7:29:3c:ef:72:cf:3d:2d:3e:4a:6e:01:ed:f5:91:18:5d: d2:6a:31:d1:75:c7:cd:ad:bf:58:ba:7a:61:b5:86:ac:9f:df: a3:4e:97:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVaOWzWbbzS60mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwODA4MDAwMFowLzEtMCsGA1UEAxMk Zjc0MWRiMjQtZTE3Zi00Mzg5LTk0NDYtOTU4YTU1MmI4MzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmklH1Q0f4FZo9RuRHM8y6tymVkRFF6IunjxP Yoa1/Ldfm0wMDdMiXc/s3lqNvMvOB5xFtPaPzyV0YZzMtF7cbjVJbljpc6wIT9x5 eVMp2v4YA3vV2/kdgrh0D+3fjCvIuhkqy8r4HpnepC62piRpg9n7xHeX2TEOhWu8 73VYbEGhGdRZ5dePs0yfdke7E7DKKPZ9n4RBaq6xucUMGmuxC1MbAhuMbgr/45J8 gi8wnSBlVtmstJ+NadrWU7U33IyA+8EPnecDhwWy1f3+rgSvC0377qIVs/F3T2+j KrZzQp8FKnD4IHvLQhsXpUpIYP4dj+B2nLryk/uhgTCU/bvt0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN2fDMtStbK4YbnV7IcQXa/wQgD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0MBZTKGidXc62yT3tk855 mRL20EUL9SsohI1O0ySsZMBWomFvRmHVlfjibcmi++GzpeiGwCZaYH8gYYAPiErl uEZMEM3+FBN3Pshq2YJASy8mtnEw8oT0Y1foteFPZulsUZNiR3k43N02Wvpb20s6 L/+xf6XQpztShmWAG3turGeTsyJN6vPqVO2EBvrAWrI5llisi6fBrYZkLzGmCmBt KFLSvOeIlYvJt/t0jhR508QExOimkf/BNulxQiKHxL8earDBPZm4VYOZzGMHyIwb kviGE4L/3DfLpyk873LPPS0+Sm4B7fWRGF3SajHRdcfNrb9YunphtYasn9+jTpcR -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:33 2025 by rpki-client