$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft File: 8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft (raw, json) Hash identifier: afWPNTGP31zcYwxA+bcGyAPxoA4WiJaoft1y2WJBIUs= Subject key identifier: 8C:CB:B0:B7:82:CD:1A:D6:73:13:F1:43:78:DE:5E:D8:A4:BE:2D:D9 Authority key identifier: 52:BD:26:08:9C:3A:07:32:76:F8:B9:52:D9:C3:35:6A:22:B4:8B:C8 Certificate issuer: /CN=8ebbdcab-800e-4b7c-80be-d82c3d97d902 Certificate serial: 010D0C9F4328584BBCDA974F50BDD308E4E7C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft Manifest number: 010D0C9F432858496D1669DC724A2209990F3F98 Signing time: Mon 03 Nov 2025 14:00:03 +0000 Manifest this update: Mon 03 Nov 2025 14:00:03 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 8ebbdcab-800e-4b7c-80be-d82c3d97d902.crl (hash: mHR/AT/m/gNNIJB5qgAOGBq2alCRnZEEstxu9FLP+cw=) 2: 96abca08-bfa2-3d87-85a3-b1d186321bd7.roa (hash: iaqAmn1G11H0qF3+BxVMBhkrqhE/dePVUUMFE0qXYR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:97:4f:50:bd:d3:08:e4:e7:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ebbdcab-800e-4b7c-80be-d82c3d97d902 Validity Not Before: Nov 3 14:00:03 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=d132d209-ea60-4a2d-b75e-ac9c97a1e143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:25:59:7d:d4:97:ca:ca:dd:98:72:21:61: 8c:80:5a:19:92:6f:c1:21:57:5d:89:bc:e5:27:8a: 1f:63:63:88:dd:35:88:87:ca:70:0a:02:05:c3:53: b8:11:c8:99:42:7c:50:2c:41:22:df:db:b7:b4:f8: 71:cc:26:3d:9e:e2:b6:11:a4:f4:8f:e8:c9:d4:f3: 0b:32:55:2b:53:b9:87:4d:1f:38:9a:aa:2c:6f:82: c0:c4:08:cd:1f:29:ae:46:a4:36:cb:3a:4e:42:d1: 6e:34:f8:5d:3e:ec:f7:be:d1:0d:6c:2c:e3:7d:86: 79:7b:5f:f8:5a:ea:46:b7:aa:2e:35:4f:03:01:8f: 20:b0:aa:37:72:21:1a:5b:be:b9:a2:26:43:e1:97: 51:d4:af:5f:79:84:5e:b4:71:df:e4:aa:3b:35:c8: 30:f5:b2:b8:f7:60:a1:2e:f7:34:65:01:92:cc:4e: 17:d6:9d:e0:e5:40:82:fa:9d:d8:b4:b9:b8:8a:59: 35:07:c2:bb:f0:89:26:3f:60:63:4d:fb:fc:ad:60: 62:af:76:ac:00:a8:fe:34:1b:0c:42:e5:dc:7f:ab: 72:4a:0f:9c:e6:46:50:dc:59:56:9c:bc:93:e6:13: ad:de:2e:1d:fd:a9:1f:52:d1:7b:36:5a:bc:5e:c3: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CB:B0:B7:82:CD:1A:D6:73:13:F1:43:78:DE:5E:D8:A4:BE:2D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.crl X509v3 Authority Key Identifier: keyid:52:BD:26:08:9C:3A:07:32:76:F8:B9:52:D9:C3:35:6A:22:B4:8B:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f7:53:e4:7a:2b:e8:c9:2b:4a:d7:db:f1:89:8a:f6:f4:f5: 