$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft File: 0be8264a-e514-463e-8183-9b3e83f9438d.mft (raw, json) Hash identifier: 3KUOl650c81Fz8aR0lg68HH2MctLQzkq5dU+YK5MIkw= Subject key identifier: 95:C0:4C:40:E5:5A:01:0B:BA:4B:A1:D9:95:59:C4:A4:56:77:99:21 Authority key identifier: EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E Certificate issuer: /CN=0be8264a-e514-463e-8183-9b3e83f9438d Certificate serial: 010D0C9F4328584B95E2CBA74B55BCDB05F9AA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft Manifest number: 010D0C9F4328584AEE70AEE1732E4B6A460B6540 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa (hash: e9qVzAgnBbYnsJVRiM1aiGAjVmpcrsR4FcJIXeEb5uA=) 2: 0be8264a-e514-463e-8183-9b3e83f9438d.crl (hash: rzkr2D7p4uUsACw+q6g6EMftr+AI2VnebZtVApF0j7I=) 3: b7233dfb-6336-30db-9e2b-e071354b579d.roa (hash: ucLPdfVvsasunRdsCcI+8LHHowP3OlLnrp2BE/MA5Bw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cb:a7:4b:55:bc:db:05:f9:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be8264a-e514-463e-8183-9b3e83f9438d Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=f46b8c79-2ee7-41c6-9c15-f6023d08de5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:07:c2:e2:5b:04:df:c6:5f:3b:b7:b7:19: 03:46:bc:f1:c4:bf:4c:e9:de:33:a5:92:5f:33:8d: b0:da:2f:33:9e:5b:50:50:09:bf:38:95:55:5a:9d: c1:44:a2:75:d3:41:2e:8a:d1:1b:56:f0:e2:d5:32: 0b:49:bd:5c:c4:4c:e0:57:a5:58:f4:1b:59:ae:6b: b1:ed:7a:3d:ae:57:a4:d2:71:c0:b6:5b:0e:40:9d: bd:e1:2d:d1:a9:07:e1:ab:2a:9b:4a:11:42:cb:51: e8:9a:45:cd:d1:19:d1:b8:1b:ca:01:49:95:63:7e: 8a:9e:6a:3e:9d:82:ef:82:67:da:b7:09:06:c0:d7: c2:44:e2:6e:28:6d:72:3d:82:68:0a:5d:8a:02:39: fc:22:2f:56:ca:80:de:36:72:dc:2b:e5:9e:ca:02: af:39:7c:3b:ff:4f:3f:f9:e6:f2:b0:ec:f5:c0:1a: 44:a2:07:d5:af:b0:78:16:7d:25:7c:6d:e4:9c:ab: fc:30:b1:0a:60:06:6d:b6:ba:3f:74:9c:2f:47:5e: ff:b6:b9:e3:46:3b:16:f8:bd:17:81:cf:ed:d7:e4: ea:36:89:3d:44:e9:ab:e7:fe:1a:d9:a1:22:76:e8: 3f:2e:d3:c2:05:4e:7d:fe:c9:92:0d:be:e5:0a:aa: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:4C:40:E5:5A:01:0B:BA:4B:A1:D9:95:59:C4:A4:56:77:99:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl X509v3 Authority Key Identifier: keyid:EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:25:a6:e0:9d:b8:1d:d6:15:b3:80:35:92:f7:7f:9e:3c:de: 4e:f3:91:c6:c1:c2:e4:aa:f3:22:84:11:a7:fa:ad:79:92:2a: 0b:32:a3:eb:fa:8c:c4:b4:1f:a5:c0:22:eb:95:f3:55:b0:66: cf:bd:7a:c0:f3:07:e5:c8:ad:69:cb:de:b0:79:4e:bb:8f:72: 69:45:7d:16:28:6e:2b:aa:86:7d:da:5a:0e:d1:ec:aa:d0:d9: 9a:8c:3c:2d:07:c1:60:60:90:ec:72:7d:b8:cb:db:20:f1:03: a8:2f:7c:dc:d6:6a:5f:f8:44:97:75:b4:e8:18:9b:83:a4:1f: b7:11:41:d6:6a:94:63:2c:ce:c9:cc:f1:07:5b:ec:0a:f7:06: 58:5f:62:4e:a8:14:2c:f2:de:b8:5c:a7:27:46:df:a7:4c:81: f1:f9:9e:25:44:4b:75:3b:a3:e7:54:ad:91:80:c5:71:da:40: cf:44:2c:fe:aa:a1:fb:cd:ce:ce:1f:5e:7d:bf:26:16:04:f0: d0:af:d2:12:cd:a9:84:0b:91:2f:af:63:69:dc:13:19:3e:f7: a6:ef:b8:b5:c1:f0:1c:8a:3e:a7:a5:01:ee:47:45:90:46:38: 39:4b:53:54:52:13:72:f0:3a:d5:06:99:2e:10:74:58:12:d9: 3e:97:47:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4sunS1W82wX5qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlODI2NGEtZTUxNC00NjNlLTgxODMtOWIzZTgzZjk0 MzhkMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk ZjQ2YjhjNzktMmVlNy00MWM2LTljMTUtZjYwMjNkMDhkZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ4HwuJbBN/GXzu3txkDRrzxxL9M6d4zpZJf M42w2i8znltQUAm/OJVVWp3BRKJ100EuitEbVvDi1TILSb1cxEzgV6VY9BtZrmux 7Xo9rlek0nHAtlsOQJ294S3RqQfhqyqbShFCy1HomkXN0RnRuBvKAUmVY36Knmo+ nYLvgmfatwkGwNfCROJuKG1yPYJoCl2KAjn8Ii9WyoDeNnLcK+WeygKvOXw7/08/ +ebysOz1wBpEogfVr7B4Fn0lfG3knKv8MLEKYAZttro/dJwvR17/trnjRjsW+L0X gc/t1+TqNok9ROmr5/4a2aEidug/LtPCBU59/smSDb7lCqqx1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJXATEDlWgELukuh2ZVZxKRWd5khMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4 MjY0YS1lNTE0LTQ2M2UtODE4My05YjNlODNmOTQzOGQvMGJlODI2NGEtZTUxNC00 NjNlLTgxODMtOWIzZTgzZjk0MzhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGJlODI2NGEtZTUxNC00NjNlLTgx ODMtOWIzZTgzZjk0MzhkLzBiZTgyNjRhLWU1MTQtNDYzZS04MTgzLTliM2U4M2Y5 NDM4ZC5jcmwwHwYDVR0jBBgwFoAU6jbAOkJ4CaZzdmISVSDOIzgpeA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4MjY0YS1lNTE0LTQ2M2UtODE4My05YjNl ODNmOTQzOGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5Jabgnbgd1hWzgDWS93+e PN5O85HGwcLkqvMihBGn+q15kioLMqPr+ozEtB+lwCLrlfNVsGbPvXrA8wflyK1p y96weU67j3JpRX0WKG4rqoZ92loO0eyq0NmajDwtB8FgYJDscn24y9sg8QOoL3zc 1mpf+ESXdbToGJuDpB+3EUHWapRjLM7JzPEHW+wK9wZYX2JOqBQs8t64XKcnRt+n TIHx+Z4lREt1O6PnVK2RgMVx2kDPRCz+qqH7zc7OH159vyYWBPDQr9ISzamEC5Ev r2Np3BMZPvem77i1wfAcij6npQHuR0WQRjg5S1NUUhNy8DrVBpkuEHRYEtk+l0en -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:33 2025 by rpki-client