$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft File: a8d70f86-b257-4225-9609-989938a4164f.mft (raw, json) Hash identifier: QxRdBezK6CQeTNK7XMPNXLmOEpCcHqrpUFDWvLsqnOE= Subject key identifier: B3:C9:7D:0B:B0:28:4F:A6:75:C9:EF:7F:30:2D:6B:F6:0E:D0:29:1E Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584B9229E1ACF4D2D7EFB3D93400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft Manifest number: 010D0C9F4328584B816AC2FE5D272DDE15CA1A46 Signing time: Sun 19 Oct 2025 07:00:03 +0000 Manifest this update: Sun 19 Oct 2025 07:00:03 +0000 Manifest next update: Wed 22 Oct 2025 07:00:00 +0000 Files and hashes: 1: 7dd92ad1-f1cc-37bf-8270-6190c245e6fc.roa (hash: NlJlLaCiLw61n1eFQE3EUOoW/2UrrNKwWt71agPFOyE=) 2: a8d70f86-b257-4225-9609-989938a4164f.crl (hash: qfBzX8efLkmIyxaemstcKZdXeRahwACIjiKpumEZSLs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:29:e1:ac:f4:d2:d7:ef:b3:d9:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Oct 19 07:00:03 2025 GMT Not After : Oct 22 07:00:00 2025 GMT Subject: CN=ecf8b584-cb24-45dc-8a39-6d9408e5f6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:65:45:4a:8d:a7:01:0b:80:34:b6:07:d6: da:83:34:61:47:20:3b:cb:b8:bf:ff:0d:47:43:e7: 40:1b:69:55:99:cc:71:b6:8e:06:9b:eb:77:b3:fa: 4a:9a:ec:94:d9:21:78:1f:d7:d8:c2:4f:96:5a:17: 79:48:8c:15:f6:cf:92:fc:68:46:f5:6f:c0:48:40: 7d:7e:86:bf:08:fe:2f:84:50:47:af:d6:03:39:5f: 10:ec:41:68:61:43:3e:57:63:20:3a:01:a4:7b:d6: bc:ea:df:29:1a:a9:0c:75:b4:8c:85:1d:14:57:f4: 6b:85:b6:89:6f:bb:ca:92:ad:d4:e5:9d:b4:2e:bc: f0:51:f5:fe:5e:ca:c9:83:f6:ca:e3:22:b9:71:1b: 72:96:50:7f:7e:0f:ee:94:21:8e:be:8f:14:de:5b: 57:c8:7d:4b:04:14:52:cc:09:3e:9f:c0:cc:19:43: 21:49:91:f2:95:5b:25:61:cb:05:d4:3e:d2:2e:8b: 85:fe:49:b6:1c:05:2f:6f:47:e9:ed:80:1c:73:83: 69:34:03:1a:3e:14:43:25:2e:f0:36:2f:ed:23:b8: 86:80:43:16:42:e2:f3:7b:4b:f8:d5:96:5f:6c:72: 26:63:2d:c0:40:5f:14:c7:ca:53:b2:bf:8f:e0:03: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:7D:0B:B0:28:4F:A6:75:C9:EF:7F:30:2D:6B:F6:0E:D0:29:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:84:1c:41:62:4f:52:d7:c7:bc:c3:8b:11:cd:86:f4:a8:0c: 6b:ae:8a:49:a0:83:d8:72:db:fc:94:16:9e:1e:2a:41:d4:4a: b8:f7:67:fa:2f:9e:3e:09:94:30:f3:f8:ac:9e:09:4d:4a:b5: 5c:91:f7:96:da:1a:e5:9b:da:15:bf:51:62:91:36:11:3e:31: 13:a0:f0:0d:72:84:57:82:b7:ec:05:d1:b5:ab:91:c2:ef:29: 4c:67:5e:d0:7c:cd:ae:0e:6a:11:96:fd:cd:0e:27:50:e4:69: 71:f9:08:8a:fe:fd:fe:6b:e3:27:cf:71:f6:97:ef:12:b7:dc: c3:4e:8a:63:70:36:ba:83:18:1d:f6:af:cd:f7:ca:bd:82:75: 52:dc:15:11:97:39:1f:23:8e:5e:0b:1d:99:67:2d:a5:32:cc: ac:34:f3:c6:2a:47:b4:9b:39:cf:c2:14:da:93:7a:23:42:66: ed:78:8d:72:ee:ea:f8:e8:f1:87:88:0a:db:18:2b:a2:a2:03: 79:80:49:ff:cd:f0:ae:e2:ab:64:27:53:61:78:52:dc:58:cd: 58:b0:8c:50:77:a3:57:1b:53:c1:51:06:cb:02:90:98:48:10: 7f:7c:8d:80:ac:26:4d:7c:02:c6:1e:d9:cf:94:63:3b:59:8d: d1:b5:34:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSKeGs9NLX77PZNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI1MTAxOTA3MDAwM1oXDTI1MTAyMjA3MDAwMFowLzEtMCsGA1UEAxMk ZWNmOGI1ODQtY2IyNC00NWRjLThhMzktNmQ5NDA4ZTVmNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnollRUqNpwELgDS2B9bagzRhRyA7y7i//w1H Q+dAG2lVmcxxto4Gm+t3s/pKmuyU2SF4H9fYwk+WWhd5SIwV9s+S/GhG9W/ASEB9 foa/CP4vhFBHr9YDOV8Q7EFoYUM+V2MgOgGke9a86t8pGqkMdbSMhR0UV/RrhbaJ b7vKkq3U5Z20LrzwUfX+XsrJg/bK4yK5cRtyllB/fg/ulCGOvo8U3ltXyH1LBBRS zAk+n8DMGUMhSZHylVslYcsF1D7SLouF/km2HAUvb0fp7YAcc4NpNAMaPhRDJS7w Ni/tI7iGgEMWQuLze0v41ZZfbHImYy3AQF8Ux8pTsr+P4APvHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLPJfQuwKE+mdcnvfzAta/YO0CkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvYThkNzBmODYtYjI1Ny00 MjI1LTk2MDktOTg5OTM4YTQxNjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1hBxBYk9S18e8w4sRzYb0 qAxrropJoIPYctv8lBaeHipB1Eq492f6L54+CZQw8/isnglNSrVckfeW2hrlm9oV v1FikTYRPjEToPANcoRXgrfsBdG1q5HC7ylMZ17QfM2uDmoRlv3NDidQ5Glx+QiK /v3+a+Mnz3H2l+8St9zDTopjcDa6gxgd9q/N98q9gnVS3BURlzkfI45eCx2ZZy2l MsysNPPGKke0mznPwhTak3ojQmbteI1y7ur46PGHiArbGCuiogN5gEn/zfCu4qtk J1NheFLcWM1YsIxQd6NXG1PBUQbLApCYSBB/fI2ArCZNfALGHtnPlGM7WY3RtTQF -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:43 2025 by rpki-client