8c:00:06:4a:6f:68:b9:40:32:8e:91:10:d9:7a:4d:bd:29:af: 4d:88:df:db:5c:8d:63:02:bf:31:56:8a:15:c7:17:f1:99:45: c2:ff:91:46:0c:47:4d:3f:86:fa:ce:94:35:eb:41:66:0f:12: e6:be:4e:3e:ad:71:09:f6:4d:98:2e:45:14:14:f7:74:8d:27: 09:63:7e:80:17:d6:9d:ad:47:d9:06:73:3b:f4:7c:68:b6:3e: 82:48:66:f6:d9:05:a3:d8:cd:dc:43:69:09:6b:28:27:90:cf: 5c:ca:51:0a:47:c1:b7:51:8b:73:85:20:d5:fa:19:7e:2c:29: 8e:a5:c9:09:af:29:8b:56:cb:aa:61:d3:75:2d:4f:c9:02:8d: e3:4d:6b:bc:2d:2c:43:89:b9:26:f3:63:27:f3:9e:9c:2a:b1: 3c:89:ea:5c:42:8a:a7:33:d5:87:a9:a1:53:38:e0:b6:2f:8d: c8:48:c0:c8:d1:37:f3:2b:99:99:26:b2:46:cd:2e:50:b6:42: da:eb:83:1a:db:30:6c:f5:7a:7b:95:44:1c:46:72:67:27:e7: 34:65:07:1f:f0:6f:ab:b7:e9:f5:d4:5c:8f:d0:40:84:e4:f9: 29:dc:e5:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu82pdPUL3TCOTnyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGViYmRjYWItODAwZS00YjdjLTgwYmUtZDgyYzNkOTdk OTAyMB4XDTI1MTEwMzE0MDAwM1oXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk ZDEzMmQyMDktZWE2MC00YTJkLWI3NWUtYWM5Yzk3YTFlMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+YlWX3Ul8rK3ZhyIWGMgFoZkm/BIVddibzl J4ofY2OI3TWIh8pwCgIFw1O4EciZQnxQLEEi39u3tPhxzCY9nuK2EaT0j+jJ1PML MlUrU7mHTR84mqosb4LAxAjNHymuRqQ2yzpOQtFuNPhdPuz3vtENbCzjfYZ5e1/4 WupGt6ouNU8DAY8gsKo3ciEaW765oiZD4ZdR1K9feYRetHHf5Ko7Ncgw9bK492Ch Lvc0ZQGSzE4X1p3g5UCC+p3YtLm4ilk1B8K78IkmP2BjTfv8rWBir3asAKj+NBsM QuXcf6tySg+c5kZQ3FlWnLyT5hOt3i4d/akfUtF7Nlq8XsPcgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIzLsLeCzRrWcxPxQ3jeXtikvi3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZWJi ZGNhYi04MDBlLTRiN2MtODBiZS1kODJjM2Q5N2Q5MDIvOGViYmRjYWItODAwZS00 YjdjLTgwYmUtZDgyYzNkOTdkOTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGViYmRjYWItODAwZS00YjdjLTgw YmUtZDgyYzNkOTdkOTAyLzhlYmJkY2FiLTgwMGUtNGI3Yy04MGJlLWQ4MmMzZDk3 ZDkwMi5jcmwwHwYDVR0jBBgwFoAUUr0mCJw6BzJ2+LlS2cM1aiK0i8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZWJiZGNhYi04MDBlLTRiN2MtODBiZS1kODJj M2Q5N2Q5MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY91PkeivoyStK19vxiYr2 9PWMAAZKb2i5QDKOkRDZek29Ka9NiN/bXI1jAr8xVooVxxfxmUXC/5FGDEdNP4b6 zpQ160FmDxLmvk4+rXEJ9k2YLkUUFPd0jScJY36AF9adrUfZBnM79Hxotj6CSGb2 2QWj2M3cQ2kJaygnkM9cylEKR8G3UYtzhSDV+hl+LCmOpckJrymLVsuqYdN1LU/J Ao3jTWu8LSxDibkm82Mn856cKrE8iepcQoqnM9WHqaFTOOC2L43ISMDI0TfzK5mZ JrJGzS5QtkLa64Ma2zBs9Xp7lUQcRnJnJ+c0ZQcf8G+rt+n11FyP0ECE5Pkp3OVI -----END CERTIFICATE-----Generated at Tue Nov 4 09:26:12 2025 by rpki-client