$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft File: 8d560541-dfe9-43df-8277-86d83aa610a1.mft (raw, json) Hash identifier: J0yrcFcUnYFFC3dx5T28sg2iDdGss/H+6eKP9hoTpnA= Subject key identifier: 69:D5:A8:81:41:C3:79:DE:E0:D3:CA:EF:AB:DA:0E:97:03:C0:5B:28 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584BE60830652E3551414C32A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft Manifest number: 010D0C9F4328584073A84759D172A77128798DF1 Signing time: Tue 18 Nov 2025 08:00:03 +0000 Manifest this update: Tue 18 Nov 2025 08:00:03 +0000 Manifest next update: Thu 20 Nov 2025 08:00:00 +0000 Files and hashes: 1: 8d560541-dfe9-43df-8277-86d83aa610a1.crl (hash: Oy36BG/PYHl/uR8akMQ+cV33o7fa6nbUWFEDIa8oHDI=) 2: d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (hash: 1umFvRKS2ZcpGjHcHx0z8wactvdWkl+QkIErR6aUL40=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:08:30:65:2e:35:51:41:4c:32:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Nov 18 08:00:03 2025 GMT Not After : Nov 20 08:00:00 2025 GMT Subject: CN=1b30eaa9-f253-4fa0-bc5b-eced149d1eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:bb:9b:ae:a1:e3:8c:f5:32:44:77:21:70: 03:23:14:7d:ba:0a:78:9c:d6:af:61:6e:26:22:7c: 42:fa:09:be:8a:50:63:4b:ec:94:35:9c:6f:f4:74: cf:38:b3:77:65:6c:73:77:ae:ef:8f:f8:b2:08:7e: 0b:f6:39:07:5f:d6:69:54:f4:6d:ed:a4:3e:4f:13: 07:d3:3a:3b:51:e9:f4:07:4d:43:e4:f8:ba:40:18: e5:87:05:d8:89:42:1a:b6:34:1f:47:fd:07:e5:44: 85:48:c2:65:06:dc:19:73:9b:db:a2:20:f9:04:93: ff:4b:fb:1d:be:d2:b5:c3:74:8e:c8:12:44:da:53: d8:bf:d4:79:da:c1:36:57:68:55:6f:88:9a:17:31: f0:c0:d5:4b:bf:c3:59:ea:95:1a:65:2e:bd:31:99: 18:66:3e:8a:8a:b6:d6:d2:85:cd:0c:38:67:14:6b: 43:13:af:ab:8d:33:70:07:ec:4c:3a:ce:f8:89:bd: cb:a6:53:d9:91:80:ed:c1:2a:39:22:ae:28:df:3a: 77:0b:a7:6d:83:0a:3f:83:f8:63:dc:b6:9d:78:51: 5a:94:9e:ae:94:9a:18:a5:b6:9d:50:a1:c5:3f:f6: ef:33:74:41:0c:11:01:c5:ee:21:74:82:ce:a5:f7: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D5:A8:81:41:C3:79:DE:E0:D3:CA:EF:AB:DA:0E:97:03:C0:5B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7b:17:e2:71:6c:10:e5:b4:ab:b7:f0:a6:7d:6d:81:d1:6e: 15:23:c1:13:21:d9:62:0f:5e:7f:33:c8:f2:e8:31:7b:db:47: a4:fe:22:05:34:87:61:59:5f:a6:39:8b:b1:a9:01:5f:7c:a0: cb:3d:12:84:a1:e9:2c:1d:7d:ca:99:62:a7:1b:d0:e3:d9:bd: 54:cd:5c:71:c6:55:98:36:48:0d:ee:c7:1b:61:ee:22:73:2f: 5a:33:5d:24:05:4d:96:23:71:4e:34:5a:89:79:16:0a:3d:33: 95:1a:1d:88:23:68:ed:7b:91:0d:f8:f4:74:df:f0:e7:95:d9: 34:2f:84:56:7a:7c:ec:e8:9c:38:18:39:d8:fd:8f:03:4a:96: b2:94:8a:48:d7:c6:22:2c:72:0d:72:d7:98:16:cd:d2:ba:f1: 37:e5:32:db:02:ee:e2:25:f1:bc:d0:9e:0f:67:4d:f8:19:2b: e0:65:25:f6:bf:7c:fb:4f:9b:7c:c7:46:25:e0:1f:b2:10:87: 11:e1:ed:2a:14:81:72:f8:07:17:49:21:97:9c:78:d6:d6:bf: f5:09:bc:56:26:c3:a1:ff:b1:ec:7b:67:f1:a5:53:7a:34:e1: df:9c:c3:3f:a3:7d:74:91:6f:a3:0b:8d:38:96:22:ac:53:74: 42:e7:24:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvmCDBlLjVRQUwypgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI1MTExODA4MDAwM1oXDTI1MTEyMDA4MDAwMFowLzEtMCsGA1UEAxMk MWIzMGVhYTktZjI1My00ZmEwLWJjNWItZWNlZDE0OWQxZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRm7m66h44z1MkR3IXADIxR9ugp4nNavYW4m InxC+gm+ilBjS+yUNZxv9HTPOLN3ZWxzd67vj/iyCH4L9jkHX9ZpVPRt7aQ+TxMH 0zo7Uen0B01D5Pi6QBjlhwXYiUIatjQfR/0H5USFSMJlBtwZc5vboiD5BJP/S/sd vtK1w3SOyBJE2lPYv9R52sE2V2hVb4iaFzHwwNVLv8NZ6pUaZS69MZkYZj6KirbW 0oXNDDhnFGtDE6+rjTNwB+xMOs74ib3LplPZkYDtwSo5Iq4o3zp3C6dtgwo/g/hj 3LadeFFalJ6ulJoYpbadUKHFP/bvM3RBDBEBxe4hdILOpfe/RQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGnVqIFBw3ne4NPK76vaDpcDwFsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvOGQ1NjA1NDEtZGZlOS00 M2RmLTgyNzctODZkODNhYTYxMGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDexficWwQ5bSrt/CmfW2B 0W4VI8ETIdliD15/M8jy6DF720ek/iIFNIdhWV+mOYuxqQFffKDLPRKEoeksHX3K mWKnG9Dj2b1UzVxxxlWYNkgN7scbYe4icy9aM10kBU2WI3FONFqJeRYKPTOVGh2I I2jte5EN+PR03/Dnldk0L4RWenzs6Jw4GDnY/Y8DSpaylIpI18YiLHINcteYFs3S uvE35TLbAu7iJfG80J4PZ034GSvgZSX2v3z7T5t8x0Yl4B+yEIcR4e0qFIFy+AcX SSGXnHjW1r/1CbxWJsOh/7Hse2fxpVN6NOHfnMM/o310kW+jC404liKsU3RC5ySo -----END CERTIFICATE-----Generated at Tue Nov 18 11:08:49 2025 by rpki-client