$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft File: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft (raw, json) Hash identifier: gP9Ka+8Mt+rCGSe0Cao/+WLjUYEUiYuTIVZYpYCqqco= Subject key identifier: 0B:1E:5B:3F:65:BC:13:A6:91:3C:0E:E7:AD:F4:E7:51:1A:A0:0E:2C Authority key identifier: 92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F Certificate issuer: /CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Certificate serial: 010D0C9F4328584B97DD05F768DAA7B46B64A770 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft Manifest number: 010D0C9F4328584A21C7587CA6AD09944CFCDF08 Signing time: Tue 21 Oct 2025 08:00:03 +0000 Manifest this update: Tue 21 Oct 2025 08:00:03 +0000 Manifest next update: Fri 24 Oct 2025 08:00:00 +0000 Files and hashes: 1: 79a68e4a-63c9-343a-a4c3-0a5e94130274.roa (hash: LBjyYA//8nyTaBD7uDEdik8N1NAs0INu2XWbpXgMvrs=) 2: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl (hash: BmrnsHmLxdNKZ3XrsJ+cX/Lj5UYj1Ygpv/uw8kPvhdk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:dd:05:f7:68:da:a7:b4:6b:64:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Validity Not Before: Oct 21 08:00:03 2025 GMT Not After : Oct 24 08:00:00 2025 GMT Subject: CN=dd7b8f29-7166-424f-8ad6-dc37c57794ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:e3:15:04:07:cf:c5:2e:0b:ef:53:33:a4: 24:47:aa:5e:e8:44:c2:4b:25:c7:d1:78:0a:39:41: 96:01:8c:11:6c:39:a1:16:4e:08:da:5d:35:07:85: bd:76:20:69:1c:e6:5f:6a:20:6d:93:7b:85:06:ed: 56:85:9f:b6:b4:a1:99:e4:53:09:33:04:70:de:53: 01:2c:6e:ba:d1:0e:d0:4d:af:82:86:6b:2d:ba:eb: 86:58:3e:2f:9c:ab:c8:d5:d2:96:cc:a9:da:fd:f9: 50:06:56:f9:74:1e:0a:55:17:7f:7b:78:e7:0a:f6: ad:ba:a3:49:53:e5:2c:12:c3:02:4e:c2:0c:2b:01: fd:d9:f8:f0:dd:6b:01:e6:da:c9:89:0b:16:38:eb: 80:6a:0a:2a:5d:70:b4:2b:6d:3b:97:2d:63:da:11: c9:8a:9e:bf:38:b0:5d:34:d0:51:37:27:6e:96:33: 04:ca:b7:d4:52:4f:6d:6f:26:2f:c6:f3:fa:74:cd: 0e:f4:e2:98:1e:e1:45:6e:ba:13:89:c9:ce:1c:b4: 32:ee:6d:81:01:ba:54:32:67:3f:a3:e8:a2:30:b7: db:b5:1a:f3:09:6f:bb:e7:0a:d8:ff:f7:6a:2a:ec: d6:57:d1:c5:91:08:d4:0a:1a:7a:2c:8c:ef:16:9b: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:5B:3F:65:BC:13:A6:91:3C:0E:E7:AD:F4:E7:51:1A:A0:0E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl X509v3 Authority Key Identifier: keyid:92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f9:b8:59:52:f2:81:00:7f:29:26:a9:95:bb:da:3e:9d:88: 49:16:02:27:60:3e:59:77:9a:7f:22:fe:4b:bf:fe:36:00:f7: