$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft File: 2e91d8ca-5740-400a-abea-127078fa77ff.mft (raw, json) Hash identifier: 8dtn7YBu361eMLV+soz4s/U3rCoqr9h/N4V73wcSXus= Subject key identifier: 3B:9A:CB:9C:A1:F9:2D:59:33:F3:59:11:50:ED:00:50:F3:84:10:CB Authority key identifier: 44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D Certificate issuer: /CN=2e91d8ca-5740-400a-abea-127078fa77ff Certificate serial: 010D0C9F4328584BC10B9C3695F362AD87B64580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft Manifest number: 010D0C9F4328584073A82F1BD6D4806DAAEEC7C6 Signing time: Wed 05 Nov 2025 02:02:03 +0000 Manifest this update: Wed 05 Nov 2025 02:02:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 2e91d8ca-5740-400a-abea-127078fa77ff.crl (hash: CruQJTtXZX/czt0/Yw/ruHMH9f/RjIIHA3C4RV5ksUY=) 2: 8e099e1c-8c89-361b-bc31-d649231f7f2e.roa (hash: aH4T+ZZtB1vziqhx0xTrawjjqOPhVbXHeNJu0SAVpM8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:9c:36:95:f3:62:ad:87:b6:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e91d8ca-5740-400a-abea-127078fa77ff Validity Not Before: Nov 5 02:02:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=3919ba1e-af7e-4340-9d7a-b16bbc6baab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:5e:7d:af:ab:cb:25:6a:23:4b:3c:c0:71: af:0a:96:eb:51:62:96:37:66:45:2c:e6:da:f0:8e: 2f:66:81:16:fc:e3:49:d2:77:1f:68:a9:02:f2:7d: 2d:89:2a:da:73:fa:a8:bd:af:40:89:2a:ee:ae:a0: 7c:9b:16:8c:74:5a:0a:a3:cd:53:69:85:dd:e7:df: a4:33:85:11:92:ef:ac:c3:3a:e7:99:e5:7a:40:75: 23:00:49:38:ca:76:35:fd:73:bb:07:fe:14:4a:10: 97:09:16:14:95:9d:85:9a:6f:bd:de:34:39:44:06: 11:7a:9f:eb:f7:c9:a0:36:ae:4f:60:2b:6b:d8:1f: 5e:84:d5:44:66:f5:85:49:ea:54:49:44:ef:01:6e: 37:aa:45:3e:72:c2:2e:b8:af:c8:99:13:31:ca:f8: e7:2f:1f:8f:1e:3e:f1:ad:c6:db:93:fe:1c:48:a7: 38:ed:28:dd:d9:dc:38:a2:2f:3e:13:f8:64:d9:aa: 14:eb:9c:ae:03:e2:f6:71:1e:4a:63:8d:e1:3b:f0: 69:c6:5e:24:1f:32:c2:36:02:71:d9:9b:0a:bd:c0: 11:54:4f:cc:87:9d:6b:04:0d:43:70:a7:aa:a9:3c: 82:b9:6a:32:46:59:b8:e9:f1:fe:ba:b2:91:22:17: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:CB:9C:A1:F9:2D:59:33:F3:59:11:50:ED:00:50:F3:84:10:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl X509v3 Authority Key Identifier: keyid:44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:dc:15:ac:68:3a:e1:02:c0:97:68:03:4b:39:ec:6e:b7:62: 20:de:15:41:83:cf:71:31:a9:1a:1d:19:7b:37:ad:eb:ea:49: 55:d5:2c:19:cf:5b:58:94:71:23:5d:1d:fd:6d:33:b2:21:a8: 24:97:7a:01:7f:c0:d9:8a:be:a7:8e:e0:7c:c8:00:a3:f1:09: 02:eb:70:9e:e4:47:d0:7d:72:db:b9:e5:5f:a6:61:99:9d:7c: 4a:bd:e9:6e:f0:d5:20:1f:08:b5:64:85:19:d0:90:f4:d5:1b: 92:d9:0c:a1:56:95:dc:dc:ff:1a:28:6e:ef:d7:c9:38:2f:b2: 5f:14:43:56:2e:91:ea:9c:aa:f5:48:38:fc:46:a1:2b:0e:73: ce:38:bf:86:a5:e7:73:2e:57:42:b4:fc:78:a3:5d:56:10:3a: 8a:5e:a4:c7:c2:53:ae:22:c9:31:60:ef:46:25:dc:9c:45:8a: 45:c8:7e:63:69:f3:d3:b9:1f:fa:44:ce:c1:8b:91:fb:34:40: 20:06:b8:7b:9d:5a:d3:d9:ca:46:52:71:a7:00:58:1a:81:65: b5:3f:d3:87:97:1d:dd:3b:aa:00:28:30:82:55:69:6f:09:85: 34:08:4a:f3:e2:90:58:81:54:90:48:18:19:93:fc:fd:23:51: 66:8d:87:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBC5w2lfNirYe2RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU5MWQ4Y2EtNTc0MC00MDBhLWFiZWEtMTI3MDc4ZmE3 N2ZmMB4XDTI1MTEwNTAyMDIwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk MzkxOWJhMWUtYWY3ZS00MzQwLTlkN2EtYjE2YmJjNmJhYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJxefa+ryyVqI0s8wHGvCpbrUWKWN2ZFLOba 8I4vZoEW/ONJ0ncfaKkC8n0tiSrac/qova9AiSrurqB8mxaMdFoKo81TaYXd59+k M4URku+swzrnmeV6QHUjAEk4ynY1/XO7B/4UShCXCRYUlZ2Fmm+93jQ5RAYRep/r 98mgNq5PYCtr2B9ehNVEZvWFSepUSUTvAW43qkU+csIuuK/ImRMxyvjnLx+PHj7x rcbbk/4cSKc47Sjd2dw4oi8+E/hk2aoU65yuA+L2cR5KY43hO/Bpxl4kHzLCNgJx 2ZsKvcARVE/Mh51rBA1DcKeqqTyCuWoyRlm46fH+urKRIhfBZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDuay5yh+S1ZM/NZEVDtAFDzhBDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTkx ZDhjYS01NzQwLTQwMGEtYWJlYS0xMjcwNzhmYTc3ZmYvMmU5MWQ4Y2EtNTc0MC00 MDBhLWFiZWEtMTI3MDc4ZmE3N2ZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU5MWQ4Y2EtNTc0MC00MDBhLWFi ZWEtMTI3MDc4ZmE3N2ZmLzJlOTFkOGNhLTU3NDAtNDAwYS1hYmVhLTEyNzA3OGZh NzdmZi5jcmwwHwYDVR0jBBgwFoAURJc9lRjcWJKKV942bYWL/09pq20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTkxZDhjYS01NzQwLTQwMGEtYWJlYS0xMjcw NzhmYTc3ZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe3BWsaDrhAsCXaANLOexu t2Ig3hVBg89xMakaHRl7N63r6klV1SwZz1tYlHEjXR39bTOyIagkl3oBf8DZir6n juB8yACj8QkC63Ce5EfQfXLbueVfpmGZnXxKvelu8NUgHwi1ZIUZ0JD01RuS2Qyh VpXc3P8aKG7v18k4L7JfFENWLpHqnKr1SDj8RqErDnPOOL+GpedzLldCtPx4o11W EDqKXqTHwlOuIskxYO9GJdycRYpFyH5jafPTuR/6RM7Bi5H7NEAgBrh7nVrT2cpG UnGnAFgagWW1P9OHlx3dO6oAKDCCVWlvCYU0CErz4pBYgVSQSBgZk/z9I1FmjYfj -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:16 2025 by rpki-client