$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.mft File: 08faad02-f377-4732-9a23-6a3141237d9f.mft (raw, json) Hash identifier: ZuRytcvfANRJQLWpZBaRlqLExl3GknONbY6DZ8xMBrg= Subject key identifier: FF:7A:49:89:27:2D:54:35:50:91:85:AF:04:5C:1C:A8:35:7B:80:37 Authority key identifier: 64:DE:84:D8:FF:0D:78:62:F8:67:AE:CE:3C:B9:6D:DC:ED:16:F8:DC Certificate issuer: /CN=08faad02-f377-4732-9a23-6a3141237d9f Certificate serial: 010D0C9F4328584B963C310B3CA36BDC5F4A2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.mft Manifest number: 010D0C9F43285848F2BF681E04900055D6D5FD77 Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Thu 23 Oct 2025 18:00:00 +0000 Files and hashes: 1: 08faad02-f377-4732-9a23-6a3141237d9f.crl (hash: SOH48Xs4Zfom3JqniW/aRfWsh4UREqpOU2MfHiWwWUQ=) 2: e7e301ce-f0f5-30b4-ba8d-a97c751f00a6.roa (hash: pNNKSqTtxvwOq8m9Ybd9Wf8vSvSxcBoyZD2mEgTMLyM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:31:0b:3c:a3:6b:dc:5f:4a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08faad02-f377-4732-9a23-6a3141237d9f Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 23 18:00:00 2025 GMT Subject: CN=65f6e095-4d57-40ba-badc-55819778e81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:bd:16:55:de:13:33:b9:5b:6d:68:ee:cd: ac:8a:4c:ce:13:53:17:06:b7:77:0b:28:6b:89:07: f4:ed:bd:0f:ce:5c:9c:19:00:b9:3d:67:fe:bd:5a: 15:26:e7:c0:5f:86:4e:ac:11:7c:1f:d6:53:bb:71: 9d:3f:18:7c:1c:c8:0b:8e:c2:f6:60:eb:a5:9c:16: 8c:f0:06:42:9a:35:4f:ea:68:cf:65:61:12:be:a8: 92:d0:a2:dd:e8:3d:a7:80:f9:75:c8:21:dc:72:af: 5c:d5:1c:6a:73:e4:0c:63:42:7f:9a:19:af:4e:17: 14:31:55:c2:9b:73:67:0c:08:37:ad:5e:e8:a2:7c: e1:70:08:07:39:22:6f:fa:8a:69:0f:ba:09:a0:c2: f8:cc:e8:66:06:96:1f:f9:55:f5:a8:f7:d6:40:59: 2b:00:f7:12:11:79:2f:29:9f:e1:29:60:70:bb:49: 45:38:d4:90:7f:c8:05:3d:ae:eb:e1:71:2d:b6:de: 4e:b1:91:d3:47:0c:44:c8:c7:56:63:a7:8f:87:11: d0:ab:84:0b:8f:fd:56:06:56:86:47:f6:98:c4:33: a1:bf:99:8e:56:1e:57:10:21:39:15:7d:2c:b7:36: 34:ce:b4:89:4b:22:8a:74:bd:2f:80:9b:f6:e4:e1: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7A:49:89:27:2D:54:35:50:91:85:AF:04:5C:1C:A8:35:7B:80:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f/08faad02-f377-4732-9a23-6a3141237d9f.crl X509v3 Authority Key Identifier: keyid:64:DE:84:D8:FF:0D:78:62:F8:67:AE:CE:3C:B9:6D:DC:ED:16:F8:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08faad02-f377-4732-9a23-6a3141237d9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:12:5e:d7:a6:02:df:0f:49:80:71:fc:35:94:77:ba:a3:83: 