$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: WI4rn3KlS2l9c0p2a//iMB790pCRIkk74ZdnWXbEIQA= Subject key identifier: 50:82:27:46:D2:72:6C:8D:45:4E:E5:D4:E6:91:09:91:8A:D4:49:00 Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F4328584BBFFEA8B65BC52AD9B1B8D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5CAD Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: wjPoYLkyiJjQe5oE9FTxB8bJhXTKly6sGZzPqUZKJEM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a8:b6:5b:c5:2a:d9:b1:b8:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=f8d2cebf-978e-4f0f-9acc-767cad46f25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:8c:84:27:ff:8d:06:34:76:1e:c3:a0:f9: fc:de:af:ef:02:2a:8e:e6:30:48:13:3d:d4:6c:f1: 93:31:8d:47:44:f4:78:9f:b8:a3:7e:ca:e7:59:4c: ff:e6:ac:fd:67:39:f3:12:f4:a7:25:80:62:3c:b9: 87:6b:bb:95:d3:56:89:67:74:0c:c5:c9:a3:9c:ca: cf:27:3e:ba:d6:3f:12:9f:c2:79:a4:9b:65:19:21: 83:c3:12:7c:0e:29:08:db:32:60:a7:13:de:68:be: 2b:3d:c4:02:88:a6:23:53:ea:34:cc:70:2a:fa:0d: 42:cd:d4:69:a2:b2:c6:8e:3f:7d:c2:de:cf:af:53: 25:76:94:e6:d6:f0:cc:53:71:b0:b2:37:53:c6:60: 71:f9:9f:aa:7f:4b:93:d2:ab:ab:d7:f1:63:34:9d: 29:1a:9c:10:75:be:90:1c:1b:de:ad:c6:fd:18:d2: f8:b6:19:6e:57:07:b8:35:22:d5:96:c8:9e:81:96: e4:ad:2c:f7:a2:9c:23:16:22:b7:64:5f:0a:38:e7: 55:a8:9b:aa:0b:9d:b7:be:16:16:cb:e6:c4:32:c0: a0:7b:0b:1c:07:80:23:67:7f:da:59:92:c9:d4:33: 7a:c5:2b:61:b2:d9:ae:3b:aa:2d:fd:c6:49:03:6c: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:82:27:46:D2:72:6C:8D:45:4E:E5:D4:E6:91:09:91:8A:D4:49:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:93:5f:c9:75:9d:16:a5:a1:75:8b:58:6c:0e:f3:2c:2e: cb:81:ad:f9:42:49:e9:ec:f0:5d:9f:67:f9:80:81:29:79:d3: 8b:78:b4:aa:75:bd:0e:ec:35:d5:6d:72:77:f7:f6:7e:1d:9c: c9:ad:b4:61:1b:65:43:c5:67:df:76:f3:08:5f:b6:98:3b:6e: f9:9e:5b:ac:a3:4c:93:3b:20:e3:d1:fe:e6:75:9f:e4:15:62: 31:62:13:64:66:31:14:2b:44:a4:f3:78:33:b5:f5:79:e9:bc: a9:7a:b8:bd:c9:a9:f5:50:0f:f6:78:74:a2:79:01:b2:a6:ea: 0f:34:e4:c3:28:19:1d:ff:00:6a:5b:49:12:ec:b0:aa:6b:83: 51:88:83:d1:ab:11:b1:f5:12:d9:89:6c:83:34:2f:c6:21:90: 40:ed:61:55:81:02:44:93:d4:57:99:90:aa:31:2b:43:d2:a3: 2d:4d:33:8c:87:cd:11:0c:31:9d:da:12:ac:4b:54:43:c9:9c: e0:53:25:8c:2d:2a:e6:79:cf:11:13:db:b7:ad:e3:58:e6:91: 94:5d:84:d0:0f:8c:b4:cd:2d:1c:5f:d9:be:e7:55:f4:03:ee: b5:56:9b:38:a1:d9:7e:d3:39:a3:ba:a2:39:99:73:45:cd:c7: 4a:27:f9:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qi2W8Uq2bG42AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk ZjhkMmNlYmYtOTc4ZS00ZjBmLTlhY2MtNzY3Y2FkNDZmMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieyMhCf/jQY0dh7DoPn83q/vAiqO5jBIEz3U bPGTMY1HRPR4n7ijfsrnWUz/5qz9ZznzEvSnJYBiPLmHa7uV01aJZ3QMxcmjnMrP Jz661j8Sn8J5pJtlGSGDwxJ8DikI2zJgpxPeaL4rPcQCiKYjU+o0zHAq+g1CzdRp orLGjj99wt7Pr1MldpTm1vDMU3GwsjdTxmBx+Z+qf0uT0qur1/FjNJ0pGpwQdb6Q HBvercb9GNL4thluVwe4NSLVlsiegZbkrSz3opwjFiK3ZF8KOOdVqJuqC523vhYW y+bEMsCgewscB4AjZ3/aWZLJ1DN6xSthstmuO6ot/cZJA2y7WQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFCCJ0bScmyNRU7l1OaRCZGK1EkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDdJNfyXWdFqWhdYtYbA7z LC7Lga35Qknp7PBdn2f5gIEpedOLeLSqdb0O7DXVbXJ39/Z+HZzJrbRhG2VDxWff dvMIX7aYO275nluso0yTOyDj0f7mdZ/kFWIxYhNkZjEUK0Sk83gztfV56byperi9 yan1UA/2eHSieQGypuoPNOTDKBkd/wBqW0kS7LCqa4NRiIPRqxGx9RLZiWyDNC/G IZBA7WFVgQJEk9RXmZCqMStD0qMtTTOMh80RDDGd2hKsS1RDyZzgUyWMLSrmec8R E9u3reNY5pGUXYTQD4y0zS0cX9m+51X0A+61Vps4odl+0zmjuqI5mXNFzcdKJ/lB -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:21 2025 by rpki-client