$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft File: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft (raw, json) Hash identifier: VU6Rgv476FjspEFGmmSJMoYqurTorsCL0/42cnmjRNI= Subject key identifier: BC:EF:23:44:85:85:C2:10:C0:DB:BC:85:77:B0:6A:00:EF:C8:EC:F0 Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 Certificate issuer: /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Certificate serial: 010D0C9F4328584BC057FFB9F477AC95EA102980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft Manifest number: 010D0C9F4328584073A826DE89D6DEF45FFDEE93 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl (hash: RUgdW2FcD7NBdEKj6X3aQs8hK7/ecK/QFtQE5WjM15s=) 2: 9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (hash: sUQGZ8em6+WKdZ+3m5SsJKlWwFKS1I+COzHKppN6ybM=) 3: a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (hash: DClhuKwIWfdyQ6q7YCeCqWE/uWnkj/kAfuDLfwSe1Jk=) 4: e5c86172-2a9c-3e75-9dfb-b0bb48de9187.roa (hash: vu8cHF+HdpQ6Sb88RZk/Hh+eknMz6qLAiWnnhTL35jc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:ff:b9:f4:77:ac:95:ea:10:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=ca0dcd09-54c1-4a8f-ae98-f154042ad023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:ee:4e:bc:fe:6f:6f:29:d4:07:2e:6c:2a: 14:df:0b:20:af:2b:9d:dd:67:39:61:0b:e3:9a:af: 5b:bd:d5:3b:e3:e8:b5:d6:28:59:3b:4e:49:ca:ec: c6:9c:0f:49:c1:eb:55:14:f6:b6:d8:22:d7:c6:80: 4d:e8:3c:9c:68:08:26:f5:cb:6a:85:ab:39:93:01: 8e:bf:b3:34:c4:a6:79:4d:3c:a4:6e:9b:23:23:c7: 16:59:80:11:a6:57:5f:f2:41:5f:30:86:e5:29:a4: 40:77:df:b5:34:68:e3:54:52:b5:a0:c5:ef:54:98: 21:1d:f5:90:a5:49:b2:b1:66:80:c5:7e:df:44:79: 66:9f:61:5b:e1:69:9d:48:98:1b:cc:a8:40:7b:a4: 34:c8:2c:8d:61:6d:13:38:7f:e2:54:5f:0e:36:29: 17:56:28:bd:43:85:29:23:64:95:e5:5d:31:e0:fd: 9e:50:7f:61:51:03:fc:47:a5:91:1d:f9:54:bc:7a: 95:1e:69:d4:55:94:12:74:33:21:a0:94:de:77:05: 47:b5:ee:a7:34:34:f4:fd:c7:56:65:50:d7:c9:9c: f1:bf:38:ed:8d:85:16:9f:bb:86:10:8a:82:af:7a: 56:1a:6a:8a:e2:2f:ef:05:a7:5e:f5:cc:ee:da:59: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EF:23:44:85:85:C2:10:C0:DB:BC:85:77:B0:6A:00:EF:C8:EC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl X509v3 Authority Key Identifier: keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1c:fe:98:c2:8b:21:9b:7a:d2:65:f7:9b:a0:c1:05:e1:45: 40:49:3e:19:ca:57:ee:09:83:68:0f:83:b9:ed:83:3c:bc:95: c5:99:66:6f:cb:d8:eb:f0:3a:fd:90:1a:f2:73:a0:8f:b5:f0: a8:0b:fa:c0:39:a3:87:46:3d:cc:5a:fe:d0:ba:92:ce:45:1b: fa:56:6b:b2:c3:1f:62:5f:39:d6:c1:c0:7a:52:00:63:71:57: 50:a6:be:80:85:ef:78:62:32:94:41:48:8f:7b:80:68:a5:91: 22:7b:f3:93:ac:ea:6b:af:ab:ac:43:36:5a:00:e8:ac:85:04: a3:47:09:af:c8:8c:b5:ec:3a:63:ba:88:56:51:6b:b0:b2:c0: 8e:24:ff:a2:1b:db:99:ee:a1:6d:e6:bb:2c:18:e5:83:a2:60: f4:dc:f8:a8:8b:33:98:d1:41:0c:71:12:4c:b8:62:c7:43:67: 80:75:05:95:24:a7:96:eb:fb:8b:a9:85:03:c0:9d:49:59:7f: a1:d5:a9:7f:60:28:ba:55:e5:3c:f6:ae:49:a4:c0:0f:8c:3c: 42:84:0d:7e:f7:59:04:a5:20:99:6b:08:78:7b:5a:91:22:33: 78:c3:00:9a:1b:bd:45:c0:c8:60:ed:ba:d6:f1:c5:a6:2d:f1: ac:98:77:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/+59HesleoQKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMzNmEyYjgtNDJjMy00MmZhLTgzNWUtNDliMjYxMmNj MjlhMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk Y2EwZGNkMDktNTRjMS00YThmLWFlOTgtZjE1NDA0MmFkMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhHuTrz+b28p1AcubCoU3wsgryud3Wc5YQvj mq9bvdU74+i11ihZO05JyuzGnA9JwetVFPa22CLXxoBN6DycaAgm9ctqhas5kwGO v7M0xKZ5TTykbpsjI8cWWYARpldf8kFfMIblKaRAd9+1NGjjVFK1oMXvVJghHfWQ pUmysWaAxX7fRHlmn2Fb4WmdSJgbzKhAe6Q0yCyNYW0TOH/iVF8ONikXVii9Q4Up I2SV5V0x4P2eUH9hUQP8R6WRHflUvHqVHmnUVZQSdDMhoJTedwVHte6nNDT0/cdW ZVDXyZzxvzjtjYUWn7uGEIqCr3pWGmqK4i/vBade9czu2lmFzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLzvI0SFhcIQwNu8hXewagDvyOzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2 YTJiOC00MmMzLTQyZmEtODM1ZS00OWIyNjEyY2MyOWEvOGMzNmEyYjgtNDJjMy00 MmZhLTgzNWUtNDliMjYxMmNjMjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGMzNmEyYjgtNDJjMy00MmZhLTgz NWUtNDliMjYxMmNjMjlhLzhjMzZhMmI4LTQyYzMtNDJmYS04MzVlLTQ5YjI2MTJj YzI5YS5jcmwwHwYDVR0jBBgwFoAUiksEFIeDRSBp0+MZIK/tC2IZO2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2YTJiOC00MmMzLTQyZmEtODM1ZS00OWIy NjEyY2MyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkHP6Ywoshm3rSZfeboMEF 4UVAST4ZylfuCYNoD4O57YM8vJXFmWZvy9jr8Dr9kBryc6CPtfCoC/rAOaOHRj3M Wv7QupLORRv6Vmuywx9iXznWwcB6UgBjcVdQpr6Ahe94YjKUQUiPe4BopZEie/OT rOprr6usQzZaAOishQSjRwmvyIy17DpjuohWUWuwssCOJP+iG9uZ7qFt5rssGOWD omD03PioizOY0UEMcRJMuGLHQ2eAdQWVJKeW6/uLqYUDwJ1JWX+h1al/YCi6VeU8 9q5JpMAPjDxChA1+91kEpSCZawh4e1qRIjN4wwCaG71FwMhg7brW8cWmLfGsmHcJ -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:17 2025 by rpki-client