7f:a4:f0:b5:08:a8:e4:a7:d8:52:ad:c6:c7:b9:4b:a4:e1:3c: b6:86:81:19:70:e1:10:ef:09:05:28:b1:07:03:00:6d:5b:50: d4:2d:84:6b:a8:fd:e4:a0:3e:f4:bd:de:d7:2d:e9:2a:4f:e5: 85:49:b4:4e:81:5b:bd:14:c7:3f:05:53:d9:13:1c:8f:86:a6: e8:cc:f1:11:9b:9e:26:41:0d:e0:4a:74:99:3c:3c:85:60:a3: a6:9c:55:5b:32:c4:0a:f0:dc:2f:05:3a:01:4a:e8:eb:b0:43: 13:81:de:17:a1:52:c1:14:6c:55:25:69:58:d2:22:23:1c:1b: ab:9c:f8:e4:0c:5e:18:d8:15:70:50:9d:67:d2:0b:fd:55:39: 59:cc:b0:06:98:98:54:6e:db:f1:ec:75:f7:04:c0:cd:da:45: 41:35:55:e0:6b:45:7c:36:86:da:6c:7f:30:d0:2b:6b:f1:b9: 23:0a:bf:22:de:c6:e6:25:21:ca:8a:1b:bb:fe:44:20:31:62: 73:36:65:52:81:50:6e:d5:1a:25:44:2a:ee:bd:56:35:15:b1: c5:64:d2:79:d0:e7:b3:cd:40:e7:5b:2b:a2:6b:14:b2:a5:1d: ce:1c:01:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPDELPKNr3F9KKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhmYWFkMDItZjM3Ny00NzMyLTlhMjMtNmEzMTQxMjM3 ZDlmMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMzE4MDAwMFowLzEtMCsGA1UEAxMk NjVmNmUwOTUtNGQ1Ny00MGJhLWJhZGMtNTU4MTk3NzhlODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GG9FlXeEzO5W21o7s2sikzOE1MXBrd3Cyhr iQf07b0PzlycGQC5PWf+vVoVJufAX4ZOrBF8H9ZTu3GdPxh8HMgLjsL2YOulnBaM 8AZCmjVP6mjPZWESvqiS0KLd6D2ngPl1yCHccq9c1Rxqc+QMY0J/mhmvThcUMVXC m3NnDAg3rV7oonzhcAgHOSJv+oppD7oJoML4zOhmBpYf+VX1qPfWQFkrAPcSEXkv KZ/hKWBwu0lFONSQf8gFPa7r4XEttt5OsZHTRwxEyMdWY6ePhxHQq4QLj/1WBlaG R/aYxDOhv5mOVh5XECE5FX0stzY0zrSJSyKKdL0vgJv25OHUmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP96SYknLVQ1UJGFrwRcHKg1e4A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wOGZh YWQwMi1mMzc3LTQ3MzItOWEyMy02YTMxNDEyMzdkOWYvMDhmYWFkMDItZjM3Ny00 NzMyLTlhMjMtNmEzMTQxMjM3ZDlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDhmYWFkMDItZjM3Ny00NzMyLTlh MjMtNmEzMTQxMjM3ZDlmLzA4ZmFhZDAyLWYzNzctNDczMi05YTIzLTZhMzE0MTIz N2Q5Zi5jcmwwHwYDVR0jBBgwFoAUZN6E2P8NeGL4Z67OPLlt3O0W+NwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wOGZhYWQwMi1mMzc3LTQ3MzItOWEyMy02YTMx NDEyMzdkOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEEl7XpgLfD0mAcfw1lHe6 o4N/pPC1CKjkp9hSrcbHuUuk4Ty2hoEZcOEQ7wkFKLEHAwBtW1DULYRrqP3koD70 vd7XLekqT+WFSbROgVu9FMc/BVPZExyPhqbozPERm54mQQ3gSnSZPDyFYKOmnFVb MsQK8NwvBToBSujrsEMTgd4XoVLBFGxVJWlY0iIjHBurnPjkDF4Y2BVwUJ1n0gv9 VTlZzLAGmJhUbtvx7HX3BMDN2kVBNVXga0V8NobabH8w0Ctr8bkjCr8i3sbmJSHK ihu7/kQgMWJzNmVSgVBu1RolRCruvVY1FbHFZNJ50OezzUDnWyuiaxSypR3OHAHN -----END CERTIFICATE-----Generated at Tue Oct 21 10:40:14 2025 by rpki-client