$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft File: 8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft (raw, json) Hash identifier: 6t+VwNM4TohHxbYIgmk5JW1XJrZpkbny4EO4JejNMxc= Subject key identifier: 59:FE:E1:CD:7D:75:70:52:94:E7:2D:A9:95:D9:46:88:40:C8:B3:E2 Authority key identifier: 65:0C:AD:6F:5E:7C:8D:F3:31:CF:50:3B:EF:0B:26:64:DC:51:35:AD Certificate issuer: /CN=8639dc2c-221f-4637-896b-3c4a58cfc6c6 Certificate serial: 010D0C9F4328584BBF887EDF5BCC1DB2EAD7DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft Manifest number: 010D0C9F4328584728358AF20711860E6A158A2F Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 8639dc2c-221f-4637-896b-3c4a58cfc6c6.crl (hash: w4NmoypZo7yDNQuEACgTPl54XYpHuIajG2vdtHt/jps=) 2: e86e2d1f-b1e2-3208-90d3-5f3afbd0e350.roa (hash: mBGiocfvZIt27diDzrNygIQc7tXGjUDfDO85xuUV+Qc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7e:df:5b:cc:1d:b2:ea:d7:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8639dc2c-221f-4637-896b-3c4a58cfc6c6 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=9b8a1a3d-6276-4f8e-878d-b0b29342b277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:a0:08:31:eb:7e:68:b4:5c:86:97:63:cc: 89:9b:80:fa:20:91:89:dc:05:e4:9e:2d:39:28:bc: 43:2f:4c:70:c3:08:a6:0b:d0:fd:db:b8:34:e2:4f: dc:b8:de:f1:c5:9a:42:2a:37:e7:10:31:e6:9a:60: 8b:51:e7:7a:35:31:7d:28:95:61:6b:36:d7:57:3d: 08:21:72:e2:f8:18:50:d4:50:9d:05:e9:70:c1:65: 52:d9:d7:3d:b0:2a:e9:45:57:11:e0:55:6f:64:73: 88:0b:3a:9f:82:56:55:dd:d5:28:d2:98:75:1d:d0: 8e:06:0c:b3:f8:8c:f4:ff:14:61:fd:06:55:74:e1: e0:ec:d8:58:a6:fd:ef:fb:c0:79:16:bd:28:99:78: 75:3f:2a:6a:9a:93:72:4b:61:59:af:a8:f1:21:b8: e6:e6:dc:55:55:fd:29:a3:a4:b2:ed:cb:68:51:e3: e5:bb:1c:28:90:2d:27:0a:7e:20:26:bc:31:14:4d: a0:f5:35:1c:9d:ba:28:50:55:ba:b2:e5:6f:f8:2a: 21:f6:2c:cd:56:d7:ff:84:92:19:b9:46:72:50:0b: ce:e3:6a:28:bf:38:6e:22:01:a6:69:36:ad:65:45: 70:e5:3b:fc:4f:1a:8c:56:c0:c8:95:f8:97:6c:11: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:E1:CD:7D:75:70:52:94:E7:2D:A9:95:D9:46:88:40:C8:B3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.crl X509v3 Authority Key Identifier: keyid:65:0C:AD:6F:5E:7C:8D:F3:31:CF:50:3B:EF:0B:26:64:DC:51:35:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7d:8c:c2:bb:a9:df:69:48:61:cf:0c:16:33:b5:8a:e1:62: b2:d1:f3:ff:73:38:6d:0a:4e:b9:f3:3a:2a:28:96:43:ea:eb: f5:f3:04:92:fe:49:ad:0a:f1:45:73:48:95:b4:40:fb:90:6a: 49:15:bc:6d:36:13:49:66:c3:27:fe:d2:4c:1f:a6:ce:1c:46: 8e:58:48:98:f5:79:3f:0f:27:02:4e:fb:f1:45:48:5a:93:a8: 7f:4e:14:34:6b:50:8e:0d:73:42:b2:85:a8:24:55:68:96:c5: 6f:d3:ec:9d:2b:33:2b:81:9c:4e:02:19:2d:44:2e:e8:9f:59: 5c:ed:d5:00:2b:2a:f3:ad:30:9a:12:b5:4c:d0:0e:b0:60:6d: 24:38:94:8a:b9:d5:92:8b:65:d6:ac:3e:bb:5f:2c:20:fc:16: 64:aa:0d:e9:f6:64:25:a3:31:99:56:46:ac:2c:41:b7:cd:17: 7e:87:aa:65:ac:2d:37:4f:62:60:e0:f3:7b:8d:26:03:ed:67: c7:21:a7:60:ec:c9:2e:ab:42:47:60:c3:f2:a4:c7:de:ef:e5: 91:70:de:f3:6f:c0:8e:94:90:b2:e3:82:ba:6a:9f:02:7f:44: 93:3f:ff:3b:96:22:7c:e1:69:62:a6:56:7c:49:46:62:fa:4b: 1c:e3:5c:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH7fW8wdsurX3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzOWRjMmMtMjIxZi00NjM3LTg5NmItM2M0YTU4Y2Zj NmM2MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk OWI4YTFhM2QtNjI3Ni00ZjhlLTg3OGQtYjBiMjkzNDJiMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowWgCDHrfmi0XIaXY8yJm4D6IJGJ3AXkni05 KLxDL0xwwwimC9D927g04k/cuN7xxZpCKjfnEDHmmmCLUed6NTF9KJVhazbXVz0I IXLi+BhQ1FCdBelwwWVS2dc9sCrpRVcR4FVvZHOICzqfglZV3dUo0ph1HdCOBgyz +Iz0/xRh/QZVdOHg7NhYpv3v+8B5Fr0omXh1PypqmpNyS2FZr6jxIbjm5txVVf0p o6Sy7ctoUePluxwokC0nCn4gJrwxFE2g9TUcnbooUFW6suVv+Coh9izNVtf/hJIZ uUZyUAvO42oovzhuIgGmaTatZUVw5Tv8TxqMVsDIlfiXbBE8bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFn+4c19dXBSlOctqZXZRohAyLPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NjM5 ZGMyYy0yMjFmLTQ2MzctODk2Yi0zYzRhNThjZmM2YzYvODYzOWRjMmMtMjIxZi00 NjM3LTg5NmItM2M0YTU4Y2ZjNmM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODYzOWRjMmMtMjIxZi00NjM3LTg5 NmItM2M0YTU4Y2ZjNmM2Lzg2MzlkYzJjLTIyMWYtNDYzNy04OTZiLTNjNGE1OGNm YzZjNi5jcmwwHwYDVR0jBBgwFoAUZQytb158jfMxz1A77wsmZNxRNa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjM5ZGMyYy0yMjFmLTQ2MzctODk2Yi0zYzRh NThjZmM2YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/fYzCu6nfaUhhzwwWM7WK 4WKy0fP/czhtCk658zoqKJZD6uv18wSS/kmtCvFFc0iVtED7kGpJFbxtNhNJZsMn /tJMH6bOHEaOWEiY9Xk/DycCTvvxRUhak6h/ThQ0a1CODXNCsoWoJFVolsVv0+yd KzMrgZxOAhktRC7on1lc7dUAKyrzrTCaErVM0A6wYG0kOJSKudWSi2XWrD67Xywg /BZkqg3p9mQlozGZVkasLEG3zRd+h6plrC03T2Jg4PN7jSYD7WfHIadg7Mkuq0JH YMPypMfe7+WRcN7zb8COlJCy44K6ap8Cf0STP/87liJ84WliplZ8SUZi+ksc41xz -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:53 2025 by rpki-client