$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft File: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft (raw, json) Hash identifier: 0GdOa8zKPGFxva4U+AlwHxY96z6+zsfO+i7Zs9N9n8s= Subject key identifier: 3E:BD:B1:6B:0E:BC:B3:6A:C6:92:EB:7B:93:4A:2B:FE:AB:DA:92:3A Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584B93181C05B78B09E2593ED940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft Manifest number: 010D0C9F4328584A1A40BB5ED5171D328F14E08A Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (hash: PHa1ToHJPD9O4cRpj3YezUssBj4KGeq3m3yDEPhAglA=) 2: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl (hash: 7kCuJzGX97cfjzQ5hczblcH9REHWbH99e50AxnJMsBI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1c:05:b7:8b:09:e2:59:3e:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=d2d9b811-460f-4e43-95fc-733babd6c4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:6f:ba:96:81:68:e3:d2:b2:d5:3b:2e:5c: 92:65:a1:84:51:cf:00:40:6d:23:3b:9e:3b:6d:db: 4d:65:94:04:84:4b:bf:61:be:c8:15:62:4d:cc:01: 11:15:cd:82:31:50:80:35:d8:dd:19:50:8e:52:ef: a6:e7:b0:a2:f3:85:f7:62:86:c4:2c:01:dd:6b:eb: bc:87:9f:fa:c8:d0:85:c2:de:0a:f0:aa:b0:f8:cc: 97:f4:cb:64:90:bf:be:b2:5d:ac:7d:29:e1:18:71: ee:a3:e8:6b:79:34:46:80:c4:cc:a7:75:c6:e7:c7: ce:63:1f:ac:9b:9e:0c:39:0b:dc:b3:49:4a:3f:3e: 40:94:49:36:b6:3c:6c:15:83:93:fe:b9:38:25:f4: 05:a5:c5:2e:79:e6:8d:1e:cb:5d:bd:57:21:1b:e2: 80:4b:59:3c:ae:33:85:a1:e2:3f:c4:9f:93:07:a1: f4:7c:29:2f:68:68:fa:b9:73:ee:5f:f6:60:4d:9a: 16:8a:cf:a6:81:a9:e7:f8:c4:3e:61:82:05:22:33: 98:df:9a:4f:11:c6:9c:44:bb:6f:36:66:43:af:56: 67:94:62:11:b5:64:19:ce:df:5f:15:4c:7d:b9:55: a1:de:ab:32:05:34:d0:e6:33:b3:eb:31:e0:68:93: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:B1:6B:0E:BC:B3:6A:C6:92:EB:7B:93:4A:2B:FE:AB:DA:92:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0b:f7:44:d9:32:bd:d3:34:4a:fc:db:ad:07:51:91:f5:bf: c8:25:1f:16:1d:95:d6:23:ab:4d:fb:d6:fd:69:f4:9a:8e:40: 5b:67:ed:86:be:a8:c8:96:41:81:13:b9:29:23:d1:3f:76:31: 05:65:bb:a8:c9:1c:cc:3e:2a:0e:d3:6a:87:9a:1c:c7:10:2e: d2:12:77:aa:0a:2f:c2:b3:f8:45:41:8c:03:46:f1:68:70:84: 52:48:e2:dd:0c:de:d4:b2:5d:75:91:e5:b3:71:fd:f9:ad:a1: 0f:2a:0f:af:d9:97:62:03:24:9f:c5:17:85:fc:61:93:6a:9d: 92:fc:48:e2:76:57:7b:93:94:1e:83:80:a1:38:66:5c:af:e8: 8e:8e:42:9e:ff:8b:54:d5:f3:79:00:94:83:da:54:13:0b:a7: ac:b2:b6:7c:24:7e:bc:92:c1:db:2c:0d:73:eb:31:4b:c2:6a: d4:5d:28:c5:8e:06:d2:b7:b3:2d:22:d6:c7:6e:c0:63:87:87: 73:00:f6:65:17:52:53:01:7e:5f:bf:d5:2f:6a:4e:de:57:f2: e6:1c:43:db:90:26:84:55:72:fb:3c:e4:2e:6d:e9:e3:28:08: ce:2c:43:31:3e:f1:55:2e:55:8b:c0:05:2e:90:ec:5e:79:51: 1a:c5:b5:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGBwFt4sJ4lk+2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk ZDJkOWI4MTEtNDYwZi00ZTQzLTk1ZmMtNzMzYmFiZDZjNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFdvupaBaOPSstU7LlySZaGEUc8AQG0jO547 bdtNZZQEhEu/Yb7IFWJNzAERFc2CMVCANdjdGVCOUu+m57Ci84X3YobELAHda+u8 h5/6yNCFwt4K8Kqw+MyX9MtkkL++sl2sfSnhGHHuo+hreTRGgMTMp3XG58fOYx+s m54MOQvcs0lKPz5AlEk2tjxsFYOT/rk4JfQFpcUueeaNHstdvVchG+KAS1k8rjOF oeI/xJ+TB6H0fCkvaGj6uXPuX/ZgTZoWis+mgann+MQ+YYIFIjOY35pPEcacRLtv NmZDr1ZnlGIRtWQZzt9fFUx9uVWh3qsyBTTQ5jOz6zHgaJNwdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD69sWsOvLNqxpLre5NKK/6r2pI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvOGYxZDVlY2QtODc3MC00 NmEyLWI3YzgtMjUxYjU2NGI5ZTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjC/dE2TK90zRK/NutB1GR 9b/IJR8WHZXWI6tN+9b9afSajkBbZ+2GvqjIlkGBE7kpI9E/djEFZbuoyRzMPioO 02qHmhzHEC7SEneqCi/Cs/hFQYwDRvFocIRSSOLdDN7Usl11keWzcf35raEPKg+v 2ZdiAySfxReF/GGTap2S/Ejidld7k5Qeg4ChOGZcr+iOjkKe/4tU1fN5AJSD2lQT C6essrZ8JH68ksHbLA1z6zFLwmrUXSjFjgbSt7MtItbHbsBjh4dzAPZlF1JTAX5f v9Uvak7eV/LmHEPbkCaEVXL7POQubenjKAjOLEMxPvFVLlWLwAUukOxeeVEaxbWP -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:59 2025 by rpki-client