$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft File: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft (raw, json) Hash identifier: tKV06h7qD6R9/affXUtpmvtc31ZNfAE1/DqwmrbAMjA= Subject key identifier: 44:8D:D9:9F:B6:3B:45:C3:0A:EC:0C:2B:4E:FE:15:86:8A:7C:07:47 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584B963C317FC5EE24BA85F0B900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft Manifest number: 010D0C9F43285844238BC8FE3994304CD933524F Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (hash: ksV+UuQ/0SB3OK72TPfnUF6cxhSSHSAOg0e/lOofABU=) 2: 6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa (hash: kwXpwKjvamHA1QUxu9dAIIRea+ltZlal2zDRR/qB2EI=) 3: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (hash: +oza/DYNPTYW1TrIAg+SVpka45OUxn3RRyYstKlEzyk=) 4: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl (hash: gUnSni85Cijv4/HhtoeCoQiQpnjMmRSqDmy8aInb1DM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:31:7f:c5:ee:24:ba:85:f0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=883aa9fa-370d-401e-a493-212d773d598a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:65:d2:9c:d3:77:23:27:1b:c5:ad:2b:0e: 2d:75:32:32:7b:18:94:6d:a5:d5:5d:5c:57:45:dd: 5a:8d:c2:a5:ed:9f:7b:d8:32:98:a7:ce:02:97:8e: 68:ad:3c:f6:21:73:86:19:4d:ae:81:b7:12:b8:5e: d3:12:0c:aa:38:5a:22:1f:8d:9a:3a:b8:1e:df:7d: 61:ab:36:24:3b:83:cb:29:1f:9c:38:b3:3a:22:c1: 7e:40:75:1f:7b:96:8e:a3:54:4f:4f:23:fc:a4:65: e2:5d:45:0d:40:cc:1f:3a:f0:d9:d1:e3:0b:7d:2b: a6:f9:96:b5:0f:30:2b:57:f0:b5:78:37:45:68:7d: a1:79:2d:00:b1:59:54:5d:fc:84:b0:ce:ee:64:86: b8:7f:09:a2:c0:84:a4:ca:f8:17:17:99:69:96:47: ff:a0:27:2d:1d:17:92:fa:0a:66:f5:a1:e2:71:aa: 09:71:e2:d6:62:67:40:fb:22:70:89:7b:fb:61:f1: 8b:01:e2:de:d7:b4:c1:ae:db:ac:f0:50:de:18:4e: 13:2f:22:7a:71:65:47:7b:bf:8a:68:4e:c6:05:af: 37:98:1b:fd:94:e7:6b:f3:8d:39:c5:5c:1b:a6:1a: 8b:5f:be:71:cb:54:62:6d:cc:69:72:be:a2:5b:be: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:D9:9F:B6:3B:45:C3:0A:EC:0C:2B:4E:FE:15:86:8A:7C:07:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e8:85:8c:8e:5c:a1:bd:89:16:db:b1:84:aa:a2:13:97:f8: 87:45:2d:80:87:b2:3d:4b:0d:b6:2a:9e:db:9c:3b:7b:a0:28: 39:e9:87:17:10:85:34:b4:2c:48:bf:10:e7:73:f7:d7:6b:63: de:6a:50:c0:cf:2b:d4:54:ca:13:01:56:ee:3e:47:40:b6:32: da:8d:4f:26:f3:c9:80:85:95:f1:32:37:ff:45:7a:b0:72:6f: 33:56:27:de:aa:fb:36:e7:ff:d4:70:65:00:e1:07:d4:34:a1: d6:b3:88:b4:8c:f3:ab:0f:1f:dc:5a:03:d1:e5:08:53:94:1f: d5:0d:75:92:c4:98:4e:b6:b8:52:06:78:05:29:18:09:42:1a: 1b:af:89:43:1f:4b:bf:dd:d5:a4:a6:19:df:86:f7:50:e4:6a: 15:66:44:5d:47:7c:13:5b:02:c8:c7:af:2e:98:28:a5:fa:a2: f3:88:de:f8:39:fc:60:e2:cf:eb:42:58:0a:44:80:f1:04:50: ec:2e:97:25:14:76:09:aa:c5:7c:e1:94:c5:e5:3e:58:8d:7e: 6e:a9:7a:59:10:ca:f9:19:81:e7:f2:92:d6:42:21:52:7c:04: bb:03:6c:17:86:56:de:bf:89:e5:46:55:b6:23:2b:e5:1a:8e: 1d:cb:de:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPDF/xe4kuoXwuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk ODgzYWE5ZmEtMzcwZC00MDFlLWE0OTMtMjEyZDc3M2Q1OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBtl0pzTdyMnG8WtKw4tdTIyexiUbaXVXVxX Rd1ajcKl7Z972DKYp84Cl45orTz2IXOGGU2ugbcSuF7TEgyqOFoiH42aOrge331h qzYkO4PLKR+cOLM6IsF+QHUfe5aOo1RPTyP8pGXiXUUNQMwfOvDZ0eMLfSum+Za1 DzArV/C1eDdFaH2heS0AsVlUXfyEsM7uZIa4fwmiwISkyvgXF5lplkf/oCctHReS +gpm9aHicaoJceLWYmdA+yJwiXv7YfGLAeLe17TBrtus8FDeGE4TLyJ6cWVHe7+K aE7GBa83mBv9lOdr8405xVwbphqLX75xy1Ribcxpcr6iW76aZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFESN2Z+2O0XDCuwMK07+FYaKfAdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvZDhhMGYxNzYtYjRhMi00 ZTMyLThhOTgtNGUxMmUwN2Q4OTk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw6IWMjlyhvYkW27GEqqIT l/iHRS2Ah7I9Sw22Kp7bnDt7oCg56YcXEIU0tCxIvxDnc/fXa2PealDAzyvUVMoT AVbuPkdAtjLajU8m88mAhZXxMjf/RXqwcm8zVifeqvs25//UcGUA4QfUNKHWs4i0 jPOrDx/cWgPR5QhTlB/VDXWSxJhOtrhSBngFKRgJQhobr4lDH0u/3dWkphnfhvdQ 5GoVZkRdR3wTWwLIx68umCil+qLziN74Ofxg4s/rQlgKRIDxBFDsLpclFHYJqsV8 4ZTF5T5YjX5uqXpZEMr5GYHn8pLWQiFSfAS7A2wXhlbev4nlRlW2IyvlGo4dy95X -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:02 2025 by rpki-client