$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft File: a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft (raw, json) Hash identifier: lOFqtQTXPEV4YuIoRCegWOWLDFQiUImBoFwRRmTTQEc= Subject key identifier: AE:69:A3:92:54:05:9B:FD:9D:ED:2F:DB:DF:9A:28:E5:68:2C:45:8C Authority key identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 Certificate issuer: /CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Certificate serial: 010D0C9F4328584BBFA5500AD899440BF08E0500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft Manifest number: 010D0C9F432858476B5AACB6B7DDB96C59669D16 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl (hash: NcvU274MTx2h0q3U3IUm6kdSyeQIcbYWN3umdSsJhL0=) 2: e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa (hash: HmwWHckx9zs3oMdBJEwFTd/KLZ4NfHdBYKXMJj2zOfY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:0a:d8:99:44:0b:f0:8e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=589b12fb-8e6f-4e52-ad62-caa80f624871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:ee:f5:55:8e:0a:6c:88:4a:58:b5:9a:12: b3:3c:3e:4a:9b:9e:53:0b:99:0c:be:59:17:54:d4: 89:8a:ce:5a:1c:5d:00:45:c2:e3:a4:5e:c5:b0:f4: a6:13:83:5d:28:8f:7a:79:bc:02:4d:ec:5d:f4:35: ea:24:7c:29:67:be:3f:08:04:ab:6e:00:b1:f0:8a: 61:e0:e6:2e:3b:91:bf:96:a2:7d:f9:00:7d:b1:d5: 32:79:ce:14:a5:8b:ea:c5:b2:d0:61:d4:90:00:09: b7:ef:b0:13:e3:6e:8e:ba:44:6e:b3:b7:c2:11:10: 31:1c:ee:73:ad:f6:17:d0:ca:f7:95:6f:ef:72:ad: fe:9f:26:17:1a:eb:7b:68:85:b0:21:4c:68:7a:bb: d4:f1:bf:10:30:9d:dd:7f:fb:37:df:58:25:2c:07: bb:08:b1:0c:76:35:0c:72:12:43:ad:84:c3:52:d5: 4a:10:cf:eb:bf:37:ab:3b:01:87:c0:4c:2e:96:ca: a4:87:96:de:63:89:5a:32:7d:e9:d4:94:ef:a8:54: 74:b7:69:ed:52:51:7f:05:8c:3a:a6:db:2f:1f:66: 3f:7f:e4:84:a1:0d:2b:5a:e2:f3:6f:48:36:44:f6: d5:3e:7a:6b:50:84:86:43:1b:91:56:be:e3:c0:b6: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:A3:92:54:05:9B:FD:9D:ED:2F:DB:DF:9A:28:E5:68:2C:45:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl X509v3 Authority Key Identifier: keyid:B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:08:37:15:aa:3f:1e:2d:7e:a5:c2:c8:60:02:2d:a4:7f:ae: ac:90:92:00:01:7c:56:27:dd:60:c2:49:9b:c0:e0:07:2c:cf: a7:44:e2:da:34:6d:09:9b:79:4e:15:36:36:fe:c4:33:5c:e0: d3:ef:ac:cb:7f:5f:d1:46:7e:b1:81:4d:3f:3f:4a:fb:b6:39: a9:03:21:7b:70:dd:7f:e5:be:ff:93:42:72:96:36:50:2e:ec: 56:b5:70:56:ef:62:96:a1:f1:c9:bd:f4:2c:04:ec:69:02:b2: 6c:72:74:b5:75:ed:58:46:84:63:f1:94:2e:be:b0:6e:1a:1c: bd:fc:62:0b:1f:ef:c4:bc:01:37:2e:5e:4f:24:20:33:35:de: 66:3d:43:8a:3e:f4:9a:74:3b:2c:84:bc:e2:43:f2:e8:6f:d3: 95:3c:f8:ba:0a:bb:b0:70:be:a7:1c:97:85:d4:44:6c:0c:af: 51:79:b0:1b:7f:59:b2:d9:0f:99:d8:aa:5a:d0:77:24:94:e2: b8:7b:3f:90:d8:0f:16:50:98:49:1d:b2:43:9e:00:ed:2e:4a: c7:a1:f7:b2:6b:97:08:57:a4:5c:18:2b:90:4b:fb:36:25:ca: b5:62:82:2a:17:5c:86:a3:03:65:32:8b:b5:92:02:b7:aa:79: 7b:90:8e:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVAK2JlEC/COBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiNGM3ZDMtNzU5OS00NzFlLWExZWEtNmRlN2IxNTgy YzVmMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk NTg5YjEyZmItOGU2Zi00ZTUyLWFkNjItY2FhODBmNjI0ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM/u9VWOCmyISli1mhKzPD5Km55TC5kMvlkX VNSJis5aHF0ARcLjpF7FsPSmE4NdKI96ebwCTexd9DXqJHwpZ74/CASrbgCx8Iph 4OYuO5G/lqJ9+QB9sdUyec4UpYvqxbLQYdSQAAm377AT426OukRus7fCERAxHO5z rfYX0Mr3lW/vcq3+nyYXGut7aIWwIUxoervU8b8QMJ3df/s331glLAe7CLEMdjUM chJDrYTDUtVKEM/rvzerOwGHwEwulsqkh5beY4laMn3p1JTvqFR0t2ntUlF/BYw6 ptsvH2Y/f+SEoQ0rWuLzb0g2RPbVPnprUISGQxuRVr7jwLYvxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK5po5JUBZv9ne0v29+aKOVoLEWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0 YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1ODJjNWYvYThiNGM3ZDMtNzU5OS00 NzFlLWExZWEtNmRlN2IxNTgyYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYThiNGM3ZDMtNzU5OS00NzFlLWEx ZWEtNmRlN2IxNTgyYzVmL2E4YjRjN2QzLTc1OTktNDcxZS1hMWVhLTZkZTdiMTU4 MmM1Zi5jcmwwHwYDVR0jBBgwFoAUsaewuEUeFVnBHrAqXXddxTsk7skwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3 YjE1ODJjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOCDcVqj8eLX6lwshgAi2k f66skJIAAXxWJ91gwkmbwOAHLM+nROLaNG0Jm3lOFTY2/sQzXODT76zLf1/RRn6x gU0/P0r7tjmpAyF7cN1/5b7/k0JyljZQLuxWtXBW72KWofHJvfQsBOxpArJscnS1 de1YRoRj8ZQuvrBuGhy9/GILH+/EvAE3Ll5PJCAzNd5mPUOKPvSadDsshLziQ/Lo b9OVPPi6CruwcL6nHJeF1ERsDK9RebAbf1my2Q+Z2Kpa0HcklOK4ez+Q2A8WUJhJ HbJDngDtLkrHofeya5cIV6RcGCuQS/s2Jcq1YoIqF1yGowNlMou1kgK3qnl7kI4M -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:47 2025 by rpki-client