$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft File: 8c1a5536-816c-426b-b7e4-bad0d305a931.mft (raw, json) Hash identifier: m/jFubkJfyMk53K5VhBe7JSKR8NwFEd4hnxupBoLx+g= Subject key identifier: E3:3C:D8:ED:1C:54:47:D1:85:4A:DE:82:4D:C0:B0:EC:80:1C:14:60 Authority key identifier: 51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA Certificate issuer: /CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Certificate serial: 010D0C9F4328584BC01C623930495193C23E7780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft Manifest number: 010D0C9F4328584BACA481CEDBA19A46BD6702C8 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa (hash: D0BUgbzWEMEVO8QmWCqzENEo6wcte21rd+ixsnurwt8=) 2: 8c1a5536-816c-426b-b7e4-bad0d305a931.crl (hash: 1MRwtu8eKsqiNcxhXadRG/SHpr7F03KR2JnIe43VL6s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:39:30:49:51:93:c2:3e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=d888bf80-a36e-4657-9105-eb3a76407ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:ad:06:44:c6:69:ba:bd:34:04:46:36:74: 1a:d6:a6:7e:07:89:77:5d:a0:af:27:ae:1f:dd:cb: 22:76:af:10:47:d7:95:0e:a8:d3:41:98:72:61:4e: 38:d8:d9:e7:c8:4b:f7:9b:ea:af:32:48:8d:88:3d: a1:d7:8f:9e:4e:63:59:37:94:a0:17:00:85:6a:af: 71:c7:55:2b:4f:19:8f:f0:d8:a0:ca:38:0c:9a:ed: 4f:0e:b0:e8:a2:47:95:cf:f5:c6:06:d5:b6:21:49: 24:91:2b:39:d6:c2:90:40:9f:e6:f3:96:a3:ad:56: 27:70:03:e7:8c:16:15:2c:51:14:b0:af:0a:72:67: 7e:c8:20:e8:34:4e:aa:40:50:fc:be:dc:11:98:14: a3:64:b0:c9:ab:fe:42:0d:69:b5:5f:d1:bd:05:f5: 21:f5:02:47:6d:55:68:a3:e5:a4:a7:db:53:ea:1b: 56:34:fe:7e:0a:4d:db:af:d5:c4:c1:a6:a3:12:d2: 6a:d5:61:77:d7:81:ab:bd:3d:1d:02:f1:26:c6:b5: ba:37:a1:af:88:af:ad:b7:55:d5:c9:16:58:aa:ad: 8b:3c:71:7a:6e:27:89:3d:d1:4f:de:70:66:3d:41: 58:ec:aa:7e:ed:b4:7f:ec:ae:2b:02:2a:39:1c:99: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:D8:ED:1C:54:47:D1:85:4A:DE:82:4D:C0:B0:EC:80:1C:14:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl X509v3 Authority Key Identifier: keyid:51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2f:0c:ab:7d:83:09:e5:03:e3:de:67:de:43:59:1e:32:b9: ed:c2:07:b3:ed:cc:36:27:6c:89:e9:21:7a:f1:21:80:13:fc: b4:48:dd:b7:c0:f3:90:15:c3:31:cf:91:c7:88:b9:53:19:8b: 26:2b:3d:58:e2:60:65:31:bf:d8:f5:6f:24:17:80:94:b8:fc: 7f:34:24:51:18:3b:49:6a:03:95:54:29:32:f0:1c:a6:f1:3f: dd:5f:76:30:8d:bd:98:8d:40:0e:a0:cb:c5:6a:e4:d5:ee:30: c4:69:c8:a8:3d:04:72:db:38:1a:ac:74:c0:ca:b7:69:11:4c: 90:43:bb:7d:db:f1:0e:25:5b:eb:8a:13:b6:8b:6d:a7:11:e7: 9f:0b:43:c3:63:f7:ea:b0:41:e6:e9:36:88:af:02:f2:1d:93: fc:4d:b7:ad:ac:19:8d:d4:42:b8:0a:5d:93:6d:e3:f1:1d:9c: 44:6b:fc:61:87:41:c1:a3:51:d6:eb:d1:cb:a1:bf:2e:80:2a: ec:56:f9:64:49:6a:39:4f:70:fb:a7:73:fd:3c:d4:27:85:0f: a3:3f:27:dd:ab:27:13:79:cf:b7:cc:0e:b9:94:0e:5f:a3:c2: df:b4:97:5d:6a:c0:f7:2e:59:b1:35:c6:55:4f:df:69:cf:49: d2:77:01:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGI5MElRk8I+d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxYTU1MzYtODE2Yy00MjZiLWI3ZTQtYmFkMGQzMDVh OTMxMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZDg4OGJmODAtYTM2ZS00NjU3LTkxMDUtZWIzYTc2NDA3ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgetBkTGabq9NARGNnQa1qZ+B4l3XaCvJ64f 3csidq8QR9eVDqjTQZhyYU442NnnyEv3m+qvMkiNiD2h14+eTmNZN5SgFwCFaq9x x1UrTxmP8NigyjgMmu1PDrDookeVz/XGBtW2IUkkkSs51sKQQJ/m85ajrVYncAPn jBYVLFEUsK8Kcmd+yCDoNE6qQFD8vtwRmBSjZLDJq/5CDWm1X9G9BfUh9QJHbVVo o+Wkp9tT6htWNP5+Ck3br9XEwaajEtJq1WF314GrvT0dAvEmxrW6N6GviK+tt1XV yRZYqq2LPHF6bieJPdFP3nBmPUFY7Kp+7bR/7K4rAio5HJkNAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOM82O0cVEfRhUregk3AsOyAHBRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFh NTUzNi04MTZjLTQyNmItYjdlNC1iYWQwZDMwNWE5MzEvOGMxYTU1MzYtODE2Yy00 MjZiLWI3ZTQtYmFkMGQzMDVhOTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGMxYTU1MzYtODE2Yy00MjZiLWI3 ZTQtYmFkMGQzMDVhOTMxLzhjMWE1NTM2LTgxNmMtNDI2Yi1iN2U0LWJhZDBkMzA1 YTkzMS5jcmwwHwYDVR0jBBgwFoAUUZ41/h/g3oH49m5jowe0X/f5n7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFhNTUzNi04MTZjLTQyNmItYjdlNC1iYWQw ZDMwNWE5MzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnLwyrfYMJ5QPj3mfeQ1ke Mrntwgez7cw2J2yJ6SF68SGAE/y0SN23wPOQFcMxz5HHiLlTGYsmKz1Y4mBlMb/Y 9W8kF4CUuPx/NCRRGDtJagOVVCky8Bym8T/dX3Ywjb2YjUAOoMvFauTV7jDEacio PQRy2zgarHTAyrdpEUyQQ7t92/EOJVvrihO2i22nEeefC0PDY/fqsEHm6TaIrwLy HZP8TbetrBmN1EK4Cl2TbePxHZxEa/xhh0HBo1HW69HLob8ugCrsVvlkSWo5T3D7 p3P9PNQnhQ+jPyfdqycTec+3zA65lA5fo8LftJddasD3LlmxNcZVT99pz0nSdwFn -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:28 2025 by rpki-client