$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft File: c8607cef-f8a0-4a7c-8845-db8d32964491.mft (raw, json) Hash identifier: bkzFCGY8+xRYG1jE5YB/PS6+OWI8DGHFa/wCRGGM0jo= Subject key identifier: 35:88:03:2C:02:31:4F:94:A3:96:2C:8F:76:07:79:71:50:97:C0:5A Authority key identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Certificate issuer: /CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Certificate serial: 010D0C9F4328584BC0CF1BC226A21D52E4FB5380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft Manifest number: 010D0C9F43285844E20A0E9F16405F6240D00404 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Sat 08 Nov 2025 00:00:00 +0000 Files and hashes: 1: 4b56dc87-70d9-397b-bf76-7c918176aa3b.roa (hash: jjTYPBGVYQS4OD8DHTnIibFtCqdYp5ekP0p7U8od8x4=) 2: c8607cef-f8a0-4a7c-8845-db8d32964491.crl (hash: x4skR+aiMvsVooXgycO96mUQjTIKR50bha0bUs1R8l8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1b:c2:26:a2:1d:52:e4:fb:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 8 00:00:00 2025 GMT Subject: CN=9b03ef10-1425-445e-90dc-e0f42b75bd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:a3:75:f3:fe:7f:b5:be:5c:74:b0:b0:91: b2:90:65:06:6f:75:6d:cf:3b:72:7b:ec:c6:06:d6: b4:ae:9b:06:37:d1:f6:c5:e9:18:04:ef:67:1d:ee: 56:7e:81:fb:d6:a5:b2:9b:9e:7b:64:7f:37:fb:da: 74:02:cb:5c:5e:a8:73:f2:37:c5:38:82:33:81:e2: 95:85:18:6d:4f:36:38:49:e3:4b:6e:ca:4d:94:3b: 6e:66:ec:d4:7e:f3:1a:67:5b:34:79:f5:8b:fd:81: 04:48:b2:e0:37:ee:eb:48:2a:29:c3:14:a1:03:17: 10:cf:18:2a:2e:a6:75:84:7d:9c:3b:47:ca:5b:97: 50:02:0c:93:9f:3d:4f:8c:ca:1f:fc:80:24:bf:f1: 15:89:2d:48:98:b1:f3:04:de:c6:93:e0:c4:6e:35: 7f:a9:97:88:a7:ae:ed:6c:cb:b5:73:8b:2a:fc:5e: c2:fb:fa:cb:b8:22:26:51:08:ee:6c:d8:0c:dc:33: 10:9e:06:f0:ee:ac:8b:2c:a8:7c:21:60:b8:8c:00: dc:c8:78:8a:28:fa:8b:a0:fe:56:3b:e8:ef:8b:22: f2:6a:35:3c:5b:95:b3:81:e9:98:5b:ab:fc:72:ec: 78:6c:d5:13:d7:53:77:e7:81:b5:9c:7a:ca:13:82: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:03:2C:02:31:4F:94:A3:96:2C:8F:76:07:79:71:50:97:C0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl X509v3 Authority Key Identifier: keyid:44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:25:e7:78:b4:bf:8a:da:e3:64:e0:4d:a1:12:f6:2a:9b:90: d2:71:0d:ca:c3:35:d1:25:eb:3f:2a:9a:e3:7a:93:e6:32:9a: 33:d0:57:8c:a2:62:84:1d:08:ff:57:63:1c:ac:35:48:01:59: 55:81:95:3e:96:ba:32:72:57:79:46:8e:88:f7:1e:9a:e8:53: 44:4a:a7:85:87:fd:de:f3:8d:d1:39:b6:80:00:92:78:c7:40: 5c:36:44:0f:f0:36:4b:64:e7:a1:ad:7b:62:f5:3f:f5:19:3f: 91:2e:a8:08:98:4a:9c:45:6b:aa:54:5b:44:7c:cb:48:ab:27: f4:1c:26:fc:27:6b:bc:bb:8e:02:25:b5:ba:a4:04:e9:c8:83: 30:00:61:92:40:92:91:08:3a:3e:3b:14:28:55:85:c8:58:23: 35:41:9e:03:96:7d:2b:92:ab:55:36:a5:cd:d2:31:4a:30:d5: e2:12:23:68:94:45:ee:44:28:55:4d:9f:a7:2c:50:27:19:be: 99:63:49:af:18:53:44:b1:92:8b:38:06:08:49:3e:4e:68:d0: e3:e3:3e:cb:83:2f:1a:d7:85:14:1f:a2:fd:be:bb:2c:b8:3e: 5b:ef:ed:8e:70:6d:87:7c:1a:9d:35:a4:7c:d6:1a:9e:06:bf: df:2d:9a:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxvCJqIdUuT7U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2MDdjZWYtZjhhMC00YTdjLTg4NDUtZGI4ZDMyOTY0 NDkxMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwODAwMDAwMFowLzEtMCsGA1UEAxMk OWIwM2VmMTAtMTQyNS00NDVlLTkwZGMtZTBmNDJiNzViZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmejdfP+f7W+XHSwsJGykGUGb3Vtzztye+zG Bta0rpsGN9H2xekYBO9nHe5WfoH71qWym557ZH83+9p0AstcXqhz8jfFOIIzgeKV hRhtTzY4SeNLbspNlDtuZuzUfvMaZ1s0efWL/YEESLLgN+7rSCopwxShAxcQzxgq LqZ1hH2cO0fKW5dQAgyTnz1PjMof/IAkv/EViS1ImLHzBN7Gk+DEbjV/qZeIp67t bMu1c4sq/F7C+/rLuCImUQjubNgM3DMQngbw7qyLLKh8IWC4jADcyHiKKPqLoP5W O+jviyLyajU8W5WzgemYW6v8cux4bNUT11N354G1nHrKE4K8UwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDWIAywCMU+Uo5Ysj3YHeXFQl8BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODYw N2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5NjQ0OTEvYzg2MDdjZWYtZjhhMC00 YTdjLTg4NDUtZGI4ZDMyOTY0NDkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg2MDdjZWYtZjhhMC00YTdjLTg4 NDUtZGI4ZDMyOTY0NDkxL2M4NjA3Y2VmLWY4YTAtNGE3Yy04ODQ1LWRiOGQzMjk2 NDQ5MS5jcmwwHwYDVR0jBBgwFoAURAjE0NXhLxiKQjdpYB6ET2n3TTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhk MzI5NjQ0OTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgJed4tL+K2uNk4E2hEvYq m5DScQ3KwzXRJes/KprjepPmMpoz0FeMomKEHQj/V2McrDVIAVlVgZU+lroycld5 Ro6I9x6a6FNESqeFh/3e843RObaAAJJ4x0BcNkQP8DZLZOehrXti9T/1GT+RLqgI mEqcRWuqVFtEfMtIqyf0HCb8J2u8u44CJbW6pATpyIMwAGGSQJKRCDo+OxQoVYXI WCM1QZ4Dln0rkqtVNqXN0jFKMNXiEiNolEXuRChVTZ+nLFAnGb6ZY0mvGFNEsZKL OAYIST5OaNDj4z7Lgy8a14UUH6L9vrssuD5b7+2OcG2HfBqdNaR81hqeBr/fLZq1 -----END CERTIFICATE-----Generated at Wed Nov 5 02:31:51 2025 by rpki-client