$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft File: 8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft (raw, json) Hash identifier: uEhk8gL7Gsy7fq5Jpo63xQGA51dIvTYPNFvsDOzRKN4= Subject key identifier: 4F:17:51:F5:6A:98:FF:34:A9:0A:D4:60:EA:73:23:6A:21:C0:4E:29 Authority key identifier: 69:89:93:4A:46:BE:E3:A2:AB:8D:3A:A1:D0:35:BC:E0:5C:1F:80:36 Certificate issuer: /CN=8f25cc5f-7916-4dd3-810e-a2383e3c90f2 Certificate serial: 010D0C9F4328584B90E261CFF51B2E3AC2A34C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft Manifest number: 010D0C9F4328584B72489591810DA036B9487B8C Signing time: Sat 18 Oct 2025 20:00:08 +0000 Manifest this update: Sat 18 Oct 2025 20:00:08 +0000 Manifest next update: Mon 20 Oct 2025 20:00:00 +0000 Files and hashes: 1: 8e028c9e-ff50-3bb7-bc40-21bbd24b87ca.roa (hash: YaV1k404cKXqaKUvPj6uEp+BAegKMnxR+iWhb7yZwgs=) 2: 8f25cc5f-7916-4dd3-810e-a2383e3c90f2.crl (hash: g2RCcLI1IFfTuE0GDKUni0t3HWY/vHhKzLHhEbiHrbc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:e2:61:cf:f5:1b:2e:3a:c2:a3:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f25cc5f-7916-4dd3-810e-a2383e3c90f2 Validity Not Before: Oct 18 20:00:08 2025 GMT Not After : Oct 20 20:00:00 2025 GMT Subject: CN=18d3fa8f-b5ff-48d4-8ce9-71ef8b936231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:3f:49:ac:f9:1a:71:27:57:d4:52:2e:53: c7:5f:9f:24:d2:31:4e:b3:2d:50:8a:7c:69:0f:8b: 39:19:e1:62:64:38:01:4a:98:ec:fc:ab:59:67:f3: f0:b9:38:ec:93:25:e0:7d:cf:89:ce:a2:09:7a:5d: 86:06:11:31:52:bf:e9:5d:0f:4b:06:4e:53:40:64: 3a:84:cb:b1:14:77:fa:6c:4a:c2:4e:e0:8c:76:89: 53:b2:84:bc:f1:24:e6:58:1d:fa:20:54:66:14:04: 2d:d1:67:82:09:a0:75:9a:d5:a6:bb:84:9b:be:5c: d9:45:e5:d8:53:c1:41:25:1a:41:a8:8d:c5:4f:87: e2:e8:61:bb:18:c7:ec:d0:d9:9f:13:43:0f:3a:0b: 1f:82:72:9e:d4:07:55:91:db:28:c5:ea:ba:a0:b9: 34:4e:48:f2:58:4d:60:31:bd:d4:d6:f8:8a:e4:29: 2e:07:88:44:91:b6:57:9f:ee:53:06:2c:31:fa:93: f5:4e:dd:1c:b9:7d:91:8b:23:8a:b9:8b:41:a6:ed: fa:97:65:1f:06:b3:ff:57:4c:06:82:5d:13:5b:f5: 9f:d2:30:c8:d6:43:38:d5:0d:ae:7e:3d:c9:bf:74: 1a:41:fd:18:15:ba:d3:78:ac:d9:36:2e:e1:9e:bc: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:51:F5:6A:98:FF:34:A9:0A:D4:60:EA:73:23:6A:21:C0:4E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.crl X509v3 Authority Key Identifier: keyid:69:89:93:4A:46:BE:E3:A2:AB:8D:3A:A1:D0:35:BC:E0:5C:1F:80:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8f25cc5f-7916-4dd3-810e-a2383e3c90f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c3:30:71:91:ba:d9:e7:69:de:f2:2e:aa:56:3b:f3:ea:69: 