$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft File: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft (raw, json) Hash identifier: ikDYytzOJFjBatJrWuVptrIr/Tx4fboszhY8dEPicb4= Subject key identifier: 8F:C5:67:35:7B:3D:6D:E8:DF:06:EF:26:7E:A4:49:37:3C:F2:DD:AB Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584BA96DA357052908E73BFE1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft Manifest number: 010D0C9F4328584A1A40BB5ED5171D328F14E092 Signing time: Mon 27 Oct 2025 15:00:09 +0000 Manifest this update: Mon 27 Oct 2025 15:00:09 +0000 Manifest next update: Wed 29 Oct 2025 15:00:00 +0000 Files and hashes: 1: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (hash: PHa1ToHJPD9O4cRpj3YezUssBj4KGeq3m3yDEPhAglA=) 2: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl (hash: iYsqzSbnDKnfg+Oq/K2zA3JRppQWDI5rLa0Va7lHL6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:6d:a3:57:05:29:08:e7:3b:fe:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Oct 27 15:00:09 2025 GMT Not After : Oct 29 15:00:00 2025 GMT Subject: CN=3c534fa7-ee44-41f9-b065-39622eaca9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f9:df:6e:1f:1b:cc:31:ec:34:2f:d9:66:aa: 52:29:62:32:a3:27:9b:ca:78:52:1d:05:f8:63:e5: 93:0b:c3:46:89:a7:e1:5d:ee:6c:a6:2c:e6:52:15: 0d:fa:e4:02:02:e0:ed:0c:d4:42:30:02:43:a8:61: 62:b2:77:f7:50:e4:9a:bf:18:d8:30:75:73:a6:7e: d7:7d:81:3c:be:4d:81:22:a0:30:31:69:62:09:dd: f3:9a:50:58:47:a1:72:53:9b:6d:6d:b0:80:93:9f: 92:39:2d:bc:31:a1:79:78:ef:d7:50:a0:32:e0:4d: b0:b8:d0:0a:7c:20:6d:be:4b:a1:66:57:e3:96:2a: d3:4a:83:ef:84:cf:44:1e:1e:f4:f3:8d:52:30:54: f7:fe:64:86:1f:4d:1a:27:cc:9c:91:f4:f9:d5:f8: 30:8e:4a:1e:ec:2a:05:f0:b8:27:fb:3b:4a:cc:b6: c5:bd:f9:23:9f:5f:0d:ba:bf:72:4f:eb:dc:2b:7b: 66:b0:c7:a6:0e:df:c7:da:2e:c6:67:29:c9:c4:13: 40:23:27:48:19:cb:2e:f6:23:64:ce:89:ed:c7:55: 6c:53:bb:31:25:ec:49:06:ba:d8:9a:3f:94:16:df: 35:39:8d:53:b7:3a:68:1e:48:32:a5:39:98:27:e1: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C5:67:35:7B:3D:6D:E8:DF:06:EF:26:7E:A4:49:37:3C:F2:DD:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cf:32:81:83:8e:22:94:5f:2a:f0:db:fd:bb:41:58:74:59: d7:4e:0d:1f:46:0b:ac:da:fa:b5:8d:63:1d:1b:dc:fe:8f:44: 46:48:cc:15:91:ba:36:e4:7b:6c:11:87:ea:a7:8d:0e:89:ac: ba:d0:09:79:d3:6f:b9:0d:2b:ed:10:06:be:ad:87:87:cb:37: 32:60:64:12:57:86:0e:05:e6:ba:16:ba:a0:64:28:8d:3d:7f: ad:de:23:6d:3b:e9:d6:2d:5e:63:6d:d8:39:be:7c:d7:22:b2: cc:50:bd:8c:ac:19:f4:e0:d9:ff:fa:27:10:e6:9c:ca:8f:91: 60:84:85:52:9d:b1:00:ea:5b:4b:5b:b5:87:e1:9a:34:75:cb: b7:c8:d8:8e:1b:b9:1b:a9:f5:af:60:96:b6:5e:69:81:d7:bd: a8:bd:72:8f:df:29:d0:b4:2e:d7:e0:4f:5d:7d:09:98:75:61: 05:b7:68:69:97:dd:54:65:14:42:a1:6d:ec:65:50:de:2d:7e: 98:76:cf:bc:ed:b6:97:c4:5f:c1:d0:c0:07:a5:c3:35:ca:96: fd:d5:b9:ab:cb:f0:23:51:ac:8f:25:34:81:cd:3b:76:6d:e8: c1:c2:01:24:34:c8:28:0a:76:27:2c:b2:72:52:a2:1f:da:07: e6:42:d1:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupbaNXBSkI5zv+HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MTAyNzE1MDAwOVoXDTI1MTAyOTE1MDAwMFowLzEtMCsGA1UEAxMk M2M1MzRmYTctZWU0NC00MWY5LWIwNjUtMzk2MjJlYWNhOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvnfbh8bzDHsNC/ZZqpSKWIyoyebynhSHQX4 Y+WTC8NGiafhXe5spizmUhUN+uQCAuDtDNRCMAJDqGFisnf3UOSavxjYMHVzpn7X fYE8vk2BIqAwMWliCd3zmlBYR6FyU5ttbbCAk5+SOS28MaF5eO/XUKAy4E2wuNAK fCBtvkuhZlfjlirTSoPvhM9EHh70841SMFT3/mSGH00aJ8yckfT51fgwjkoe7CoF 8Lgn+ztKzLbFvfkjn18Nur9yT+vcK3tmsMemDt/H2i7GZynJxBNAIydIGcsu9iNk zontx1VsU7sxJexJBrrYmj+UFt81OY1TtzpoHkgypTmYJ+GoEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI/FZzV7PW3o3wbvJn6kSTc88t2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvOGYxZDVlY2QtODc3MC00 NmEyLWI3YzgtMjUxYjU2NGI5ZTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYzzKBg44ilF8q8Nv9u0FY dFnXTg0fRgus2vq1jWMdG9z+j0RGSMwVkbo25HtsEYfqp40Oiay60Al502+5DSvt EAa+rYeHyzcyYGQSV4YOBea6FrqgZCiNPX+t3iNtO+nWLV5jbdg5vnzXIrLMUL2M rBn04Nn/+icQ5pzKj5FghIVSnbEA6ltLW7WH4Zo0dcu3yNiOG7kbqfWvYJa2XmmB 172ovXKP3ynQtC7X4E9dfQmYdWEFt2hpl91UZRRCoW3sZVDeLX6Yds+87baXxF/B 0MAHpcM1ypb91bmry/AjUayPJTSBzTt2bejBwgEkNMgoCnYnLLJyUqIf2gfmQtGY -----END CERTIFICATE-----Generated at Tue Oct 28 03:13:08 2025 by rpki-client