$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft File: b8e407d7-863a-439f-a4f2-335e5aac995d.mft (raw, json) Hash identifier: spO3TYmTlWFNQzmXDPyv5sjFVgOn1hNDpl3CNfHCUOc= Subject key identifier: 83:98:7A:B1:FE:C1:F2:FC:AC:B7:10:18:F0:F7:CA:3F:1F:A8:28:FD Authority key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C Certificate issuer: /CN=b8e407d7-863a-439f-a4f2-335e5aac995d Certificate serial: 010D0C9F4328584B7427152FA4C51102AEDCBA20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft Manifest number: 010D0C9F4328584B52B3B9163D8559A7CAD9B08D Signing time: Wed 08 Oct 2025 13:00:09 +0000 Manifest this update: Wed 08 Oct 2025 13:00:09 +0000 Manifest next update: Sat 11 Oct 2025 13:00:00 +0000 Files and hashes: 1: 53328d6f-6f09-364a-837e-4b73e3ce96f9.roa (hash: 5MsIniMBCIWA7RDt0JzM6rJKVwvANbg02EAUHie2Z0Q=) 2: b8e407d7-863a-439f-a4f2-335e5aac995d.crl (hash: fnIEneieUagz8xf325mxi4azlBPA0U6i8lpgH278gHU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:15:2f:a4:c5:11:02:ae:dc:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e407d7-863a-439f-a4f2-335e5aac995d Validity Not Before: Oct 8 13:00:09 2025 GMT Not After : Oct 11 13:00:00 2025 GMT Subject: CN=9534c4e4-85f0-4579-9fb8-28c0102dd45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:8a:0e:c9:9b:a1:42:a3:7c:0e:39:dc:30: 2e:92:92:c9:83:97:46:65:5b:9c:16:8c:38:89:7f: 74:74:43:91:7a:df:c2:ce:6d:b1:69:75:f2:c4:21: fc:42:85:3d:2a:cb:8a:fe:74:f0:1a:5b:d2:c4:a9: 23:0b:a8:1a:2b:4c:d9:b8:fb:1f:d0:f8:13:87:79: a4:22:57:e7:be:85:15:5d:b9:35:72:d9:4d:ea:a6: ec:58:79:56:26:2b:a9:99:11:50:49:4a:03:17:1c: cf:3d:e4:41:51:3a:93:6f:a4:13:52:6a:0a:c8:c5: b8:81:ce:16:86:df:e9:dd:c5:9d:70:71:e8:4d:bc: f1:f8:1b:16:1c:ff:fb:77:01:e4:4a:36:9d:ef:27: 56:03:dc:1a:40:04:47:fb:27:df:21:1b:4b:ed:97: cb:86:8c:1d:c9:9d:5f:5f:e2:71:9b:4e:67:16:65: b4:97:31:05:fa:9c:06:05:33:fa:e9:44:ae:df:fe: 79:04:7b:1a:83:7c:f5:37:62:91:ca:f8:c1:d4:81: 50:41:28:60:0d:59:97:1c:88:b1:df:71:7b:0b:97: ec:43:ec:c2:87:b6:f0:a7:54:9c:b4:9b:82:44:32: 5d:54:a0:03:9b:1d:f5:ef:de:a8:e9:9a:1b:05:4b: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:7A:B1:FE:C1:F2:FC:AC:B7:10:18:F0:F7:CA:3F:1F:A8:28:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl X509v3 Authority Key Identifier: keyid:10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:00:2c:3b:45:11:ec:f2:d9:54:dc:67:62:dc:09:6a:82:59: 