$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft File: 36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft (raw, json) Hash identifier: 6DFD9RVKl/TbhuGgRdjJR5tO7QKmcf3KNFF3GvVVmyc= Subject key identifier: 57:52:99:57:AE:BD:F1:5B:1D:4D:45:3D:32:B8:79:6F:AD:6F:7C:1C Authority key identifier: 4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 Certificate issuer: /CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Certificate serial: 010D0C9F4328584B9695828C45D75083CC71CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft Manifest number: 010D0C9F43285844D64675C9118FDE20F5ABA36E Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl (hash: 2UaSLmMG30HcMx5vdYSfsa+I63AT85qLjovNeIcTjBU=) 2: d2a082d0-19b1-32d7-91a3-222f02e26207.roa (hash: KBV4AkeCVhQ1CDsZXuxcNmig0AmxYUFh4312atUAcN0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:82:8c:45:d7:50:83:cc:71:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=0c4320d0-2934-45d9-b2a1-137d7d7185c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e4:58:e6:68:af:3a:09:e3:31:f6:84:70:4e: 39:15:26:61:ee:8e:98:2b:e2:11:89:5b:ac:08:7e: 58:9e:f2:9e:08:0c:ac:19:bf:47:f3:c9:05:17:5d: 55:26:d0:7d:5a:99:ef:49:50:3c:ca:a8:d0:a8:d0: 3a:fc:79:30:6e:a2:c9:d2:fa:14:32:80:b2:e7:87: 21:28:f6:30:ed:b6:55:f0:ce:a3:dc:4e:04:89:65: ff:92:8a:18:41:4b:02:92:33:6e:a2:3e:c3:cd:cb: 8c:4d:9a:02:38:3d:35:94:38:80:0d:31:87:08:48: 9c:0c:7a:32:91:a2:f2:63:44:71:31:51:a5:ef:cd: 40:c6:36:7c:ad:38:3e:40:5e:5d:89:f8:98:e8:15: 73:0b:51:96:1a:59:eb:64:d8:5f:9f:f4:3c:66:cf: 22:e8:65:3c:aa:74:94:0d:2e:c5:4b:37:5a:97:d4: f9:18:05:60:14:15:44:ee:d1:be:94:a5:c8:97:65: 20:29:8e:df:cb:b1:c5:73:bd:e5:18:29:1f:f1:16: 74:fa:03:6b:b0:b4:eb:4a:21:9f:c1:7b:6b:a9:5f: 0c:d8:ce:71:46:9e:e5:68:33:bc:b3:a2:48:1d:ed: 30:d2:c5:22:86:d5:e1:24:84:ed:f5:e4:29:b8:84: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:99:57:AE:BD:F1:5B:1D:4D:45:3D:32:B8:79:6F:AD:6F:7C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl X509v3 Authority Key Identifier: keyid:4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:79:80:5e:2d:ef:8b:ba:1c:17:c5:03:7a:3f:b7:1c:c6:15: 97:2b:0b:41:ba:9c:4c:f1:db:77:0e:0d:ee:9c:6c:66:ad:49: fa:47:76:61:3c:93:79:e1:04:a7:1d:48:6c:bd:97:5e:f3:79: f1:6b:86:a8:d3:0c:e5:3b:21:10:8a:e7:46:7c:6d:b5:0f:8c: be:d9:2e:23:42:49:8e:d7:d6:23:df:e3:87:31:7c:ec:f5:e2: 82:c1:24:54:d5:7c:c9:df:cd:84:68:bc:d0:62:ce:e2:bc:57: 4a:54:39:60:c9:88:0c:25:73:83:a7:da:4a:31:18:f8:c1:fa: 62:bc:b5:7f:70:ae:ae:3d:06:b5:0e:4a:23:a3:9e:4e:40:59: 25:f6:70:3f:58:6a:1b:30:68:97:43:98:06:18:e6:a9:a1:17: db:0f:c1:e4:3f:61:23:1c:82:7e:85:50:90:fb:03:e4:15:9a: ee:87:7b:29:a4:59:b4:5d:56:38:56:ca:99:2a:34:ce:02:f3: 0b:c0:6b:07:ec:2e:37:c1:fc:48:dc:c2:07:dc:25:62:8d:7f: a6:a1:ce:f0:e4:3f:5c:02:ba:e7:20:75:0d:93:2d:45:92:98: b9:f9:c3:38:73:fc:b0:e9:26:0f:2f:29:2c:84:e5:e7:eb:92: e2:e4:46:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYKMRddQg8xxyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZkOTkxN2MtMTA2MS00YjBkLTlkYjItZjFjODJkY2Fk ZDI5MB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk MGM0MzIwZDAtMjkzNC00NWQ5LWIyYTEtMTM3ZDdkNzE4NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhORY5mivOgnjMfaEcE45FSZh7o6YK+IRiVus CH5YnvKeCAysGb9H88kFF11VJtB9WpnvSVA8yqjQqNA6/HkwbqLJ0voUMoCy54ch KPYw7bZV8M6j3E4EiWX/kooYQUsCkjNuoj7DzcuMTZoCOD01lDiADTGHCEicDHoy kaLyY0RxMVGl781AxjZ8rTg+QF5difiY6BVzC1GWGlnrZNhfn/Q8Zs8i6GU8qnSU DS7FSzdal9T5GAVgFBVE7tG+lKXIl2UgKY7fy7HFc73lGCkf8RZ0+gNrsLTrSiGf wXtrqV8M2M5xRp7laDO8s6JIHe0w0sUihtXhJITt9eQpuIR1SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFdSmVeuvfFbHU1FPTK4eW+tb3wcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5 OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4MmRjYWRkMjkvMzZkOTkxN2MtMTA2MS00 YjBkLTlkYjItZjFjODJkY2FkZDI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZkOTkxN2MtMTA2MS00YjBkLTlk YjItZjFjODJkY2FkZDI5LzM2ZDk5MTdjLTEwNjEtNGIwZC05ZGIyLWYxYzgyZGNh ZGQyOS5jcmwwHwYDVR0jBBgwFoAUSqHVZAdwdvnbVcgOm2tEssAnRrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4 MmRjYWRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFeYBeLe+LuhwXxQN6P7cc xhWXKwtBupxM8dt3Dg3unGxmrUn6R3ZhPJN54QSnHUhsvZde83nxa4ao0wzlOyEQ iudGfG21D4y+2S4jQkmO19Yj3+OHMXzs9eKCwSRU1XzJ382EaLzQYs7ivFdKVDlg yYgMJXODp9pKMRj4wfpivLV/cK6uPQa1Dkojo55OQFkl9nA/WGobMGiXQ5gGGOap oRfbD8HkP2EjHIJ+hVCQ+wPkFZruh3sppFm0XVY4VsqZKjTOAvMLwGsH7C43wfxI 3MIH3CVijX+moc7w5D9cArrnIHUNky1Fkpi5+cM4c/yw6SYPLykshOXn65Li5EZD -----END CERTIFICATE-----Generated at Tue Oct 21 15:19:03 2025 by rpki-client