$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft File: 2a7813c7-65af-4c6b-affc-323cd6e8e909.mft (raw, json) Hash identifier: oHnPfgqANV5NZZx0Rcr3hsZ8VEMfJCMNT2jV/l8L5S8= Subject key identifier: 71:DC:A2:70:CE:9C:CC:03:E2:54:4D:BD:A6:CC:1E:8D:69:ED:06:73 Authority key identifier: 50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D Certificate issuer: /CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Certificate serial: 010D0C9F4328584BBE5DC2BE337477AD3AF6F840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft Manifest number: 010D0C9F4328584073A83B3001775119F2E808B1 Signing time: Tue 04 Nov 2025 03:00:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Thu 06 Nov 2025 03:00:00 +0000 Files and hashes: 1: 2a7813c7-65af-4c6b-affc-323cd6e8e909.crl (hash: 2EsFtIYJMReTyLzQCGdItVPTmDU4DRp45O61nYfK//Y=) 2: caded774-cb8f-33b9-aac1-9e93fc48739b.roa (hash: ogyGofrE+F3WDt7zhQf44qjTabFJOVIAdcXLcdkNnZQ=) 3: e7b08dbf-e8ba-3183-8ae5-6651fddc39c7.roa (hash: Qizx6kZ3FojwQawBbOKCVffHEphB1dRx3PmHcrdxjSw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:5d:c2:be:33:74:77:ad:3a:f6:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a7813c7-65af-4c6b-affc-323cd6e8e909 Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 6 03:00:00 2025 GMT Subject: CN=fed52d77-a64f-45bc-9415-44401685e47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:1a:25:0a:2d:00:5f:e0:b3:c7:ef:e7:d1: 0d:fb:73:78:cd:e1:88:e6:49:6b:d8:22:72:13:96: 9e:4a:bd:87:f0:6a:1e:68:ba:62:af:b1:b5:aa:a8: 66:b2:f1:c8:26:06:d6:14:be:6a:6f:86:36:7b:e8: 6a:af:a0:77:7a:6b:5b:8d:64:01:7b:d0:aa:c4:23: 59:db:bc:7b:dc:b3:25:55:51:22:24:39:7d:dd:bd: 26:3e:b3:38:04:8b:3e:dd:72:14:50:6b:19:ed:0f: a2:25:a7:85:05:6d:e2:24:3f:ab:fa:c1:6d:db:3f: c7:d8:a9:38:23:b4:d0:dd:ee:3f:a8:ba:5f:d8:f8: 58:51:c7:f2:fe:e9:c8:16:72:1d:a1:05:73:5e:2e: 96:cb:ad:60:8a:64:59:eb:9c:a7:e9:4e:a3:cd:05: 4b:84:ce:d0:15:e4:fd:53:aa:2b:84:03:02:d3:e1: af:2f:35:58:df:37:32:2d:94:e3:77:26:8a:98:74: 01:16:2e:9a:d3:43:3f:6e:23:3c:29:d9:85:e2:8d: 1e:df:98:e7:a6:1f:1f:28:d4:e9:49:7a:ef:9d:c2: ac:05:94:38:7e:d3:4c:98:97:96:db:da:20:9a:8f: c2:9f:d1:51:23:1a:5f:bb:82:eb:ed:f4:b7:a6:e3: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DC:A2:70:CE:9C:CC:03:E2:54:4D:BD:A6:CC:1E:8D:69:ED:06:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909/2a7813c7-65af-4c6b-affc-323cd6e8e909.crl X509v3 Authority Key Identifier: keyid:50:CB:EC:29:C1:E1:EE:E4:2C:53:5D:8A:99:90:53:8E:5B:0A:A9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a7813c7-65af-4c6b-affc-323cd6e8e909.