$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: pPqRSzuph06PCc9guHXDVU9lnCmPtnhKrkXFy9FN9pc= Subject key identifier: 5E:1F:F4:09:E9:71:87:D8:14:BE:18:CD:9B:7F:11:A1:E1:4D:68:F6 Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584BBE7B7EE3FE4CC80636AAD480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA95336A2 Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Thu 06 Nov 2025 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: qqnXcYyJ8FzY5kAhLdWuE+3mfzQLEICyGgzIuIa33X4=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: YtpuB0WtC9QUTmsg0raGgzyN2o9TEDZRnkt4Y+lO22Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:7e:e3:fe:4c:c8:06:36:aa:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 6 04:00:00 2025 GMT Subject: CN=a0d5447e-e1b6-4fcb-aed7-8d3a035391b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:e4:37:d2:9f:34:f8:1f:6e:db:05:5d:18: 6b:6f:f6:b8:da:5d:31:ed:26:9f:8e:31:03:21:cb: 55:0b:7c:41:3b:bc:22:09:60:ba:de:f0:66:39:84: f0:b0:72:95:7f:93:a9:0f:de:d0:26:3b:7c:d7:52: 7f:f0:48:3b:3e:53:57:47:98:bf:c9:49:31:b2:7d: 8a:18:6a:24:ca:c2:9c:d3:ac:b5:7c:29:e5:58:cf: 23:ff:b1:92:a0:10:ff:19:68:c6:c7:39:fe:f6:e8: 49:e4:99:ce:d2:e7:74:4a:b6:57:da:6c:e2:fe:6e: 26:f7:43:65:f2:fa:19:10:ef:da:00:b3:77:51:a1: 9a:be:5c:72:7f:a2:8b:cb:56:13:55:47:97:49:d2: 5f:a7:e5:93:21:0c:8f:17:01:96:b6:94:59:aa:bf: c9:9f:c2:7e:ae:14:c0:3d:38:2b:9a:9d:d2:6f:ba: 3c:6e:c3:23:0f:c1:03:b8:32:1e:62:fc:74:d1:f5: ef:1b:c0:c7:00:b4:96:c3:64:25:ef:ca:18:a6:2a: ab:bd:42:9b:a2:4f:98:36:c4:a9:f8:df:a1:42:f1: 0d:77:00:e4:ed:df:0f:40:ee:19:68:a8:e7:95:de: 6e:a1:6a:a6:b2:0e:b5:80:7f:09:ee:76:ce:d4:f7: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:F4:09:E9:71:87:D8:14:BE:18:CD:9B:7F:11:A1:E1:4D:68:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:91:54:5e:fb:85:59:67:fb:e3:27:37:31:c2:3b:84:39:c0: 7a:6e:ba:a5:59:a8:56:5d:69:64:8c:d5:f8:66:04:87:e4:b1: a2:24:49:ac:6a:02:f2:4e:16:bc:d8:e5:17:f8:c9:56:2e:79: da:9f:88:68:ac:de:a1:af:d3:7c:f8:18:5c:21:bd:fc:8a:78: 88:6f:80:f4:59:b5:54:5c:3f:dc:f1:bc:ee:0c:6c:02:cc:d1: 0c:54:63:21:3b:a3:f6:84:35:48:8f:a4:0d:00:e7:04:7c:bd: 0a:d7:0e:b7:b8:7e:60:73:0b:09:0b:5e:20:31:8d:55:13:56: ec:48:86:d9:6b:87:4a:60:85:b8:14:0a:bd:58:a1:66:15:30: 9a:87:9b:5d:cb:a7:1e:5e:ed:64:c1:18:29:a0:9f:43:d1:3e: 8e:92:22:40:7b:dc:f3:5a:e6:9f:02:d4:b6:bf:58:15:02:53: fa:cf:4d:d2:09:b0:f7:7e:91:12:f4:fb:cb:7b:ad:f9:84:85: f3:8a:35:d3:0c:85:c2:65:be:d8:0b:01:b5:55:9f:87:09:1c: 51:83:62:0d:18:df:e2:e9:21:03:b2:ea:bd:70:63:aa:f5:3a: ba:00:3b:2d:6f:3f:78:2f:ea:49:b4:ff:73:bf:77:73:13:47: d2:a4:d7:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e37j/kzIBjaq1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNjA0MDAwMFowLzEtMCsGA1UEAxMk YTBkNTQ0N2UtZTFiNi00ZmNiLWFlZDctOGQzYTAzNTM5MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZrkN9KfNPgfbtsFXRhrb/a42l0x7SafjjED IctVC3xBO7wiCWC63vBmOYTwsHKVf5OpD97QJjt811J/8Eg7PlNXR5i/yUkxsn2K GGokysKc06y1fCnlWM8j/7GSoBD/GWjGxzn+9uhJ5JnO0ud0SrZX2mzi/m4m90Nl 8voZEO/aALN3UaGavlxyf6KLy1YTVUeXSdJfp+WTIQyPFwGWtpRZqr/Jn8J+rhTA PTgrmp3Sb7o8bsMjD8EDuDIeYvx00fXvG8DHALSWw2Ql78oYpiqrvUKbok+YNsSp +N+hQvENdwDk7d8PQO4ZaKjnld5uoWqmsg61gH8J7nbO1PdJjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF4f9AnpcYfYFL4YzZt/EaHhTWj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3kVRe+4VZZ/vjJzcxwjuE OcB6brqlWahWXWlkjNX4ZgSH5LGiJEmsagLyTha82OUX+MlWLnnan4horN6hr9N8 +BhcIb38iniIb4D0WbVUXD/c8bzuDGwCzNEMVGMhO6P2hDVIj6QNAOcEfL0K1w63 uH5gcwsJC14gMY1VE1bsSIbZa4dKYIW4FAq9WKFmFTCah5tdy6ceXu1kwRgpoJ9D 0T6OkiJAe9zzWuafAtS2v1gVAlP6z03SCbD3fpES9PvLe635hIXzijXTDIXCZb7Y CwG1VZ+HCRxRg2INGN/i6SEDsuq9cGOq9Tq6ADstbz94L+pJtP9zv3dzE0fSpNcL -----END CERTIFICATE-----Generated at Tue Nov 4 19:58:34 2025 by rpki-client