$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft File: 8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft (raw, json) Hash identifier: JHtbit55F5MwqN71jgWT9A6wzaRgXL2fPRFpI6FEdO8= Subject key identifier: 88:F6:30:44:4F:4A:85:7D:4F:C2:E7:74:4E:69:09:2C:63:71:E5:F9 Authority key identifier: F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48 Certificate issuer: /CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde Certificate serial: 010D0C9F4328584BB226F8D9DCDA6BBC172189C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft Manifest number: 010D0C9F4328584073A82157AA7EBA37DF717E9F Signing time: Thu 30 Oct 2025 18:00:03 +0000 Manifest this update: Thu 30 Oct 2025 18:00:03 +0000 Manifest next update: Sat 01 Nov 2025 18:00:00 +0000 Files and hashes: 1: 2356dd69-9e73-32bf-9ea7-b58042dec355.roa (hash: nXffgPDQKkqy4eHUopwdEtiuMVjC9rHYqf3umSHL+so=) 2: 8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl (hash: DWqKILgjLwopoXUql6wmXoPrmbXnQYEGfODGMiK5Y4Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:26:f8:d9:dc:da:6b:bc:17:21:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde Validity Not Before: Oct 30 18:00:03 2025 GMT Not After : Nov 1 18:00:00 2025 GMT Subject: CN=8dde15c3-e791-411e-92b8-9dc364412c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:ce:79:98:8c:1e:23:5b:c4:e5:5e:cb:43: 0c:64:4e:79:0d:af:b7:db:28:88:08:90:9c:9f:58: 7a:af:d3:db:82:5d:8b:c9:ac:c1:99:78:6a:1f:75: 77:76:b6:e8:ad:6b:8c:be:2a:d5:bc:28:07:0b:c6: d2:91:c6:18:7c:3c:a8:3c:fc:2c:ea:da:e1:6a:9c: df:38:ca:f4:e6:c3:66:15:25:41:35:5d:66:8a:8c: 05:b9:55:2d:4a:dd:4d:30:25:45:61:75:cb:8b:40: 9a:7e:18:f0:f7:8a:66:53:a9:01:b0:b1:ff:9d:52: 14:b4:d7:2b:d8:e0:2e:88:a7:90:70:a2:82:23:f5: 53:64:41:63:e8:47:15:04:13:04:5e:02:9f:d5:85: f6:f6:d4:9c:3f:42:6b:a5:09:dc:94:2e:18:e0:27: 83:ab:4c:5b:86:63:40:65:9e:c5:4f:01:8b:f9:1c: 5a:f7:a9:1c:1a:72:c6:27:52:ce:1b:83:b8:50:4f: 92:4a:4e:0d:94:15:a2:6b:71:73:ce:a7:8f:ce:ce: 5e:ed:8b:d5:b7:0d:f1:a6:1f:6c:4a:2d:b8:2e:47: 93:9a:73:90:a0:1d:51:39:1d:60:ff:d8:a4:1c:ec: 59:04:ef:e1:06:f0:a4:bf:5a:f0:28:53:f2:ef:d2: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F6:30:44:4F:4A:85:7D:4F:C2:E7:74:4E:69:09:2C:63:71:E5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl X509v3 Authority Key Identifier: keyid:F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1b:32:23:e6:a9:96:df:73:e1:2a:ed:27:17:16:43:24:f1: