$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft File: a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft (raw, json) Hash identifier: JeiBE6unQNJFikBnFsBwZhV9Ro+tkLQaiVUUZCy6gHU= Subject key identifier: 43:1E:ED:5A:21:C2:2C:70:8F:5D:90:37:4E:40:10:E9:31:F0:1D:5F Authority key identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 Certificate issuer: /CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Certificate serial: 010D0C9F4328584B95C5024D8F50F00F05CB6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft Manifest number: 010D0C9F432858476B5AACB6B7DDB96C59669D07 Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl (hash: l4DuTdnTfPlAHYXs9D8orMisH1/aKjKqoE0i6hHowVI=) 2: e3e497f1-f8f5-352b-996e-ccd1a70e9442.roa (hash: HmwWHckx9zs3oMdBJEwFTd/KLZ4NfHdBYKXMJj2zOfY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:02:4d:8f:50:f0:0f:05:cb:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=ff8df777-9714-408d-99a0-1762948af4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:b0:76:e1:eb:00:fc:73:95:98:c9:b2:6a: 4b:1c:13:8a:74:5a:6c:de:ca:f0:88:bb:f5:cb:d0: b5:e6:cc:d4:40:c7:fa:b3:88:3b:d0:7e:bd:f4:21: 71:19:ae:20:ac:07:b0:63:61:56:e2:17:3c:c8:03: a5:d5:a4:3e:b8:ff:1c:00:46:69:9b:15:41:24:49: c4:2b:43:ac:78:3e:60:f0:7c:a9:30:07:13:ed:54: 8d:c3:2b:54:27:f2:53:59:a6:25:e5:54:a0:64:31: 1c:ff:02:77:2d:1a:bd:e2:7c:6c:65:2a:85:ba:ac: 6a:52:be:43:f5:40:d9:51:be:75:e1:bc:34:bd:65: ad:85:c2:4a:a2:50:96:5a:34:e1:e0:af:35:08:f2: 71:6a:2b:81:08:a4:d4:0b:a2:74:bb:a5:a1:27:3d: 73:93:32:6d:10:c2:4f:a4:c6:10:16:b3:e6:36:dd: aa:2a:96:64:88:e2:5c:72:ec:1e:7f:ae:56:7e:a7: 29:23:6d:27:5f:b4:5c:07:14:f4:59:5c:1f:cf:f7: b5:58:b5:2f:64:c4:bc:5c:a6:0c:4f:62:a0:0a:13: 2f:8c:d8:f6:f8:1f:d2:a5:7e:30:a4:c1:3a:a7:fa: 6f:b3:95:cf:cd:20:c9:5d:c9:cf:86:7a:9a:37:42: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:ED:5A:21:C2:2C:70:8F:5D:90:37:4E:40:10:E9:31:F0:1D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.crl X509v3 Authority Key Identifier: keyid:B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:86:c0:1d:da:78:65:94:38:6a:2f:6c:d3:ae:81:4e:90:d6: b5:43:67:c5:64:fa:56:36:57:5c:22:3e:f1:30:a1:2a:ee:99: 8b:68:2c:4b:01:3f:58:d4:28:9b:cf:6b:9e:fe:96:87:9b:a6: 8e:a1:a9:85:4c:8e:3b:8c:cb:2e:f2:74:8e:67:f5:4e:b2:f1: 91:91:0c:b3:6f:57:a9:c7:4a:2b:18:4c:85:b5:c8:92:b8:ea: 89:4b:d0:df:79:5c:38:80:df:07:e5:21:a0:91:38:d5:bf:2d: 14:88:ae:4f:1f:4d:09:bb:15:f8:08:d8:ae:b9:b4:ba:7a:e8: 1f:89:86:2e:fd:88:bd:cf:89:f8:fb:76:ba:2b:0e:61:17:0c: dc:58:39:d1:27:c9:17:e3:6b:07:6e:49:3e:56:8b:db:ca:97: 24:e8:df:15:40:7d:23:d1:56:cc:25:64:9b:cd:73:3a:49:5a: 77:d0:3b:53:92:42:67:74:94:d3:67:6d:0e:6a:cd:28:22:8e: ae:92:35:ab:3b:1c:ca:e9:a9:79:f8:d5:c0:bd:ca:08:21:50: b6:8f:59:2c:39:8b:e7:a8:73:3b:38:3a:32:7a:88:6c:23:a5: c6:69:0d:82:ce:d8:de:7f:50:98:9a:d5:f1:32:1e:50:54:8f: d0:da:e1:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQJNj1DwDwXLYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiNGM3ZDMtNzU5OS00NzFlLWExZWEtNmRlN2IxNTgy YzVmMB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZmY4ZGY3NzctOTcxNC00MDhkLTk5YTAtMTc2Mjk0OGFmNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkawduHrAPxzlZjJsmpLHBOKdFps3srwiLv1 y9C15szUQMf6s4g70H699CFxGa4grAewY2FW4hc8yAOl1aQ+uP8cAEZpmxVBJEnE K0OseD5g8HypMAcT7VSNwytUJ/JTWaYl5VSgZDEc/wJ3LRq94nxsZSqFuqxqUr5D 9UDZUb514bw0vWWthcJKolCWWjTh4K81CPJxaiuBCKTUC6J0u6WhJz1zkzJtEMJP pMYQFrPmNt2qKpZkiOJccuwef65WfqcpI20nX7RcBxT0WVwfz/e1WLUvZMS8XKYM T2KgChMvjNj2+B/SpX4wpME6p/pvs5XPzSDJXcnPhnqaN0K2YQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEMe7Vohwixwj12QN05AEOkx8B1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0 YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1ODJjNWYvYThiNGM3ZDMtNzU5OS00 NzFlLWExZWEtNmRlN2IxNTgyYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYThiNGM3ZDMtNzU5OS00NzFlLWEx ZWEtNmRlN2IxNTgyYzVmL2E4YjRjN2QzLTc1OTktNDcxZS1hMWVhLTZkZTdiMTU4 MmM1Zi5jcmwwHwYDVR0jBBgwFoAUsaewuEUeFVnBHrAqXXddxTsk7skwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3 YjE1ODJjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2hsAd2nhllDhqL2zTroFO kNa1Q2fFZPpWNldcIj7xMKEq7pmLaCxLAT9Y1Cibz2ue/paHm6aOoamFTI47jMsu 8nSOZ/VOsvGRkQyzb1epx0orGEyFtciSuOqJS9DfeVw4gN8H5SGgkTjVvy0UiK5P H00JuxX4CNiuubS6eugfiYYu/Yi9z4n4+3a6Kw5hFwzcWDnRJ8kX42sHbkk+Vovb ypck6N8VQH0j0VbMJWSbzXM6SVp30DtTkkJndJTTZ20Oas0oIo6ukjWrOxzK6al5 +NXAvcoIIVC2j1ksOYvnqHM7ODoyeohsI6XGaQ2Cztjef1CYmtXxMh5QVI/Q2uHQ -----END CERTIFICATE-----Generated at Mon Oct 20 18:40:04 2025 by rpki-client