$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft File: 8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft (raw, json) Hash identifier: OFCuyECPE0It0I83inGWpBbojEtmhf5jdtS83SkuPIU= Subject key identifier: 18:4D:AA:14:DC:26:4F:88:4B:E1:BC:21:3E:09:91:F0:6E:38:C0:53 Authority key identifier: 2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28 Certificate issuer: /CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2 Certificate serial: 010D0C9F4328584BBFFEAB3579B7A5A8FEA20A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft Manifest number: 010D0C9F43285848CB7635609655E473E13C4F6A Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl (hash: OcNRZ5GoGO66QT0mIE8SGik1BsT7qQPRdKOD/DxWxqc=) 2: 96c281dd-57c3-39da-8b6d-39750b727d15.roa (hash: t7rvKuUXkPMVSfvcoLrGFz9zz/KDnrNMtUClDAdoX0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:ab:35:79:b7:a5:a8:fe:a2:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=5790b308-ae1f-4195-95a7-6a52ed0acb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:a4:c6:52:7e:56:3f:80:2b:49:50:10:af: cc:7f:38:06:f7:0f:f3:be:ca:41:a7:e5:d2:d8:29: bf:7d:8f:1f:e7:3d:95:e4:ce:0d:06:2b:e5:db:f1: 5a:41:8d:23:ed:13:62:21:1e:91:df:ec:f6:a4:c4: 30:ae:d7:59:a6:e7:17:7e:ca:74:97:e8:f7:d0:12: 9e:44:f0:3e:44:a5:f7:cb:0d:45:f7:f8:9b:fc:39: 73:a0:bc:48:1a:e1:70:91:7b:a3:79:43:c6:f0:37: 00:89:a8:ac:a8:39:ac:7a:65:5f:e3:aa:6c:ae:0d: 5f:26:5a:0b:f6:3e:05:bd:9f:05:5b:98:9a:17:d4: 2b:dc:b3:ee:0d:90:1b:46:de:c7:66:68:db:f5:32: a7:ad:e4:0a:d2:b4:21:28:01:cd:bb:99:a3:ab:2c: d6:60:ad:81:5b:b2:ae:9b:ea:ba:78:2a:48:b7:2d: 54:ac:97:11:da:3a:f1:fb:d1:49:9a:a2:4e:2a:08: da:0b:d9:c4:59:2e:58:c0:5a:0b:65:58:45:0b:5b: cf:50:bb:77:8b:bc:1b:cb:35:50:7c:74:7e:45:a6: d8:d5:85:5d:6a:35:41:94:62:c9:53:c8:13:7c:2d: f3:78:2f:a1:b1:76:3d:52:d4:9a:e1:19:74:64:5f: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:AA:14:DC:26:4F:88:4B:E1:BC:21:3E:09:91:F0:6E:38:C0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl X509v3 Authority Key Identifier: keyid:2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:df:70:9d:3e:79:be:79:93:3b:a5:5d:02:b7:98:56:da:76: 3b:c0:e1:8e:77:a9:35:59:2b:a2:f0:c1:b5:07:6a:85:90:f2: 72:a8:71:c0:46:06:72:96:6d:d8:a1:f4:b0:93:5b:c2:cf:28: a3:19:cc:a3:0e:e8:41:5a:81:65:c7:fa:80:cf:02:1c:ac:79: ba:a5:11:3a:22:de:a0:f9:7b:75:1c:7a:b9:72:28:08:2f:e1: ff:b7:fd:19:59:18:df:75:69:9b:83:18:88:41:25:43:f6:3e: 04:4d:25:28:97:16:8b:2d:e1:05:71:96:0c:f0:f9:1f:82:5f: 64:ad:a5:50:bd:e6:ed:61:b1:c8:b4:4e:47:7b:f5:d4:54:d5: e3:a8:4a:ca:1b:1e:43:0d:39:9d:a9:f7:10:a4:e9:09:67:d8: 9d:fc:b6:2e:58:58:38:e7:05:4b:35:94:3e:0a:d3:ec:0a:36: d9:dc:ba:ba:c5:3b:79:c3:94:02:5f:0c:f3:f5:0b:21:a5:e3: 12:96:23:b1:fd:5b:70:61:ec:67:a3:1f:1d:04:1c:ae:3c:f4: 0c:ac:d1:ac:02:89:08:9e:d5:e5:bd:cd:30:b1:21:34:e2:33: 61:d2:0f:d6:30:ba:43:e8:80:3e:d2:90:a1:1d:49:29:8c:63: 55:fa:42:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qs1ebelqP6iCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNjMDAyZGMtNTY1Mi00Y2I3LThhMWMtZGU5MWVkZDlk OWIyMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk NTc5MGIzMDgtYWUxZi00MTk1LTk1YTctNmE1MmVkMGFjYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JGkxlJ+Vj+AK0lQEK/MfzgG9w/zvspBp+XS 2Cm/fY8f5z2V5M4NBivl2/FaQY0j7RNiIR6R3+z2pMQwrtdZpucXfsp0l+j30BKe RPA+RKX3yw1F9/ib/DlzoLxIGuFwkXujeUPG8DcAiaisqDmsemVf46psrg1fJloL 9j4FvZ8FW5iaF9Qr3LPuDZAbRt7HZmjb9TKnreQK0rQhKAHNu5mjqyzWYK2BW7Ku m+q6eCpIty1UrJcR2jrx+9FJmqJOKgjaC9nEWS5YwFoLZVhFC1vPULt3i7wbyzVQ fHR+RabY1YVdajVBlGLJU8gTfC3zeC+hsXY9UtSa4Rl0ZF+CXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBhNqhTcJk+IS+G8IT4JkfBuOMBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Y2Mw MDJkYy01NjUyLTRjYjctOGExYy1kZTkxZWRkOWQ5YjIvOGNjMDAyZGMtNTY1Mi00 Y2I3LThhMWMtZGU5MWVkZDlkOWIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGNjMDAyZGMtNTY1Mi00Y2I3LThh MWMtZGU5MWVkZDlkOWIyLzhjYzAwMmRjLTU2NTItNGNiNy04YTFjLWRlOTFlZGQ5 ZDliMi5jcmwwHwYDVR0jBBgwFoAULmDQiwKLwpVMTHi7OWErakVnQSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84Y2MwMDJkYy01NjUyLTRjYjctOGExYy1kZTkx ZWRkOWQ5YjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ33CdPnm+eZM7pV0Ct5hW 2nY7wOGOd6k1WSui8MG1B2qFkPJyqHHARgZylm3YofSwk1vCzyijGcyjDuhBWoFl x/qAzwIcrHm6pRE6It6g+Xt1HHq5cigIL+H/t/0ZWRjfdWmbgxiIQSVD9j4ETSUo lxaLLeEFcZYM8Pkfgl9kraVQvebtYbHItE5He/XUVNXjqErKGx5DDTmdqfcQpOkJ Z9id/LYuWFg45wVLNZQ+CtPsCjbZ3Lq6xTt5w5QCXwzz9QshpeMSliOx/VtwYexn ox8dBByuPPQMrNGsAokIntXlvc0wsSE04jNh0g/WMLpD6IA+0pChHUkpjGNV+kKT -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:42 2025 by rpki-client