d4:f5:53:b0:2e:1a:f0:04:b2:0f:58:7d:9f:e6:95:8f:64:32: d7:11:73:37:84:85:e8:d1:35:c7:76:86:9d:04:d3:e3:ba:4b: 77:7f:26:a7:e4:41:94:cd:df:ed:8a:1f:53:b9:0d:67:e2:04: 7d:0e:ec:0f:4e:68:75:be:d3:a1:66:32:6f:96:f9:a6:df:e3: 08:5d:4d:14:9a:4b:99:68:f7:e6:91:77:d5:7d:be:0c:d0:bf: d6:8e:8c:2f:da:3d:68:75:d9:b4:06:bc:18:a7:5e:68:5e:61: e1:a3:e5:8b:cd:2b:36:a5:cc:4d:46:d1:ba:13:c6:7e:c4:d5: 09:cb:59:dd:04:c0:9c:ac:8c:05:e4:48:64:bb:9b:9d:8f:22: fe:c9:94:8b:3b:f4:d0:0a:d8:6f:9a:59:da:ac:a5:7c:2a:42: 77:62:d5:1d:0a:65:68:33:31:f9:11:8b:df:d4:98:04:78:60: a9:11:b7:36:46:0d:0f:88:8d:eb:04:8b:8c:56:6e:2b:33:b7: 86:09:dd:d1:dd:a8:19:b3:46:a2:f6:86:71:b4:fc:4d:e1:3b: 0f:6f:cc:e2:29:5a:c3:86:fa:75:c9:94:1b:3c:0f:0c:b2:6a: 4e:0a:cb:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuyJvjZ3NprvBchicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYzYzdkNjUtMTQ1MS00OTM2LWIyZGItMzlhZDNlY2E2 YmRlMB4XDTI1MTAzMDE4MDAwM1oXDTI1MTEwMTE4MDAwMFowLzEtMCsGA1UEAxMk OGRkZTE1YzMtZTc5MS00MTFlLTkyYjgtOWRjMzY0NDEyYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5DOeZiMHiNbxOVey0MMZE55Da+32yiICJCc n1h6r9Pbgl2LyazBmXhqH3V3drborWuMvirVvCgHC8bSkcYYfDyoPPws6trhapzf OMr05sNmFSVBNV1miowFuVUtSt1NMCVFYXXLi0Cafhjw94pmU6kBsLH/nVIUtNcr 2OAuiKeQcKKCI/VTZEFj6EcVBBMEXgKf1YX29tScP0JrpQnclC4Y4CeDq0xbhmNA ZZ7FTwGL+Rxa96kcGnLGJ1LOG4O4UE+SSk4NlBWia3FzzqePzs5e7YvVtw3xph9s Si24LkeTmnOQoB1ROR1g/9ikHOxZBO/hBvCkv1rwKFPy79I2FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIj2MERPSoV9T8LndE5pCSxjceX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZjNj N2Q2NS0xNDUxLTQ5MzYtYjJkYi0zOWFkM2VjYTZiZGUvOGYzYzdkNjUtMTQ1MS00 OTM2LWIyZGItMzlhZDNlY2E2YmRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGYzYzdkNjUtMTQ1MS00OTM2LWIy ZGItMzlhZDNlY2E2YmRlLzhmM2M3ZDY1LTE0NTEtNDkzNi1iMmRiLTM5YWQzZWNh NmJkZS5jcmwwHwYDVR0jBBgwFoAU8kQCU7haKU3syTwyr6i+aF1sDEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZjNjN2Q2NS0xNDUxLTQ5MzYtYjJkYi0zOWFk M2VjYTZiZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeGzIj5qmW33PhKu0nFxZD JPHU9VOwLhrwBLIPWH2f5pWPZDLXEXM3hIXo0TXHdoadBNPjukt3fyan5EGUzd/t ih9TuQ1n4gR9DuwPTmh1vtOhZjJvlvmm3+MIXU0UmkuZaPfmkXfVfb4M0L/Wjowv 2j1oddm0BrwYp15oXmHho+WLzSs2pcxNRtG6E8Z+xNUJy1ndBMCcrIwF5Ehku5ud jyL+yZSLO/TQCthvmlnarKV8KkJ3YtUdCmVoMzH5EYvf1JgEeGCpEbc2Rg0PiI3r BIuMVm4rM7eGCd3R3agZs0ai9oZxtPxN4TsPb8ziKVrDhvp1yZQbPA8MsmpOCssI -----END CERTIFICATE-----Generated at Thu Oct 30 23:59:19 2025 by rpki-client