$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: 2N2V64BVQ+y63ASlgSWkb6aFw5nNZDbZJrIbbdOTldQ= Subject key identifier: BA:34:32:E0:D1:8A:90:DB:2A:C2:64:EE:A9:FA:7B:52:1A:DE:1F:1A Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F4328584BBF1063ED07DAC0E616DF3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A3323 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: SIwhqTDa0bY8TC+wiYViBaKK94q+aclavWFCrzSzB7w=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: stRctkzIyC68v66MmwbypxfC1jnTJLi6mp4sY1Y4UMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:63:ed:07:da:c0:e6:16:df:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=3ca5922a-bdce-4d74-8258-425c287d5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:38:78:7b:af:5e:c0:99:b8:e1:30:50:1d: 60:9a:9f:89:18:95:a7:3f:15:6c:0e:14:60:ff:ab: bf:6f:1f:26:b8:2b:61:4a:8a:40:92:99:ca:c6:b8: 39:05:46:1d:47:1f:e2:35:0a:53:5c:70:38:45:23: b3:3a:dd:c7:81:33:30:cb:7b:60:40:77:d5:79:f3: 1f:f8:4c:52:2e:64:d0:31:61:51:ee:cf:49:f0:1b: b6:a1:f3:db:54:f6:3e:0c:16:fd:9c:60:c8:c5:1b: 14:ae:dc:85:4a:64:d4:46:aa:84:ac:a9:c9:41:c7: db:66:0a:c6:2b:09:a8:db:7c:bf:e0:c2:e3:3d:56: 2d:f2:2d:c7:b2:bd:f3:88:db:66:0b:e0:11:5d:c8: 5c:c2:a2:f9:66:a5:90:62:0a:56:f9:da:13:58:2e: 10:a2:86:9a:3e:f1:1b:50:25:c8:43:c2:4a:54:64: 27:f6:ce:9c:b8:65:87:d2:a1:c6:25:08:a0:60:ce: 2f:75:ca:76:10:fe:49:da:06:79:d2:b5:86:ff:d7: 17:39:09:c4:8b:9f:06:42:00:a7:af:a7:5d:e4:fe: 58:bf:e6:c3:75:a7:dd:11:f3:62:69:48:d4:32:08: fd:5a:13:19:05:0c:ab:64:38:66:ee:b4:35:6a:d8: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:32:E0:D1:8A:90:DB:2A:C2:64:EE:A9:FA:7B:52:1A:DE:1F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:af:4e:48:cf:55:0c:0e:92:01:64:55:e3:a9:94:93:11:b2: 57:76:8b:12:4f:cf:cd:13:71:51:ae:6d:c2:81:7a:0d:d6:8b: 54:71:53:6b:37:4c:39:5b:3b:56:78:88:e0:cc:02:73:ea:a9: f7:2c:32:49:9c:5c:89:9a:ca:f4:19:92:6d:90:7a:6c:95:99: 52:71:c1:9c:dc:6a:5e:28:d3:5c:92:b4:0c:ab:c6:28:05:d8: 2d:f7:6e:8b:bb:f6:93:88:d1:f1:45:7c:d3:c2:90:c1:51:96: 57:19:d6:18:e3:a8:e8:9b:66:2d:f9:c9:1c:8d:af:bb:1d:4d: d2:95:cd:08:b9:5f:d1:c0:f1:a2:87:91:80:0b:59:70:e7:2e: c5:fc:81:b4:a2:75:f1:12:a1:e4:b4:2e:eb:4a:4c:74:05:ec: 32:99:13:e4:a4:b8:ad:41:e5:0a:89:1b:ec:e7:07:72:07:1e: 84:9f:de:d9:af:46:23:29:3a:3e:ed:3f:25:57:20:05:c2:68: 86:96:c3:a5:0b:f6:4e:13:2a:67:fd:94:31:cf:39:e5:88:f4: d5:c0:04:78:75:d7:c7:7d:43:30:9c:17:68:6b:24:f1:bd:e4: e4:1b:70:97:b8:14:d3:9a:71:92:0b:4a:26:a5:ef:b4:9e:99: bd:2c:ab:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGPtB9rA5hbfOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk M2NhNTkyMmEtYmRjZS00ZDc0LTgyNTgtNDI1YzI4N2Q1YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYg4eHuvXsCZuOEwUB1gmp+JGJWnPxVsDhRg /6u/bx8muCthSopAkpnKxrg5BUYdRx/iNQpTXHA4RSOzOt3HgTMwy3tgQHfVefMf +ExSLmTQMWFR7s9J8Bu2ofPbVPY+DBb9nGDIxRsUrtyFSmTURqqErKnJQcfbZgrG Kwmo23y/4MLjPVYt8i3Hsr3ziNtmC+ARXchcwqL5ZqWQYgpW+doTWC4QooaaPvEb UCXIQ8JKVGQn9s6cuGWH0qHGJQigYM4vdcp2EP5J2gZ50rWG/9cXOQnEi58GQgCn r6dd5P5Yv+bDdafdEfNiaUjUMgj9WhMZBQyrZDhm7rQ1atgU6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLo0MuDRipDbKsJk7qn6e1Ia3h8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8r05Iz1UMDpIBZFXjqZST EbJXdosST8/NE3FRrm3CgXoN1otUcVNrN0w5WztWeIjgzAJz6qn3LDJJnFyJmsr0 GZJtkHpslZlSccGc3GpeKNNckrQMq8YoBdgt926Lu/aTiNHxRXzTwpDBUZZXGdYY 46jom2Yt+ckcja+7HU3Slc0IuV/RwPGih5GAC1lw5y7F/IG0onXxEqHktC7rSkx0 BewymRPkpLitQeUKiRvs5wdyBx6En97Zr0YjKTo+7T8lVyAFwmiGlsOlC/ZOEypn /ZQxzznliPTVwAR4ddfHfUMwnBdoayTxveTkG3CXuBTTmnGSC0ompe+0npm9LKvb -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:20 2025 by rpki-client