$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft File: 8def8532-8491-4ca2-9370-4768f22df42b.mft (raw, json) Hash identifier: u5hWE1joglLTgk+AdHGSx8G5hojQxnxi13dxorCa+vo= Subject key identifier: 73:B0:57:C0:AA:FE:0C:6D:DA:97:DF:3F:3B:C9:38:40:4C:CF:D9:8E Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E Certificate issuer: /CN=8def8532-8491-4ca2-9370-4768f22df42b Certificate serial: 010D0C9F4328584BBFE0D87FA7FA4D600D1A4180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft Manifest number: 010D0C9F4328584394E26F74FF585B84F3FC5B05 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 14225c85-02d7-3302-b9fc-e26bf7888e33.roa (hash: 1bbAI74QWbnxtS5ZgicAsxLYUJMBE0xzUGqPG5Bn1ko=) 2: 1994235e-c7e7-3805-8a27-83af0eb87dbe.roa (hash: 1gjysSZ4MXg+iONiXhVNXvX2sBldAJD5N8UNr/27spk=) 3: 8def8532-8491-4ca2-9370-4768f22df42b.crl (hash: 0PtkTQm4j8TfW2v2qQbtawrXvaEPRIHrDfGPyU8QMX8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d8:7f:a7:fa:4d:60:0d:1a:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=739bdc8d-b928-4dc8-b704-cfc1035fe5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:9d:14:c8:e0:1a:ed:06:77:6a:0c:6b:87: 65:e5:76:03:82:f6:74:b6:cb:33:a7:24:74:81:c9: 77:87:33:3d:07:3b:5f:50:4f:0e:9f:0e:21:ab:73: b3:cd:65:1b:99:60:0d:c7:47:17:a7:a3:bb:10:e3: 52:05:22:8e:f6:0d:75:0c:63:c0:8e:c2:6b:cc:28: 60:f6:92:87:89:6e:24:a0:e2:c2:25:64:d2:46:09: df:fe:eb:a6:8e:c8:b0:14:47:59:bb:10:3d:f4:23: 0b:c9:ee:40:40:ba:0e:f6:ac:33:67:a2:47:f8:e4: 4f:55:eb:1d:df:94:c2:f0:6d:a9:4e:d5:d2:0e:b4: 53:74:2a:26:b3:4a:48:96:ae:37:9f:43:22:4d:0e: 2d:60:50:f0:d8:35:99:36:2e:79:e5:7e:ff:a9:1c: bf:6b:29:f1:7a:30:6f:d5:98:98:5a:fb:65:ea:6d: 28:ab:8f:0b:fd:d0:1d:60:4e:72:ab:29:6c:4a:ea: 2d:1a:94:0d:2b:b8:53:0f:5e:b4:04:f2:91:c4:4a: c8:9a:fa:aa:90:ff:0e:3e:90:6a:c1:c9:66:29:09: 02:48:6c:82:5a:57:3c:b4:de:cc:7e:80:ca:dc:8a: a2:24:22:b7:e7:50:f4:3a:65:c6:79:16:66:d2:8c: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:57:C0:AA:FE:0C:6D:DA:97:DF:3F:3B:C9:38:40:4C:CF:D9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl X509v3 Authority Key Identifier: keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8e:8e:3f:8e:24:92:55:2a:55:ab:d8:01:7a:9c:ca:c0:e6: a8:d7:8f:ca:d1:66:43:ec:d7:64:75:0a:02:19:c4:c2:7f:e1: 00:e8:0b:af:e2:4a:50:e4:ed:f4:51:91:71:f2:9b:12:76:21: 5a:08:3e:c8:ca:66:ea:bb:f8:c0:cf:88:4d:fb:80:9d:60:13: 61:f5:83:b8:d5:3c:25:87:ac:fe:a5:ef:fc:c8:57:d0:35:02: 17:a4:9c:03:bb:a5:b3:2b:33:6d:cc:4d:9a:ed:93:a2:21:82: fe:f4:90:7c:1d:e9:95:77:62:67:fa:28:84:75:3c:70:e1:51: ef:43:a0:ab:7b:9b:97:e6:71:ec:89:88:82:f7:75:67:ea:77: 6b:cd:f6:87:67:ca:c6:82:84:12:0a:b0:b7:0f:16:27:2e:d4: 51:d0:13:00:dd:25:9e:dd:c7:9b:13:48:6e:88:5c:6c:b9:2f: 5e:4d:70:78:61:ee:52:f9:07:33:c0:ad:cb:7a:78:aa:9a:31: d7:e6:a5:de:a4:cb:7e:b5:fa:99:74:2a:db:86:2d:b1:33:79: e6:6c:09:cf:38:8c:d6:cb:28:45:08:dd:2f:61:fd:df:17:f2: 15:d4:cc:e0:bc:02:a2:68:21:40:d9:8b:c2:a8:3a:ce:7f:e1: 9f:1e:46:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nh/p/pNYA0aQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlZjg1MzItODQ5MS00Y2EyLTkzNzAtNDc2OGYyMmRm NDJiMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk NzM5YmRjOGQtYjkyOC00ZGM4LWI3MDQtY2ZjMTAzNWZlNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL+dFMjgGu0Gd2oMa4dl5XYDgvZ0tsszpyR0 gcl3hzM9BztfUE8Onw4hq3OzzWUbmWANx0cXp6O7EONSBSKO9g11DGPAjsJrzChg 9pKHiW4koOLCJWTSRgnf/uumjsiwFEdZuxA99CMLye5AQLoO9qwzZ6JH+ORPVesd 35TC8G2pTtXSDrRTdComs0pIlq43n0MiTQ4tYFDw2DWZNi555X7/qRy/aynxejBv 1ZiYWvtl6m0oq48L/dAdYE5yqylsSuotGpQNK7hTD160BPKRxErImvqqkP8OPpBq wclmKQkCSGyCWlc8tN7MfoDK3IqiJCK351D0OmXGeRZm0oyBYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHOwV8Cq/gxt2pffPzvJOEBMz9mOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVm ODUzMi04NDkxLTRjYTItOTM3MC00NzY4ZjIyZGY0MmIvOGRlZjg1MzItODQ5MS00 Y2EyLTkzNzAtNDc2OGYyMmRmNDJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGRlZjg1MzItODQ5MS00Y2EyLTkz NzAtNDc2OGYyMmRmNDJiLzhkZWY4NTMyLTg0OTEtNGNhMi05MzcwLTQ3NjhmMjJk ZjQyYi5jcmwwHwYDVR0jBBgwFoAUeK5vSwlNKsXflVqqpMA614oxgw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVmODUzMi04NDkxLTRjYTItOTM3MC00NzY4 ZjIyZGY0MmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVjo4/jiSSVSpVq9gBepzK wOao14/K0WZD7NdkdQoCGcTCf+EA6Auv4kpQ5O30UZFx8psSdiFaCD7Iymbqu/jA z4hN+4CdYBNh9YO41Twlh6z+pe/8yFfQNQIXpJwDu6WzKzNtzE2a7ZOiIYL+9JB8 HemVd2Jn+iiEdTxw4VHvQ6Cre5uX5nHsiYiC93Vn6ndrzfaHZ8rGgoQSCrC3DxYn LtRR0BMA3SWe3cebE0huiFxsuS9eTXB4Ye5S+QczwK3LeniqmjHX5qXepMt+tfqZ dCrbhi2xM3nmbAnPOIzWyyhFCN0vYf3fF/IV1MzgvAKiaCFA2YvCqDrOf+GfHka2 -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:33 2025 by rpki-client