$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: vmZHwSeq44C/MT/x6tLFXwEWaXNoT4hl8YPiwbpTY0w= Subject key identifier: FF:D1:B8:AE:4F:EC:FD:CF:CF:4B:58:5B:17:46:02:77:61:F2:5C:0C Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584B731B06895E9B3D3DF1CF9278 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA9533685 Signing time: Wed 08 Oct 2025 04:00:03 +0000 Manifest this update: Wed 08 Oct 2025 04:00:03 +0000 Manifest next update: Sat 11 Oct 2025 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: jmTajJx+fTs6ApsIG19QFYHHNb6Ha5izA54cU461aJs=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: qcOiXGq0IwbQdVMnEmzotNdxdWRC91VVAQ57Dsr07Xo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:1b:06:89:5e:9b:3d:3d:f1:cf:92:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Oct 8 04:00:03 2025 GMT Not After : Oct 11 04:00:00 2025 GMT Subject: CN=bdef0728-3de1-456f-9755-3e3af9f15f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0c:83:15:73:de:7c:4b:b6:cb:32:e6:63:cd: ad:76:e2:d9:f5:31:c8:e1:00:07:47:9f:2d:f9:ee: b4:93:56:b2:11:e9:41:69:56:4c:56:b1:e9:71:7a: cc:6b:46:cf:90:ec:59:eb:a7:34:c2:e1:0e:d3:03: dc:4b:c5:17:0e:70:00:a1:fc:ab:01:a1:00:74:6a: 55:56:99:cd:a1:7a:13:31:16:a9:df:7c:df:95:23: c1:6a:13:92:fb:fd:46:21:0c:68:6a:4e:87:95:05: 11:d3:d8:0c:71:9d:1d:09:e0:78:0f:32:7b:90:af: c7:bb:8c:9c:cf:ee:72:d3:a4:b0:59:aa:3a:27:30: fb:aa:0c:fa:f8:38:f3:c3:66:22:5a:ac:16:50:0f: b5:49:23:e3:6b:e7:69:64:9d:59:99:49:73:28:6f: de:34:d7:99:c0:c4:cb:c6:bc:51:6b:1e:ed:00:28: 3b:1d:ee:e6:c9:5c:32:7e:c8:e8:06:4f:01:e1:1c: c4:3e:7d:e9:59:9e:63:ef:a0:03:c9:45:ee:f5:64: af:ff:19:24:bd:b8:fa:c4:f7:d9:a5:92:ec:fc:1e: 3b:90:da:d4:5d:57:8e:95:ab:ca:d2:51:fd:ca:d4: 73:45:65:a0:1a:ec:4e:79:47:82:f6:38:da:30:4a: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:B8:AE:4F:EC:FD:CF:CF:4B:58:5B:17:46:02:77:61:F2:5C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c9:f7:1a:85:24:00:0f:3f:b2:b9:32:f6:60:9d:30:8a:d0: c5:e4:ec:e2:b6:b9:15:fd:ad:12:ca:29:62:13:a3:87:9e:7b: 68:b9:af:5f:05:03:e3:01:a8:04:6e:cf:cb:3a:63:7c:7b:2e: bf:87:b2:cb:58:bd:5c:03:06:d2:7d:9e:4f:4c:d7:1f:b6:f9: d4:3d:9c:a8:d0:24:2a:a7:c0:ed:33:ab:80:cb:96:8b:c1:10: 36:32:f9:b2:ec:b6:25:78:17:60:93:77:26:e6:f8:83:76:73: 3a:ac:e3:ea:af:83:b3:1c:5b:84:82:5e:8c:02:e9:9d:ea:3c: 26:be:ca:f5:ba:37:65:05:e2:b5:e7:2c:13:b6:6d:c9:cb:29: a7:47:85:17:0d:55:97:bf:73:cd:93:dd:27:a9:e3:ec:53:1e: 9d:cf:a4:9c:b9:eb:b1:d7:3c:75:51:5f:0d:53:18:52:be:ad: 57:3d:4b:9b:4e:6c:05:62:35:1e:f9:f9:3a:ba:ca:92:08:d4: 58:35:a7:17:b3:c0:30:88:6c:63:d4:6f:c3:e4:f4:73:5b:72: 80:e0:cc:3a:49:86:d3:8b:74:9d:54:2d:07:e1:6c:c4:2c:23: 02:a6:46:b2:0b:cf:db:8a:b9:01:d5:ab:79:d0:9f:07:98:46: 47:2b:71:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtzGwaJXps9PfHPkngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI1MTAwODA0MDAwM1oXDTI1MTAxMTA0MDAwMFowLzEtMCsGA1UEAxMk YmRlZjA3MjgtM2RlMS00NTZmLTk3NTUtM2UzYWY5ZjE1ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAyDFXPefEu2yzLmY82tduLZ9THI4QAHR58t +e60k1ayEelBaVZMVrHpcXrMa0bPkOxZ66c0wuEO0wPcS8UXDnAAofyrAaEAdGpV VpnNoXoTMRap33zflSPBahOS+/1GIQxoak6HlQUR09gMcZ0dCeB4DzJ7kK/Hu4yc z+5y06SwWao6JzD7qgz6+Djzw2YiWqwWUA+1SSPja+dpZJ1ZmUlzKG/eNNeZwMTL xrxRax7tACg7He7myVwyfsjoBk8B4RzEPn3pWZ5j76ADyUXu9WSv/xkkvbj6xPfZ pZLs/B47kNrUXVeOlavK0lH9ytRzRWWgGuxOeUeC9jjaMEqGVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP/RuK5P7P3Pz0tYWxdGAndh8lwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxyfcahSQADz+yuTL2YJ0w itDF5OzitrkV/a0SyiliE6OHnntoua9fBQPjAagEbs/LOmN8ey6/h7LLWL1cAwbS fZ5PTNcftvnUPZyo0CQqp8DtM6uAy5aLwRA2Mvmy7LYleBdgk3cm5viDdnM6rOPq r4OzHFuEgl6MAumd6jwmvsr1ujdlBeK15ywTtm3JyymnR4UXDVWXv3PNk90nqePs Ux6dz6Scueux1zx1UV8NUxhSvq1XPUubTmwFYjUe+fk6usqSCNRYNacXs8AwiGxj 1G/D5PRzW3KA4Mw6SYbTi3SdVC0H4WzELCMCpkayC8/birkB1at50J8HmEZHK3HL -----END CERTIFICATE-----Generated at Wed Oct 8 17:26:26 2025 by rpki-client