$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft File: f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft (raw, json) Hash identifier: xMeHuaOO1vQdSszYwBeAfRlJzqtjqoFrNfBsHeiFlPQ= Subject key identifier: 7A:BE:C4:35:45:FF:16:0C:01:DA:B5:52:59:8D:5F:6F:65:0F:44:9A Authority key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Certificate issuer: /CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Certificate serial: 010D0C9F4328584B958977EAEA49F847235F2680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft Manifest number: 010D0C9F4328584A733E4440F1184959BC6B8DAB Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Thu 23 Oct 2025 12:00:00 +0000 Files and hashes: 1: 29077896-9620-3e68-a116-dbfb8641ca35.roa (hash: BiOuC+bFAi5jZ6+ZY+59pp7dBNIWRsR/8Gawj20yG6E=) 2: f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl (hash: bzkpFiGUi+a/NS1xlJaVda2NvKW8P+YvXfOzwl/IgRw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:77:ea:ea:49:f8:47:23:5f:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 23 12:00:00 2025 GMT Subject: CN=5ccdd063-ac41-4cf4-b034-cf1ed8bf87a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:a8:04:5f:9a:80:06:78:1f:5a:3d:2a:dc: 92:57:b8:00:a9:cb:cf:e3:7b:bb:b5:31:80:2a:9f: 6d:01:a7:16:5d:44:90:6a:53:c5:44:35:d1:6a:03: 39:07:0a:85:6e:a4:7b:50:83:15:a1:3e:90:8b:0f: 35:18:1c:ae:48:55:70:2e:a7:c7:b5:ba:61:ef:1e: 1a:42:14:89:73:cf:68:ca:c7:ed:ea:53:23:e6:89: 0e:44:4d:ad:1c:e4:64:48:7f:39:e2:22:6a:60:d6: 8d:92:48:c6:f1:77:e6:e1:0b:75:fa:bc:bb:56:25: f7:90:a4:b6:45:6c:cc:e3:cb:7e:2e:87:dc:ef:8c: 0d:3a:62:34:b6:9b:2c:3e:10:06:54:43:54:30:50: d5:fe:5d:28:16:3c:e1:d7:21:7b:59:f7:64:ed:5c: 71:ca:ce:54:f5:4d:7c:ce:db:aa:09:36:9e:6b:4e: ff:96:be:0e:c5:22:21:7b:a0:21:89:8e:04:fa:f0: ae:43:bd:7f:97:f9:04:c8:68:89:36:0d:cf:d2:05: 55:ad:57:55:bd:a8:9a:cc:23:37:97:16:c2:84:d8: 13:dc:5a:c9:15:2f:e8:72:a3:b9:43:1c:a8:0c:6d: fe:87:83:72:93:df:13:21:6b:d4:a7:50:60:61:67: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BE:C4:35:45:FF:16:0C:01:DA:B5:52:59:8D:5F:6F:65:0F:44:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl X509v3 Authority Key Identifier: keyid:37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:34:5c:66:7d:aa:31:df:5b:2e:75:60:74:23:fe:a7:b2:2d: 18:f6:6a:31:6b:d7:d8:f6:ff:2d:02:06:cd:e2:fc:91:06:94: 1f:56:9d:6d:2d:bd:47:50:58:f6:74:09:a5:61:55:f3:5e:78: a8:5b:4d:34:c3:4d:25:18:bd:ca:70:6b:21:0b:19:b3:5a:c7: 47:6b:41:16:1a:95:32:21:84:34:98:e8:91:06:50:97:b2:72: e2:4a:6d:ae:9e:eb:35:09:23:c8:68:fd:45:c0:12:24:fc:8c: 0c:71:9d:dc:5b:9e:30:0a:3e:6b:11:55:73:61:19:ab:11:1d: 27:c2:54:e3:11:a4:16:10:e0:1a:23:2b:d2:ed:c8:90:f0:17: 7e:77:e5:31:f4:03:e8:cc:01:8a:79:05:04:46:db:1e:f9:a1: 13:35:e3:b4:16:80:74:69:cc:f4:1d:25:c3:ce:88:34:dd:b0: 34:4b:68:a3:cb:ab:06:e4:91:3a:2f:fc:d6:3f:b4:cf:4d:b8: f4:70:c7:8d:3a:11:ac:d1:72:aa:e9:8d:a4:d8:b1:7b:d4:50: 6e:8d:cd:1f:fa:ce:5c:70:01:4a:72:42:c3:d0:24:e8:58:99: 87:31:c7:5c:09:44:7f:84:dc:68:e0:70:df:f5:2a:7c:d7:a5: b4:07:ff:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXfq6kn4RyNfJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmNmFjNzktYmVlZS00ZWJhLWE2OWEtYTNmMjhmNjI1 ZjRlMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMzEyMDAwMFowLzEtMCsGA1UEAxMk NWNjZGQwNjMtYWM0MS00Y2Y0LWIwMzQtY2YxZWQ4YmY4N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg32oBF+agAZ4H1o9KtySV7gAqcvP43u7tTGA Kp9tAacWXUSQalPFRDXRagM5BwqFbqR7UIMVoT6Qiw81GByuSFVwLqfHtbph7x4a QhSJc89oysft6lMj5okORE2tHORkSH854iJqYNaNkkjG8Xfm4Qt1+ry7ViX3kKS2 RWzM48t+Lofc74wNOmI0tpssPhAGVENUMFDV/l0oFjzh1yF7Wfdk7Vxxys5U9U18 ztuqCTaea07/lr4OxSIhe6AhiY4E+vCuQ71/l/kEyGiJNg3P0gVVrVdVvaiazCM3 lxbChNgT3FrJFS/ocqO5QxyoDG3+h4Nyk98TIWvUp1BgYWdZywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHq+xDVF/xYMAdq1UlmNX29lD0SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOGY2 YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2MjVmNGUvZjhmNmFjNzktYmVlZS00 ZWJhLWE2OWEtYTNmMjhmNjI1ZjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjhmNmFjNzktYmVlZS00ZWJhLWE2 OWEtYTNmMjhmNjI1ZjRlL2Y4ZjZhYzc5LWJlZWUtNGViYS1hNjlhLWEzZjI4ZjYy NWY0ZS5jcmwwHwYDVR0jBBgwFoAUN7PodYQ6rlXM8/Un7kfdCrEPA4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mOGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2Yy OGY2MjVmNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6NFxmfaox31sudWB0I/6n si0Y9moxa9fY9v8tAgbN4vyRBpQfVp1tLb1HUFj2dAmlYVXzXnioW000w00lGL3K cGshCxmzWsdHa0EWGpUyIYQ0mOiRBlCXsnLiSm2unus1CSPIaP1FwBIk/IwMcZ3c W54wCj5rEVVzYRmrER0nwlTjEaQWEOAaIyvS7ciQ8Bd+d+Ux9APozAGKeQUERtse +aETNeO0FoB0acz0HSXDzog03bA0S2ijy6sG5JE6L/zWP7TPTbj0cMeNOhGs0XKq 6Y2k2LF71FBujc0f+s5ccAFKckLD0CToWJmHMcdcCUR/hNxo4HDf9Sp816W0B/9H -----END CERTIFICATE-----Generated at Mon Oct 20 18:35:10 2025 by rpki-client