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5f:85:09:54:ec:6a:e8:de:02:da:5e:f4:d2:f1:f8:07:0b: f4:49:ee:d6:82:49:39:5e:8a:91:02:4b:8b:f2:26:13:09:d9: 4a:d8:df:51:7f:e9:fe:60:a2:69:de:4c:68:22:a1:14:5b:c0: e0:30:64:14:f1:d6:81:68:98:33:55:e2:7c:c0:b5:55:82:3b: a2:75:2b:71:28:2a:02:24:ca:ae:2a:80:ef:82:c7:f3:4c:49: 58:49:42:1f:44:a9:52:4f:4e:7d:89:94:52:ad:2a:21:bc:f1: 8f:53:f5:c3:f5:e9:7f:e5:07:33:7c:b0:75:54:a3:ff:4e:85: 03:a6:88:e3:fc:61:a6:d4:39:28:75:6e:13:10:0a:4c:60:94: b1:6f:7d:7b:53:a2:ec:cb:47:9c:a6:dd:9a:2e:5b:13:34:2e: 2a:9d:e4:4e:bd:1c:a1:24:5c:41:c0:85:06:a3:b9:a5:82:7d: 5c:f9:61:06:a3:17:56:3c:45:14:2d:d3:00:7f:11:ea:d8:e7: 17:58:77:89:6e:f3:97:94:04:65:a1:6c:31:3b:cd:29:99:97: 19:27:3e:eb:96:3e:a6:d1:0f:dd:da:a7:97:b9:ea:b9:88:49: b3:a7:5a:4b:1c:01:3a:10:86:26:f6:4e:1b:bc:51:b0:74:ae: 16:bc:cf:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+XcK+M3R3rTr2+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3ODEzYzctNjVhZi00YzZiLWFmZmMtMzIzY2Q2ZThl OTA5MB4XDTI1MTEwNDAzMDAwOVoXDTI1MTEwNjAzMDAwMFowLzEtMCsGA1UEAxMk ZmVkNTJkNzctYTY0Zi00NWJjLTk0MTUtNDQ0MDE2ODVlNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeUaJQotAF/gs8fv59EN+3N4zeGI5klr2CJy E5aeSr2H8GoeaLpir7G1qqhmsvHIJgbWFL5qb4Y2e+hqr6B3emtbjWQBe9CqxCNZ 27x73LMlVVEiJDl93b0mPrM4BIs+3XIUUGsZ7Q+iJaeFBW3iJD+r+sFt2z/H2Kk4 I7TQ3e4/qLpf2PhYUcfy/unIFnIdoQVzXi6Wy61gimRZ65yn6U6jzQVLhM7QFeT9 U6orhAMC0+GvLzVY3zcyLZTjdyaKmHQBFi6a00M/biM8KdmF4o0e35jnph8fKNTp SXrvncKsBZQ4ftNMmJeW29ogmo/Cn9FRIxpfu4Lr7fS3puMcrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHconDOnMwD4lRNvabMHo1p7QZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4 MTNjNy02NWFmLTRjNmItYWZmYy0zMjNjZDZlOGU5MDkvMmE3ODEzYzctNjVhZi00 YzZiLWFmZmMtMzIzY2Q2ZThlOTA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmE3ODEzYzctNjVhZi00YzZiLWFm ZmMtMzIzY2Q2ZThlOTA5LzJhNzgxM2M3LTY1YWYtNGM2Yi1hZmZjLTMyM2NkNmU4 ZTkwOS5jcmwwHwYDVR0jBBgwFoAUUMvsKcHh7uQsU12KmZBTjlsKqX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTc4MTNjNy02NWFmLTRjNmItYWZmYy0zMjNj ZDZlOGU5MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXX4UJVOxq6N4C2l700vH4 Bwv0Se7Wgkk5XoqRAkuL8iYTCdlK2N9Rf+n+YKJp3kxoIqEUW8DgMGQU8daBaJgz VeJ8wLVVgjuidStxKCoCJMquKoDvgsfzTElYSUIfRKlST059iZRSrSohvPGPU/XD 9el/5QczfLB1VKP/ToUDpojj/GGm1DkodW4TEApMYJSxb317U6Lsy0ecpt2aLlsT NC4qneROvRyhJFxBwIUGo7mlgn1c+WEGoxdWPEUULdMAfxHq2OcXWHeJbvOXlARl oWwxO80pmZcZJz7rlj6m0Q/d2qeXueq5iEmzp1pLHAE6EIYm9k4bvFGwdK4WvM92 -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:06 2025 by rpki-client