$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft File: 88d13a4f-a038-4d71-9494-9d48fef32c35.mft (raw, json) Hash identifier: yWESUZYA8mLZ7Kjln0Tz67Ynv5LTCYpmw44bC5zIxYQ= Subject key identifier: 01:E5:A0:ED:97:60:50:7E:44:E8:92:2C:74:03:66:FE:F7:15:50:BF Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 Certificate issuer: /CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Certificate serial: 010D0C9F4328584BA9144027726A4E2F332C7540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft Manifest number: 010D0C9F4328584A1462E2890A10EA2C989088D4 Signing time: Mon 27 Oct 2025 12:00:03 +0000 Manifest this update: Mon 27 Oct 2025 12:00:03 +0000 Manifest next update: Wed 29 Oct 2025 12:00:00 +0000 Files and hashes: 1: 88d13a4f-a038-4d71-9494-9d48fef32c35.crl (hash: vbcEoiDe5cYlGHUjJLaQPz+saTsb7hiE6YSuyr4ROpQ=) 2: eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (hash: 1IlPJpE7eLjyQg8+0rAMDWtLVQr4ju23OQLeY8NDitc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:14:40:27:72:6a:4e:2f:33:2c:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Validity Not Before: Oct 27 12:00:03 2025 GMT Not After : Oct 29 12:00:00 2025 GMT Subject: CN=b2837e28-1cfc-40e2-b574-daeb42fd8b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:71:66:e4:8e:05:dc:b7:dd:58:e5:71:af: 95:af:9d:55:cd:68:e4:d7:d3:3f:a2:17:fe:c9:df: 5b:9d:52:06:29:81:5a:94:19:f9:1b:41:a2:e2:ed: 26:42:bc:cd:01:d7:50:4f:05:a0:70:23:ab:f2:6c: f4:bd:88:75:09:7a:49:c0:52:83:64:f5:dc:d7:0e: 89:05:84:ee:f9:65:38:8c:71:ba:f7:e1:e9:da:89: cf:d8:2c:cb:32:4d:89:fa:0e:f7:08:9e:56:03:39: c4:1b:f4:38:0d:83:42:20:99:fa:f3:69:6b:b4:9a: c4:3a:6b:65:0f:64:d1:3d:28:0d:b1:f5:dc:b2:b2: 0a:25:c7:7a:f9:40:03:f9:7a:18:0d:07:70:cc:3d: 99:8d:58:27:bd:3d:06:7a:c5:b7:1e:a3:2f:96:fd: bd:37:66:7a:7f:38:18:36:33:8b:f2:86:d4:69:ab: d8:d5:0c:06:90:2a:d5:80:c2:1e:ad:64:e4:87:ab: cf:8b:bf:e0:c3:36:1e:29:24:71:d1:78:79:d1:9f: 83:40:3a:6f:ac:15:f8:e6:04:85:47:c7:bb:9d:6f: dd:53:43:77:07:d6:7f:13:a2:d1:0d:9f:b1:8a:5a: 09:d5:4d:f8:a8:20:19:4c:6c:04:a9:68:11:c9:90: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E5:A0:ED:97:60:50:7E:44:E8:92:2C:74:03:66:FE:F7:15:50:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl X509v3 Authority Key Identifier: keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:59:83:a2:ea:e2:2e:af:f5:33:9c:ce:dd:7c:66:a8:95:d2: 71:c3:03:f4:6e:27:1f:cc:61:68:1e:e8:b7:9f:bb:ac:5e:6b: 