$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft File: 8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft (raw, json) Hash identifier: c0GIZHAQ0tJvxWgVE/9n3pGeNDXhgw1VqGi+bLNYUZ0= Subject key identifier: 83:F7:A6:D5:EC:AE:12:AF:57:C0:64:04:C7:50:6C:F6:75:D8:F9:EA Authority key identifier: 50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78 Certificate issuer: /CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3 Certificate serial: 010D0C9F4328584BC0938017E8312A4A8F24FB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft Manifest number: 010D0C9F432858488EAEF03BCAAE4748BC73763D Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Thu 06 Nov 2025 22:00:00 +0000 Files and hashes: 1: 442d46dd-d5c2-308b-9c55-2ccd7d26857f.roa (hash: y7BWHlv95iNufb87Yk6DE8nDBfwFNVHzwZAjh7LeEQ0=) 2: 8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl (hash: wRc3ZyOPJC2cL3X0DZ9a9PXehCwmGqmswQPTGmZEfpA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:80:17:e8:31:2a:4a:8f:24:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 6 22:00:00 2025 GMT Subject: CN=da2cd4b4-019f-488c-8d4d-3940c86eb898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:52:62:0b:1a:a6:77:0d:7d:1e:6f:d6:20: b3:b3:7e:f8:40:e8:c1:28:26:03:18:d5:98:3a:e1: 36:4c:af:06:50:82:31:bc:02:0d:7f:e3:7b:06:b2: 58:c5:ef:b8:ab:6d:d5:9f:e1:6e:7c:8b:31:29:8b: 38:f6:23:02:42:82:73:e6:4d:54:d3:54:18:b2:3c: f9:c9:c5:ff:11:6c:8d:9b:a4:f4:1a:1c:a5:88:96: e5:6d:69:19:44:28:c7:95:2c:94:02:67:26:e6:a0: 3f:9f:54:b9:80:94:57:6c:54:98:76:3b:26:f5:4d: eb:a2:df:df:dc:93:31:66:17:e3:d0:bd:2e:f1:8e: c1:0f:93:f2:67:1b:f1:62:f5:3f:46:c0:a2:b6:1a: 65:94:34:6c:32:dd:0e:43:4c:51:24:52:3e:70:ea: c8:8f:8f:de:cd:99:f0:99:1e:9e:ac:5b:6b:86:c7: 09:24:0e:69:60:65:99:b5:77:db:08:47:42:d0:1b: a8:93:9b:7e:78:f8:8b:6f:5d:a2:28:ea:df:4b:8b: 65:26:9e:1d:5f:a0:db:94:1d:1e:e2:07:82:1f:fd: db:1e:2a:16:ca:b9:df:51:28:32:e0:17:bc:00:0a: a8:ff:a8:2d:7e:ab:0b:a2:23:af:37:3f:b5:43:b9: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:A6:D5:EC:AE:12:AF:57:C0:64:04:C7:50:6C:F6:75:D8:F9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl X509v3 Authority Key Identifier: keyid:50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:87:16:42:28:09:0a:26:94:33:f7:4a:c9:f4:74:91:e1:76: 75:f2:67:32:77:bc:ed:4b:75:e3:bd:07:cc:5a:45:9d:5c:1c: 4a:e3:ef:f4:1a:74:8b:6d:9d:4f:95:41:73:1c:f3:83:73:85: 49:f3:9b:72:d6:3e:80:74:61:51:b3:d3:69:9a:10:fb:f9:75: b1:41:3a:37:b6:6f:8b:8d:27:1d:3b:fc:16:91:83:08:d3:ef: b1:1d:23:de:e6:f4:fb:ea:68:65:6d:10:64:74:0c:62:92:1e: 74:aa:1a:53:a5:9a:75:11:ce:4e:0f:d0:31:bc:b6:d2:8a:94: be:22:37:d3:59:fd:ec:dc:ef:8d:07:01:67:1f:89:5b:07:07: 22:94:e2:1d:3b:7b:70:35:b5:90:be:5b:ee:31:1e:28:0e:c8: fb:62:15:0d:c8:d2:e6:bf:74:94:05:df:16:70:c1:e1:3b:58: 3e:eb:ce:ba:51:a6:8a:0d:37:3a:26:fc:96:ab:08:32:54:32: 25:e1:f7:fd:56:11:54:1d:31:5f:26:2d:69:72:59:13:55:1e: 58:91:af:91:7f:b9:73:b5:56:bc:90:9b:c4:01:f7:4a:87:5b: 68:42:cf:51:46:c3:13:fc:0d:a0:f4:8f:66:ee:43:b1:bf:56: d8:92:a5:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4AX6DEqSo8k+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJhYzk3ZjUtZDIxYy00OGQyLWFlYzctODUwZDdmOTNk NWIzMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNjIyMDAwMFowLzEtMCsGA1UEAxMk ZGEyY2Q0YjQtMDE5Zi00ODhjLThkNGQtMzk0MGM4NmViODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQNSYgsapncNfR5v1iCzs374QOjBKCYDGNWY OuE2TK8GUIIxvAINf+N7BrJYxe+4q23Vn+FufIsxKYs49iMCQoJz5k1U01QYsjz5 ycX/EWyNm6T0GhyliJblbWkZRCjHlSyUAmcm5qA/n1S5gJRXbFSYdjsm9U3rot/f 3JMxZhfj0L0u8Y7BD5PyZxvxYvU/RsCithpllDRsMt0OQ0xRJFI+cOrIj4/ezZnw mR6erFtrhscJJA5pYGWZtXfbCEdC0Buok5t+ePiLb12iKOrfS4tlJp4dX6DblB0e 4geCH/3bHioWyrnfUSgy4Be8AAqo/6gtfqsLoiOvNz+1Q7k3tQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIP3ptXsrhKvV8BkBMdQbPZ12PnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YmFj OTdmNS1kMjFjLTQ4ZDItYWVjNy04NTBkN2Y5M2Q1YjMvOGJhYzk3ZjUtZDIxYy00 OGQyLWFlYzctODUwZDdmOTNkNWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGJhYzk3ZjUtZDIxYy00OGQyLWFl YzctODUwZDdmOTNkNWIzLzhiYWM5N2Y1LWQyMWMtNDhkMi1hZWM3LTg1MGQ3Zjkz ZDViMy5jcmwwHwYDVR0jBBgwFoAUUOL6Gol3cY2pos+w0LCuPVANengwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YmFjOTdmNS1kMjFjLTQ4ZDItYWVjNy04NTBk N2Y5M2Q1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRhxZCKAkKJpQz90rJ9HSR 4XZ18mcyd7ztS3XjvQfMWkWdXBxK4+/0GnSLbZ1PlUFzHPODc4VJ85ty1j6AdGFR s9NpmhD7+XWxQTo3tm+LjScdO/wWkYMI0++xHSPe5vT76mhlbRBkdAxikh50qhpT pZp1Ec5OD9AxvLbSipS+IjfTWf3s3O+NBwFnH4lbBwcilOIdO3twNbWQvlvuMR4o Dsj7YhUNyNLmv3SUBd8WcMHhO1g+6866UaaKDTc6JvyWqwgyVDIl4ff9VhFUHTFf Ji1pclkTVR5Yka+Rf7lztVa8kJvEAfdKh1toQs9RRsMT/A2g9I9m7kOxv1bYkqUm -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:30 2025 by rpki-client