$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft File: 2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft (raw, json) Hash identifier: ezNm++ATzEZWC3uCHql6LfpiPNmW0/Pt4V3bWr/X/Lk= Subject key identifier: E2:F3:F2:3B:31:00:D5:2F:EC:A2:C7:E9:B7:FE:E3:BE:82:0C:3B:26 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584BC1462D722712B001ABD06080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft Manifest number: 010D0C9F4328584AE789C700205285FB9CBAD94E Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Sat 08 Nov 2025 04:00:00 +0000 Files and hashes: 1: 2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl (hash: CDuE4Tw7jAw+Q1m9kLH1NQp66FW8QDSoY7D2fV8AFE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2d:72:27:12:b0:01:ab:d0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 8 04:00:00 2025 GMT Subject: CN=da90f017-b9c0-41c2-a57a-f42bdaee4245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:84:db:e3:94:9a:8b:e2:78:c6:d3:4f:6c: 37:b1:a8:97:a2:1c:7f:d7:00:3b:06:79:f7:0b:a1: d0:94:8d:1d:ae:2e:00:dc:b8:29:cb:85:8e:76:a3: 15:11:2f:32:d0:a3:61:08:a9:dd:7b:b0:bd:e7:b8: 06:56:1f:b7:d1:20:b1:43:8e:91:e9:48:7e:4e:31: 11:4f:3e:a1:6e:f5:26:62:29:d0:15:bd:da:d6:f8: f7:5a:fd:d3:cb:92:60:f6:b0:11:11:58:a7:e3:4c: a6:a8:a7:e4:b2:8e:06:33:3f:f1:3e:d4:36:83:62: fe:ef:91:9b:02:f0:c2:df:60:bc:50:45:05:37:97: 44:c2:e5:dc:30:eb:2b:f4:f7:a9:7a:b2:3f:61:68: ad:74:11:cf:25:d8:c2:6c:46:e8:f3:90:3b:9e:ec: 60:bd:ad:be:05:9e:14:7c:98:26:1b:46:8e:0d:56: 66:9b:9f:89:13:b9:65:30:5d:8e:04:25:70:b2:2d: 29:a3:70:83:6a:5e:f8:04:71:8d:86:74:f9:c1:5d: 30:2a:c7:f9:c2:5c:a2:47:a4:9a:92:03:73:41:f6: f8:4d:d0:12:28:7c:eb:7c:3e:f3:32:ec:35:85:6e: e3:b5:9c:8c:00:ed:41:f3:c9:bc:ef:c5:22:dc:25: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F3:F2:3B:31:00:D5:2F:EC:A2:C7:E9:B7:FE:E3:BE:82:0C:3B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:49:72:14:0b:88:bc:d6:37:f2:30:08:6b:9d:15:5f:41:07: a6:4e:ec:88:ec:1e:d8:2c:6e:2c:80:ea:e2:72:65:66:4d:7d: 69:15:81:84:53:1c:9f:53:d5:11:70:6c:b1:d6:b8:3e:d1:29: 37:87:dd:1a:d6:4a:e9:fc:2f:0a:e7:cb:2a:eb:3b:16:5d:2b: 06:c1:97:96:46:42:c5:3b:06:18:d7:e5:bb:ff:e2:9d:c0:97: 78:65:77:32:c6:a1:fb:e5:54:b8:0f:2e:3c:70:b1:b3:4a:a1: df:ae:80:19:37:3c:85:86:39:c9:ce:89:9e:6c:d4:95:93:63: 03:8a:c5:2a:e5:a7:75:07:63:90:a3:38:5a:32:48:ba:f6:70: 97:63:9b:c6:43:dd:e7:98:b2:08:76:13:b7:67:32:d1:ae:eb: 07:d7:aa:bd:90:76:38:54:ca:6a:db:c2:15:dd:ab:63:0c:a6: e3:55:f7:16:0e:b4:00:29:00:a6:35:a2:ba:1c:0e:14:b8:8d: 94:f2:7d:55:08:3e:c4:b7:19:34:99:b9:aa:9c:5f:b5:04:5f: fd:6a:84:4f:e5:10:7c:0d:20:08:10:90:b3:f2:97:e8:25:48: c2:47:1c:f8:22:aa:ff:1a:5c:ee:e3:89:f8:05:12:88:13:08: fc:f3:aa:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRi1yJxKwAavQYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwODA0MDAwMFowLzEtMCsGA1UEAxMk ZGE5MGYwMTctYjljMC00MWMyLWE1N2EtZjQyYmRhZWU0MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOE2+OUmovieMbTT2w3saiXohx/1wA7Bnn3 C6HQlI0dri4A3Lgpy4WOdqMVES8y0KNhCKnde7C957gGVh+30SCxQ46R6Uh+TjER Tz6hbvUmYinQFb3a1vj3Wv3Ty5Jg9rAREVin40ymqKfkso4GMz/xPtQ2g2L+75Gb AvDC32C8UEUFN5dEwuXcMOsr9PeperI/YWitdBHPJdjCbEbo85A7nuxgva2+BZ4U fJgmG0aODVZmm5+JE7llMF2OBCVwsi0po3CDal74BHGNhnT5wV0wKsf5wlyiR6Sa kgNzQfb4TdASKHzrfD7zMuw1hW7jtZyMAO1B88m878Ui3CVrlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOLz8jsxANUv7KLH6bf+476CDDsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvMmJmOGM3NGEtZjhmMC00 MmQzLTg0ZWUtZDlhMWUxYjQ2ZmIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBySXIUC4i81jfyMAhrnRVf QQemTuyI7B7YLG4sgOricmVmTX1pFYGEUxyfU9URcGyx1rg+0Sk3h90a1krp/C8K 58sq6zsWXSsGwZeWRkLFOwYY1+W7/+KdwJd4ZXcyxqH75VS4Dy48cLGzSqHfroAZ NzyFhjnJzomebNSVk2MDisUq5ad1B2OQozhaMki69nCXY5vGQ93nmLIIdhO3ZzLR rusH16q9kHY4VMpq28IV3atjDKbjVfcWDrQAKQCmNaK6HA4UuI2U8n1VCD7Etxk0 mbmqnF+1BF/9aoRP5RB8DSAIEJCz8pfoJUjCRxz4Iqr/Glzu44n4BRKIEwj886pD -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:58 2025 by rpki-client