$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: X5VVCc9Fd95A3msKShZajtGBK2XWKR5FR/iI8dY7rjA= Subject key identifier: DD:B7:69:E4:98:A2:61:59:F0:54:B3:7E:5F:4D:0B:01:A3:33:B7:A2 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584BC01C6469BB37927C859CAA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB318428F Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: Y2dGJihW5Nsd3DNiqki05VARfldqM8CbIh1pr0XNEcc=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: urPQs6bt4pkzVlsgObEdsqmyyLOzqGmF8CSsWDoMRvo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:69:bb:37:92:7c:85:9c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=dad9df04-ebe0-4067-9709-8edf7c879cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:2e:00:59:a0:bb:92:d0:7e:74:07:fb:26: 2b:71:3a:91:78:d2:a4:2e:0d:ad:0f:68:16:79:60: 16:1f:11:13:9b:82:f0:40:a5:19:ed:37:d3:a7:3c: 26:66:49:ec:1c:df:ce:99:77:28:83:76:6f:77:5c: e2:a7:0d:b7:82:90:57:1e:47:55:80:f6:d6:5e:bf: c8:15:56:37:15:ce:a9:d9:82:ef:62:ac:75:30:84: ac:9f:2d:c3:10:4b:59:3b:54:f1:d7:e9:b3:3a:aa: 3f:df:63:a3:72:a6:5d:80:2b:36:94:37:03:2b:37: ea:f3:82:c6:5c:ce:cf:f7:d0:ad:78:74:46:e9:4d: 9d:c5:4a:33:0b:aa:20:8c:31:91:d3:b3:d3:b6:84: 83:06:de:d2:16:4c:04:97:d0:4f:7e:bb:09:6a:cd: ee:fd:a7:29:27:e7:bc:79:b1:01:59:80:da:16:5c: a4:aa:1f:6a:82:b4:83:b2:d6:f9:83:9d:05:ce:4f: fe:f2:fd:d0:b2:45:2f:df:e2:f0:6a:54:7f:3e:fe: ee:55:2c:1b:c6:7c:13:6f:b9:ee:2a:3f:78:39:a5: 75:91:f3:d7:ea:72:67:28:e2:28:bf:d1:35:99:d8: a9:5a:37:72:ef:5f:2d:75:84:45:5a:a3:44:23:3b: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:69:E4:98:A2:61:59:F0:54:B3:7E:5F:4D:0B:01:A3:33:B7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2e:b7:c9:a0:49:17:6e:07:7a:ad:f1:c1:f7:5b:dd:60:50: 05:5e:aa:23:30:78:5a:5f:ea:61:3b:54:aa:bc:4e:57:44:18: 95:85:da:27:1d:94:ba:84:89:4b:7b:4b:53:90:b8:6a:47:a0: cc:fc:6a:25:21:98:c2:d1:19:4f:e8:59:82:a3:bf:ec:7a:8e: 55:3e:7b:fb:2e:dd:b8:02:1f:6c:c2:5b:ae:10:32:6e:2f:d7: 2b:1b:11:f6:fb:6b:41:10:9c:c9:ce:d5:43:d3:9a:76:53:35: ef:68:39:8d:5f:66:af:d8:b0:16:6a:e3:a1:c7:36:65:b6:11: ce:cd:17:75:6b:12:2e:00:3e:90:46:bc:5f:c6:36:6e:4c:7d: fe:bd:4f:9d:ad:2d:3a:f0:b5:95:00:4d:2d:95:f9:2f:bc:5f: a4:4a:e6:8e:4c:b5:f5:23:1b:af:8b:6f:04:dc:c1:f1:bc:30: f4:b6:cf:ad:57:94:5e:bb:c5:a4:df:af:f6:f0:c2:59:9b:66: cd:d5:02:e3:2c:b9:3e:57:e8:34:1b:e4:de:c0:a2:78:30:6c: 6e:54:bc:5a:b0:c9:ed:cb:fb:0f:98:18:04:aa:26:72:bc:4e: fc:e7:c5:8c:e2:0b:6e:79:52:7f:f3:50:aa:c4:81:10:2f:09: 33:2c:74:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGRpuzeSfIWcqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZGFkOWRmMDQtZWJlMC00MDY3LTk3MDktOGVkZjdjODc5Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDkuAFmgu5LQfnQH+yYrcTqReNKkLg2tD2gW eWAWHxETm4LwQKUZ7TfTpzwmZknsHN/OmXcog3Zvd1zipw23gpBXHkdVgPbWXr/I FVY3Fc6p2YLvYqx1MISsny3DEEtZO1Tx1+mzOqo/32OjcqZdgCs2lDcDKzfq84LG XM7P99CteHRG6U2dxUozC6ogjDGR07PTtoSDBt7SFkwEl9BPfrsJas3u/acpJ+e8 ebEBWYDaFlykqh9qgrSDstb5g50Fzk/+8v3QskUv3+LwalR/Pv7uVSwbxnwTb7nu Kj94OaV1kfPX6nJnKOIov9E1mdipWjdy718tdYRFWqNEIzsQqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN23aeSYomFZ8FSzfl9NCwGjM7eiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCELrfJoEkXbgd6rfHB91vd YFAFXqojMHhaX+phO1SqvE5XRBiVhdonHZS6hIlLe0tTkLhqR6DM/GolIZjC0RlP 6FmCo7/seo5VPnv7Lt24Ah9swluuEDJuL9crGxH2+2tBEJzJztVD05p2UzXvaDmN X2av2LAWauOhxzZlthHOzRd1axIuAD6QRrxfxjZuTH3+vU+drS068LWVAE0tlfkv vF+kSuaOTLX1Ixuvi28E3MHxvDD0ts+tV5Reu8Wk36/28MJZm2bN1QLjLLk+V+g0 G+TewKJ4MGxuVLxasMnty/sPmBgEqiZyvE7858WM4gtueVJ/81CqxIEQLwkzLHQu -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:26 2025 by rpki-client