72:3b:19:17:c6:8c:24:db:75:ed:09:a4:05:c4:e8:15:c1:34: 58:c8:64:8c:08:ee:cd:09:16:c1:d7:b9:30:42:0c:df:ba:42: 35:db:0e:ff:ca:63:49:44:a0:d2:3a:e2:3b:6b:0b:63:08:5b: 03:81:a2:7d:2d:1c:03:28:86:19:90:58:71:ab:cc:fa:f4:e6: f9:2e:fd:61:d2:d5:d7:e6:db:f9:b0:e6:f7:99:53:f9:1a:4f: 57:42:1b:8b:67:30:e2:07:87:8a:39:67:34:5d:17:97:56:88: 5d:3b:c5:7e:31:b0:a8:1b:62:fb:7a:14:de:dd:2f:0e:94:83: cd:0b:97:8e:49:d0:b7:7a:87:f8:52:c3:6b:5a:ac:f1:77:12: cb:e9:55:a7:b0:ee:9f:5a:29:97:6f:1e:97:40:ec:76:80:ec: 7c:f6:b5:ed:6c:e3:2d:1f:02:82:37:f8:00:31:6b:c5:39:f8: 0d:5d:7f:3f:1a:e2:a4:e0:bb:ac:2a:1d:ce:c0:1d:86:51:49: e0:21:17:41:56:57:83:d7:6c:ff:51:9b:63:48:c5:0d:c6:a5: 73:2e:87:a4:da:df:64:24:f9:68:02:74:15:1e:67:78:9f:d6: c9:b3:ad:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuQ4mHP9RsuOsKjTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYyNWNjNWYtNzkxNi00ZGQzLTgxMGUtYTIzODNlM2M5 MGYyMB4XDTI1MTAxODIwMDAwOFoXDTI1MTAyMDIwMDAwMFowLzEtMCsGA1UEAxMk MThkM2ZhOGYtYjVmZi00OGQ0LThjZTktNzFlZjhiOTM2MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5s/Saz5GnEnV9RSLlPHX58k0jFOsy1Qinxp D4s5GeFiZDgBSpjs/KtZZ/PwuTjskyXgfc+JzqIJel2GBhExUr/pXQ9LBk5TQGQ6 hMuxFHf6bErCTuCMdolTsoS88STmWB36IFRmFAQt0WeCCaB1mtWmu4SbvlzZReXY U8FBJRpBqI3FT4fi6GG7GMfs0NmfE0MPOgsfgnKe1AdVkdsoxeq6oLk0TkjyWE1g Mb3U1viK5CkuB4hEkbZXn+5TBiwx+pP1Tt0cuX2RiyOKuYtBpu36l2UfBrP/V0wG gl0TW/Wf0jDI1kM41Q2ufj3Jv3QaQf0YFbrTeKzZNi7hnrwIYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE8XUfVqmP80qQrUYOpzI2ohwE4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZjI1 Y2M1Zi03OTE2LTRkZDMtODEwZS1hMjM4M2UzYzkwZjIvOGYyNWNjNWYtNzkxNi00 ZGQzLTgxMGUtYTIzODNlM2M5MGYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGYyNWNjNWYtNzkxNi00ZGQzLTgx MGUtYTIzODNlM2M5MGYyLzhmMjVjYzVmLTc5MTYtNGRkMy04MTBlLWEyMzgzZTNj OTBmMi5jcmwwHwYDVR0jBBgwFoAUaYmTSka+46KrjTqh0DW84FwfgDYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZjI1Y2M1Zi03OTE2LTRkZDMtODEwZS1hMjM4 M2UzYzkwZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4wzBxkbrZ52ne8i6qVjvz 6mlyOxkXxowk23XtCaQFxOgVwTRYyGSMCO7NCRbB17kwQgzfukI12w7/ymNJRKDS OuI7awtjCFsDgaJ9LRwDKIYZkFhxq8z69Ob5Lv1h0tXX5tv5sOb3mVP5Gk9XQhuL ZzDiB4eKOWc0XReXVohdO8V+MbCoG2L7ehTe3S8OlIPNC5eOSdC3eof4UsNrWqzx dxLL6VWnsO6fWimXbx6XQOx2gOx89rXtbOMtHwKCN/gAMWvFOfgNXX8/GuKk4Lus Kh3OwB2GUUngIRdBVleD12z/UZtjSMUNxqVzLoek2t9kJPloAnQVHmd4n9bJs63b -----END CERTIFICATE-----Generated at Sun Oct 19 15:02:16 2025 by rpki-client