$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft File: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft (raw, json) Hash identifier: Q7y8gv6KBQoXHMPD1qBvlYZaQ1OGWV0CVFeTh0iIE6c= Subject key identifier: D4:B4:B5:D0:55:AC:2D:CE:D0:B8:7C:36:95:DD:D9:E9:34:57:33:EA Authority key identifier: 10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 Certificate issuer: /CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Certificate serial: 010D0C9F4328584BBED4DE6E1214573A072E6800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft Manifest number: 010D0C9F4328584073A8466E0185068C437FF04B Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Thu 06 Nov 2025 07:00:00 +0000 Files and hashes: 1: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl (hash: ZAW96+ZnVnS32EBpFNyAN/X0Z9rPNAH9M22jGnMc1zo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:de:6e:12:14:57:3a:07:2e:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=0d1c7b7d-3092-459c-a133-0d3034e9dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:03:c6:f1:9d:78:d6:b8:18:81:75:ef:fd: a1:12:b5:a8:29:fb:7d:75:ab:36:32:7d:23:97:fe: ae:f9:f4:27:66:25:a6:d9:d0:65:07:6e:25:c2:54: 4a:77:f7:3c:f1:a2:16:ae:31:35:66:a1:28:cb:15: 50:18:4f:56:d5:88:31:ce:1a:c5:0a:15:df:37:6b: 17:de:13:88:b3:01:6a:7e:d0:2a:36:29:42:cd:fe: e5:6d:82:f5:ef:d0:9d:f9:d4:27:b7:6f:0b:06:6a: 90:b4:1e:c1:a1:34:56:cc:22:a7:a1:1f:aa:c0:76: 78:12:33:e8:b8:48:45:27:e7:3b:85:65:86:83:bc: c9:29:b7:88:30:97:c2:b3:df:ea:de:53:a3:4b:30: 92:06:b3:df:7f:ad:6c:dc:75:d4:67:a2:69:20:68: 0c:9a:79:7e:3a:ab:7a:d2:fb:0c:1a:7a:c4:1a:55: 57:eb:58:75:ac:2e:c1:16:22:b2:8a:f7:59:36:34: a6:f3:50:0d:76:7d:9d:02:79:bb:ea:b7:51:23:d0: 87:fc:47:10:85:19:b0:bd:21:88:30:7d:38:c8:e1: 20:e3:ff:05:d2:ee:6d:9f:50:0a:91:9c:8f:35:ad: 19:b6:03:54:ba:22:1b:c2:c6:89:ea:de:f9:f0:40: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:B5:D0:55:AC:2D:CE:D0:B8:7C:36:95:DD:D9:E9:34:57:33:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl X509v3 Authority Key Identifier: keyid:10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:91:7f:22:9e:0b:81:49:c2:49:c4:f2:de:57:7f:58:78:a2: 2b:81:1f:bd:b5:f5:f5:92:7f:79:2b:2f:a5:31:26:d0:47:e7: b0:a9:76:3e:6a:ef:ae:4b:00:6d:0f:9f:5c:0e:87:af:8d:3b: ca:89:1a:d5:06:5f:80:7e:0a:81:07:ec:d0:1f:e9:bd:1e:42: 93:d5:2f:e6:ad:ad:ef:d6:53:da:cb:b4:0e:3e:6e:30:57:e8: f4:51:74:9e:54:a6:0a:58:64:f9:00:a9:04:6e:e3:2d:9d:9b: e7:1d:35:ea:e9:bc:1d:f4:5d:da:75:af:33:0a:0f:31:cf:30: c9:50:d2:d0:5a:06:98:72:1d:e3:87:5d:24:a3:c2:8b:fe:0a: e5:b7:3d:d2:2a:2d:d4:96:be:be:c0:54:56:e1:24:46:60:9e: b5:1d:0b:6f:5f:52:02:33:9a:4e:0c:da:ae:32:09:ba:3c:ca: 00:26:ba:8f:2d:86:1a:33:7d:35:5e:6c:ef:bb:d4:19:fb:13: d5:08:6b:26:4d:a2:bb:ea:58:22:ba:6b:b8:15:67:86:e2:00: 26:2c:bd:7f:e5:89:72:88:ed:a6:51:2c:3d:3e:8c:2b:0e:04: 90:ef:c0:5b:2a:6e:5c:e7:b0:d4:6a:58:67:41:2c:7d:21:14: c7:58:1a:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1N5uEhRXOgcuaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkMzk3M2QtMGQ0MC00ZmZlLWJhZWQtODFlYTdjN2Vh MGIwMB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNjA3MDAwMFowLzEtMCsGA1UEAxMk MGQxYzdiN2QtMzA5Mi00NTljLWExMzMtMGQzMDM0ZTlkZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwkDxvGdeNa4GIF17/2hErWoKft9das2Mn0j l/6u+fQnZiWm2dBlB24lwlRKd/c88aIWrjE1ZqEoyxVQGE9W1YgxzhrFChXfN2sX 3hOIswFqftAqNilCzf7lbYL179Cd+dQnt28LBmqQtB7BoTRWzCKnoR+qwHZ4EjPo uEhFJ+c7hWWGg7zJKbeIMJfCs9/q3lOjSzCSBrPff61s3HXUZ6JpIGgMmnl+Oqt6 0vsMGnrEGlVX61h1rC7BFiKyivdZNjSm81ANdn2dAnm76rdRI9CH/EcQhRmwvSGI MH04yOEg4/8F0u5tn1AKkZyPNa0ZtgNUuiIbwsaJ6t758EBR8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNS0tdBVrC3O0Lh8NpXd2ek0VzPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Qz OTczZC0wZDQwLTRmZmUtYmFlZC04MWVhN2M3ZWEwYjAvMmNkMzk3M2QtMGQ0MC00 ZmZlLWJhZWQtODFlYTdjN2VhMGIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNkMzk3M2QtMGQ0MC00ZmZlLWJh ZWQtODFlYTdjN2VhMGIwLzJjZDM5NzNkLTBkNDAtNGZmZS1iYWVkLTgxZWE3Yzdl YTBiMC5jcmwwHwYDVR0jBBgwFoAUEMZmJZliYoIzz2VgAFz9kPIAZ6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2QzOTczZC0wZDQwLTRmZmUtYmFlZC04MWVh N2M3ZWEwYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEkX8inguBScJJxPLeV39Y eKIrgR+9tfX1kn95Ky+lMSbQR+ewqXY+au+uSwBtD59cDoevjTvKiRrVBl+AfgqB B+zQH+m9HkKT1S/mra3v1lPay7QOPm4wV+j0UXSeVKYKWGT5AKkEbuMtnZvnHTXq 6bwd9F3ada8zCg8xzzDJUNLQWgaYch3jh10ko8KL/grltz3SKi3Ulr6+wFRW4SRG YJ61HQtvX1ICM5pODNquMgm6PMoAJrqPLYYaM301Xmzvu9QZ+xPVCGsmTaK76lgi umu4FWeG4gAmLL1/5YlyiO2mUSw9PowrDgSQ78BbKm5c57DUalhnQSx9IRTHWBod -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:26 2025 by rpki-client