$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft File: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft (raw, json) Hash identifier: SzXsRxvXxiLN3wn1BkyPXNiehWuiDuWtfq7q+Zcq4Mo= Subject key identifier: 53:9C:2C:26:ED:02:B8:A9:E8:E0:31:EF:CD:86:B6:72:F7:9E:54:AB Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F4328584B9659EC06D25B6AF2D141E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft Manifest number: 010D0C9F4328584164056837E0B16E008FA068D8 Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (hash: TXduy3f/qz5xye/CK8dhrk1r5yAWzOkXdJUvl6Kv5EE=) 2: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl (hash: TSQJi9MBL3oTNKP4cIQAoGBWLO3dzwTOTKdYas08+o8=) 3: ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (hash: d5/uGoud9GRtSvlMh9vTQqVM8pIFya/E+YFzyqlI1F4=) 4: aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (hash: BKOdWdbatUfookIWnocfOa5Qqz6EGKuY9UadwkKHWo8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:ec:06:d2:5b:6a:f2:d1:41:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=94dde916-2dc2-4b77-b928-771e9bfcc419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4a:51:80:8b:f3:1a:e2:6f:19:de:e6:ac:90: ba:77:a2:f2:f5:3b:90:cd:63:67:06:42:ef:f2:7c: 43:04:ac:b0:40:1a:fd:29:4c:5e:34:fd:76:86:b6: 33:6b:51:05:ad:da:1a:55:ab:90:d6:fd:fd:77:80: fb:58:52:e0:64:f4:c4:fc:c0:17:51:49:7e:f8:24: 14:e2:00:5d:7f:01:27:ee:69:48:3b:62:4c:07:c0: 14:11:5e:09:09:34:d4:2d:63:60:94:f7:50:43:67: b2:17:70:f0:37:27:e3:1c:60:c0:7d:42:fe:18:c5: f1:6c:b0:98:aa:cf:10:32:5e:54:53:4d:6b:1f:97: 90:d5:4b:56:fb:8b:2c:4b:6e:26:73:17:9a:48:60: 53:df:c7:1f:ed:83:bc:d7:cd:24:26:75:56:14:be: 57:06:ec:ac:4b:ac:b2:19:07:49:ab:6b:99:c7:99: 9e:9f:a5:28:7a:ee:11:c0:38:37:32:d2:e6:84:39: 67:81:0c:b0:19:14:3e:a2:c4:b9:16:1b:a3:56:37: ff:a2:e8:62:36:57:cf:01:50:3b:17:fa:7f:71:91: b5:9b:ad:d8:48:5d:24:32:68:d0:2f:3b:29:db:6e: 49:89:08:17:ee:bc:84:2e:5d:b2:9a:11:ed:95:e8: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:2C:26:ED:02:B8:A9:E8:E0:31:EF:CD:86:B6:72:F7:9E:54:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:86:0e:45:3a:f9:40:b8:ea:74:8c:f4:05:75:ea:84:09:a4: d7:d9:9d:ee:52:d2:df:b0:ff:6c:71:91:84:4b:f1:4e:46:0a: e1:b6:af:48:75:1c:c7:93:15:59:d9:2b:ee:f0:7f:f5:03:34: 6e:0c:56:e3:08:a1:32:a8:7c:ca:e0:be:7e:14:b2:1a:7a:0d: 83:e1:24:2f:2d:dd:66:9c:30:24:0f:93:80:41:1f:2d:a1:f7: 47:c2:7d:90:1b:af:7e:bd:2a:2f:1b:4d:38:23:ea:e7:99:f5: 4e:6b:6f:d1:28:db:1d:fd:f7:d6:e9:d7:04:44:88:aa:47:64: c9:43:ea:a3:15:22:f9:32:76:c2:91:ec:79:d3:86:90:7c:04: 61:eb:12:a5:69:7c:e7:28:29:e1:7a:8c:01:a0:da:e8:54:83: 51:0a:c0:4e:f3:2d:a1:03:33:9b:34:43:37:37:5a:d8:be:57: 2c:b1:b1:a3:4b:5f:fb:9a:53:84:c3:77:04:95:e7:df:75:fe: 90:ec:80:a9:bf:dc:4a:ac:81:e3:51:fa:8e:0b:d0:8f:cd:2f: c6:e3:8f:7b:d4:59:fa:dd:cc:10:98:fd:e2:b0:09:ac:0c:8e: 12:05:d2:33:d0:c1:09:04:8f:b6:79:88:14:f2:af:f0:0d:7d: 3d:b0:37:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWewG0ltq8tFB6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk OTRkZGU5MTYtMmRjMi00Yjc3LWI5MjgtNzcxZTliZmNjNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UpRgIvzGuJvGd7mrJC6d6Ly9TuQzWNnBkLv 8nxDBKywQBr9KUxeNP12hrYza1EFrdoaVauQ1v39d4D7WFLgZPTE/MAXUUl++CQU 4gBdfwEn7mlIO2JMB8AUEV4JCTTULWNglPdQQ2eyF3DwNyfjHGDAfUL+GMXxbLCY qs8QMl5UU01rH5eQ1UtW+4ssS24mcxeaSGBT38cf7YO8180kJnVWFL5XBuysS6yy GQdJq2uZx5men6Uoeu4RwDg3MtLmhDlngQywGRQ+osS5FhujVjf/ouhiNlfPAVA7 F/p/cZG1m63YSF0kMmjQLzsp225JiQgX7ryELl2ymhHtlei6mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFOcLCbtArip6OAx782GtnL3nlSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvOGIyMTI0YTgtZDZiNi00 ODNlLTkyZGUtNjdmOGQ3OTc1Y2M0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXhg5FOvlAuOp0jPQFdeqE CaTX2Z3uUtLfsP9scZGES/FORgrhtq9IdRzHkxVZ2Svu8H/1AzRuDFbjCKEyqHzK 4L5+FLIaeg2D4SQvLd1mnDAkD5OAQR8tofdHwn2QG69+vSovG004I+rnmfVOa2/R KNsd/ffW6dcERIiqR2TJQ+qjFSL5MnbCkex504aQfARh6xKlaXznKCnheowBoNro VINRCsBO8y2hAzObNEM3N1rYvlcssbGjS1/7mlOEw3cEleffdf6Q7ICpv9xKrIHj UfqOC9CPzS/G44971Fn63cwQmP3isAmsDI4SBdIz0MEJBI+2eYgU8q/wDX09sDfC -----END CERTIFICATE-----Generated at Tue Oct 21 15:20:28 2025 by rpki-client