$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft File: e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft (raw, json) Hash identifier: 2ELaMxMxV2d8yX9JRoWaF2C2CESumAhVzZaFO8U3Qd0= Subject key identifier: F2:C3:17:79:C3:98:02:CE:64:46:AD:D8:CB:F8:FC:46:91:FF:4B:80 Authority key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Certificate issuer: /CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Certificate serial: 010D0C9F4328584B95A73ED764D44BD4AF02B1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft Manifest number: 010D0C9F4328584073A855E0A9B391A20808E504 Signing time: Mon 20 Oct 2025 13:00:03 +0000 Manifest this update: Mon 20 Oct 2025 13:00:03 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl (hash: 8gyCdmTKfIgBft8P4I4V9U13+XyONBGw2n8wX0NbYyU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:3e:d7:64:d4:4b:d4:af:02:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Validity Not Before: Oct 20 13:00:03 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=0bd79a32-231e-4001-8a2b-2ee809e4bac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ba:68:bc:98:93:d9:c4:e5:c6:a0:bf:fd:1b: 3e:ec:f3:43:32:99:ee:80:3d:26:7e:83:de:a7:11: 38:92:42:fa:1a:b2:ee:10:90:90:cb:ee:44:fc:e1: 6f:7a:89:2e:45:86:d1:06:60:44:8a:62:d8:3b:e2: ef:3a:e3:97:a8:d2:2d:7e:d4:f1:b5:b0:7f:8e:18: 52:b1:86:35:91:63:2a:79:6d:34:e1:58:7d:4f:4f: 3a:29:74:6a:cc:65:d1:52:47:d5:cb:ff:01:cf:6d: 51:ec:6b:93:da:1d:3d:e8:5e:03:4c:a1:43:9d:40: ad:c0:97:81:0f:af:33:0f:7d:db:af:9f:ac:07:c7: 13:5b:7b:78:b4:46:ce:44:44:97:9d:86:85:71:d6: a4:94:ff:67:9f:6f:8e:dd:1c:44:e6:2c:1e:f3:22: d2:ee:48:b3:92:1e:61:23:8a:b2:ab:58:07:f9:7e: 78:7b:7d:66:b2:af:f0:a3:9d:74:e7:59:b5:ac:38: 0e:04:5e:b8:4e:c8:fb:d8:6a:55:93:7f:66:5d:6e: a6:3d:ac:94:1b:5d:0b:c3:fc:be:2d:e1:f8:68:9a: f3:8b:21:f6:31:f7:03:08:0b:e8:92:52:df:99:fc: 8f:ea:a2:43:fd:00:1d:6a:0e:93:f0:22:d5:24:98: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C3:17:79:C3:98:02:CE:64:46:AD:D8:CB:F8:FC:46:91:FF:4B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.crl X509v3 Authority Key Identifier: keyid:78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:14:76:0f:d3:18:fb:1f:af:ad:75:a2:4a:ce:b3:4f:c5:30: 34:21:33:7c:ab:98:97:0f:de:4b:95:99:0a:e9:6c:15:9d:52: 3e:d1:52:22:b0:85:ef:fb:c2:8e:91:3b:4a:e9:65:b3:09:c5: 3a:17:cc:b7:a9:08:f7:8f:fb:4c:63:d8:f4:9b:6a:d2:4a:81: 4d:be:c7:88:c4:19:01:36:ed:b5:58:b0:63:5c:f8:9f:20:3f: cf:7d:69:87:e4:44:ba:21:f2:6b:6c:d0:63:0a:8b:69:43:67: 71:66:96:44:57:ba:2e:97:49:3c:ea:43:ec:0f:c9:9d:62:59: 67:ff:e3:e2:f1:d0:50:96:30:a0:8d:a3:6d:8e:5a:41:97:95: c8:44:41:0e:ae:81:b0:96:15:be:b3:b3:8b:72:65:ba:21:58: f4:58:17:8e:9d:24:9b:40:58:8b:db:0a:6f:87:e3:97:7e:2d: 56:64:14:2a:e5:77:e1:e2:76:ee:84:6f:00:56:1e:62:77:35: a3:f7:ad:88:b2:a1:53:ee:25:fc:65:55:49:b8:6f:33:48:46: 78:7f:74:aa:f0:aa:2d:98:ad:5c:5b:7c:c5:33:a5:82:6c:fb: bd:5c:f9:c3:94:d0:7b:56:bc:63:5d:c2:d1:de:ff:c1:44:5f: b9:d7:2a:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVpz7XZNRL1K8CscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0 ZDAxMB4XDTI1MTAyMDEzMDAwM1oXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk MGJkNzlhMzItMjMxZS00MDAxLThhMmItMmVlODA5ZTRiYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rpovJiT2cTlxqC//Rs+7PNDMpnugD0mfoPe pxE4kkL6GrLuEJCQy+5E/OFveokuRYbRBmBEimLYO+LvOuOXqNItftTxtbB/jhhS sYY1kWMqeW004Vh9T086KXRqzGXRUkfVy/8Bz21R7GuT2h096F4DTKFDnUCtwJeB D68zD33br5+sB8cTW3t4tEbORESXnYaFcdaklP9nn2+O3RxE5iwe8yLS7kizkh5h I4qyq1gH+X54e31msq/wo51051m1rDgOBF64Tsj72GpVk39mXW6mPayUG10Lw/y+ LeH4aJrziyH2MfcDCAvoklLfmfyP6qJD/QAdag6T8CLVJJgf6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPLDF3nDmALOZEat2Mv4/EaR/0uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMy OWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvZThjMjllMzgtYThkZi00 MTVjLWEyOGItYTE0NjVmOWE0ZDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZThjMjllMzgtYThkZi00MTVjLWEy OGItYTE0NjVmOWE0ZDAxL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1hMjhiLWExNDY1Zjlh NGQwMS5jcmwwHwYDVR0jBBgwFoAUeAe6NOGFy8MpALrpYvOu5kGzMgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2 NWY5YTRkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMFHYP0xj7H6+tdaJKzrNP xTA0ITN8q5iXD95LlZkK6WwVnVI+0VIisIXv+8KOkTtK6WWzCcU6F8y3qQj3j/tM Y9j0m2rSSoFNvseIxBkBNu21WLBjXPifID/PfWmH5ES6IfJrbNBjCotpQ2dxZpZE V7oul0k86kPsD8mdYlln/+Pi8dBQljCgjaNtjlpBl5XIREEOroGwlhW+s7OLcmW6 IVj0WBeOnSSbQFiL2wpvh+OXfi1WZBQq5Xfh4nbuhG8AVh5idzWj962IsqFT7iX8 ZVVJuG8zSEZ4f3Sq8KotmK1cW3zFM6WCbPu9XPnDlNB7VrxjXcLR3v/BRF+51yqj -----END CERTIFICATE-----Generated at Mon Oct 20 20:29:14 2025 by rpki-client