$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft File: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft (raw, json) Hash identifier: c3lLIp0D7L09e6cwIaH1F9hzmE4sOJXPKRnNHBCSLpo= Subject key identifier: AE:55:1F:AF:74:38:D4:FF:27:BC:D5:05:B0:BF:2C:A9:31:D3:C9:62 Authority key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Certificate issuer: /CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Certificate serial: 010D0C9F4328584B93181F0441C756FAF6D54780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft Manifest number: 010D0C9F43285849864C6858DE047781D0D32804 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl (hash: m6EW/zVrz4mSV3azHOXuNy8J8gHflzTalv75POKmioE=) 2: f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa (hash: eaWxcWBd55SWp1gnWIbYlsdOunDdXdFQcE9FenlXPwY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1f:04:41:c7:56:fa:f6:d5:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=af0a220c-67da-454d-903f-522983428a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:62:86:c7:bc:05:9c:c1:c5:46:4e:77:0d: 7c:47:6f:ab:99:ba:78:85:9c:fc:ad:63:10:19:5c: d9:89:c5:48:dc:f4:19:42:15:72:b5:6f:a8:7b:44: 75:63:45:b5:a8:44:68:e7:01:dc:d2:18:7d:b8:3d: 43:98:aa:d3:ed:7b:6a:cd:64:15:39:25:2a:88:f6: 43:e9:cb:60:94:19:46:1f:19:00:cb:78:65:8c:ce: 13:7c:73:26:91:ed:c0:ec:12:ee:11:00:ed:b1:4d: 29:89:cc:6c:aa:b2:12:14:fc:dc:1e:21:54:a2:50: 32:b9:86:5c:dc:06:01:4f:93:42:05:62:f2:2e:88: 99:ae:ed:23:cc:18:c4:9d:cc:6b:9f:88:98:88:bf: 2b:1d:72:e9:46:9d:8a:b7:d0:c8:55:84:02:13:3c: 08:5a:45:7f:54:41:a0:96:30:52:d4:48:ab:e9:06: af:4e:ee:4b:07:c1:b1:96:17:49:87:84:0b:62:da: 9c:7d:7a:01:d5:58:0e:2b:6c:ce:32:c7:68:1a:85: 57:5e:ad:d4:7d:69:f1:cb:27:e0:13:d1:9b:1d:cd: f7:fc:20:ec:bf:3a:4e:a9:b9:a1:4e:af:ec:35:38: 6b:c9:18:0e:f3:27:7e:97:95:49:55:58:8b:d2:c9: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:55:1F:AF:74:38:D4:FF:27:BC:D5:05:B0:BF:2C:A9:31:D3:C9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl X509v3 Authority Key Identifier: keyid:47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5b:cd:c1:cf:6f:98:05:e4:00:7a:f5:ba:7a:72:b2:04:a4: 53:78:1d:ae:08:fa:02:d2:12:94:05:f8:47:e6:a7:fa:aa:51: 56:5b:78:12:2f:f2:be:12:51:58:01:75:f3:e0:13:5f:dd:80: 0f:46:52:6e:44:13:6f:15:90:fa:f0:bf:4e:57:05:18:48:9a: 4f:ff:db:2c:62:7b:f2:dc:6c:f6:2b:1b:b9:ed:d3:f1:b5:62: e6:10:00:47:79:ae:02:13:ed:52:89:65:cd:b9:dc:b5:f7:a1: 3e:2d:aa:b1:d9:f5:17:88:6e:0e:6d:ee:54:b9:c4:ac:54:86: 83:d8:b4:6a:27:03:15:9e:5c:16:21:bb:88:1d:d7:8a:bf:cc: 55:48:4b:b1:59:4f:a1:74:06:b0:64:a4:c4:32:08:1a:f6:b0: 75:41:79:b0:77:a6:40:73:9e:87:72:63:90:ce:d7:5f:24:51: ac:81:d6:98:b5:09:13:16:8f:dc:00:16:41:54:db:c6:88:cd: bd:35:67:a2:92:95:c1:dc:2e:83:f5:29:ea:e3:c9:33:62:0d: 0d:44:12:fe:67:cb:71:25:f1:db:3d:43:4f:c8:c5:e5:35:e4: af:5d:47:39:8c:ed:b7:a2:f6:52:85:8a:72:48:f5:46:54:5e: d0:b1:a5:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGB8EQcdW+vbVR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmNDhhMjgtN2FhMi00YTdmLWI4NWUtNzFiNzcwZGEy ZWU1MB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk YWYwYTIyMGMtNjdkYS00NTRkLTkwM2YtNTIyOTgzNDI4YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneVihse8BZzBxUZOdw18R2+rmbp4hZz8rWMQ GVzZicVI3PQZQhVytW+oe0R1Y0W1qERo5wHc0hh9uD1DmKrT7XtqzWQVOSUqiPZD 6ctglBlGHxkAy3hljM4TfHMmke3A7BLuEQDtsU0picxsqrISFPzcHiFUolAyuYZc 3AYBT5NCBWLyLoiZru0jzBjEncxrn4iYiL8rHXLpRp2Kt9DIVYQCEzwIWkV/VEGg ljBS1Eir6QavTu5LB8GxlhdJh4QLYtqcfXoB1VgOK2zOMsdoGoVXXq3UfWnxyyfg E9GbHc33/CDsvzpOqbmhTq/sNThryRgO8yd+l5VJVViL0skb1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK5VH690ONT/J7zVBbC/LKkx08liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0 OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBkYTJlZTUvOGJmNDhhMjgtN2FhMi00 YTdmLWI4NWUtNzFiNzcwZGEyZWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJmNDhhMjgtN2FhMi00YTdmLWI4 NWUtNzFiNzcwZGEyZWU1LzhiZjQ4YTI4LTdhYTItNGE3Zi1iODVlLTcxYjc3MGRh MmVlNS5jcmwwHwYDVR0jBBgwFoAURxtKQHSuzhWP+XrpHrVSVcRSkR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3 NzBkYTJlZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmW83Bz2+YBeQAevW6enKy BKRTeB2uCPoC0hKUBfhH5qf6qlFWW3gSL/K+ElFYAXXz4BNf3YAPRlJuRBNvFZD6 8L9OVwUYSJpP/9ssYnvy3Gz2Kxu57dPxtWLmEABHea4CE+1SiWXNudy196E+Laqx 2fUXiG4Obe5UucSsVIaD2LRqJwMVnlwWIbuIHdeKv8xVSEuxWU+hdAawZKTEMgga 9rB1QXmwd6ZAc56HcmOQztdfJFGsgdaYtQkTFo/cABZBVNvGiM29NWeikpXB3C6D 9Snq48kzYg0NRBL+Z8txJfHbPUNPyMXlNeSvXUc5jO23ovZShYpySPVGVF7QsaUO -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:12 2025 by rpki-client