$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft (raw, json) Hash identifier: id/H/9XQ4uktnwsfpcTsRxH4UIq8e2hQDrLXTO8EyOk= Subject key identifier: 21:64:B5:25:83:A5:9E:94:CE:FD:AB:24:29:4B:F2:4C:BC:0F:B6:8A Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584BBAFE2D580BC08F806195F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft Manifest number: 010D0C9F4328584482DE472669570C8031824827 Signing time: Sun 02 Nov 2025 22:00:08 +0000 Manifest this update: Sun 02 Nov 2025 22:00:08 +0000 Manifest next update: Wed 05 Nov 2025 22:00:00 +0000 Files and hashes: 1: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl (hash: r5T78tx6OaEA+NYypcVnOAuude525TcodCoOF5qNxQo=) 2: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (hash: O4KdQ/xbAkRHMLUccr+zms1fah0SYRXJdkjLJuXC1zc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:fe:2d:58:0b:c0:8f:80:61:95:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Nov 2 22:00:08 2025 GMT Not After : Nov 5 22:00:00 2025 GMT Subject: CN=d21028b3-3811-4602-9260-49eef5361d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:bb:be:c9:38:89:42:bc:7f:a4:da:0d:23: 9e:be:ad:7b:1d:43:be:38:46:fe:c9:56:e1:66:96: 24:4c:e5:c5:7c:97:b8:8e:be:8d:f6:b4:bb:9c:dc: 98:d5:fb:eb:15:b5:6a:3c:47:fa:bc:03:66:b7:c0: 42:a5:c7:6b:42:10:fa:fd:7e:c4:24:39:61:3f:3c: bc:dc:0e:0f:b8:05:e3:c6:5e:18:19:ce:e1:34:5c: 1a:ad:40:f2:93:b5:25:b4:35:88:5e:96:77:0f:b4: fa:55:ff:bd:34:1b:89:67:e5:4f:16:87:7d:14:d6: e2:91:bd:3a:c7:65:8d:4a:00:cf:2e:4d:f5:c2:f9: f5:26:b7:72:e4:08:56:c7:b7:ae:9f:1c:50:04:02: 21:f7:7e:55:37:c7:8e:c8:d7:67:3e:6e:82:2f:04: 89:b8:6f:13:ea:51:3f:1d:e3:1e:c7:77:11:ae:a9: b2:d9:58:e4:b7:83:87:4b:fb:3b:1e:5a:61:f8:4e: 68:58:ac:85:8e:a3:6a:f7:24:eb:b4:ec:42:e6:e3: bd:1c:67:2c:a9:2f:74:b5:27:c8:f1:75:77:ca:cb: 9b:6a:29:15:3b:2b:2d:17:47:d7:7f:04:57:76:f3: 67:7a:45:d5:d2:2e:b2:03:2c:53:2c:b9:f1:56:33: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:B5:25:83:A5:9E:94:CE:FD:AB:24:29:4B:F2:4C:BC:0F:B6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ac:c6:8b:25:e8:01:17:e3:c5:1a:34:47:42:e2:99:f4:de: 8c:ec:79:ef:54:ac:25:62:50:89:93:07:e1:f8:c8:6b:64:7a: 79:0d:f7:e5:4e:a2:ea:35:2d:72:c8:ea:0b:ad:97:41:e1:10: d1:df:ac:05:04:93:ed:a9:61:c4:ec:13:20:08:4a:00:b6:ea: b1:83:84:14:8e:fa:d3:e4:df:f9:3e:ef:35:37:e9:ea:de:cc: a5:37:03:28:c8:42:06:b9:24:d7:87:6b:e1:77:80:ff:85:c0: 47:3c:e6:60:97:c1:35:28:3a:53:61:01:ed:b0:37:65:f8:3a: 7d:2a:d2:82:17:33:ea:a6:27:c8:97:a3:04:fb:a5:a8:21:c4: 10:79:1d:5c:1c:fa:58:dd:f8:ff:a8:87:37:85:2e:af:46:a4: 90:be:ec:ff:9a:dd:2a:b8:1a:09:aa:14:24:62:79:24:e8:bb: 95:73:d6:8c:c5:b3:ff:87:a7:bd:b7:34:58:31:a4:0a:9d:3e: e3:8d:46:94:03:b5:2b:11:7c:67:5d:09:dd:7f:03:b6:ae:2e: 6f:22:7e:d1:5f:d5:10:bb:eb:ce:3b:f7:b8:95:66:ee:9c:f0: 18:f6:5d:8f:d8:ea:e2:22:4a:de:11:1a:61:97:c9:b5:0f:cb: ef:19:44:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6/i1YC8CPgGGV9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI1MTEwMjIyMDAwOFoXDTI1MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk ZDIxMDI4YjMtMzgxMS00NjAyLTkyNjAtNDllZWY1MzYxZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qq7vsk4iUK8f6TaDSOevq17HUO+OEb+yVbh ZpYkTOXFfJe4jr6N9rS7nNyY1fvrFbVqPEf6vANmt8BCpcdrQhD6/X7EJDlhPzy8 3A4PuAXjxl4YGc7hNFwarUDyk7UltDWIXpZ3D7T6Vf+9NBuJZ+VPFod9FNbikb06 x2WNSgDPLk31wvn1Jrdy5AhWx7eunxxQBAIh935VN8eOyNdnPm6CLwSJuG8T6lE/ HeMex3cRrqmy2Vjkt4OHS/s7Hlph+E5oWKyFjqNq9yTrtOxC5uO9HGcsqS90tSfI 8XV3ysubaikVOystF0fXfwRXdvNnekXV0i6yAyxTLLnxVjMLmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFktSWDpZ6Uzv2rJClL8ky8D7aKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvOGQ5NThjNDctYzE4Zi00 NmUyLWEzYzMtZWQ0YmEyOWUxYzk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/rMaLJegBF+PFGjRHQuKZ 9N6M7HnvVKwlYlCJkwfh+MhrZHp5DfflTqLqNS1yyOoLrZdB4RDR36wFBJPtqWHE 7BMgCEoAtuqxg4QUjvrT5N/5Pu81N+nq3sylNwMoyEIGuSTXh2vhd4D/hcBHPOZg l8E1KDpTYQHtsDdl+Dp9KtKCFzPqpifIl6ME+6WoIcQQeR1cHPpY3fj/qIc3hS6v RqSQvuz/mt0quBoJqhQkYnkk6LuVc9aMxbP/h6e9tzRYMaQKnT7jjUaUA7UrEXxn XQndfwO2ri5vIn7RX9UQu+vOO/e4lWbunPAY9l2P2OriIkreERphl8m1D8vvGUQb -----END CERTIFICATE-----Generated at Mon Nov 3 01:48:41 2025 by rpki-client