$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft File: 2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft (raw, json) Hash identifier: tJ9+5z7B53NrHVKb/YKobNv+4lckgdFZ3H22VK7XSVc= Subject key identifier: EA:0A:BB:C3:BD:10:7E:E5:5A:01:06:DF:0E:60:6F:C9:85:3A:94:15 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584B799E9EAC03973415EA0D2610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft Manifest number: 010D0C9F4328584073A851DDE69A34A9C70978A0 Signing time: Fri 10 Oct 2025 12:00:03 +0000 Manifest this update: Fri 10 Oct 2025 12:00:03 +0000 Manifest next update: Mon 13 Oct 2025 12:00:00 +0000 Files and hashes: 1: 2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl (hash: 3CdeKAZYA3pz1DBO7PUzk5xTH10dsaSiZeOu8yNNt+0=) 2: 34356c57-8521-34f3-a43c-872918075c40.roa (hash: YmPoQH93ZvHSMsvPXeyNb2bb5twhCPVgCzXXDSBYbNE=) 3: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (hash: Q7YKws9b346GeROAvLrNlZI7JzZHzFCHbc1u2rwttfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:9e:ac:03:97:34:15:ea:0d:26:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Oct 10 12:00:03 2025 GMT Not After : Oct 13 12:00:00 2025 GMT Subject: CN=b5de8760-135c-4ccf-9206-ff67c9c024e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:9b:1a:ad:5e:76:03:c3:4a:16:cf:bb:3a: fa:21:e8:f7:b0:df:ef:be:d5:8a:a3:7d:03:bc:0f: 9d:8a:f2:87:8d:e1:d4:32:db:e1:7d:0a:ae:41:cf: 9c:9d:d9:de:19:7a:29:99:f3:a9:fc:c9:c8:be:c8: f3:8a:97:44:32:ec:58:a0:63:77:4f:2b:fd:32:0d: 13:ae:43:6d:b5:ca:5d:d6:b6:e8:30:76:1f:81:64: 5a:62:4c:82:ee:49:db:67:e2:88:0b:e3:23:ee:f1: fd:40:8e:bc:0b:f8:c1:74:6c:2d:aa:5b:90:b5:56: 88:ad:2e:ee:87:7e:f8:58:d7:c5:9f:7b:c9:1a:10: 66:6f:cf:1f:cb:c3:57:4a:da:c3:2d:f6:23:3f:4c: 07:44:6d:1c:5b:1c:20:23:dd:7a:83:78:d3:21:9e: af:50:c3:12:8f:8e:67:9a:d9:15:ab:60:98:23:e1: 2b:1c:96:24:40:08:6b:aa:25:68:bb:9a:bf:94:79: c3:43:fe:1d:86:15:b2:58:5f:82:7a:ce:8e:33:7a: c2:a0:33:cb:00:e8:de:7e:9e:42:f1:79:62:f6:e3: 60:78:e5:8e:8e:c1:56:24:cc:49:47:4f:d6:3c:8c: 45:f9:94:c1:8a:e8:ab:22:63:c7:09:75:21:c9:17: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0A:BB:C3:BD:10:7E:E5:5A:01:06:DF:0E:60:6F:C9:85:3A:94:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9d:b1:ac:c6:d1:ca:e5:41:09:56:5d:21:06:09:e6:10:bd: 61:45:41:1c:40:39:81:ff:9b:b8:ce:8b:65:c3:87:6c:45:38: 0f:02:73:b8:33:02:83:3d:e2:d2:be:de:0e:b5:41:ce:df:f7: 4d:ef:44:7f:90:5e:71:54:70:d2:b4:b4:76:03:fb:7b:81:6b: 81:c2:4c:db:61:5b:75:be:9b:b5:b7:fe:e2:26:59:43:95:c1: 66:7e:5e:49:7d:7a:b2:04:d6:81:c2:4f:d4:8b:fd:f0:91:3a: 5c:37:cc:aa:47:69:72:6e:d9:f0:13:76:81:3b:5c:88:61:5c: bd:5d:10:27:d3:f8:d5:26:a5:07:16:fe:0e:4d:4b:2f:a5:70: a6:80:48:8d:2c:e1:50:5f:1c:70:7c:53:72:d5:b1:57:9f:41: 04:06:ee:1e:7f:aa:a6:f9:64:41:06:70:37:df:e7:ea:f8:22: f1:3d:ce:36:70:48:25:31:0a:04:68:dc:e8:83:50:f4:85:68: d3:1f:0a:bf:46:58:37:6d:a8:d9:f3:71:72:6b:e5:e9:46:3d: d3:26:6c:8c:f0:8c:a1:e5:44:23:f3:55:09:b3:0e:7a:06:85: 30:e9:b0:2b:43:4b:7a:fb:6d:92:81:e0:6c:55:71:23:06:e6: 30:ff:c8:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5np6sA5c0FeoNJhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MTAxMDEyMDAwM1oXDTI1MTAxMzEyMDAwMFowLzEtMCsGA1UEAxMk YjVkZTg3NjAtMTM1Yy00Y2NmLTkyMDYtZmY2N2M5YzAyNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+6bGq1edgPDShbPuzr6Iej3sN/vvtWKo30D vA+divKHjeHUMtvhfQquQc+cndneGXopmfOp/MnIvsjzipdEMuxYoGN3Tyv9Mg0T rkNttcpd1rboMHYfgWRaYkyC7knbZ+KIC+Mj7vH9QI68C/jBdGwtqluQtVaIrS7u h374WNfFn3vJGhBmb88fy8NXStrDLfYjP0wHRG0cWxwgI916g3jTIZ6vUMMSj45n mtkVq2CYI+ErHJYkQAhrqiVou5q/lHnDQ/4dhhWyWF+Ces6OM3rCoDPLAOjefp5C 8Xli9uNgeOWOjsFWJMxJR0/WPIxF+ZTBiuirImPHCXUhyReiSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOoKu8O9EH7lWgEG3w5gb8mFOpQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMmIzYmNiNDctNWYxOC00 NmQzLTliNTAtNjNkNWNiYjllOWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCinbGsxtHK5UEJVl0hBgnm EL1hRUEcQDmB/5u4zotlw4dsRTgPAnO4MwKDPeLSvt4OtUHO3/dN70R/kF5xVHDS tLR2A/t7gWuBwkzbYVt1vpu1t/7iJllDlcFmfl5JfXqyBNaBwk/Ui/3wkTpcN8yq R2lybtnwE3aBO1yIYVy9XRAn0/jVJqUHFv4OTUsvpXCmgEiNLOFQXxxwfFNy1bFX n0EEBu4ef6qm+WRBBnA33+fq+CLxPc42cEglMQoEaNzog1D0hWjTHwq/Rlg3bajZ 83Fya+XpRj3TJmyM8Iyh5UQj81UJsw56BoUw6bArQ0t6+22SgeBsVXEjBuYw/8il -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:29 2025 by rpki-client