$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft File: 8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft (raw, json) Hash identifier: +egyOWmbHyBqImfLUU2+9uXI1X1wN95dW8pNxWBNrV8= Subject key identifier: 22:86:AC:31:6D:56:1A:D1:23:B9:EC:84:5B:7A:DC:30:E4:73:C8:8C Authority key identifier: 49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B Certificate issuer: /CN=8d56a37a-70c9-45c6-b734-00fcd55a27d1 Certificate serial: 010D0C9F4328584B79630E8B341636B1E6524180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft Manifest number: 010D0C9F432858489E07B898E42B31F98A3A5C8C Signing time: Fri 10 Oct 2025 10:00:03 +0000 Manifest this update: Fri 10 Oct 2025 10:00:03 +0000 Manifest next update: Mon 13 Oct 2025 10:00:00 +0000 Files and hashes: 1: 73961757-e604-35c4-b735-59179e641550.roa (hash: 9EvwvLAAMBZ1XDXWrmzG0dsjZwqhOipU+1z73Y8oaN0=) 2: 8d56a37a-70c9-45c6-b734-00fcd55a27d1.crl (hash: P+OeOg0dTY4K3sq9erfHZSx62e5TR0xZKCfvXlXtBnA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:63:0e:8b:34:16:36:b1:e6:52:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d56a37a-70c9-45c6-b734-00fcd55a27d1 Validity Not Before: Oct 10 10:00:03 2025 GMT Not After : Oct 13 10:00:00 2025 GMT Subject: CN=9f284807-db89-455a-aaab-08ac3828e32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:75:04:fc:38:dd:67:f8:6b:a5:3a:bb:3d: 25:1d:eb:3e:b5:57:61:16:98:e1:54:a4:36:6d:6a: 22:15:7b:6f:95:ee:96:f0:9e:62:85:e6:a9:bc:e5: c7:5a:2b:43:4a:47:ad:e6:fa:b4:41:c5:b6:a0:45: e9:94:53:ea:86:a2:21:c4:a3:50:b1:ca:59:b3:2a: b8:ed:30:7b:90:71:8d:20:61:48:c5:02:95:0a:df: c1:89:29:74:39:f0:48:2e:0c:e1:23:99:88:d3:3d: 60:b1:78:7b:43:3d:40:69:50:66:66:80:f0:c6:eb: e1:e4:a9:22:7c:fd:a7:df:9b:c7:be:2d:1b:b1:4b: 15:73:40:1f:57:38:5e:0b:ca:cc:13:54:fa:ea:f4: 66:a1:8c:df:9e:ae:e4:5a:26:78:07:72:bc:c4:c9: 1a:20:20:34:35:fc:21:4b:13:13:78:0e:ba:56:b9: f2:36:2b:24:43:81:ac:a3:2e:c0:1e:00:8d:41:4c: 8f:ea:a8:79:9e:db:b4:d0:1e:8b:ff:f3:2b:dd:9a: e6:bc:f8:4b:41:7f:1f:75:53:2c:09:dd:02:1d:6d: fe:53:78:31:83:eb:a6:01:2a:dd:62:93:2b:19:67: 8d:ba:97:a0:19:9f:c3:37:66:a5:2f:38:b9:de:b8: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:86:AC:31:6D:56:1A:D1:23:B9:EC:84:5B:7A:DC:30:E4:73:C8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.crl X509v3 Authority Key Identifier: keyid:49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:23:dd:fc:3b:31:e6:9b:a4:6c:60:ac:4e:12:2d:b3:29:98: 