$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft File: 8b860252-78e2-47ac-a6f1-f1dc5a900776.mft (raw, json) Hash identifier: 5jFO6H7P4EzehF4y2n2qGbCgVjk8cy0aRz8cvTHQ5WY= Subject key identifier: F5:79:24:D2:5B:AE:A9:77:B1:17:49:B0:92:4C:08:9E:4C:87:38:21 Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Certificate serial: 010D0C9F4328584BC252388B58F60CF90A5CE300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft Manifest number: 010D0C9F4328584073A8569161DEC896B8FF36A4 Signing time: Wed 05 Nov 2025 13:00:08 +0000 Manifest this update: Wed 05 Nov 2025 13:00:08 +0000 Manifest next update: Sat 08 Nov 2025 13:00:00 +0000 Files and hashes: 1: 8b860252-78e2-47ac-a6f1-f1dc5a900776.crl (hash: iMYtds9l1/arQBODLrrdmALb1Fc8cVAnN/7KP7hXlLA=) 2: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (hash: mcPu/iNTLFGzS+T4lL1nFaQIsZjE7bM90ET6U8G/1kU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:52:38:8b:58:f6:0c:f9:0a:5c:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Validity Not Before: Nov 5 13:00:08 2025 GMT Not After : Nov 8 13:00:00 2025 GMT Subject: CN=2f4b88a2-3a72-4cd3-a415-97260a6ec8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:45:ca:09:db:70:31:c8:86:91:cb:b6:fd: 40:24:32:ab:98:ad:60:e6:84:ef:12:a4:9f:ef:d9: 71:ba:1e:4f:f4:c1:c2:d8:4f:90:5b:c4:87:51:13: 8a:6d:9c:8e:a0:00:7b:41:c7:66:34:10:3a:0c:14: 61:86:5c:8b:3b:b6:ec:be:6b:91:97:15:f6:2b:bd: 53:9a:86:28:4c:3a:57:cb:4f:11:17:cb:d2:2c:c1: 3b:e6:3a:2b:b4:87:18:ae:c7:fb:4d:f6:a8:7b:2b: a8:26:7b:fb:ce:21:32:63:8e:cb:a1:da:a4:cb:4c: 8b:db:e7:20:dd:2a:b3:5f:cd:d6:24:55:85:ca:c3: d2:bd:96:e6:db:30:99:cd:48:13:6d:29:be:bf:26: 2a:bc:d9:85:b9:2b:7d:ea:a5:ee:67:1a:06:c4:b6: 5f:86:9e:ea:82:68:f3:f5:ad:c3:79:34:8a:0b:25: fa:3a:56:a7:65:a2:f8:a1:73:10:62:d8:39:72:6c: 69:52:67:b3:1e:34:77:ae:19:de:64:af:a6:0b:dd: 03:57:35:f4:eb:ab:1f:e4:9b:0e:4f:7f:27:94:23: 39:41:c7:37:ef:bf:4f:f6:3d:8b:85:74:e5:7d:dd: 1d:d7:a6:0c:f2:c0:bb:ba:97:1d:20:2b:87:c4:cc: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:24:D2:5B:AE:A9:77:B1:17:49:B0:92:4C:08:9E:4C:87:38:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl X509v3 Authority Key Identifier: keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:81:4d:56:f3:43:65:91:74:6b:b0:10:a9:3c:3d:28:c8:40: f4:3b:b5:eb:41:4a:1f:d7:c3:07:37:fd:d3:ca:f3:90:fb:86: 57:b6:9b:11:b8:f2:bc:d7:ab:3a:cb:04:b9:23:c4:1c:58:5c: cc:99:be:1b:2c:ad:7d:7f:4a:f4:18:29:65:81:0c:05:db:24: e2:e0:a0:d1:5b:39:71:65:7f:2d:41:6e:ef:49:22:76:76:e4: d9:54:20:af:f1:32:f8:ed:84:98:4b:9a:09:15:e4:ef:ba:92: eb:5d:98:aa:a1:9e:d3:a6:82:82:1a:e7:72:4e:24:46:a2:33: 3c:6a:3f:f6:0b:0d:68:96:7d:ec:22:9b:31:52:b5:92:7c:03: 7b:86:8c:87:b6:b3:29:32:6e:ee:49:79:7f:ec:36:34:bf:49: cf:86:f3:19:3c:f4:9c:d4:e4:74:a3:4b:39:9e:88:64:9f:00: 21:43:f9:7c:f4:69:00:7b:2a:4f:20:85:a7:14:a5:cc:5d:63: a3:df:d9:d2:c5:0b:ae:fe:7e:35:ac:7c:ec:49:4a:35:37:4b: 5a:2d:dd:bc:3b:d2:4a:d6:c8:8f:63:35:c6:81:57:fa:0e:e1: 00:4f:2d:a7:dc:cb:0b:9b:b4:97:d1:2e:21:3f:a2:2b:2c:97: 29:8a:12:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCUjiLWPYM+Qpc4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw Nzc2MB4XDTI1MTEwNTEzMDAwOFoXDTI1MTEwODEzMDAwMFowLzEtMCsGA1UEAxMk MmY0Yjg4YTItM2E3Mi00Y2QzLWE0MTUtOTcyNjBhNmVjOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8pFygnbcDHIhpHLtv1AJDKrmK1g5oTvEqSf 79lxuh5P9MHC2E+QW8SHUROKbZyOoAB7QcdmNBA6DBRhhlyLO7bsvmuRlxX2K71T moYoTDpXy08RF8vSLME75jortIcYrsf7TfaoeyuoJnv7ziEyY47Lodqky0yL2+cg 3SqzX83WJFWFysPSvZbm2zCZzUgTbSm+vyYqvNmFuSt96qXuZxoGxLZfhp7qgmjz 9a3DeTSKCyX6OlanZaL4oXMQYtg5cmxpUmezHjR3rhneZK+mC90DVzX066sf5JsO T38nlCM5Qcc3779P9j2LhXTlfd0d16YM8sC7upcdICuHxMzsYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPV5JNJbrql3sRdJsJJMCJ5MhzghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2 MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvOGI4NjAyNTItNzhlMi00 N2FjLWE2ZjEtZjFkYzVhOTAwNzc2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2 ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj NWE5MDA3NzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAgU1W80NlkXRrsBCpPD0o yED0O7XrQUof18MHN/3TyvOQ+4ZXtpsRuPK816s6ywS5I8QcWFzMmb4bLK19f0r0 GCllgQwF2yTi4KDRWzlxZX8tQW7vSSJ2duTZVCCv8TL47YSYS5oJFeTvupLrXZiq oZ7TpoKCGudyTiRGojM8aj/2Cw1oln3sIpsxUrWSfAN7hoyHtrMpMm7uSXl/7DY0 v0nPhvMZPPSc1OR0o0s5nohknwAhQ/l89GkAeypPIIWnFKXMXWOj39nSxQuu/n41 rHzsSUo1N0taLd28O9JK1siPYzXGgVf6DuEATy2n3MsLm7SX0S4hP6IrLJcpihLT -----END CERTIFICATE-----Generated at Wed Nov 5 14:46:54 2025 by rpki-client