$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft File: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft (raw, json) Hash identifier: IiaST3NBRV0oNqImMUlAIuZNlyY34zkhOg0qKTiYEUg= Subject key identifier: 03:69:1C:0F:DB:21:5D:32:8A:C8:D2:D9:C1:3C:38:0B:10:58:AC:2A Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584BBFC3115A3370EFB08C75F820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft Manifest number: 010D0C9F4328584A1A40BB5ED5171D328F14E09A Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (hash: PHa1ToHJPD9O4cRpj3YezUssBj4KGeq3m3yDEPhAglA=) 2: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl (hash: bV07puOysVl18630yS0zSxM6DRz9V5qMeFlCbch4o9U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:5a:33:70:ef:b0:8c:75:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=16785e2a-47b3-42a2-b908-6f9fe0420fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:76:d0:1e:67:c3:f5:a6:b1:e5:cb:32:7d: ff:8c:c9:27:b8:53:be:ff:10:f7:56:d4:0e:1a:e0: de:84:8e:a4:27:36:94:5b:96:62:76:13:ca:76:88: fe:32:80:15:8f:78:84:8c:a2:e5:a5:a3:c8:27:c0: 77:ad:c6:5c:61:ea:62:21:fc:ca:53:6e:f2:38:1b: 41:7d:9c:8d:cf:a7:f2:8c:a3:78:9f:db:d8:6d:9e: 09:f6:a9:b3:28:49:51:9c:3a:b8:64:56:47:35:13: f2:8c:f2:b6:70:78:ef:36:11:51:3a:8e:ae:fc:c5: ea:3d:96:8c:44:fd:25:fa:a1:89:37:3d:63:1d:25: ed:8e:74:c1:12:ed:21:f5:27:83:10:e6:89:00:c9: 39:22:05:43:cd:c0:9b:9b:68:89:2f:6e:06:11:92: 6a:fd:43:4a:2f:4d:7e:f1:85:17:2a:5b:e9:1f:7b: d8:3a:15:1c:40:36:1b:5c:dd:2c:f2:e9:36:ff:f5: af:ce:78:e1:f5:bf:b9:9e:28:f2:2c:78:77:fc:0e: d5:a9:25:ff:f1:f3:47:b2:06:83:6a:23:13:57:4d: 99:d6:d8:39:54:4c:51:cb:14:90:d1:a8:ec:c3:57: 32:11:c1:04:dd:d8:4f:49:b8:39:4c:8f:c2:58:e4: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:69:1C:0F:DB:21:5D:32:8A:C8:D2:D9:C1:3C:38:0B:10:58:AC:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ee:1a:21:3d:13:5b:f4:e8:7b:19:cb:a6:60:a3:d4:15:96: 09:ab:b6:76:e9:91:a1:c2:02:94:79:e7:03:67:31:64:59:5f: 5c:9f:27:4d:97:ae:5f:65:97:32:f0:cc:fa:29:aa:e0:ee:d1: 1e:c9:e0:ba:99:99:1c:22:48:5b:71:d0:94:b5:18:5b:df:fe: 6f:4c:b1:4a:aa:78:31:8a:9f:54:2e:9a:21:b0:44:10:44:4c: 34:05:74:12:5a:c8:d5:14:ac:27:35:64:19:88:c1:6f:42:83: 72:f2:e2:52:03:88:c8:c6:08:64:6c:1e:86:90:80:c1:c7:12: a5:42:54:e2:21:49:01:b9:f5:3b:ef:0c:07:50:ef:8c:f3:4c: 87:44:16:62:30:57:c3:ac:4e:f9:a3:e7:91:62:ad:1d:91:ea: ec:50:97:91:8d:c6:84:31:b0:e5:81:f7:5c:75:71:2d:6d:58: 75:03:f8:e8:44:c1:6b:6d:41:01:1f:da:15:e7:98:2b:2c:f8: 34:6d:ba:60:b9:33:9f:4c:be:8f:cd:bf:7f:02:b1:d1:0a:20: ee:df:36:02:19:ba:b0:9c:9f:2e:f0:3b:93:2a:84:05:5c:fa: ae:c9:e6:e8:0f:b5:45:bd:08:a9:03:a3:ce:66:2b:18:cb:2b: 28:2f:9b:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxFaM3DvsIx1+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk MTY3ODVlMmEtNDdiMy00MmEyLWI5MDgtNmY5ZmUwNDIwZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfx20B5nw/WmseXLMn3/jMknuFO+/xD3VtQO GuDehI6kJzaUW5ZidhPKdoj+MoAVj3iEjKLlpaPIJ8B3rcZcYepiIfzKU27yOBtB fZyNz6fyjKN4n9vYbZ4J9qmzKElRnDq4ZFZHNRPyjPK2cHjvNhFROo6u/MXqPZaM RP0l+qGJNz1jHSXtjnTBEu0h9SeDEOaJAMk5IgVDzcCbm2iJL24GEZJq/UNKL01+ 8YUXKlvpH3vYOhUcQDYbXN0s8uk2//Wvznjh9b+5nijyLHh3/A7VqSX/8fNHsgaD aiMTV02Z1tg5VExRyxSQ0ajsw1cyEcEE3dhPSbg5TI/CWOSW2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANpHA/bIV0yisjS2cE8OAsQWKwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvOGYxZDVlY2QtODc3MC00 NmEyLWI3YzgtMjUxYjU2NGI5ZTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBq7hohPRNb9Oh7GcumYKPU FZYJq7Z26ZGhwgKUeecDZzFkWV9cnydNl65fZZcy8Mz6Karg7tEeyeC6mZkcIkhb cdCUtRhb3/5vTLFKqngxip9ULpohsEQQREw0BXQSWsjVFKwnNWQZiMFvQoNy8uJS A4jIxghkbB6GkIDBxxKlQlTiIUkBufU77wwHUO+M80yHRBZiMFfDrE75o+eRYq0d kersUJeRjcaEMbDlgfdcdXEtbVh1A/joRMFrbUEBH9oV55grLPg0bbpguTOfTL6P zb9/ArHRCiDu3zYCGbqwnJ8u8DuTKoQFXPquyeboD7VFvQipA6POZisYyysoL5sF -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:14 2025 by rpki-client