$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: c+OkRgwLCv6swNR75zmSmziD6noIBBitmV2wmGHhoMI= Subject key identifier: F0:E0:D9:02:67:13:BF:51:E8:B4:AE:3C:30:4E:19:E9:18:D7:79:A7 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584B71F147E137397C915C554DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA5F2 Signing time: Tue 07 Oct 2025 18:00:08 +0000 Manifest this update: Tue 07 Oct 2025 18:00:08 +0000 Manifest next update: Fri 10 Oct 2025 18:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: Igv6DCNG/r/DbsYefnyFdQI1K+EfD4Slj7fZ+PiR4u4=) 2: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (hash: btthWgiKNPFAeCfbLLWAPiNUXgyOSwTl4wusw24iaL0=) 3: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: 6tm0eYKdukkxRFJuRLtdFLzq19dA5gWCEQvQ4uBzbec=) 4: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: IohJQgDNYmt4J3KrUS2yNTZLExqOnbKVmbBAeiG34Yw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:f1:47:e1:37:39:7c:91:5c:55:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 7 18:00:08 2025 GMT Not After : Oct 10 18:00:00 2025 GMT Subject: CN=bf8b7479-7da8-498c-9f2f-7b1a5751d46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:a8:41:fe:93:d2:ed:b6:1c:fa:1e:6d:05: 66:0a:10:4d:49:d7:af:4d:c2:7f:28:1f:d8:88:10: de:7a:16:53:03:80:71:68:b5:cc:4d:41:b3:af:6f: 50:1e:b4:e2:b8:91:21:41:72:af:db:5d:07:fb:c5: ce:61:ae:16:ff:bb:08:8d:e9:4c:f9:d8:57:30:8b: 6f:45:51:69:7e:86:8a:5b:a1:0f:8e:ef:60:18:bc: aa:a6:18:92:04:38:2a:24:91:0d:49:bf:44:00:46: 14:24:77:c7:bc:45:d8:a8:fe:19:b3:33:8e:76:62: 73:8e:6f:69:fe:32:3b:a8:59:bc:55:c3:87:2f:5d: 49:7f:18:de:0a:3a:9b:52:70:7d:64:01:f1:3e:04: 17:12:f9:44:78:8b:c0:9f:b4:39:7a:fe:6c:a6:4b: 80:90:0d:4d:b5:02:2a:f7:0d:8f:15:80:76:a9:fd: 60:f8:e2:93:a7:5a:b5:90:a3:c2:de:39:06:ef:7e: 82:bc:83:14:4b:ea:0f:b6:fd:1a:ec:23:0a:77:00: 5e:6f:02:ab:46:f3:53:5a:20:77:90:92:d4:04:f8: 89:3f:af:c6:9e:66:f6:bf:ef:f5:8d:46:cc:26:a1: 31:3f:e2:33:23:d3:26:57:be:a8:3e:b3:de:c7:08: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:D9:02:67:13:BF:51:E8:B4:AE:3C:30:4E:19:E9:18:D7:79:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:30:d0:e9:82:65:f3:51:8d:d2:4e:b7:8a:e2:5f:13:41:11: 85:c0:14:ca:27:ef:f2:63:a4:c6:b5:77:b2:62:52:a3:ca:70: 8c:5a:87:9d:43:fc:ba:d5:0a:81:db:c1:7c:18:4a:45:21:80: 8d:1b:4f:f4:af:ba:ee:1c:b2:11:f7:aa:e2:2f:a4:98:28:af: 50:55:e8:17:92:13:44:ee:ea:37:38:5e:17:fb:47:a7:47:53: c2:aa:e8:e6:6f:2c:42:59:79:d7:7d:01:30:96:4f:40:41:6f: 8d:36:c4:bc:02:2d:1a:d7:d5:b0:3f:ad:1d:5f:51:b1:e8:bb: 44:9e:58:18:4c:ba:1e:83:bc:c0:6c:32:1b:ed:77:40:44:ba: 34:73:03:b7:86:7a:ba:8f:8d:93:c0:76:bb:2d:9f:88:2b:7d: 62:38:e4:5c:3c:c0:64:9e:9d:a8:9b:fe:39:e5:04:92:cd:ff: e8:67:5d:73:40:71:1e:c1:c8:31:90:b3:c2:af:d2:05:db:f3: fa:ac:f6:05:c6:f3:6a:8f:b8:ae:19:2a:5e:65:e3:78:e1:20: f9:52:6f:3e:b2:02:56:89:61:1d:82:dc:43:62:c0:40:33:59: 5d:c4:9e:14:8b:e9:02:82:d7:c1:1c:8f:f5:fb:44:eb:5a:ec: 92:16:6b:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx8UfhNzl8kVxVTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MTAwNzE4MDAwOFoXDTI1MTAxMDE4MDAwMFowLzEtMCsGA1UEAxMk YmY4Yjc0NzktN2RhOC00OThjLTlmMmYtN2IxYTU3NTFkNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC2oQf6T0u22HPoebQVmChBNSdevTcJ/KB/Y iBDeehZTA4BxaLXMTUGzr29QHrTiuJEhQXKv210H+8XOYa4W/7sIjelM+dhXMItv RVFpfoaKW6EPju9gGLyqphiSBDgqJJENSb9EAEYUJHfHvEXYqP4ZszOOdmJzjm9p /jI7qFm8VcOHL11JfxjeCjqbUnB9ZAHxPgQXEvlEeIvAn7Q5ev5spkuAkA1NtQIq 9w2PFYB2qf1g+OKTp1q1kKPC3jkG736CvIMUS+oPtv0a7CMKdwBebwKrRvNTWiB3 kJLUBPiJP6/Gnmb2v+/1jUbMJqExP+IzI9MmV76oPrPexwiMfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDg2QJnE79R6LSuPDBOGekY13mnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIMNDpgmXzUY3STreK4l8T QRGFwBTKJ+/yY6TGtXeyYlKjynCMWoedQ/y61QqB28F8GEpFIYCNG0/0r7ruHLIR 96riL6SYKK9QVegXkhNE7uo3OF4X+0enR1PCqujmbyxCWXnXfQEwlk9AQW+NNsS8 Ai0a19WwP60dX1Gx6LtEnlgYTLoeg7zAbDIb7XdARLo0cwO3hnq6j42TwHa7LZ+I K31iOORcPMBknp2om/455QSSzf/oZ11zQHEewcgxkLPCr9IF2/P6rPYFxvNqj7iu GSpeZeN44SD5Um8+sgJWiWEdgtxDYsBAM1ldxJ4Ui+kCgtfBHI/1+0TrWuySFmua -----END CERTIFICATE-----Generated at Wed Oct 8 17:25:53 2025 by rpki-client