$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft File: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft (raw, json) Hash identifier: jAXDQhgGNTturidGZnbUfvR7OoIN9jugmWbjLHKLJtU= Subject key identifier: CF:D0:4D:32:04:72:4A:6B:28:13:55:C1:72:87:84:35:E1:C3:C1:B7 Authority key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Certificate issuer: /CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Certificate serial: 010D0C9F4328584BBFC311474705D61849260680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft Manifest number: 010D0C9F43285849864C6858DE047781D0D32814 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl (hash: 7hbWaaPp6wl0j751rcr5+64T0+UqkMBjFZUK5I+yCYU=) 2: f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa (hash: eaWxcWBd55SWp1gnWIbYlsdOunDdXdFQcE9FenlXPwY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:47:47:05:d6:18:49:26:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=228279e0-61ce-4ead-bc60-e5205495988a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:93:ba:f9:52:eb:38:ad:dd:20:83:3b:2a: e3:f2:f8:67:a0:39:fc:5c:5b:db:a5:a6:dd:2a:27: 21:29:41:dc:35:0d:48:24:9c:d9:70:b8:3d:1b:31: 3f:93:bc:d2:56:04:60:dd:0e:86:6f:3b:08:d5:0e: 7f:6e:c3:da:a0:ac:1c:bd:57:7e:85:93:bb:96:9c: 4c:3f:a0:7c:10:a7:1a:42:fb:26:d9:3f:ab:bf:5c: b1:b4:9a:95:23:f5:90:43:f3:43:8f:78:85:c6:8f: 0c:cc:e0:db:9f:33:d4:d6:ea:4b:e2:06:c7:fa:af: cb:23:02:97:33:40:0f:1e:4a:23:87:37:cf:12:a6: 45:43:f3:f2:e3:94:c5:21:8d:4a:3f:1d:69:bf:cb: 96:85:b7:74:ec:6e:6d:3f:c6:63:62:bb:1c:df:fa: cd:29:c3:e5:ac:82:a5:1b:76:98:55:ac:64:c2:b9: 8f:ec:38:76:d5:1f:09:aa:0e:1c:0c:d3:3f:4a:8d: 44:62:19:a1:e0:b4:fd:b9:15:03:bd:cd:c6:73:d8: 65:d9:7e:19:13:14:66:21:69:8d:e9:a2:b9:68:db: 0d:bf:87:fe:e6:6a:2e:30:5d:7b:84:37:49:fb:d6: af:d6:f2:9e:f9:ed:43:3b:6e:6a:fc:c8:ce:ef:88: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:4D:32:04:72:4A:6B:28:13:55:C1:72:87:84:35:E1:C3:C1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl X509v3 Authority Key Identifier: keyid:47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7f:21:ed:2e:c6:0a:bf:1d:51:a6:e4:94:06:4e:92:fe:a3: 1b:cd:d3:50:78:df:c5:70:fc:3e:c8:32:32:9e:fa:28:0e:38: fd:a5:a0:af:b0:9a:85:25:c4:ef:b2:5b:1b:4b:7c:17:29:0d: 3c:a2:c2:81:f4:1f:84:76:4d:04:1b:93:3a:6f:af:a7:70:59: e6:69:7e:1a:ef:54:85:54:81:12:9f:5e:ce:e0:00:aa:e0:e8: 2b:2f:cf:35:3f:89:92:13:01:19:42:5f:a7:fd:51:69:b9:27: 66:6b:bf:5c:c9:0c:8c:0b:16:f6:e9:db:5e:ba:47:a9:ff:9d: 9c:c5:00:35:79:fb:09:b3:49:87:25:1c:be:e0:df:e6:67:84: 43:bc:7a:e2:55:d2:9e:1c:36:80:a2:58:51:91:c5:c0:db:c6: 2a:5c:2a:99:5b:01:d7:b1:f3:b8:b6:a3:f0:3d:f4:57:90:42: e2:74:0c:5d:a5:82:ae:82:ca:cb:20:5f:2b:b0:79:12:32:99: 18:41:66:45:43:1d:09:eb:a3:e1:98:e6:76:f1:c8:77:30:71: 94:19:b6:bc:11:2f:a4:77:96:00:b0:eb:2e:91:22:03:6d:95: 92:7d:53:54:86:8b:22:cd:f6:b4:5b:bd:34:10:7e:48:82:17: 4c:fa:da:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxFHRwXWGEkmBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmNDhhMjgtN2FhMi00YTdmLWI4NWUtNzFiNzcwZGEy ZWU1MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk MjI4Mjc5ZTAtNjFjZS00ZWFkLWJjNjAtZTUyMDU0OTU5ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiCTuvlS6zit3SCDOyrj8vhnoDn8XFvbpabd KichKUHcNQ1IJJzZcLg9GzE/k7zSVgRg3Q6GbzsI1Q5/bsPaoKwcvVd+hZO7lpxM P6B8EKcaQvsm2T+rv1yxtJqVI/WQQ/NDj3iFxo8MzODbnzPU1upL4gbH+q/LIwKX M0APHkojhzfPEqZFQ/Py45TFIY1KPx1pv8uWhbd07G5tP8ZjYrsc3/rNKcPlrIKl G3aYVaxkwrmP7Dh21R8Jqg4cDNM/So1EYhmh4LT9uRUDvc3Gc9hl2X4ZExRmIWmN 6aK5aNsNv4f+5mouMF17hDdJ+9av1vKe+e1DO25q/MjO74ieJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/QTTIEckprKBNVwXKHhDXhw8G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0 OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBkYTJlZTUvOGJmNDhhMjgtN2FhMi00 YTdmLWI4NWUtNzFiNzcwZGEyZWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJmNDhhMjgtN2FhMi00YTdmLWI4 NWUtNzFiNzcwZGEyZWU1LzhiZjQ4YTI4LTdhYTItNGE3Zi1iODVlLTcxYjc3MGRh MmVlNS5jcmwwHwYDVR0jBBgwFoAURxtKQHSuzhWP+XrpHrVSVcRSkR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3 NzBkYTJlZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnfyHtLsYKvx1RpuSUBk6S /qMbzdNQeN/FcPw+yDIynvooDjj9paCvsJqFJcTvslsbS3wXKQ08osKB9B+Edk0E G5M6b6+ncFnmaX4a71SFVIESn17O4ACq4OgrL881P4mSEwEZQl+n/VFpuSdma79c yQyMCxb26dteukep/52cxQA1efsJs0mHJRy+4N/mZ4RDvHriVdKeHDaAolhRkcXA 28YqXCqZWwHXsfO4tqPwPfRXkELidAxdpYKugsrLIF8rsHkSMpkYQWZFQx0J66Ph mOZ28ch3MHGUGba8ES+kd5YAsOsukSIDbZWSfVNUhosizfa0W700EH5IghdM+tqs -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:50 2025 by rpki-client