$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft File: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft (raw, json) Hash identifier: v2B5fy5stfQLEXdzoE0k91mQlYY/To3AYBx5MMeqLzY= Subject key identifier: 59:49:3E:7D:2A:DE:CF:19:39:83:76:94:70:13:D5:74:71:A3:52:07 Authority key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Certificate issuer: /CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Certificate serial: 010D0C9F4328584B39C23BAE666D3B9CF68EE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft Manifest number: 010D0C9F43285849864C6858DE047781D0D327E2 Signing time: Wed 17 Sep 2025 15:00:03 +0000 Manifest this update: Wed 17 Sep 2025 15:00:03 +0000 Manifest next update: Sat 20 Sep 2025 15:00:00 +0000 Files and hashes: 1: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl (hash: RS1KQZQVb2odl5iW7WnAQNXqD7H8GZG0veTuEnfPx4E=) 2: f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa (hash: 9xPLNaHnK/+fRNNxk9V05Jf3pCzSDu0AqhFlhcBJrLo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:c2:3b:ae:66:6d:3b:9c:f6:8e:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Validity Not Before: Sep 17 15:00:03 2025 GMT Not After : Sep 20 15:00:00 2025 GMT Subject: CN=3f09b082-f70b-40c8-b8b2-f3868c81e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:9a:39:49:4d:e4:71:15:a2:64:f8:49:56: 02:d6:25:8f:23:2c:10:53:a5:9f:1c:e4:83:f5:89: bb:f3:e4:3d:7e:6f:e6:8c:97:a2:68:e7:8c:09:6f: a6:7d:c2:0d:d9:3b:3e:ef:4e:ee:9c:04:6e:04:db: 73:9b:7b:2d:be:de:4e:cc:d3:cb:68:9d:8a:2b:c3: 45:46:4c:02:0a:74:0e:af:c5:9a:88:43:d5:17:bc: fb:95:fd:26:b4:8e:bf:14:45:e6:cb:4e:19:3c:26: 69:29:e0:37:6f:3e:60:01:9b:c0:30:1a:70:5a:6a: 70:98:0c:55:0a:c2:92:4f:25:09:59:a0:c2:6a:ca: 7c:02:45:8b:e2:c3:cf:76:0d:31:f9:18:4c:cb:fb: 43:a6:f8:cf:b4:a0:8e:a9:04:e5:30:be:f9:bc:60: 51:60:58:e4:af:05:26:0e:36:78:ba:9f:04:a4:d8: ef:fd:18:a4:f5:4a:15:cb:1e:2f:67:81:c3:38:46: 5e:2e:ab:c6:29:b2:c7:1b:94:ba:e6:88:7d:aa:cc: eb:f8:81:6a:61:67:69:3c:61:a7:ad:d5:19:ae:2c: f2:04:3a:0e:cc:72:2e:08:28:f1:86:47:cb:0e:de: 3a:80:bf:49:3b:a2:55:d1:a5:1a:1a:df:b6:75:b1: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:49:3E:7D:2A:DE:CF:19:39:83:76:94:70:13:D5:74:71:A3:52:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl X509v3 Authority Key Identifier: keyid:47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:67:d0:16:99:4e:09:1a:81:ea:de:fa:61:ec:aa:f8:40:fd: f4:bd:07:32:92:8c:29:5e:23:78:6c:41:44:9d:e6:4b:81:35: d8:5b:3a:99:30:d3:2a:32:f8:07:25:a7:b7:d5:11:5c:dd:c2: f7:da:17:17:52:eb:19:6f:4d:04:27:6a:a6:af:bf:53:8c:7e: a6:93:d8:d3:54:38:71:0c:73:fc:2d:29:95:94:89:a1:89:91: c1:fd:9e:84:31:5e:a4:6a:c7:16:5a:1e:d4:20:77:b0:13:95: cf:b0:cd:06:e5:93:49:93:b5:90:4e:f7:b1:ec:5a:54:6c:f8: 7c:f4:80:6e:68:85:55:04:75:0e:e7:30:4c:75:ae:7e:61:ec: 5a:83:71:c0:61:5b:66:cd:e8:f1:12:2f:a7:8f:83:09:01:b9: 21:56:87:43:7b:d2:8a:7a:11:f1:fc:98:9b:61:b0:11:2f:b0: 8f:fa:87:4a:ca:fd:e5:3c:78:a3:ec:d1:42:02:8b:88:b4:af: c1:b1:29:38:e4:c2:3c:0e:30:b5:78:78:2a:64:c2:24:27:c7: 13:51:72:10:eb:ae:71:e3:bf:80:b0:fa:b2:ec:49:e9:3b:56: 61:3d:46:77:b8:6b:89:dc:22:82:0e:b0:92:da:25:b1:25:ff: 6d:71:47:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs5wjuuZm07nPaO4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmNDhhMjgtN2FhMi00YTdmLWI4NWUtNzFiNzcwZGEy ZWU1MB4XDTI1MDkxNzE1MDAwM1oXDTI1MDkyMDE1MDAwMFowLzEtMCsGA1UEAxMk M2YwOWIwODItZjcwYi00MGM4LWI4YjItZjM4NjhjODFlMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyCaOUlN5HEVomT4SVYC1iWPIywQU6WfHOSD 9Ym78+Q9fm/mjJeiaOeMCW+mfcIN2Ts+707unARuBNtzm3stvt5OzNPLaJ2KK8NF RkwCCnQOr8WaiEPVF7z7lf0mtI6/FEXmy04ZPCZpKeA3bz5gAZvAMBpwWmpwmAxV CsKSTyUJWaDCasp8AkWL4sPPdg0x+RhMy/tDpvjPtKCOqQTlML75vGBRYFjkrwUm DjZ4up8EpNjv/Rik9UoVyx4vZ4HDOEZeLqvGKbLHG5S65oh9qszr+IFqYWdpPGGn rdUZrizyBDoOzHIuCCjxhkfLDt46gL9JO6JV0aUaGt+2dbFMjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFlJPn0q3s8ZOYN2lHAT1XRxo1IHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0 OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBkYTJlZTUvOGJmNDhhMjgtN2FhMi00 YTdmLWI4NWUtNzFiNzcwZGEyZWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJmNDhhMjgtN2FhMi00YTdmLWI4 NWUtNzFiNzcwZGEyZWU1LzhiZjQ4YTI4LTdhYTItNGE3Zi1iODVlLTcxYjc3MGRh MmVlNS5jcmwwHwYDVR0jBBgwFoAURxtKQHSuzhWP+XrpHrVSVcRSkR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3 NzBkYTJlZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIZ9AWmU4JGoHq3vph7Kr4 QP30vQcykowpXiN4bEFEneZLgTXYWzqZMNMqMvgHJae31RFc3cL32hcXUusZb00E J2qmr79TjH6mk9jTVDhxDHP8LSmVlImhiZHB/Z6EMV6kascWWh7UIHewE5XPsM0G 5ZNJk7WQTvex7FpUbPh89IBuaIVVBHUO5zBMda5+Yexag3HAYVtmzejxEi+nj4MJ AbkhVodDe9KKehHx/JibYbARL7CP+odKyv3lPHij7NFCAouItK/BsSk45MI8DjC1 eHgqZMIkJ8cTUXIQ665x47+AsPqy7EnpO1ZhPUZ3uGuJ3CKCDrCS2iWxJf9tcUdv -----END CERTIFICATE-----Generated at Wed Sep 17 23:49:08 2025 by rpki-client