$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft File: 2d64a9b2-da39-490b-a76e-0928cd57270b.mft (raw, json) Hash identifier: A41HdmUemNzhgyyBF0m6TOWk2N46jv7lcZ7E5qVOA2w= Subject key identifier: 25:40:F5:1F:61:C7:81:C4:3A:35:81:4F:57:67:E3:85:AF:66:6A:17 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F4328584BBF4BF197618F707151C2B380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft Manifest number: 010D0C9F4328584073A84EEE88D6A99E0FAD98C8 Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 2d64a9b2-da39-490b-a76e-0928cd57270b.crl (hash: A7CObRz9pbqUZaXspkBZoZ42Iw2k7p3zS1e6AM5I0nY=) 2: 43d9c709-1869-3602-ba60-82f81826def9.roa (hash: IMoFDDK65xXN+V0qqGoCgKcHqUfwYmFVUSsAVmU5oig=) 3: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (hash: V3Ltb+2aEJFvYZar4ivcrJo6zca11ZiAS3EjQFSCifM=) 4: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (hash: Z7zTNMK6Y2A4l7HwQ9SFYe2kYnap9stiTueY+IxQ9Wo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f1:97:61:8f:70:71:51:c2:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=98bcf48d-6188-496d-a718-f59ffa1d58d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:e6:c0:2b:97:7a:d8:e3:fd:5c:e8:bb:b8: 1c:0f:dd:7b:f9:a7:59:3b:46:7c:ca:03:4d:20:90: 7a:d9:10:6b:a9:76:56:46:84:d0:9c:49:89:90:0c: 6d:5e:69:ed:85:aa:c8:aa:f6:aa:93:d6:0b:3f:21: c2:29:e0:71:0b:05:fe:38:f4:c7:5f:a0:aa:d7:a6: 24:62:d3:69:54:1f:98:1a:a7:28:45:7d:7b:8c:cc: ef:8f:6e:e4:5f:cf:60:66:82:6f:88:50:5e:15:86: 04:a0:76:63:24:60:9b:3d:83:07:32:ba:59:ab:ae: e3:b4:5c:b8:f6:02:f8:6c:8c:d3:aa:b0:88:6f:f0: a4:24:ee:81:68:4e:23:cf:a7:83:03:67:86:a0:20: 41:82:5c:13:20:d1:e7:73:59:0c:85:43:b7:e0:de: 38:f6:6c:39:0b:69:dd:d3:1f:6a:9c:5c:fd:09:1e: ff:a7:fe:05:1e:d8:b6:46:d0:42:8b:e9:0d:71:24: 4f:e1:92:b0:fd:a9:50:6f:58:30:b0:07:83:40:86: 04:6c:f0:fa:e1:51:28:48:7f:13:44:8d:02:33:d7: b6:5e:42:99:ed:32:12:f8:2d:6b:0d:34:be:63:6d: a8:f4:43:1b:2b:c7:e7:ab:a9:bb:c4:c2:4b:27:a7: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:F5:1F:61:C7:81:C4:3A:35:81:4F:57:67:E3:85:AF:66:6A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a5:cf:fa:6c:da:2c:8a:bf:43:c9:4d:9f:d7:74:38:9b:e0: a2:2d:cd:ff:7f:34:20:77:74:68:d6:b9:7d:3a:83:b2:c8:18: c4:17:19:72:34:17:39:b4:9e:3b:d2:52:0c:42:22:b7:50:59: de:10:06:37:15:98:83:3c:e2:bc:d6:49:f5:33:c7:a8:89:7c: ae:dd:19:87:b6:ea:20:d8:72:06:b3:5f:7e:d6:63:53:fe:9f: 58:3a:59:ad:90:6b:a0:0d:66:91:49:d3:f0:ed:a7:70:79:f9: 9d:94:db:3c:24:3e:e7:78:06:a2:7f:4a:31:ad:60:d0:60:e2: 67:fd:88:33:4d:e6:11:f9:b4:31:d6:07:6f:f3:e9:0b:e6:36: 66:1a:9b:d8:36:9d:fb:28:62:d3:79:a1:23:b8:ce:4c:71:de: f8:4c:72:69:11:d8:69:74:a2:ea:db:29:f5:05:c2:71:ee:16: 73:c7:bf:24:31:06:b3:23:55:b7:e6:09:14:58:53:13:61:c1: 03:91:d1:6d:9a:7c:b4:d9:0f:9c:49:c2:15:aa:d5:94:0a:d2: d1:83:8b:4a:49:3a:1f:1b:e1:a2:9e:3f:03:ef:e6:35:60:35: 28:dc:a9:a2:f3:67:d9:92:31:8e:79:60:c5:b8:a7:41:6a:42: d3:11:7f:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/GXYY9wcVHCs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk OThiY2Y0OGQtNjE4OC00OTZkLWE3MTgtZjU5ZmZhMWQ1OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3mwCuXetjj/Vzou7gcD917+adZO0Z8ygNN IJB62RBrqXZWRoTQnEmJkAxtXmntharIqvaqk9YLPyHCKeBxCwX+OPTHX6Cq16Yk YtNpVB+YGqcoRX17jMzvj27kX89gZoJviFBeFYYEoHZjJGCbPYMHMrpZq67jtFy4 9gL4bIzTqrCIb/CkJO6BaE4jz6eDA2eGoCBBglwTINHnc1kMhUO34N449mw5C2nd 0x9qnFz9CR7/p/4FHti2RtBCi+kNcSRP4ZKw/alQb1gwsAeDQIYEbPD64VEoSH8T RI0CM9e2XkKZ7TIS+C1rDTS+Y22o9EMbK8fnq6m7xMJLJ6e0vQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCVA9R9hx4HEOjWBT1dn44WvZmoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvMmQ2NGE5YjItZGEzOS00 OTBiLWE3NmUtMDkyOGNkNTcyNzBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhpc/6bNosir9DyU2f13Q4 m+CiLc3/fzQgd3Ro1rl9OoOyyBjEFxlyNBc5tJ470lIMQiK3UFneEAY3FZiDPOK8 1kn1M8eoiXyu3RmHtuog2HIGs19+1mNT/p9YOlmtkGugDWaRSdPw7adwefmdlNs8 JD7neAaif0oxrWDQYOJn/YgzTeYR+bQx1gdv8+kL5jZmGpvYNp37KGLTeaEjuM5M cd74THJpEdhpdKLq2yn1BcJx7hZzx78kMQazI1W35gkUWFMTYcEDkdFtmny02Q+c ScIVqtWUCtLRg4tKSTofG+Ginj8D7+Y1YDUo3Kmi82fZkjGOeWDFuKdBakLTEX/G -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:42 2025 by rpki-client