$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft File: 36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft (raw, json) Hash identifier: k4kzun4Pb94qoCChiUpGgIFiyFIwwF46fDt0+eSl2K8= Subject key identifier: 2B:7D:FB:F6:88:08:36:76:84:DB:30:5D:ED:C7:52:57:66:CD:7F:ED Authority key identifier: 4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 Certificate issuer: /CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Certificate serial: 010D0C9F4328584BC075C3CB214658E814DB8840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft Manifest number: 010D0C9F43285844D64675C9118FDE20F5ABA37D Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl (hash: udkqDhkC8UkFfqBIrI9jGLuA4/ZVjuvMr3Fe9JuYzgw=) 2: d2a082d0-19b1-32d7-91a3-222f02e26207.roa (hash: KBV4AkeCVhQ1CDsZXuxcNmig0AmxYUFh4312atUAcN0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:cb:21:46:58:e8:14:db:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=90b6edcd-d5b7-4954-944a-65f77d3b7f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:62:a6:c8:73:20:fe:5d:8e:e0:68:70:63: d2:aa:2f:a8:28:95:ea:1f:48:ed:77:3f:2d:08:94: ca:2c:b7:3c:d2:78:9e:64:be:f7:4f:f7:46:b0:e3: a6:28:b6:45:af:bb:72:96:95:0c:f4:98:59:a3:8e: 6d:23:46:b4:44:36:39:75:7c:0e:ae:44:f1:5e:58: 57:86:80:58:a9:37:18:ee:4a:e8:df:6b:c6:73:fd: 03:d3:45:21:7d:dc:f5:86:0d:af:63:54:37:0b:1c: c4:77:69:77:83:fc:63:44:21:e7:b6:19:0b:a2:9d: d2:5a:eb:08:60:a7:f6:0e:c5:f5:ad:04:ec:62:af: b1:70:be:15:55:9b:9d:5c:61:ce:ff:d6:d8:e6:cd: 33:7a:2e:0e:43:2d:06:ec:ae:07:11:d6:1c:1d:1b: 64:1e:52:15:14:ee:b2:4b:e8:a4:51:ac:6b:67:07: ef:e6:03:a3:a5:2c:61:e9:f8:2c:0e:fc:be:f5:e6: 25:fe:8a:e1:0e:6a:f8:43:f0:23:36:9b:60:5a:fb: ea:b5:62:d7:dc:22:8a:3d:d5:90:d8:a9:61:a2:0c: e1:8c:62:70:40:8d:75:c7:57:a8:da:a4:d7:79:4f: 7b:0a:e3:66:61:dd:16:42:69:36:9a:aa:ad:a3:be: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:FB:F6:88:08:36:76:84:DB:30:5D:ED:C7:52:57:66:CD:7F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl X509v3 Authority Key Identifier: keyid:4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:66:27:ba:c4:f7:0d:ff:22:ff:d0:cb:aa:d2:4d:62:20:d9: 28:2b:32:5d:cf:05:91:15:56:33:ea:7b:90:dd:2c:db:08:74: 27:a4:80:9c:20:db:9c:63:58:c2:91:0c:a7:87:43:41:c9:d2: a7:23:12:83:51:d9:7c:b5:1c:d7:ef:b8:8e:c1:db:34:58:95: 16:8f:3d:c6:95:eb:53:8f:45:af:1b:ec:ed:db:fc:2f:81:fc: f3:ee:b6:f1:13:3b:ce:74:bb:6f:ca:4f:9e:f4:92:67:a9:a8: ef:ea:e4:dd:7e:3c:b0:ce:6e:b2:9f:2f:5f:b8:82:3e:6a:e5: b2:9f:b3:ba:cc:e6:d7:31:39:33:23:24:19:dd:df:a6:60:74: 1a:11:66:f3:02:00:09:05:0d:d7:77:f4:64:42:aa:b4:04:f7: ae:d7:37:06:08:80:36:bb:0e:cb:0f:7e:1f:e5:3b:12:8d:2e: 7a:b6:09:01:65:b6:18:2f:bb:a1:5a:cc:19:32:ec:c4:13:87: e2:17:96:b6:b1:97:b2:25:57:4d:0f:d7:e2:0a:2a:2c:56:bd: b7:6c:cc:db:26:c5:4c:c6:de:04:ed:33:5c:87:c1:af:0c:46: 11:d5:76:b0:ee:04:13:75:d2:dc:9c:38:0e:99:b9:5f:dc:d6: e1:ea:fa:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcPLIUZY6BTbiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZkOTkxN2MtMTA2MS00YjBkLTlkYjItZjFjODJkY2Fk ZDI5MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk OTBiNmVkY2QtZDViNy00OTU0LTk0NGEtNjVmNzdkM2I3Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfxipshzIP5djuBocGPSqi+oKJXqH0jtdz8t CJTKLLc80nieZL73T/dGsOOmKLZFr7tylpUM9JhZo45tI0a0RDY5dXwOrkTxXlhX hoBYqTcY7kro32vGc/0D00Uhfdz1hg2vY1Q3CxzEd2l3g/xjRCHnthkLop3SWusI YKf2DsX1rQTsYq+xcL4VVZudXGHO/9bY5s0zei4OQy0G7K4HEdYcHRtkHlIVFO6y S+ikUaxrZwfv5gOjpSxh6fgsDvy+9eYl/orhDmr4Q/AjNptgWvvqtWLX3CKKPdWQ 2KlhogzhjGJwQI11x1eo2qTXeU97CuNmYd0WQmk2mqqto74fFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCt9+/aICDZ2hNswXe3HUldmzX/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5 OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4MmRjYWRkMjkvMzZkOTkxN2MtMTA2MS00 YjBkLTlkYjItZjFjODJkY2FkZDI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZkOTkxN2MtMTA2MS00YjBkLTlk YjItZjFjODJkY2FkZDI5LzM2ZDk5MTdjLTEwNjEtNGIwZC05ZGIyLWYxYzgyZGNh ZGQyOS5jcmwwHwYDVR0jBBgwFoAUSqHVZAdwdvnbVcgOm2tEssAnRrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4 MmRjYWRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPZie6xPcN/yL/0Muq0k1i INkoKzJdzwWRFVYz6nuQ3SzbCHQnpICcINucY1jCkQynh0NBydKnIxKDUdl8tRzX 77iOwds0WJUWjz3GletTj0WvG+zt2/wvgfzz7rbxEzvOdLtvyk+e9JJnqajv6uTd fjywzm6yny9fuII+auWyn7O6zObXMTkzIyQZ3d+mYHQaEWbzAgAJBQ3Xd/RkQqq0 BPeu1zcGCIA2uw7LD34f5TsSjS56tgkBZbYYL7uhWswZMuzEE4fiF5a2sZeyJVdN D9fiCiosVr23bMzbJsVMxt4E7TNch8GvDEYR1Xaw7gQTddLcnDgOmblf3Nbh6vr6 -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:10 2025 by rpki-client