$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft File: 2ef52563-8058-416a-a5ae-9e83b023cee1.mft (raw, json) Hash identifier: wT9D4nPsa7cemmE3hdqW4y6IEBfky0KFSPhiYf7sJrg= Subject key identifier: 65:D6:A9:60:29:67:89:4A:6A:FE:C2:7C:CF:04:79:C0:93:58:13:B8 Authority key identifier: FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16 Certificate issuer: /CN=2ef52563-8058-416a-a5ae-9e83b023cee1 Certificate serial: 010D0C9F4328584BBFA550057026073B14113980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft Manifest number: 010D0C9F43285849B00EE46A77E4EC53B6C852A2 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 2ef52563-8058-416a-a5ae-9e83b023cee1.crl (hash: HyM4mUOXonKHZz4zPPJdqYj/HQXOy8UjKtZJ6M9lRGw=) 2: df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa (hash: vv7RWS+hQneYOZVe7htHRjaDGuawlnbTxxnp6r/fDtU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:05:70:26:07:3b:14:11:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef52563-8058-416a-a5ae-9e83b023cee1 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=1f152a66-2e90-4b2a-a5cd-90fe9dcdf9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:21:02:89:e9:2d:0d:8f:42:7c:ac:ee:35: b5:71:41:1c:71:c8:a2:9c:8f:bb:7b:f9:ca:ce:ad: 86:c3:5d:03:94:fa:9d:7b:e9:b2:34:a1:80:a3:7d: ca:60:e5:18:60:b6:b2:f0:49:04:a9:bc:42:af:06: a4:22:69:6a:9a:3b:aa:89:43:ce:9a:f6:80:94:eb: 2a:ec:8d:f1:0b:b3:35:8f:32:93:74:44:12:a6:ed: ec:33:20:8f:eb:a3:7c:02:06:82:32:69:83:56:fb: ba:27:50:f9:3c:5c:6a:2f:45:8e:f4:28:ba:de:7a: 85:14:71:d2:ab:13:01:4d:19:c2:d6:cb:2c:ec:12: 1c:47:cb:27:51:d5:0f:94:4c:f7:fd:ba:eb:53:e9: 5f:92:6c:d2:17:e4:d2:3c:79:53:28:b1:fc:1c:95: bf:93:12:29:8b:71:ee:4c:44:47:b3:95:f7:d1:d7: 56:af:8d:59:c3:09:2a:fc:7a:d2:ff:4c:bd:32:dd: a1:f1:7f:2c:ac:7c:cd:5f:c6:be:ec:d9:91:fd:69: cb:07:14:78:64:3e:a3:10:4f:23:82:94:a2:9f:03: 54:f5:c9:e3:0b:b5:14:33:d2:55:84:40:7b:86:2c: 48:c6:0b:84:b0:83:e5:8f:ad:87:36:54:73:75:a6: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D6:A9:60:29:67:89:4A:6A:FE:C2:7C:CF:04:79:C0:93:58:13:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl X509v3 Authority Key Identifier: keyid:FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9e:1f:57:58:c2:b1:8f:f7:04:4c:e2:2d:d3:8a:cb:76:f6: c5:9c:a7:d1:50:5e:3c:1d:c8:0e:72:7f:e8:63:8b:c4:ed:5d: 17:e6:0d:85:ce:35:dc:50:03:e5:fc:d6:b2:21:74:f1:05:94: b7:d7:3b:f8:5f:24:8f:3d:52:6b:02:c3:1a:6f:1f:f5:ee:0d: 6a:fe:3f:14:26:49:47:4b:53:5a:02:c9:ad:a4:c7:3c:4c:f9: 7f:d8:51:cf:c6:29:ab:03:89:49:bc:e4:c9:9c:d6:e7:e7:7d: c9:5d:43:c3:f7:18:49:c9:15:f4:73:82:3a:92:a2:4e:3e:04: 60:42:53:33:a6:54:c4:0d:0e:55:ec:f7:94:1f:3a:33:4b:48: 94:26:1d:fe:fd:1a:a0:fa:41:d0:33:03:17:ba:94:26:09:0b: e4:75:c8:7d:eb:96:7c:fe:64:64:9e:0d:2c:ce:fb:5b:c4:b8: b4:04:49:d3:5d:79:4f:29:4b:21:67:45:18:e9:b7:bf:34:ce: 2b:25:0d:6a:d5:a2:16:0f:d1:bf:5d:2d:25:30:3d:7b:dd:09: 54:4d:06:dc:d0:91:7c:46:88:8e:43:b8:e2:5e:f4:2f:dd:af: 39:d2:9c:b1:c9:b5:a0:f3:67:e1:5c:68:81:3c:50:d4:48:a7: 81:98:3c:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVAFcCYHOxQROYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmVmNTI1NjMtODA1OC00MTZhLWE1YWUtOWU4M2IwMjNj ZWUxMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MWYxNTJhNjYtMmU5MC00YjJhLWE1Y2QtOTBmZTlkY2RmOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM8hAonpLQ2PQnys7jW1cUEccciinI+7e/nK zq2Gw10DlPqde+myNKGAo33KYOUYYLay8EkEqbxCrwakImlqmjuqiUPOmvaAlOsq 7I3xC7M1jzKTdEQSpu3sMyCP66N8AgaCMmmDVvu6J1D5PFxqL0WO9Ci63nqFFHHS qxMBTRnC1sss7BIcR8snUdUPlEz3/brrU+lfkmzSF+TSPHlTKLH8HJW/kxIpi3Hu TERHs5X30ddWr41Zwwkq/HrS/0y9Mt2h8X8srHzNX8a+7NmR/WnLBxR4ZD6jEE8j gpSinwNU9cnjC7UUM9JVhEB7hixIxguEsIPlj62HNlRzdaZZ5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGXWqWApZ4lKav7CfM8EecCTWBO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZWY1 MjU2My04MDU4LTQxNmEtYTVhZS05ZTgzYjAyM2NlZTEvMmVmNTI1NjMtODA1OC00 MTZhLWE1YWUtOWU4M2IwMjNjZWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmVmNTI1NjMtODA1OC00MTZhLWE1 YWUtOWU4M2IwMjNjZWUxLzJlZjUyNTYzLTgwNTgtNDE2YS1hNWFlLTllODNiMDIz Y2VlMS5jcmwwHwYDVR0jBBgwFoAU/IZViOGSbdYgS/SS0dAuabdGwhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZWY1MjU2My04MDU4LTQxNmEtYTVhZS05ZTgz YjAyM2NlZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbnh9XWMKxj/cETOIt04rL dvbFnKfRUF48HcgOcn/oY4vE7V0X5g2FzjXcUAPl/NayIXTxBZS31zv4XySPPVJr AsMabx/17g1q/j8UJklHS1NaAsmtpMc8TPl/2FHPximrA4lJvOTJnNbn533JXUPD 9xhJyRX0c4I6kqJOPgRgQlMzplTEDQ5V7PeUHzozS0iUJh3+/Rqg+kHQMwMXupQm CQvkdch965Z8/mRkng0szvtbxLi0BEnTXXlPKUshZ0UY6be/NM4rJQ1q1aIWD9G/ XS0lMD173QlUTQbc0JF8RoiOQ7jiXvQv3a850pyxybWg82fhXGiBPFDUSKeBmDyh -----END CERTIFICATE-----Generated at Tue Nov 4 21:51:11 2025 by rpki-client