$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft File: 2c2ae48f-475b-42b3-9a56-ce8852515055.mft (raw, json) Hash identifier: UJHIhEqUsJ8sBB/hMQlLhNUK++TQh/gkC5RUT1TMAuM= Subject key identifier: BD:DC:B0:A8:53:6A:02:22:10:9B:0A:5B:F2:3B:56:D0:69:F6:0D:F7 Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Certificate serial: 010D0C9F4328584BC03A2B245954E25B8041CA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft Manifest number: 010D0C9F4328584073A820E5D101BA56C1927665 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 2c2ae48f-475b-42b3-9a56-ce8852515055.crl (hash: Xoas6dl9Ky+eba2Fd+PGdTFrT92jZ1U2vKgo6FSY34A=) 2: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (hash: TB7PFh3A+uoi3VszrRXHJM2k7wFOyto8BBZ2n8FbZx0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2b:24:59:54:e2:5b:80:41:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=b2b70c8a-daae-4456-b4da-0cdc21254dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:81:dc:55:96:bd:22:8b:f6:6b:23:ac:00: 8a:e5:e4:0a:bd:6b:98:93:7d:50:80:8f:22:ec:d4: 47:37:2d:18:2b:72:21:de:d1:0b:4f:3a:18:ef:6c: 92:8c:ec:05:6f:21:b5:5a:25:00:44:85:73:70:22: cd:79:84:e1:79:b7:b8:b9:74:62:cc:5b:8b:db:4d: 92:7f:2f:a7:91:1f:a2:80:2d:54:0b:32:cf:ff:ec: da:25:d0:33:a1:69:1d:84:20:ad:65:c1:4e:19:1d: 5e:50:4d:0f:c0:67:7b:0c:e2:76:0f:bf:7f:b6:d8: 7e:46:db:0c:3a:1c:9f:d7:80:af:21:d1:07:46:7d: d4:a3:10:e8:96:0c:ba:6b:24:8a:a0:52:47:69:7d: 91:9d:20:7f:52:a5:1b:96:62:1a:c8:fe:69:5d:59: 31:3a:0b:91:c0:61:e6:5b:ec:b9:83:e6:51:71:4a: 14:cd:3b:91:f3:6d:eb:ac:1b:ff:df:3c:7c:85:27: cf:56:c4:20:c2:59:1a:b7:9e:9b:57:a4:18:4a:39: 39:b1:e4:7e:20:fd:19:4e:b8:24:cd:48:e8:3e:a5: a6:b2:5a:61:d3:9d:bc:4e:6a:71:7a:8b:11:d8:cf: 56:5b:a9:6b:ac:be:fc:4f:bd:81:1c:65:ea:5c:41: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DC:B0:A8:53:6A:02:22:10:9B:0A:5B:F2:3B:56:D0:69:F6:0D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl X509v3 Authority Key Identifier: keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a8:62:d3:c8:f2:33:56:2d:7f:42:7a:b0:c1:5d:b6:06:a9: 84:a4:fd:98:13:be:c1:d8:94:8b:08:c1:63:af:97:60:93:f0: df:39:f0:39:0c:d0:a0:96:3a:f2:7d:52:e4:43:7d:a8:53:36: 2a:a3:82:5c:6e:40:fc:48:2a:48:e7:cb:20:06:6e:3f:65:8e: 3e:fb:c1:c8:76:36:6a:38:a4:34:4c:67:fd:67:88:76:9a:72: 9c:1e:fa:99:62:2d:72:ed:6d:5c:36:39:31:aa:31:cb:79:2e: 93:18:57:15:7b:20:dc:66:d1:16:6e:32:c5:7e:82:77:86:c1: 57:a9:05:0b:fc:94:81:e9:ce:f2:9c:f3:f5:5d:b1:e6:cd:50: 80:e4:79:d8:20:90:fc:28:8d:8c:9d:e7:c1:7b:cf:a6:20:74: 19:43:dc:5a:14:d0:58:80:21:a0:6f:69:5f:62:a6:98:a2:25: c4:e0:9f:8d:9b:56:19:ed:68:bd:52:dd:5f:62:1a:9d:e1:5f: ad:f8:de:dc:c7:d3:3f:df:c8:e6:22:1c:18:b4:f7:2a:99:23: df:0b:5b:13:5d:84:ff:1b:cd:cc:0c:4b:de:f3:10:dd:08:78: 88:34:92:dd:59:0b:2c:06:60:ce:07:9e:76:f3:33:c7:29:17: c1:f3:d4:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOiskWVTiW4BBygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1 MDU1MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk YjJiNzBjOGEtZGFhZS00NDU2LWI0ZGEtMGNkYzIxMjU0ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop+B3FWWvSKL9msjrACK5eQKvWuYk31QgI8i 7NRHNy0YK3Ih3tELTzoY72ySjOwFbyG1WiUARIVzcCLNeYThebe4uXRizFuL202S fy+nkR+igC1UCzLP/+zaJdAzoWkdhCCtZcFOGR1eUE0PwGd7DOJ2D79/tth+RtsM Ohyf14CvIdEHRn3UoxDolgy6aySKoFJHaX2RnSB/UqUblmIayP5pXVkxOguRwGHm W+y5g+ZRcUoUzTuR823rrBv/3zx8hSfPVsQgwlkat56bV6QYSjk5seR+IP0ZTrgk zUjoPqWmslph0528TmpxeosR2M9WW6lrrL78T72BHGXqXEGPBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL3csKhTagIiEJsKW/I7VtBp9g33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJh ZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvMmMyYWU0OGYtNDc1Yi00 MmIzLTlhNTYtY2U4ODUyNTE1MDU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmMyYWU0OGYtNDc1Yi00MmIzLTlh NTYtY2U4ODUyNTE1MDU1LzJjMmFlNDhmLTQ3NWItNDJiMy05YTU2LWNlODg1MjUx NTA1NS5jcmwwHwYDVR0jBBgwFoAUhBs1SSOEDxgolRUcg9Kc2jDt5EwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4 NTI1MTUwNTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqqGLTyPIzVi1/QnqwwV22 BqmEpP2YE77B2JSLCMFjr5dgk/DfOfA5DNCgljryfVLkQ32oUzYqo4JcbkD8SCpI 58sgBm4/ZY4++8HIdjZqOKQ0TGf9Z4h2mnKcHvqZYi1y7W1cNjkxqjHLeS6TGFcV eyDcZtEWbjLFfoJ3hsFXqQUL/JSB6c7ynPP1XbHmzVCA5HnYIJD8KI2MnefBe8+m IHQZQ9xaFNBYgCGgb2lfYqaYoiXE4J+Nm1YZ7Wi9Ut1fYhqd4V+t+N7cx9M/38jm IhwYtPcqmSPfC1sTXYT/G83MDEve8xDdCHiINJLdWQssBmDOB5528zPHKRfB89SJ -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:59 2025 by rpki-client