90:6b:48:8c:5c:f7:35:06:a6:59:b5:25:b6:bd:03:d4:fb:b9: 5a:83:39:9c:1f:10:e8:3e:82:83:84:7d:aa:d7:54:48:79:04: 39:83:eb:d3:28:d6:f1:22:88:26:e5:fc:8d:72:6f:a6:59:37: 5b:8f:81:a2:17:8d:70:64:4b:9d:49:2d:00:bf:83:81:fd:74: 40:9d:bd:d4:6d:e6:ac:79:26:b1:a7:5b:08:24:98:5b:e0:f7: 03:06:f4:e0:a7:11:fe:1d:eb:b7:56:fe:d7:38:60:57:81:da: 40:95:ea:83:66:78:7a:95:b3:3b:8a:f8:d1:c8:7a:0d:84:3a: 2c:af:6d:7b:5d:55:c0:e9:12:81:cb:39:37:41:8e:fe:ec:23: dd:12:cf:ad:95:38:d6:69:a8:0c:50:86:26:f5:56:9d:08:fd: e0:1f:99:58:2f:79:c5:39:38:d8:0c:e6:4d:d1:87:0a:d1:dc: 17:e4:1e:90:d5:e2:22:5e:6d:26:33:2c:a7:6f:1e:b4:24:65: 87:91:5b:64:9b:3c:30:96:08:67:6f:9e:23:9d:9a:22:1c:33: 38:b2:bc:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupFEAncmpOLzMsdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkMTNhNGYtYTAzOC00ZDcxLTk0OTQtOWQ0OGZlZjMy YzM1MB4XDTI1MTAyNzEyMDAwM1oXDTI1MTAyOTEyMDAwMFowLzEtMCsGA1UEAxMk YjI4MzdlMjgtMWNmYy00MGUyLWI1NzQtZGFlYjQyZmQ4YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA081xZuSOBdy33Vjlca+Vr51VzWjk19M/ohf+ yd9bnVIGKYFalBn5G0Gi4u0mQrzNAddQTwWgcCOr8mz0vYh1CXpJwFKDZPXc1w6J BYTu+WU4jHG69+Hp2onP2CzLMk2J+g73CJ5WAznEG/Q4DYNCIJn682lrtJrEOmtl D2TRPSgNsfXcsrIKJcd6+UAD+XoYDQdwzD2ZjVgnvT0GesW3HqMvlv29N2Z6fzgY NjOL8obUaavY1QwGkCrVgMIerWTkh6vPi7/gwzYeKSRx0Xh50Z+DQDpvrBX45gSF R8e7nW/dU0N3B9Z/E6LRDZ+xiloJ1U34qCAZTGwEqWgRyZCgtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAHloO2XYFB+ROiSLHQDZv73FVC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OGQx M2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4ZmVmMzJjMzUvODhkMTNhNGYtYTAzOC00 ZDcxLTk0OTQtOWQ0OGZlZjMyYzM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODhkMTNhNGYtYTAzOC00ZDcxLTk0 OTQtOWQ0OGZlZjMyYzM1Lzg4ZDEzYTRmLWEwMzgtNGQ3MS05NDk0LTlkNDhmZWYz MmMzNS5jcmwwHwYDVR0jBBgwFoAUWeKwUyEXZQKPVQZ09Hb2BvuPcoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84OGQxM2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4 ZmVmMzJjMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdWYOi6uIur/UznM7dfGao ldJxwwP0bicfzGFoHui3n7usXmuQa0iMXPc1BqZZtSW2vQPU+7lagzmcHxDoPoKD hH2q11RIeQQ5g+vTKNbxIogm5fyNcm+mWTdbj4GiF41wZEudSS0Av4OB/XRAnb3U beaseSaxp1sIJJhb4PcDBvTgpxH+Heu3Vv7XOGBXgdpAleqDZnh6lbM7ivjRyHoN hDosr217XVXA6RKByzk3QY7+7CPdEs+tlTjWaagMUIYm9VadCP3gH5lYL3nFOTjY DOZN0YcK0dwX5B6Q1eIiXm0mMyynbx60JGWHkVtkmzwwlghnb54jnZoiHDM4sryY -----END CERTIFICATE-----Generated at Tue Oct 28 03:13:08 2025 by rpki-client