$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft File: 89089cbd-0f7a-444f-95e7-38535bb2fc45.mft (raw, json) Hash identifier: DOZ4h30yMBoBGjyJxIWhSb2YDPokH0I7ZzuvDYwX1xk= Subject key identifier: D8:4A:CF:65:3E:4D:7A:AA:3D:9C:44:3F:11:D4:A1:4B:05:1A:00:F3 Authority key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Certificate issuer: /CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Certificate serial: 010D0C9F4328584B94D6CB7937BC32DBD9877A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft Manifest number: 010D0C9F4328584B8157F4240AC008B9B2B16E08 Signing time: Mon 20 Oct 2025 06:00:03 +0000 Manifest this update: Mon 20 Oct 2025 06:00:03 +0000 Manifest next update: Wed 22 Oct 2025 06:00:00 +0000 Files and hashes: 1: 89089cbd-0f7a-444f-95e7-38535bb2fc45.crl (hash: zcSesMzvQiNDyhTR2EcKOQUpO474cuZ7Pq8ZIPt0ZnE=) 2: c3caf9bf-119d-3b95-8fe2-eb01dec7d936.roa (hash: /et2jswf58gObofFLm5vTtGhrmvIFDN7duvDcBNCKrM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:d6:cb:79:37:bc:32:db:d9:87:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Validity Not Before: Oct 20 06:00:03 2025 GMT Not After : Oct 22 06:00:00 2025 GMT Subject: CN=6d27476c-04bc-4239-8907-328fb801e85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:d6:e5:5d:53:79:0e:8e:78:4d:30:e3:a7: 68:ba:b1:0a:e7:b0:32:1b:e5:c6:c0:31:4a:9b:71: a1:ba:aa:26:3c:80:39:50:07:a7:e2:01:4e:03:81: 74:99:10:5d:70:d7:1b:ae:df:91:73:20:77:92:d9: db:a0:1e:b8:d0:63:94:39:1d:a5:bb:ac:42:a7:c4: f6:e0:86:97:66:f6:8a:36:96:6b:f2:cc:6c:b2:72: 7d:27:08:d5:d5:c3:af:05:46:1b:5f:e6:54:1b:49: 3c:fa:96:6b:a2:33:ae:13:95:cb:35:a8:90:05:01: d3:55:bc:0f:91:82:17:87:61:1e:71:52:71:f9:f1: 53:12:b8:72:1a:d5:e1:67:85:1c:32:2d:78:7b:20: d3:2b:b7:16:23:71:64:e8:52:a2:71:15:02:96:ec: 04:b5:39:ff:87:34:e9:66:d8:fd:b9:97:0c:53:39: b1:16:cc:2b:c0:7e:ef:3f:a7:50:af:85:0f:3e:da: 37:12:04:14:b1:51:47:5a:2e:4d:a5:bb:30:53:2d: 87:2c:e3:73:d8:62:2e:fa:1b:60:74:ac:8f:9e:ac: 0c:1d:7f:3e:a8:51:4c:0b:a7:ca:c0:9e:9f:14:a2: e5:bf:98:60:34:af:75:97:6f:10:a2:4b:55:37:e9: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4A:CF:65:3E:4D:7A:AA:3D:9C:44:3F:11:D4:A1:4B:05:1A:00:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl X509v3 Authority Key Identifier: keyid:38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9c:9a:76:bd:4c:23:bd:96:36:f8:c8:dc:3b:67:b0:cc:be: f3:63:96:29:bc:1b:4e:3a:65:10:e2:bd:f1:61:85:9d:d9:51: 66:cc:1c:23:58:51:96:d8:b2:0e:13:da:f5:68:b0:32:b8:0c: aa:87:9e:5c:68:b5:3d:f2:08:8a:26:35:ee:29:ae:8d:55:91: 65:9f:3b:68:ea:31:45:1b:39:f0:70:28:e2:06:41:68:7e:76: 83:71:71:8b:60:29:cd:76:da:47:f7:09:e4:18:6e:be:43:15: c5:e8:6c:fc:fc:67:aa:4d:ae:c4:f2:ce:3a:4c:34:bf:a5:82: 42:98:52:71:7c:6b:d9:65:65:d3:26:20:62:38:f5:50:bf:85: 85:2d:34:3b:f7:11:6e:43:b0:52:68:7b:c6:d8:91:e5:b2:d1: 08:88:4f:20:bc:0f:75:b9:20:dc:bd:34:2f:d8:d0:e8:8b:5b: de:52:7a:02:32:ac:51:e6:6a:65:db:c9:17:0a:85:01:97:43: 11:92:b0:60:be:65:b0:76:53:52:6b:da:d5:e5:e6:bd:e9:cb: b5:f6:b2:b2:6d:1e:86:e7:65:6b:1b:ae:d7:00:d7:85:8e:c0: 4a:6a:5c:a7:5f:11:fa:cc:bc:46:46:32:73:e1:0a:33:1f:9b: bd:79:3c:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU1st5N7wy29mHegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkwODljYmQtMGY3YS00NDRmLTk1ZTctMzg1MzViYjJm YzQ1MB4XDTI1MTAyMDA2MDAwM1oXDTI1MTAyMjA2MDAwMFowLzEtMCsGA1UEAxMk NmQyNzQ3NmMtMDRiYy00MjM5LTg5MDctMzI4ZmI4MDFlODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOLW5V1TeQ6OeE0w46dourEK57AyG+XGwDFK m3GhuqomPIA5UAen4gFOA4F0mRBdcNcbrt+RcyB3ktnboB640GOUOR2lu6xCp8T2 4IaXZvaKNpZr8sxssnJ9JwjV1cOvBUYbX+ZUG0k8+pZrojOuE5XLNaiQBQHTVbwP kYIXh2EecVJx+fFTErhyGtXhZ4UcMi14eyDTK7cWI3Fk6FKicRUCluwEtTn/hzTp Ztj9uZcMUzmxFswrwH7vP6dQr4UPPto3EgQUsVFHWi5NpbswUy2HLONz2GIu+htg dKyPnqwMHX8+qFFMC6fKwJ6fFKLlv5hgNK91l28QoktVN+m8CQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNhKz2U+TXqqPZxEPxHUoUsFGgDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4 OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJiMmZjNDUvODkwODljYmQtMGY3YS00 NDRmLTk1ZTctMzg1MzViYjJmYzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkwODljYmQtMGY3YS00NDRmLTk1 ZTctMzg1MzViYjJmYzQ1Lzg5MDg5Y2JkLTBmN2EtNDQ0Zi05NWU3LTM4NTM1YmIy ZmM0NS5jcmwwHwYDVR0jBBgwFoAUOCpaFBZAgvjKkDPdAAB4fSHg8WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUz NWJiMmZjNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYnJp2vUwjvZY2+MjcO2ew zL7zY5YpvBtOOmUQ4r3xYYWd2VFmzBwjWFGW2LIOE9r1aLAyuAyqh55caLU98giK JjXuKa6NVZFlnzto6jFFGznwcCjiBkFofnaDcXGLYCnNdtpH9wnkGG6+QxXF6Gz8 /GeqTa7E8s46TDS/pYJCmFJxfGvZZWXTJiBiOPVQv4WFLTQ79xFuQ7BSaHvG2JHl stEIiE8gvA91uSDcvTQv2NDoi1veUnoCMqxR5mpl28kXCoUBl0MRkrBgvmWwdlNS a9rV5ea96cu19rKybR6G52VrG67XANeFjsBKalynXxH6zLxGRjJz4QozH5u9eTxi -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:26 2025 by rpki-client