$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft File: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft (raw, json) Hash identifier: LQ9SGsa8PrvrkpTTeq3U+Ds2xWd53dpGP467h+8bzao= Subject key identifier: D2:6C:11:12:C1:7D:22:76:69:06:88:DD:C9:37:62:C2:26:F9:4C:EC Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584B937181CCD24C625028367D60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft Manifest number: 010D0C9F43285844238BC8FE3994304CD933524E Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (hash: ksV+UuQ/0SB3OK72TPfnUF6cxhSSHSAOg0e/lOofABU=) 2: 6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa (hash: kwXpwKjvamHA1QUxu9dAIIRea+ltZlal2zDRR/qB2EI=) 3: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (hash: +oza/DYNPTYW1TrIAg+SVpka45OUxn3RRyYstKlEzyk=) 4: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl (hash: 4fHJRddl93wMvlpwL8sVUUVeO4EgIJfozXjcwVKfR/Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:81:cc:d2:4c:62:50:28:36:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=ab5c5bb3-03c8-4691-98f2-3e4245abe688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:19:38:f5:54:26:6b:1c:a0:f5:de:b7:55: e2:a1:2e:98:9b:7d:af:a6:ad:a2:f7:30:d8:64:be: 0a:f9:10:bf:2a:8d:b3:95:45:83:c6:ef:c1:b8:56: 74:4c:25:ab:4e:72:e7:74:43:f1:64:80:21:a5:97: 8c:41:07:3a:3e:2c:92:b4:a9:4d:f9:bf:b0:3b:74: d6:e2:fd:f8:7d:34:a8:12:c7:b2:85:ed:b1:d2:c2: b8:ee:a5:17:2d:10:8b:5d:2e:0f:a9:b7:8d:8d:ba: 63:44:3a:3e:1f:52:6a:8d:1e:85:d9:c5:3c:5a:40: 13:85:16:b2:48:d4:1c:5f:7e:fb:8f:16:20:4e:14: cb:e2:c9:82:ea:17:23:22:5c:1f:70:c7:bc:a2:be: f8:6a:99:4f:96:a1:02:c6:8d:bf:97:d4:5f:73:ab: 35:66:26:ab:7d:8b:58:50:16:34:61:12:1d:44:69: 49:c9:84:18:d1:56:01:1c:37:2f:4f:e3:ac:a4:31: 83:2a:70:a2:fc:7c:34:6e:e9:db:5e:10:c2:ce:39: 1d:00:6d:3f:1c:00:0e:e8:1e:ec:90:d6:2e:8a:a2: 80:cf:7e:94:5d:74:6e:7b:0a:c2:0a:31:37:8b:1a: fb:5a:bd:ac:93:ce:6d:cf:00:ae:22:a1:56:cc:48: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:11:12:C1:7D:22:76:69:06:88:DD:C9:37:62:C2:26:F9:4C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:37:b1:e7:bd:d5:30:8c:6d:6c:be:cf:b5:14:45:7b:51:8d: 0c:aa:75:bb:3b:0b:94:94:cf:00:da:b5:ad:6b:f7:4a:96:0e: cc:1a:a9:ec:17:39:97:37:d0:fc:a2:0a:b1:7b:1b:e4:e2:35: 64:89:ee:2e:a7:bc:b4:a3:12:cd:81:a2:95:07:5c:48:4e:d5: 34:63:07:2e:4a:f4:08:9c:89:01:83:cc:f2:68:74:f1:be:e9: 99:01:c3:85:2d:ec:79:94:83:14:cb:07:7a:1c:3e:cc:9c:34: 84:5a:69:b3:27:d0:c6:56:8a:54:c6:3d:29:73:cb:e0:58:1e: 12:83:52:de:70:53:9e:e6:7a:a5:b7:11:d0:d6:7a:9b:78:fe: a1:e2:18:fa:70:0b:26:72:5e:2e:1c:c3:53:b0:c5:9a:14:d2: 26:98:03:60:e0:85:c7:d4:1a:0a:49:94:3e:b0:4d:b6:b2:c7: 70:48:5b:20:55:5a:b1:54:b5:42:f6:18:74:8b:c0:ac:15:2c: 42:82:03:90:66:e4:68:e5:8e:e4:83:8c:c3:65:82:9f:d2:1f: 4a:71:eb:42:30:46:e7:2b:47:b2:4e:f6:a2:67:3b:bb:84:88: 1f:bd:b8:4b:de:dd:a3:be:02:c2:4b:28:7d:3d:52:7b:b6:67: bb:d9:48:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYHM0kxiUCg2fWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk YWI1YzViYjMtMDNjOC00NjkxLTk4ZjItM2U0MjQ1YWJlNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs0ZOPVUJmscoPXet1XioS6Ym32vpq2i9zDY ZL4K+RC/Ko2zlUWDxu/BuFZ0TCWrTnLndEPxZIAhpZeMQQc6PiyStKlN+b+wO3TW 4v34fTSoEseyhe2x0sK47qUXLRCLXS4PqbeNjbpjRDo+H1JqjR6F2cU8WkAThRay SNQcX377jxYgThTL4smC6hcjIlwfcMe8or74aplPlqECxo2/l9Rfc6s1ZiarfYtY UBY0YRIdRGlJyYQY0VYBHDcvT+OspDGDKnCi/Hw0bunbXhDCzjkdAG0/HAAO6B7s kNYuiqKAz36UXXRuewrCCjE3ixr7Wr2sk85tzwCuIqFWzEjK9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNJsERLBfSJ2aQaI3ck3YsIm+UzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvZDhhMGYxNzYtYjRhMi00 ZTMyLThhOTgtNGUxMmUwN2Q4OTk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHN7HnvdUwjG1svs+1FEV7 UY0MqnW7OwuUlM8A2rWta/dKlg7MGqnsFzmXN9D8ogqxexvk4jVkie4up7y0oxLN gaKVB1xITtU0YwcuSvQInIkBg8zyaHTxvumZAcOFLex5lIMUywd6HD7MnDSEWmmz J9DGVopUxj0pc8vgWB4Sg1LecFOe5nqltxHQ1nqbeP6h4hj6cAsmcl4uHMNTsMWa FNImmANg4IXH1BoKSZQ+sE22ssdwSFsgVVqxVLVC9hh0i8CsFSxCggOQZuRo5Y7k g4zDZYKf0h9KcetCMEbnK0eyTvaiZzu7hIgfvbhL3t2jvgLCSyh9PVJ7tme72UjP -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:31 2025 by rpki-client