6d:82:43:fc:be:c9:cf:c1:d3:99:64:02:5e:a8:03:ac:4b:df: 78:8e:22:aa:f3:e6:6f:b4:0c:bf:bd:5e:90:38:ad:b4:e2:61: 7f:ab:9c:bd:ec:92:52:eb:34:85:ad:fd:a8:a8:60:b1:74:80: 6e:2a:2c:8f:15:9e:bd:ea:02:7b:7f:24:a8:0b:3e:b5:0b:fc: 42:7a:27:09:40:7d:7a:55:0e:37:2e:8c:21:7c:eb:05:96:e4: 01:65:0c:ba:e9:29:f6:8b:2c:95:09:30:bf:99:df:02:e2:7f: 91:af:bb:74:0e:25:bf:05:07:66:09:e3:d7:73:ae:a5:13:f3: 8a:2c:ed:36:c7:4f:f4:57:94:88:c5:03:51:bb:67:09:71:7d: 3f:24:b4:6c:fd:31:69:33:05:32:c7:22:fc:81:bd:f4:8a:cd: 4b:75:ee:30:f3:50:6b:e4:35:39:2c:1f:65:c4:fd:67:16:73: 4a:b2:77:28:a9:8f:d5:d1:81:d3:ad:6e:7c:ce:83:75:45:0f: 37:d5:79:8c:3d:58:29:92:34:6c:17:5b:7f:f5:8e:d0:b8:f0: e1:6e:cb:b1:22:dd:8f:ab:8e:36:57:04:48:43:d5:7f:97:e5: f3:b9:8d:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5Yw6LNBY2seZSQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NmEzN2EtNzBjOS00NWM2LWI3MzQtMDBmY2Q1NWEy N2QxMB4XDTI1MTAxMDEwMDAwM1oXDTI1MTAxMzEwMDAwMFowLzEtMCsGA1UEAxMk OWYyODQ4MDctZGI4OS00NTVhLWFhYWItMDhhYzM4MjhlMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKF1BPw43Wf4a6U6uz0lHes+tVdhFpjhVKQ2 bWoiFXtvle6W8J5iheapvOXHWitDSket5vq0QcW2oEXplFPqhqIhxKNQscpZsyq4 7TB7kHGNIGFIxQKVCt/BiSl0OfBILgzhI5mI0z1gsXh7Qz1AaVBmZoDwxuvh5Kki fP2n35vHvi0bsUsVc0AfVzheC8rME1T66vRmoYzfnq7kWiZ4B3K8xMkaICA0Nfwh SxMTeA66VrnyNiskQ4Gsoy7AHgCNQUyP6qh5ntu00B6L//Mr3ZrmvPhLQX8fdVMs Cd0CHW3+U3gxg+umASrdYpMrGWeNupegGZ/DN2alLzi53riAnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCKGrDFtVhrRI7nshFt63DDkc8iMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDU2 YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZjZDU1YTI3ZDEvOGQ1NmEzN2EtNzBjOS00 NWM2LWI3MzQtMDBmY2Q1NWEyN2QxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQ1NmEzN2EtNzBjOS00NWM2LWI3 MzQtMDBmY2Q1NWEyN2QxLzhkNTZhMzdhLTcwYzktNDVjNi1iNzM0LTAwZmNkNTVh MjdkMS5jcmwwHwYDVR0jBBgwFoAUSeNPOhWRiUGITpcFSf3ab2HrNJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDU2YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZj ZDU1YTI3ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjI938OzHmm6RsYKxOEi2z KZhtgkP8vsnPwdOZZAJeqAOsS994jiKq8+ZvtAy/vV6QOK204mF/q5y97JJS6zSF rf2oqGCxdIBuKiyPFZ696gJ7fySoCz61C/xCeicJQH16VQ43LowhfOsFluQBZQy6 6Sn2iyyVCTC/md8C4n+Rr7t0DiW/BQdmCePXc66lE/OKLO02x0/0V5SIxQNRu2cJ cX0/JLRs/TFpMwUyxyL8gb30is1Lde4w81Br5DU5LB9lxP1nFnNKsncoqY/V0YHT rW58zoN1RQ831XmMPVgpkjRsF1t/9Y7QuPDhbsuxIt2Pq442VwRIQ9V/l+XzuY1T -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:49 2025 by rpki-client