ae:86:ca:36:c9:fd:f8:89:ea:f6:43:b3:97:28:fe:71:75:06: 93:9c:ee:21:07:96:da:c1:bc:7f:a5:07:ea:ab:bd:7f:e6:8e: 7c:0b:c5:22:d8:01:4d:c0:ed:4a:3c:db:40:5e:b2:35:c5:76: d8:16:83:20:8d:9b:db:61:3b:43:95:57:cf:8b:9c:60:6c:ef: 78:f1:fb:ff:59:a2:c8:e9:16:49:77:36:58:90:71:0a:40:b3: 5c:53:f3:b8:87:4b:74:2f:56:1f:fd:31:13:50:f6:cb:c0:67: 49:f7:08:d1:28:81:81:5f:d7:09:d8:ad:ab:ce:81:82:97:a2: 03:fa:37:0d:70:d2:2e:b2:45:d2:3b:33:6a:cb:8b:f0:dd:9d: b6:9d:6d:84:cc:c6:a4:95:a4:a9:4f:27:3f:f4:a8:6b:d0:27: 68:6f:23:f1:4c:be:5e:ad:e4:a3:fd:ef:f5:3f:d5:b7:d5:6d: ee:8f:8a:ec:c0:0c:dc:66:45:9d:ec:d9:92:de:56:cb:cb:9b: 35:d9:56:65:74:de:bb:1a:9a:06:86:9b:0c:08:1f:46:6d:91: dc:d7:ec:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuX3QX3aNqntGtkp3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3MjBlMTMtOGNmNi00YmQ3LThiNGUtOGRkM2ZmODYy ZjI4MB4XDTI1MTAyMTA4MDAwM1oXDTI1MTAyNDA4MDAwMFowLzEtMCsGA1UEAxMk ZGQ3YjhmMjktNzE2Ni00MjRmLThhZDYtZGMzN2M1Nzc5NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN7jFQQHz8UuC+9TM6QkR6pe6ETCSyXH0XgK OUGWAYwRbDmhFk4I2l01B4W9diBpHOZfaiBtk3uFBu1WhZ+2tKGZ5FMJMwRw3lMB LG660Q7QTa+ChmstuuuGWD4vnKvI1dKWzKna/flQBlb5dB4KVRd/e3jnCvatuqNJ U+UsEsMCTsIMKwH92fjw3WsB5trJiQsWOOuAagoqXXC0K207ly1j2hHJip6/OLBd NNBRNyduljMEyrfUUk9tbyYvxvP6dM0O9OKYHuFFbroTicnOHLQy7m2BAbpUMmc/ o+iiMLfbtRrzCW+75wrY//dqKuzWV9HFkQjUChp6LIzvFptxqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAseWz9lvBOmkTwO563051EaoA4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jODcy MGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQzZmY4NjJmMjgvYzg3MjBlMTMtOGNmNi00 YmQ3LThiNGUtOGRkM2ZmODYyZjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzg3MjBlMTMtOGNmNi00YmQ3LThi NGUtOGRkM2ZmODYyZjI4L2M4NzIwZTEzLThjZjYtNGJkNy04YjRlLThkZDNmZjg2 MmYyOC5jcmwwHwYDVR0jBBgwFoAUkgUiKDDULHHZvg2GIYRFZT8oiH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jODcyMGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQz ZmY4NjJmMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf+bhZUvKBAH8pJqmVu9o+ nYhJFgInYD5Zd5p/Iv5Lv/42APeuhso2yf34ier2Q7OXKP5xdQaTnO4hB5bawbx/ pQfqq71/5o58C8Ui2AFNwO1KPNtAXrI1xXbYFoMgjZvbYTtDlVfPi5xgbO948fv/ WaLI6RZJdzZYkHEKQLNcU/O4h0t0L1Yf/TETUPbLwGdJ9wjRKIGBX9cJ2K2rzoGC l6ID+jcNcNIuskXSOzNqy4vw3Z22nW2EzMaklaSpTyc/9Khr0CdobyPxTL5ereSj /e/1P9W31W3uj4rswAzcZkWd7NmS3lbLy5s12VZldN67GpoGhpsMCB9GbZHc1+zX -----END CERTIFICATE-----Generated at Tue Oct 21 13:51:18 2025 by rpki-client