$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: NZzicSYZMUQVs+tmp2//4gd4G3n2cEbyIKEbUWBes9I= Subject key identifier: 18:91:0C:EC:30:87:91:EE:AD:7C:4E:D6:44:D8:21:4B:67:EA:15:E5 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584BC19F853FF7133EEFD5628580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060659 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Fri 07 Nov 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: YQfCXg0jxaX5zIoqs6nNObwfNrwhiPlWDmw1xrNrUIE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: sghShFCBTwXgVM3MwQuBRcfvl+h/i9tgJUg3ntkpwJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:85:3f:f7:13:3e:ef:d5:62:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=d5381636-93fc-40e5-b2f2-924874d7d062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:e2:81:0e:a3:63:d2:6a:c7:e2:c5:9e:47: a3:37:d5:c7:18:53:95:52:6b:30:ef:eb:da:5d:cd: 80:98:bf:1f:7d:8f:49:d3:8b:fd:57:7e:04:8d:4a: 90:6f:67:46:ed:71:7b:3f:66:0b:fb:4b:82:87:8d: 2a:b3:df:c0:7d:85:8e:1e:03:5b:77:60:3f:ac:86: e8:f6:99:9d:66:e8:6d:7b:2f:b8:15:bd:c7:3b:16: ae:c2:86:11:c5:39:0e:6d:5b:05:e9:1d:65:e4:5b: 6f:29:df:46:cd:f6:14:63:1d:50:18:34:0b:d2:b9: fd:db:bd:e2:20:df:4f:3a:2a:a5:74:21:b1:91:ba: c9:5a:6b:c5:1c:bb:a7:36:6c:08:ab:6c:61:b9:f6: dd:fe:dc:17:97:ec:57:03:78:75:63:19:d9:48:93: 5a:89:4b:07:28:12:d8:29:96:36:30:c2:3d:9d:d2: 22:8e:b7:54:35:31:f8:3b:21:4b:b1:bf:17:84:bc: d1:c0:2b:e6:b5:f6:55:16:35:54:30:66:60:2b:a0: c2:9d:44:85:b9:57:a9:4a:51:61:4d:aa:c8:1c:d8: ce:40:4a:3e:1e:02:82:d6:af:47:31:9a:d9:38:18: 24:d7:86:4d:a1:36:6f:e1:be:49:27:90:cf:97:2a: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:0C:EC:30:87:91:EE:AD:7C:4E:D6:44:D8:21:4B:67:EA:15:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3d:69:e4:ad:25:04:83:17:79:4a:23:07:fd:98:d1:a7:57: 4e:3e:9b:ad:a9:a0:c0:3f:d2:6b:1a:8a:90:fc:93:08:7c:0a: e8:68:f9:62:cd:d3:c4:26:24:95:d6:90:7d:80:b0:90:d1:2d: 0b:92:f8:b1:48:a4:41:23:97:3b:cd:13:45:2c:12:a9:57:9d: ad:74:38:ad:48:58:c6:3b:66:da:fb:ea:9e:69:39:89:9f:80: e1:c0:a4:51:21:f3:e6:90:04:88:26:64:a0:0d:49:7c:3f:d6: 69:31:89:3b:d2:f4:d9:6c:62:81:72:df:90:29:56:47:a3:64: ac:61:55:53:8f:c5:be:53:7a:aa:ee:5c:b1:d9:d2:b6:f4:60: 6e:96:4f:3a:32:42:0f:a2:df:cd:66:0d:22:8b:54:de:34:d4: db:ce:54:0c:0a:ff:ae:d3:4c:14:81:f4:ab:67:74:90:a4:ea: 6f:c5:a2:2b:8a:8b:62:1f:77:15:e3:27:21:fe:07:b1:6c:83: cb:eb:40:e0:9e:7f:07:fc:9f:55:4d:28:8e:33:18:fe:1a:7d: 7e:74:f1:3b:33:21:cf:0c:6b:6a:85:26:36:06:89:fa:62:c9: 14:b4:d5:ae:5b:aa:78:2b:4f:31:63:51:db:13:f5:c1:28:a5: ae:66:89:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4U/9xM+79VihYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwNzA3MDAwMFowLzEtMCsGA1UEAxMk ZDUzODE2MzYtOTNmYy00MGU1LWIyZjItOTI0ODc0ZDdkMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLigQ6jY9Jqx+LFnkejN9XHGFOVUmsw7+va Xc2AmL8ffY9J04v9V34EjUqQb2dG7XF7P2YL+0uCh40qs9/AfYWOHgNbd2A/rIbo 9pmdZuhtey+4Fb3HOxauwoYRxTkObVsF6R1l5FtvKd9GzfYUYx1QGDQL0rn9273i IN9POiqldCGxkbrJWmvFHLunNmwIq2xhufbd/twXl+xXA3h1YxnZSJNaiUsHKBLY KZY2MMI9ndIijrdUNTH4OyFLsb8XhLzRwCvmtfZVFjVUMGZgK6DCnUSFuVepSlFh TarIHNjOQEo+HgKC1q9HMZrZOBgk14ZNoTZv4b5JJ5DPlypkhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBiRDOwwh5HurXxO1kTYIUtn6hXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCePWnkrSUEgxd5SiMH/ZjR p1dOPputqaDAP9JrGoqQ/JMIfAroaPlizdPEJiSV1pB9gLCQ0S0LkvixSKRBI5c7 zRNFLBKpV52tdDitSFjGO2ba++qeaTmJn4DhwKRRIfPmkASIJmSgDUl8P9ZpMYk7 0vTZbGKBct+QKVZHo2SsYVVTj8W+U3qq7lyx2dK29GBulk86MkIPot/NZg0ii1Te NNTbzlQMCv+u00wUgfSrZ3SQpOpvxaIriotiH3cV4ych/gexbIPL60Dgnn8H/J9V TSiOMxj+Gn1+dPE7MyHPDGtqhSY2Bon6YskUtNWuW6p4K08xY1HbE/XBKKWuZonw -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:30 2025 by rpki-client