$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft File: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft (raw, json) Hash identifier: Bm+MfYGTlRBrtvQmOysDi1lQrG67aGDk1bBwBmTWDFg= Subject key identifier: 62:57:A8:78:28:5F:E1:0A:9F:45:50:69:ED:F0:C7:6B:5F:BD:5B:3E Authority key identifier: 92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F Certificate issuer: /CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Certificate serial: 010D0C9F4328584BC1BD55373F9A0EDEB96DDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft Manifest number: 010D0C9F4328584A21C7587CA6AD09944CFCDF17 Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: 79a68e4a-63c9-343a-a4c3-0a5e94130274.roa (hash: LBjyYA//8nyTaBD7uDEdik8N1NAs0INu2XWbpXgMvrs=) 2: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl (hash: LHYzFFB5KaZ/qejb/3rzNAknZJx0IkwES3oyTS9TG5g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:55:37:3f:9a:0e:de:b9:6d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=e341d576-4d24-4d0d-adf8-3aedb4c1e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:38:1e:92:bb:fc:46:16:3b:d1:ec:b0:70: cb:1d:bd:a9:74:f3:9c:bf:0e:82:8e:ae:9d:02:05: 73:87:4e:8c:40:da:4f:5a:be:3f:04:85:00:21:f0: 15:12:b9:de:f2:54:fc:79:15:62:3c:02:0e:b9:8f: 97:84:46:f3:b4:a1:88:46:d6:63:e6:ff:a0:3b:6c: d6:0c:08:2b:ae:4f:d4:61:1b:02:67:2e:15:65:5c: e2:86:a6:ce:5b:04:bd:f4:95:97:f4:11:20:c1:ca: 7d:37:a2:bd:08:ae:28:89:08:65:59:ac:0f:29:c9: 92:bc:56:1f:df:b8:4d:30:4b:68:49:57:2f:30:a5: 38:7a:c6:0a:45:74:5b:bd:cb:16:45:dc:02:84:07: f5:e2:74:0b:73:15:fd:67:19:20:11:96:28:a9:72: dc:58:9a:02:c3:2a:81:61:6d:a4:ea:d8:86:61:9f: 79:ec:6c:bb:f2:d5:50:4c:60:43:d1:3f:da:2b:cd: 8f:71:0b:47:ff:62:35:76:c4:bc:92:88:03:25:ad: 66:67:3d:e9:68:01:08:60:cb:61:91:31:4d:82:d6: 5b:47:cc:39:67:b3:ec:8b:b8:de:6b:03:1a:79:3b: a0:f2:15:93:b7:6b:bd:85:4f:22:1a:ff:4f:de:27: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:A8:78:28:5F:E1:0A:9F:45:50:69:ED:F0:C7:6B:5F:BD:5B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl X509v3 Authority Key Identifier: keyid:92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:16:b6:cf:b2:3b:c7:75:2f:51:29:a2:4f:ad:fe:19:58:bd: 50:c1:6d:06:73:c4:32:53:1c:dc:d2:1d:c7:a3:47:f5:7f:11: aa:5b:e7:6c:5d:fd:dd:2a:73:14:a1:e6:d2:d9:90:6f:37:c7: 39:dd:bc:f1:40:41:94:19:15:ba:76:9f:bc:2b:54:27:d6:3b: 57:44:34:62:49:99:d1:19:6a:a1:49:c5:b8:9d:ad:52:46:ea: 57:42:0d:a6:ad:fb:b8:8d:94:cc:ad:2a:9c:7e:0a:8b:51:7c: ca:06:33:27:ce:4b:19:8f:3a:89:66:bf:6d:2c:6c:f4:e0:5d: 18:c7:79:b8:e7:24:75:66:55:a3:01:49:9b:a8:e9:7d:4a:8e: af:0f:fb:81:2e:c7:4e:40:8e:0e:55:aa:cb:55:f2:20:27:3a: 8f:d2:7e:94:40:52:3b:1a:06:a4:5c:13:bf:cc:a1:8e:58:b2: f7:0b:f6:99:a6:72:77:a7:e8:0c:a0:50:3f:7b:bd:3b:e4:f7: 27:3a:d1:ef:ec:f5:77:89:ec:32:e0:79:e4:ce:ce:d5:f7:82: e3:9e:7c:d6:cb:df:c5:c7:1e:3a:ee:8d:f4:4b:54:a8:e7:8c: 69:6d:a5:55:f3:ba:df:88:a8:69:7a:c7:81:cf:77:1d:04:70: 12:c2:3e:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVU3P5oO3rlt3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3MjBlMTMtOGNmNi00YmQ3LThiNGUtOGRkM2ZmODYy ZjI4MB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk ZTM0MWQ1NzYtNGQyNC00ZDBkLWFkZjgtM2FlZGI0YzFlOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN84HpK7/EYWO9HssHDLHb2pdPOcvw6Cjq6d AgVzh06MQNpPWr4/BIUAIfAVErne8lT8eRViPAIOuY+XhEbztKGIRtZj5v+gO2zW DAgrrk/UYRsCZy4VZVzihqbOWwS99JWX9BEgwcp9N6K9CK4oiQhlWawPKcmSvFYf 37hNMEtoSVcvMKU4esYKRXRbvcsWRdwChAf14nQLcxX9ZxkgEZYoqXLcWJoCwyqB YW2k6tiGYZ957Gy78tVQTGBD0T/aK82PcQtH/2I1dsS8kogDJa1mZz3paAEIYMth kTFNgtZbR8w5Z7Psi7jeawMaeTug8hWTt2u9hU8iGv9P3icUIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGJXqHgoX+EKn0VQae3wx2tfvVs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jODcy MGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQzZmY4NjJmMjgvYzg3MjBlMTMtOGNmNi00 YmQ3LThiNGUtOGRkM2ZmODYyZjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzg3MjBlMTMtOGNmNi00YmQ3LThi NGUtOGRkM2ZmODYyZjI4L2M4NzIwZTEzLThjZjYtNGJkNy04YjRlLThkZDNmZjg2 MmYyOC5jcmwwHwYDVR0jBBgwFoAUkgUiKDDULHHZvg2GIYRFZT8oiH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jODcyMGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQz ZmY4NjJmMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChFrbPsjvHdS9RKaJPrf4Z WL1QwW0Gc8QyUxzc0h3Ho0f1fxGqW+dsXf3dKnMUoebS2ZBvN8c53bzxQEGUGRW6 dp+8K1Qn1jtXRDRiSZnRGWqhScW4na1SRupXQg2mrfu4jZTMrSqcfgqLUXzKBjMn zksZjzqJZr9tLGz04F0Yx3m45yR1ZlWjAUmbqOl9So6vD/uBLsdOQI4OVarLVfIg JzqP0n6UQFI7GgakXBO/zKGOWLL3C/aZpnJ3p+gMoFA/e7075PcnOtHv7PV3iewy 4Hnkzs7V94LjnnzWy9/Fxx467o30S1So54xpbaVV87rfiKhpeseBz3cdBHASwj5E -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:20 2025 by rpki-client