$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft File: 8c1a5536-816c-426b-b7e4-bad0d305a931.mft (raw, json) Hash identifier: yATUaLxsCNEsommvnqrPpyxZoQlPrshzgdtyAj/rvQA= Subject key identifier: 49:37:96:E0:BF:C4:11:BA:E1:B0:38:76:01:10:1F:A1:68:D7:E9:B6 Authority key identifier: 51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA Certificate issuer: /CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Certificate serial: 010D0C9F4328584BC2E71D53DC956A00C81E91C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft Manifest number: 010D0C9F4328584BACA481CEDBA19A46BD6702C9 Signing time: Wed 05 Nov 2025 18:00:08 +0000 Manifest this update: Wed 05 Nov 2025 18:00:08 +0000 Manifest next update: Sat 08 Nov 2025 18:00:00 +0000 Files and hashes: 1: 1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa (hash: D0BUgbzWEMEVO8QmWCqzENEo6wcte21rd+ixsnurwt8=) 2: 8c1a5536-816c-426b-b7e4-bad0d305a931.crl (hash: kYnEGx8k9xYSuUW0L4URZ++OcRtlwDlBuSZYFdSy0Ik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:e7:1d:53:dc:95:6a:00:c8:1e:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Validity Not Before: Nov 5 18:00:08 2025 GMT Not After : Nov 8 18:00:00 2025 GMT Subject: CN=515c7d17-8063-4fa8-8a98-740f1e2d1b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:3b:d0:a2:3a:8b:88:54:15:61:b1:5a:24: 87:d9:5e:8c:d8:72:f9:f6:73:bd:d7:64:1d:75:87: 3e:ac:fc:28:29:7f:61:80:fa:0c:2f:bf:e5:3c:a3: c7:09:6d:bb:52:ca:6a:0d:50:2e:47:af:bd:89:37: 31:b7:15:b8:ab:c0:c7:85:30:84:9b:5e:0a:8d:83: 56:1c:c9:a9:21:40:88:cd:9d:41:bf:a6:37:e9:9e: c9:ee:1e:aa:e9:77:a0:39:a4:9e:02:90:27:1b:c7: 23:46:b9:21:bd:77:40:4f:1a:3f:3e:d7:6e:1f:11: 6a:45:53:01:eb:77:77:4c:3d:6f:c9:8c:6b:08:99: 99:09:05:30:db:aa:5a:96:e2:90:9a:61:81:5e:3e: 50:9f:c1:ab:29:3e:c6:cd:80:6e:eb:0e:c8:2a:de: c0:e4:38:37:6b:23:9c:d0:d6:b0:aa:b0:af:2c:00: 18:a4:a5:f3:66:bd:66:4b:36:9a:55:36:a5:34:1f: d0:d1:ec:6e:92:fd:94:9c:42:2e:04:d3:49:33:e5: 28:9f:66:ce:51:75:e5:09:bc:61:6c:ca:5c:2c:29: 74:de:20:3e:c2:82:e4:af:9c:99:18:0c:b0:e2:fc: e9:01:33:12:fa:d9:03:2f:12:74:b4:c6:b0:d4:58: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:37:96:E0:BF:C4:11:BA:E1:B0:38:76:01:10:1F:A1:68:D7:E9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl X509v3 Authority Key Identifier: keyid:51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ae:e9:1b:86:50:53:f1:aa:5e:a2:c0:0e:6b:97:9f:e1:e9: 