$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft File: 2da4b7dc-6e43-4290-86d6-84e81139f164.mft (raw, json) Hash identifier: Fq6mNnGU99h3S6YOxWfaFYiZgt/LV8jNE0R1U702yHk= Subject key identifier: EB:28:66:04:65:27:CB:96:79:9E:92:68:1F:21:92:77:8C:44:A2:D7 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584BC0ECE17438EDE590483A1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft Manifest number: 010D0C9F432858483B39DBB01CC833623E52E28D Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Fri 07 Nov 2025 01:00:00 +0000 Files and hashes: 1: 1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (hash: pLIdX6QmH2xZJ61Fg+BVAqTrIgIwXZvdAWPTdM7QI2w=) 2: 2da4b7dc-6e43-4290-86d6-84e81139f164.crl (hash: PE7r7/rx7yRwUGX+1CIKIWPeDXdyv0OZY+AxDFRcpro=) 3: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (hash: tEcBC5UwvoH9t2m6FhzXejsK3RwdCH3VfRbPlSlCLtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e1:74:38:ed:e5:90:48:3a:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 7 01:00:00 2025 GMT Subject: CN=03dd86ea-6913-40a1-8530-c2b053b3b8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:be:03:83:74:bb:a1:b8:2d:3b:a9:29:31: a1:66:80:31:99:fe:b1:e8:d5:91:ff:9d:41:1e:02: 35:b8:16:f1:a7:0b:f5:9e:73:8f:6f:2a:ae:2e:85: 2e:07:3c:51:86:86:02:51:12:05:ac:a9:a9:9c:fc: 88:de:94:2a:fb:99:38:f8:63:55:c5:91:e6:d0:6f: 38:57:e6:74:e4:3c:d2:ec:7c:c4:d1:95:73:26:8b: 6b:9f:a7:22:4c:bd:ab:07:45:2f:f8:23:80:49:be: b1:5a:a9:2d:48:1d:85:8f:7f:2a:86:80:86:51:b0: a3:35:be:33:96:79:fe:88:22:3d:0a:60:44:69:33: 30:1c:8f:22:7b:17:a3:27:f9:50:96:c0:42:22:34: c2:e7:03:06:5b:4f:23:f0:9a:52:4a:0d:ca:22:ba: ed:7d:76:9e:b2:ab:1c:08:1b:31:d2:1c:f1:a9:36: 88:71:45:5e:f0:5c:85:4f:04:af:fc:b5:31:38:e4: 54:fa:b0:98:71:af:84:f2:41:fd:0f:5b:7d:04:c8: a8:f8:89:a9:cc:96:4e:ea:53:54:c4:d4:84:9f:b5: ab:10:b4:0f:44:2c:84:33:5f:39:ca:96:94:21:71: c7:5b:95:e1:df:0b:0d:52:9a:c9:2f:f2:e1:67:6f: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:66:04:65:27:CB:96:79:9E:92:68:1F:21:92:77:8C:44:A2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b8:8d:aa:4d:90:f1:e1:c3:29:78:b4:6e:20:4b:5e:c0:84: 5d:09:a5:fd:f1:5c:81:4b:02:31:60:d0:9c:83:91:ad:ea:d7: 1a:18:f9:ec:aa:b8:97:97:c0:52:39:34:40:51:85:29:dc:92: 9a:ec:25:f3:ed:26:7e:05:a0:d9:ce:39:e1:61:4f:48:8b:f3: 17:21:29:ef:5f:52:86:45:a6:c9:d0:ab:5a:5a:93:18:81:ac: 48:ed:d0:e4:30:e1:a9:ca:f6:33:3a:59:c6:c4:2b:29:9a:a2: db:7b:26:4a:e4:70:50:9e:1b:11:41:81:8a:1b:ab:d0:7f:45: aa:da:fb:01:a9:1c:8d:6f:ab:ea:c5:66:9b:c9:80:e5:5f:a7: 1c:b6:db:7e:4b:f6:ec:d5:56:d9:21:4b:6c:73:6d:13:5c:0e: 9a:30:93:5e:ab:98:82:98:44:83:35:71:8d:5f:50:d7:ac:d0: 11:dd:8f:27:93:ce:44:9b:9f:d6:81:8d:df:6e:52:d2:28:86: 2e:4e:2e:98:d9:3f:7e:ca:9f:d2:94:94:c6:29:a6:f7:7a:68: bc:cf:6c:af:f4:5f:38:03:78:da:f4:90:18:ce:e6:5f:a9:57: 3c:3d:3d:76:e6:e5:a9:1a:38:7f:a9:72:44:94:8b:9d:5a:38: 0d:cf:19:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OF0OO3lkEg6FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwNzAxMDAwMFowLzEtMCsGA1UEAxMk MDNkZDg2ZWEtNjkxMy00MGExLTg1MzAtYzJiMDUzYjNiOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLa+A4N0u6G4LTupKTGhZoAxmf6x6NWR/51B HgI1uBbxpwv1nnOPbyquLoUuBzxRhoYCURIFrKmpnPyI3pQq+5k4+GNVxZHm0G84 V+Z05DzS7HzE0ZVzJotrn6ciTL2rB0Uv+COASb6xWqktSB2Fj38qhoCGUbCjNb4z lnn+iCI9CmBEaTMwHI8iexejJ/lQlsBCIjTC5wMGW08j8JpSSg3KIrrtfXaesqsc CBsx0hzxqTaIcUVe8FyFTwSv/LUxOORU+rCYca+E8kH9D1t9BMio+ImpzJZO6lNU xNSEn7WrELQPRCyEM185ypaUIXHHW5Xh3wsNUprJL/LhZ29pFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOsoZgRlJ8uWeZ6SaB8hkneMRKLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMmRhNGI3ZGMtNmU0My00 MjkwLTg2ZDYtODRlODExMzlmMTY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAuI2qTZDx4cMpeLRuIEte wIRdCaX98VyBSwIxYNCcg5Gt6tcaGPnsqriXl8BSOTRAUYUp3JKa7CXz7SZ+BaDZ zjnhYU9Ii/MXISnvX1KGRabJ0KtaWpMYgaxI7dDkMOGpyvYzOlnGxCspmqLbeyZK 5HBQnhsRQYGKG6vQf0Wq2vsBqRyNb6vqxWabyYDlX6ccttt+S/bs1VbZIUtsc20T XA6aMJNeq5iCmESDNXGNX1DXrNAR3Y8nk85Em5/WgY3fblLSKIYuTi6Y2T9+yp/S lJTGKab3emi8z2yv9F84A3ja9JAYzuZfqVc8PT125uWpGjh/qXJElIudWjgNzxkv -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:24 2025 by rpki-client