$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft File: 2bc7e484-64e7-46cb-a15c-360a60b362d4.mft (raw, json) Hash identifier: fxfMR2o+fcXXZijmePUsUuDLeodkYOUAn7xl/3GRnl0= Subject key identifier: BB:9D:8C:43:1F:12:49:73:0B:FE:D7:D0:1B:15:8A:94:B8:7A:07:22 Authority key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Certificate issuer: /CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Certificate serial: 010D0C9F4328584BC16406A1C19E1E1EE15F9780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft Manifest number: 010D0C9F43285849EC71F2215FA457AA7D9E2E2B Signing time: Wed 05 Nov 2025 05:00:10 +0000 Manifest this update: Wed 05 Nov 2025 05:00:10 +0000 Manifest next update: Sat 08 Nov 2025 05:00:00 +0000 Files and hashes: 1: 2bc7e484-64e7-46cb-a15c-360a60b362d4.crl (hash: ge38y9QEUA142peBeTLDAPIhcDKffiCPXL7SnHJ5bUk=) 2: 7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa (hash: wY+zFmTnIXAUU2+G9bn8OagU9c3Yuu6LgDdtr1QETjc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:64:06:a1:c1:9e:1e:1e:e1:5f:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Validity Not Before: Nov 5 05:00:10 2025 GMT Not After : Nov 8 05:00:00 2025 GMT Subject: CN=68edb83d-afcc-4de3-855c-161aba3cb73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:8d:7f:1a:6b:2e:1f:bf:c0:b8:e3:dd:87: 02:b7:c4:65:48:6e:0a:4d:20:fe:4d:f8:ee:6f:0f: 5c:fe:9a:cd:a8:be:7d:47:6a:d4:2a:f1:2e:87:65: 76:af:8f:70:2b:43:a9:40:88:60:d3:93:b9:40:8a: f3:99:47:0d:6a:f7:ca:7e:99:50:53:be:dc:91:81: 14:ef:19:26:5c:06:a3:28:f3:50:20:bd:c4:c9:86: 18:d1:13:2b:ea:82:5d:ed:69:5c:e2:ba:df:61:8d: 50:7f:6f:c1:ef:d9:ce:84:97:6b:75:df:85:bf:4d: 86:ec:d2:c3:0a:d9:60:5f:f0:58:8d:3e:08:97:52: 41:d0:26:35:db:02:aa:1c:ce:a5:b3:b3:b3:48:ff: 67:71:ad:40:46:bd:4f:75:be:7b:eb:b0:c6:3d:0a: 91:f4:a1:c8:26:f5:fc:8c:87:d1:e0:47:4f:5f:8b: 9d:0f:6c:21:73:c9:9f:45:11:2e:6e:b9:c3:88:09: 9d:89:fd:ab:4f:b8:06:99:b1:0f:51:e3:92:0e:da: fc:df:fb:5c:4e:05:2d:45:19:be:e5:3d:e3:8f:95: 0b:c2:10:f7:25:77:35:9c:73:e2:2b:4d:7f:b7:e0: c1:87:13:9f:3e:67:66:7c:62:4d:8f:1a:3a:43:d8: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:8C:43:1F:12:49:73:0B:FE:D7:D0:1B:15:8A:94:B8:7A:07:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl X509v3 Authority Key Identifier: keyid:85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ee:b1:c9:00:ed:2c:93:18:35:74:57:f7:54:18:e8:a0:09: ed:22:87:44:03:a9:f6:2e:ff:9c:45:80:a2:c2:58:fd:e8:f0: 10:09:f7:75:14:a2:fe:45:9d:dc:7a:72:91:59:d9:b7:4e:4c: 0c:1f:ec:fb:2d:a4:4e:2c:86:78:e1:ca:b6:5c:63:86:a0:6e: 15:c2:5e:e4:38:6b:21:e7:23:c4:95:8e:da:a6:77:d6:b2:d8: 5e:88:cc:b4:b7:dc:80:2e:8d:a3:38:32:34:6b:bf:92:2b:86: 4f:71:c0:e6:42:c1:30:66:2c:89:27:73:af:e8:2a:a9:98:c4: b4:a7:8a:3d:e6:71:fa:53:70:3f:64:56:5b:a8:e8:7b:61:0c: e2:ef:d2:59:49:1d:70:6a:48:91:c8:ed:24:22:40:24:c0:dc: bf:b4:81:17:60:23:0a:c5:c2:d4:45:fa:b2:33:bd:55:cc:8d: e6:c7:59:b5:01:e9:22:5b:e9:82:86:4c:58:39:d7:1b:92:fb: 39:b6:35:2c:3f:43:b7:9b:aa:0c:ea:3f:c0:40:77:50:fc:a8: 2e:59:62:ec:be:ca:b2:c3:58:e3:ed:db:43:51:12:59:ee:7a: bf:bb:54:b3:c6:38:8f:68:b8:de:46:04:02:dc:6f:5b:52:ee: 97:85:43:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBZAahwZ4eHuFfl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2 MmQ0MB4XDTI1MTEwNTA1MDAxMFoXDTI1MTEwODA1MDAwMFowLzEtMCsGA1UEAxMk NjhlZGI4M2QtYWZjYy00ZGUzLTg1NWMtMTYxYWJhM2NiNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmNfxprLh+/wLjj3YcCt8RlSG4KTSD+Tfju bw9c/prNqL59R2rUKvEuh2V2r49wK0OpQIhg05O5QIrzmUcNavfKfplQU77ckYEU 7xkmXAajKPNQIL3EyYYY0RMr6oJd7Wlc4rrfYY1Qf2/B79nOhJdrdd+Fv02G7NLD CtlgX/BYjT4Il1JB0CY12wKqHM6ls7OzSP9nca1ARr1Pdb5767DGPQqR9KHIJvX8 jIfR4EdPX4udD2whc8mfRREubrnDiAmdif2rT7gGmbEPUeOSDtr83/tcTgUtRRm+ 5T3jj5ULwhD3JXc1nHPiK01/t+DBhxOfPmdmfGJNjxo6Q9iAWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLudjEMfEklzC/7X0BsVipS4egciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3 ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvMmJjN2U0ODQtNjRlNy00 NmNiLWExNWMtMzYwYTYwYjM2MmQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjN2U0ODQtNjRlNy00NmNiLWEx NWMtMzYwYTYwYjM2MmQ0LzJiYzdlNDg0LTY0ZTctNDZjYi1hMTVjLTM2MGE2MGIz NjJkNC5jcmwwHwYDVR0jBBgwFoAUhQJ9iFXNUhQLgB0LkveCdMAqWk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBh NjBiMzYyZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA37rHJAO0skxg1dFf3VBjo oAntIodEA6n2Lv+cRYCiwlj96PAQCfd1FKL+RZ3cenKRWdm3TkwMH+z7LaROLIZ4 4cq2XGOGoG4Vwl7kOGsh5yPElY7apnfWstheiMy0t9yALo2jODI0a7+SK4ZPccDm QsEwZiyJJ3Ov6CqpmMS0p4o95nH6U3A/ZFZbqOh7YQzi79JZSR1wakiRyO0kIkAk wNy/tIEXYCMKxcLURfqyM71VzI3mx1m1AekiW+mChkxYOdcbkvs5tjUsP0O3m6oM 6j/AQHdQ/KguWWLsvsqyw1jj7dtDURJZ7nq/u1SzxjiPaLjeRgQC3G9bUu6XhUOU -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:11 2025 by rpki-client