1e:59:e6:1c:5b:d8:6f:2e:c9:ea:9e:0e:c7:7f:15:e6:8e:97: 97:37:af:d6:b2:ba:29:c2:8a:62:f2:61:b8:81:25:1f:48:d7: 32:6a:f6:91:54:bf:cc:0e:1c:fc:08:93:0f:04:34:10:1f:35: 7f:a8:f1:60:f6:10:5d:3e:a0:db:d0:96:4d:75:1d:73:91:da: 09:5f:c8:56:f2:12:b1:7f:13:04:cc:fd:72:39:a7:a4:d6:1e: 45:29:0d:04:5a:08:aa:2a:42:db:30:a3:40:d9:45:8b:76:52: 0c:d2:53:82:30:70:89:52:b8:e1:78:0d:7c:35:8b:a6:69:c8: 43:5c:e8:fc:f4:70:4b:49:4e:6e:63:e6:32:d1:52:d4:59:96: e3:3a:bc:20:6b:fc:84:1a:47:3b:75:53:16:17:44:a9:03:08: 50:ee:8a:10:57:da:98:cf:56:ed:41:54:6f:2f:b9:e0:b8:68: 58:af:c1:57:70:60:6c:a8:ba:14:37:41:02:21:e4:85:91:3b: fd:88:56:45:ec:b1:20:55:62:12:96:77:f2:ac:40:31:45:b4: 07:b7:60:01:38:00:0d:4b:c7:91:1d:8f:65:6d:53:db:f8:17: 33:40:7b:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0JxUvpMURAq7cuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNDA3ZDctODYzYS00MzlmLWE0ZjItMzM1ZTVhYWM5 OTVkMB4XDTI1MTAwODEzMDAwOVoXDTI1MTAxMTEzMDAwMFowLzEtMCsGA1UEAxMk OTUzNGM0ZTQtODVmMC00NTc5LTlmYjgtMjhjMDEwMmRkNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1CKDsmboUKjfA453DAukpLJg5dGZVucFow4 iX90dEORet/Czm2xaXXyxCH8QoU9KsuK/nTwGlvSxKkjC6gaK0zZuPsf0PgTh3mk IlfnvoUVXbk1ctlN6qbsWHlWJiupmRFQSUoDFxzPPeRBUTqTb6QTUmoKyMW4gc4W ht/p3cWdcHHoTbzx+BsWHP/7dwHkSjad7ydWA9waQARH+yffIRtL7ZfLhowdyZ1f X+Jxm05nFmW0lzEF+pwGBTP66USu3/55BHsag3z1N2KRyvjB1IFQQShgDVmXHIix 33F7C5fsQ+zCh7bwp1SctJuCRDJdVKADmx31796o6ZobBUvfcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIOYerH+wfL8rLcQGPD3yj8fqCj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0 MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVlNWFhYzk5NWQvYjhlNDA3ZDctODYzYS00 MzlmLWE0ZjItMzM1ZTVhYWM5OTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjhlNDA3ZDctODYzYS00MzlmLWE0 ZjItMzM1ZTVhYWM5OTVkL2I4ZTQwN2Q3LTg2M2EtNDM5Zi1hNGYyLTMzNWU1YWFj OTk1ZC5jcmwwHwYDVR0jBBgwFoAUECkanr0AHGxz/iC1zNJsuybUBgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVl NWFhYzk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4ACw7RRHs8tlU3Gdi3Alq glkeWeYcW9hvLsnqng7HfxXmjpeXN6/Wsropwopi8mG4gSUfSNcyavaRVL/MDhz8 CJMPBDQQHzV/qPFg9hBdPqDb0JZNdR1zkdoJX8hW8hKxfxMEzP1yOaek1h5FKQ0E WgiqKkLbMKNA2UWLdlIM0lOCMHCJUrjheA18NYumachDXOj89HBLSU5uY+Yy0VLU WZbjOrwga/yEGkc7dVMWF0SpAwhQ7ooQV9qYz1btQVRvL7nguGhYr8FXcGBsqLoU N0ECIeSFkTv9iFZF7LEgVWISlnfyrEAxRbQHt2ABOAANS8eRHY9lbVPb+BczQHsW -----END CERTIFICATE-----Generated at Wed Oct 8 17:10:12 2025 by rpki-client