$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft File: f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft (raw, json) Hash identifier: x6j5kf9Pku7uPYZLi7cb69cOYT35cXU+fZLzoixrwT4= Subject key identifier: 32:A6:47:F2:0B:37:86:52:0F:24:01:47:43:E6:74:DC:D8:1F:17:BC Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Certificate issuer: /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Certificate serial: 010D0C9F4328584BC0CF19E489B4E2FCBEE17140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft Manifest number: 010D0C9F43285848008B984CEDA61AA469C042C1 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Sat 08 Nov 2025 00:00:00 +0000 Files and hashes: 1: d0aa6771-362e-3935-947a-bfd5081d3828.roa (hash: nR7gfYroKSThU9vvWXn3UW3i8RiwYDWIj+BrjH6Ccao=) 2: f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl (hash: NM9WJ9jBZ9EJ1WLu/p9ENQqR4lRCuT2aYWsi5r/YGCg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:19:e4:89:b4:e2:fc:be:e1:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 8 00:00:00 2025 GMT Subject: CN=96cb2a8c-e778-43c6-9d4a-7fe9519ce0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:ed:7c:d7:b6:a7:95:27:4e:37:bf:02:dd: c9:65:48:af:c0:15:87:1a:34:9e:24:c9:74:22:5f: e2:0d:0e:a0:5c:33:fb:16:6e:02:da:f1:ae:2c:ea: 58:d9:4a:d7:4a:18:95:45:e9:a3:80:85:1d:4c:1f: 50:0d:6e:78:c0:01:88:64:19:f2:9a:c2:a5:93:bb: bf:48:cb:1b:f1:b2:5d:a5:aa:78:9d:09:62:0c:3d: 75:a8:ae:97:b0:ec:9a:51:c3:41:b7:69:1b:fc:06: 8b:68:ea:15:d9:98:5a:19:83:78:9e:81:68:65:80: 74:3e:37:2b:21:72:50:64:b0:2e:af:5c:65:f7:7b: ec:14:ca:95:2a:21:db:55:40:9a:b8:c3:0e:bb:86: f3:7a:c8:75:23:84:51:ab:cd:a0:83:9f:42:89:91: 96:85:c5:67:bd:ca:c7:b9:ab:a9:dc:ea:5a:03:f4: bd:80:dd:10:b2:09:b4:c9:19:36:c1:2d:2a:6b:d4: 89:33:61:de:bd:25:b8:36:9c:d6:f9:9e:97:63:c2: 6e:06:93:1c:a1:e5:5a:c5:d0:4e:ab:f4:5a:b6:b4: 08:13:84:d8:d7:9a:c1:d8:d6:64:95:28:34:a3:2e: 7f:bc:34:22:d7:5d:a9:21:16:45:aa:09:0b:55:ad: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A6:47:F2:0B:37:86:52:0F:24:01:47:43:E6:74:DC:D8:1F:17:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl X509v3 Authority Key Identifier: keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:af:73:5c:25:73:ad:07:10:cd:8a:df:8e:57:6e:72:56: 50:6e:25:b9:09:56:2e:4c:68:20:6d:9b:1f:52:22:b3:ba:67: 66:93:88:aa:28:b4:48:7f:72:6f:91:ea:3f:ca:81:af:a7:3f: f7:a0:26:f6:94:b9:6f:85:b9:29:4d:a2:34:76:4a:e4:96:9e: dd:fd:6b:11:83:18:e5:51:8d:0f:b6:d4:eb:00:6a:86:3b:50: f7:07:a4:aa:51:1e:16:6c:e7:4d:b6:15:ae:7f:64:14:15:37: d0:ef:6c:36:9b:cd:1a:dd:13:0f:eb:f2:c7:99:b3:9c:a0:f3: 72:c7:33:c4:f6:51:a6:a3:78:da:5a:60:31:78:28:bd:fd:d5: 3b:db:28:21:d0:5c:4b:b1:f1:ce:50:44:2b:cf:33:03:b9:d9: a4:dd:5f:ab:95:30:69:c4:da:f0:7d:f5:f7:1b:d4:dd:16:c8: 9e:d4:fa:96:52:1d:9e:19:67:a8:fa:cc:0a:c9:ac:c7:03:83: 73:59:79:c1:2f:48:85:72:52:27:7c:53:c7:1c:47:03:23:5d: 3b:6a:40:0a:2b:b3:92:93:a5:5f:78:63:a4:2f:c8:d3:45:67: b0:b6:3c:22:15:03:16:5a:2d:0b:28:55:f2:b1:8c:e0:68:83: ee:41:b4:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxnkibTi/L7hcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4 ZTc0MB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwODAwMDAwMFowLzEtMCsGA1UEAxMk OTZjYjJhOGMtZTc3OC00M2M2LTlkNGEtN2ZlOTUxOWNlMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTtfNe2p5UnTje/At3JZUivwBWHGjSeJMl0 Il/iDQ6gXDP7Fm4C2vGuLOpY2UrXShiVRemjgIUdTB9QDW54wAGIZBnymsKlk7u/ SMsb8bJdpap4nQliDD11qK6XsOyaUcNBt2kb/AaLaOoV2ZhaGYN4noFoZYB0Pjcr IXJQZLAur1xl93vsFMqVKiHbVUCauMMOu4bzesh1I4RRq82gg59CiZGWhcVnvcrH uaup3OpaA/S9gN0Qsgm0yRk2wS0qa9SJM2HevSW4NpzW+Z6XY8JuBpMcoeVaxdBO q/RatrQIE4TY15rB2NZklSg0oy5/vDQi112pIRZFqgkLVa0Z/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKmR/ILN4ZSDyQBR0PmdNzYHxe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOGZh ODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvZjhmYTg1MWYtMGM2Zi00 NGEyLTgwMTctN2IwNjJmNGQ4ZTc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjhmYTg1MWYtMGM2Zi00NGEyLTgw MTctN2IwNjJmNGQ4ZTc0L2Y4ZmE4NTFmLTBjNmYtNDRhMi04MDE3LTdiMDYyZjRk OGU3NC5jcmwwHwYDVR0jBBgwFoAU364p3EgjoHT15jh5JneG6KzQa54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2 MmY0ZDhlNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7Q69zXCVzrQcQzYrfjldu clZQbiW5CVYuTGggbZsfUiKzumdmk4iqKLRIf3Jvkeo/yoGvpz/3oCb2lLlvhbkp TaI0dkrklp7d/WsRgxjlUY0PttTrAGqGO1D3B6SqUR4WbOdNthWuf2QUFTfQ72w2 m80a3RMP6/LHmbOcoPNyxzPE9lGmo3jaWmAxeCi9/dU72ygh0FxLsfHOUEQrzzMD udmk3V+rlTBpxNrwffX3G9TdFsie1PqWUh2eGWeo+swKyazHA4NzWXnBL0iFclIn fFPHHEcDI107akAKK7OSk6VfeGOkL8jTRWewtjwiFQMWWi0LKFXysYzgaIPuQbQh -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:50 2025 by rpki-client