$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft (raw, json) Hash identifier: KjIgTs8ef/5UOpDu8wudrQfhx5bIdiawtbt1OZYbgeY= Subject key identifier: 82:99:DC:55:0E:31:5D:ED:59:10:BB:B1:8F:9F:28:97:06:E7:25:E0 Authority key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Certificate issuer: /CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Certificate serial: 010D0C9F4328584B79277F97C81B5A5541058300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft Manifest number: 010D0C9F4328584073A8490E353C7E7CF5E96637 Signing time: Fri 10 Oct 2025 08:00:03 +0000 Manifest this update: Fri 10 Oct 2025 08:00:03 +0000 Manifest next update: Mon 13 Oct 2025 08:00:00 +0000 Files and hashes: 1: 47f52259-d832-3c2a-bc43-3f72c7ef644d.roa (hash: +7H3RXaBt1RgDTCX8q+YFazgjicQMneu73fTwPVVDIw=) 2: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl (hash: WElCUknMtSaA7zdYIDluP/TR6/F+zf7Pckm6t7F7ftE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:27:7f:97:c8:1b:5a:55:41:05:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Validity Not Before: Oct 10 08:00:03 2025 GMT Not After : Oct 13 08:00:00 2025 GMT Subject: CN=fb4a7502-ba3e-425d-991d-3bd03269170b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:80:f0:0a:e9:2b:b0:62:41:85:80:6f:09: 9a:b8:2a:47:92:04:3e:ed:7c:26:cf:aa:bb:c1:51: 3e:b3:ed:37:f4:74:10:0e:95:59:e1:0c:c3:5e:28: d4:ca:ac:02:8b:4f:ef:58:f0:7b:f4:15:28:4f:49: de:fb:45:74:63:1d:25:cb:e0:ac:b4:76:e8:85:f2: c1:2a:fe:e3:b2:a1:61:0c:6a:dd:5a:2f:16:39:c7: 12:fc:d6:c0:fa:5b:fd:26:88:23:14:04:b7:14:ef: e1:93:e5:51:f6:e7:91:d2:cb:31:2c:7a:27:1e:6a: 09:21:ad:55:93:fe:00:d3:20:90:1c:71:34:02:a9: e2:9a:fb:dd:8b:49:0c:7f:1a:01:5d:2e:14:a5:9e: 84:0a:8f:0d:71:63:af:d8:4f:b1:0c:d0:ac:56:43: 4d:49:13:0e:1c:85:66:39:77:85:a4:c2:19:f2:8d: 00:d7:b0:e3:a5:9c:e4:79:f9:d0:b3:48:58:af:1e: 67:06:45:81:ba:9a:e3:0f:aa:af:a0:0c:3d:0a:0e: 35:77:23:52:67:d6:d4:4a:ac:6b:3e:70:32:2e:7a: 2a:de:ee:55:ac:26:53:7c:97:fb:2a:dd:06:c9:ad: 74:23:91:c4:b3:ad:3f:2e:29:c2:51:32:70:2b:5d: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:DC:55:0E:31:5D:ED:59:10:BB:B1:8F:9F:28:97:06:E7:25:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl X509v3 Authority Key Identifier: keyid:CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8e:83:0c:1b:4a:08:36:6a:64:9c:89:51:ee:93:c9:c5:a4: 74:ac:79:cb:75:09:85:d5:cc:b6:2d:a8:3c:30:90:26:ab:b1: cc:c6:75:5a:df:46:16:f2:9e:5b:55:6e:51:6e:5e:29:6a:41: db:18:15:7c:0e:8e:f9:09:d2:06:26:6e:5d:0a:81:73:81:41: 3b:b8:dd:21:d0:c8:b3:f1:77:37:3d:25:d2:32:42:8d:7f:93: 1d:73:90:d2:f5:8d:4a:87:9a:b8:d6:16:07:3b:6f:fc:04:a2: 98:11:74:72:e4:84:84:68:85:33:58:0d:22:41:e3:8e:fc:f9: bb:b3:40:89:dc:22:5d:a1:3c:00:8f:da:8b:12:fe:59:af:8b: e7:3e:75:24:06:19:33:95:0f:db:db:38:38:f6:3b:47:45:b6: 68:ca:f0:c3:36:07:e1:5e:90:88:c6:be:5a:c9:b4:0d:d7:d5: 4a:fc:72:a8:9b:75:08:55:ff:fc:6c:2e:fc:27:1d:bc:19:48: c4:f0:21:c6:3c:45:a7:06:d0:ba:37:ab:a0:22:4a:d8:8e:84: c9:6f:54:6f:ef:16:66:a7:be:f3:43:4c:a4:8e:80:49:52:b0: b9:cf:d5:46:76:9d:fb:18:55:c1:49:a5:d0:dc:54:e2:91:ec: 1e:5f:d7:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5J3+XyBtaVUEFgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3 OGI0MB4XDTI1MTAxMDA4MDAwM1oXDTI1MTAxMzA4MDAwMFowLzEtMCsGA1UEAxMk ZmI0YTc1MDItYmEzZS00MjVkLTk5MWQtM2JkMDMyNjkxNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuOA8ArpK7BiQYWAbwmauCpHkgQ+7Xwmz6q7 wVE+s+039HQQDpVZ4QzDXijUyqwCi0/vWPB79BUoT0ne+0V0Yx0ly+CstHbohfLB Kv7jsqFhDGrdWi8WOccS/NbA+lv9JogjFAS3FO/hk+VR9ueR0ssxLHonHmoJIa1V k/4A0yCQHHE0Aqnimvvdi0kMfxoBXS4UpZ6ECo8NcWOv2E+xDNCsVkNNSRMOHIVm OXeFpMIZ8o0A17DjpZzkefnQs0hYrx5nBkWBuprjD6qvoAw9Cg41dyNSZ9bUSqxr PnAyLnoq3u5VrCZTfJf7Kt0Gya10I5HEs60/LinCUTJwK12FdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKZ3FUOMV3tWRC7sY+fKJcG5yXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84OWZh MDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvODlmYTAxYWYtY2NhNS00 ZDhmLTgwMDMtZjZjOWUyMjU3OGI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODlmYTAxYWYtY2NhNS00ZDhmLTgw MDMtZjZjOWUyMjU3OGI0Lzg5ZmEwMWFmLWNjYTUtNGQ4Zi04MDAzLWY2YzllMjI1 NzhiNC5jcmwwHwYDVR0jBBgwFoAUzKuu83vISvdPvK7QobzlFWslW0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5 ZTIyNTc4YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBjoMMG0oINmpknIlR7pPJ xaR0rHnLdQmF1cy2Lag8MJAmq7HMxnVa30YW8p5bVW5Rbl4pakHbGBV8Do75CdIG Jm5dCoFzgUE7uN0h0Miz8Xc3PSXSMkKNf5Mdc5DS9Y1Kh5q41hYHO2/8BKKYEXRy 5ISEaIUzWA0iQeOO/Pm7s0CJ3CJdoTwAj9qLEv5Zr4vnPnUkBhkzlQ/b2zg49jtH RbZoyvDDNgfhXpCIxr5aybQN19VK/HKom3UIVf/8bC78Jx28GUjE8CHGPEWnBtC6 N6ugIkrYjoTJb1Rv7xZmp77zQ0ykjoBJUrC5z9VGdp37GFXBSaXQ3FTikeweX9e0 -----END CERTIFICATE-----Generated at Fri Oct 10 23:46:01 2025 by rpki-client