26:76:31:99:1c:bb:f6:c0:0e:9c:f0:96:59:06:ca:8d:fb:a4: ba:b5:20:a9:2d:1a:b5:57:f5:58:74:99:c1:7b:47:32:dc:1b: 94:4c:17:19:8a:99:c1:c6:19:29:6b:7a:43:84:b2:5a:a2:c3: 7a:e9:80:c2:95:1c:3b:55:10:2b:06:1d:f6:06:36:1a:0d:0e: 4f:b4:aa:6d:e6:e3:80:dc:92:42:53:e9:ae:38:b6:a0:b5:92: 7c:fc:03:a9:b6:cd:e6:ca:9c:de:6c:e8:fb:8e:1f:7d:4c:ab: 3d:51:93:0c:94:97:53:29:07:c5:80:9c:be:0b:20:e0:6f:ef: 51:d3:f0:36:76:91:1b:45:b5:95:3d:75:ba:7a:7a:9a:e9:ca: 71:1f:67:ec:ad:ee:eb:85:b2:8d:f7:95:14:2f:ed:83:86:0c: bc:dd:6c:d2:be:b4:e7:6e:7b:b7:8b:72:ee:02:ed:75:3f:99: 38:cc:06:e7:e2:03:c6:0e:1a:e6:09:20:9b:dd:4a:56:9c:23: b5:69:13:2f:50:ac:03:8f:da:f3:35:a9:4b:45:1c:ba:54:a9: 05:9c:ef:00:3a:5c:df:59:70:ac:f1:ad:46:df:92:bd:0a:bf: f6:d6:15:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvC5x1T3JVqAMgekcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxYTU1MzYtODE2Yy00MjZiLWI3ZTQtYmFkMGQzMDVh OTMxMB4XDTI1MTEwNTE4MDAwOFoXDTI1MTEwODE4MDAwMFowLzEtMCsGA1UEAxMk NTE1YzdkMTctODA2My00ZmE4LThhOTgtNzQwZjFlMmQxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLk70KI6i4hUFWGxWiSH2V6M2HL59nO912Qd dYc+rPwoKX9hgPoML7/lPKPHCW27UspqDVAuR6+9iTcxtxW4q8DHhTCEm14KjYNW HMmpIUCIzZ1Bv6Y36Z7J7h6q6XegOaSeApAnG8cjRrkhvXdATxo/PtduHxFqRVMB 63d3TD1vyYxrCJmZCQUw26paluKQmmGBXj5Qn8GrKT7GzYBu6w7IKt7A5Dg3ayOc 0NawqrCvLAAYpKXzZr1mSzaaVTalNB/Q0exukv2UnEIuBNNJM+Uon2bOUXXlCbxh bMpcLCl03iA+woLkr5yZGAyw4vzpATMS+tkDLxJ0tMaw1FjT9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEk3luC/xBG64bA4dgEQH6Fo1+m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFh NTUzNi04MTZjLTQyNmItYjdlNC1iYWQwZDMwNWE5MzEvOGMxYTU1MzYtODE2Yy00 MjZiLWI3ZTQtYmFkMGQzMDVhOTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGMxYTU1MzYtODE2Yy00MjZiLWI3 ZTQtYmFkMGQzMDVhOTMxLzhjMWE1NTM2LTgxNmMtNDI2Yi1iN2U0LWJhZDBkMzA1 YTkzMS5jcmwwHwYDVR0jBBgwFoAUUZ41/h/g3oH49m5jowe0X/f5n7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFhNTUzNi04MTZjLTQyNmItYjdlNC1iYWQw ZDMwNWE5MzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnrukbhlBT8apeosAOa5ef 4ekmdjGZHLv2wA6c8JZZBsqN+6S6tSCpLRq1V/VYdJnBe0cy3BuUTBcZipnBxhkp a3pDhLJaosN66YDClRw7VRArBh32BjYaDQ5PtKpt5uOA3JJCU+muOLagtZJ8/AOp ts3mypzebOj7jh99TKs9UZMMlJdTKQfFgJy+CyDgb+9R0/A2dpEbRbWVPXW6enqa 6cpxH2fsre7rhbKN95UUL+2Dhgy83WzSvrTnbnu3i3LuAu11P5k4zAbn4gPGDhrm CSCb3UpWnCO1aRMvUKwDj9rzNalLRRy6VKkFnO8AOlzfWXCs8a1G35K9Cr/21hUh -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:36 2025 by rpki-client