$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: LlAf0qx4gpzBf4mfa2jbZ392ZFJFCMz1w5SKt3Lndo4= Subject key identifier: 78:E1:FD:05:F2:4E:D8:00:B6:04:94:64:9F:0A:43:A0:F7:C6:67:FC Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584B93717B7178D6B980874E0E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB318427F Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: oOJXDSVjiMhI8SwTtCKZiY2uAAO2uXSWYn82Lyt9GTc=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: urPQs6bt4pkzVlsgObEdsqmyyLOzqGmF8CSsWDoMRvo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7b:71:78:d6:b9:80:87:4e:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=04ed4cca-67e1-45a4-a71d-da5619347129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:5c:d5:36:8f:70:4b:fe:f6:f8:cb:86:95: 0d:18:51:bd:a5:cd:d1:09:99:d6:6d:65:b8:9b:ea: 9d:28:8c:e5:c8:cc:bc:35:8b:80:00:09:e9:4e:22: 0c:ab:67:7a:51:85:f7:a0:9b:41:05:e5:31:43:2d: 17:0c:02:ed:0a:8b:45:73:95:0b:18:d6:57:37:01: 94:07:c7:58:e6:35:78:46:70:bd:74:13:a8:8a:39: ad:fb:ab:fe:40:85:1f:91:20:b4:11:7d:3f:98:77: 09:ac:4d:2a:61:f9:9a:ae:d9:5b:cf:ac:92:a4:7b: db:e0:cd:f9:fa:61:57:c2:0b:dd:7a:89:c3:17:41: fb:f5:37:26:7e:c9:d0:d5:36:87:8e:40:e9:13:58: 1e:3c:35:05:16:58:2a:ad:40:4f:e0:9d:ee:59:b6: be:dd:fc:25:d0:fa:e7:c2:77:4b:d9:74:ff:b4:27: 77:84:88:df:46:5a:91:41:dc:60:43:ae:4b:94:51: 51:7d:8a:52:81:80:41:28:c9:19:5e:6b:99:4a:3c: 6c:83:19:6d:98:7b:57:e0:08:b8:c4:3f:65:c4:5c: 80:13:be:10:9d:5e:11:99:d4:0b:94:21:fa:70:99: 6d:f9:63:cd:87:fb:3f:fe:03:a0:53:50:3c:92:13: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:FD:05:F2:4E:D8:00:B6:04:94:64:9F:0A:43:A0:F7:C6:67:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:13:aa:d9:c3:95:ea:8a:36:8c:76:28:b9:a8:ec:34:1c:af: 42:c8:62:a3:c1:05:e4:3d:2c:24:e4:4d:c1:18:8e:bd:13:28: ec:3b:91:0c:64:41:ad:25:6d:62:fa:e2:7b:05:f3:4c:71:af: 70:57:13:97:8a:a7:e4:4f:03:12:c6:ff:ac:a6:84:35:91:86: 6b:d9:97:ce:00:22:66:d3:a3:c6:8c:bd:60:3f:6c:da:d4:ab: d9:db:ba:5a:df:2d:dd:34:77:b5:fb:56:f8:33:17:81:59:0c: 88:e2:c8:5d:ee:17:81:5a:be:e7:4b:da:51:cc:be:e3:ed:80: 7b:30:bf:b9:ee:7c:64:6a:04:d5:f2:53:69:85:8d:40:09:43: 89:87:d0:e3:d2:96:27:f1:42:0d:8d:35:2d:27:72:e3:0d:ef: f5:79:f7:d0:56:51:78:4c:f3:81:f3:4e:f3:7a:f9:e2:0b:e9: d9:70:ff:c9:d3:00:79:c6:63:0c:cf:3e:0a:8f:cd:46:ee:32: 58:6d:e5:4b:2b:66:a5:e0:ad:95:cb:8f:ce:5a:94:a4:4e:7c: 6d:1f:ec:c3:eb:59:3a:bd:3f:48:d4:7c:09:ff:33:cc:cc:90: 51:55:94:c5:a8:2f:a9:a1:3b:2b:f1:17:42:58:73:c8:b7:3b: bb:48:20:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcXtxeNa5gIdODoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk MDRlZDRjY2EtNjdlMS00NWE0LWE3MWQtZGE1NjE5MzQ3MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X5c1TaPcEv+9vjLhpUNGFG9pc3RCZnWbWW4 m+qdKIzlyMy8NYuAAAnpTiIMq2d6UYX3oJtBBeUxQy0XDALtCotFc5ULGNZXNwGU B8dY5jV4RnC9dBOoijmt+6v+QIUfkSC0EX0/mHcJrE0qYfmartlbz6ySpHvb4M35 +mFXwgvdeonDF0H79TcmfsnQ1TaHjkDpE1gePDUFFlgqrUBP4J3uWba+3fwl0Prn wndL2XT/tCd3hIjfRlqRQdxgQ65LlFFRfYpSgYBBKMkZXmuZSjxsgxltmHtX4Ai4 xD9lxFyAE74QnV4RmdQLlCH6cJlt+WPNh/s//gOgU1A8khPX+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHjh/QXyTtgAtgSUZJ8KQ6D3xmf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADE6rZw5XqijaMdii5qOw0 HK9CyGKjwQXkPSwk5E3BGI69EyjsO5EMZEGtJW1i+uJ7BfNMca9wVxOXiqfkTwMS xv+spoQ1kYZr2ZfOACJm06PGjL1gP2za1KvZ27pa3y3dNHe1+1b4MxeBWQyI4shd 7heBWr7nS9pRzL7j7YB7ML+57nxkagTV8lNphY1ACUOJh9Dj0pYn8UINjTUtJ3Lj De/1effQVlF4TPOB807zevniC+nZcP/J0wB5xmMMzz4Kj81G7jJYbeVLK2al4K2V y4/OWpSkTnxtH+zD61k6vT9I1HwJ/zPMzJBRVZTFqC+poTsr8RdCWHPItzu7SCD1 -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:38 2025 by rpki-client