$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: FPWeSdXkvQfaJVpbVB1k6zNnHiMXnzwpQCQfM/ICRDo= Subject key identifier: 28:B1:FD:46:EA:FE:14:5E:87:D6:38:73:9A:0B:F0:82:B5:E8:47:AC Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584B770F7FD9D3F9F15A16E38864 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDDDE Signing time: Thu 09 Oct 2025 14:00:03 +0000 Manifest this update: Thu 09 Oct 2025 14:00:03 +0000 Manifest next update: Sat 11 Oct 2025 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: ZOvllSzKJEJPxDOPuODcXRUQnQd1vpzy+PFDNDV1SmE=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: H1VnT+j5eKi45fqmkfw0ti3Ev6qu4hs3R54K5bFZ6/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:0f:7f:d9:d3:f9:f1:5a:16:e3:88:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Oct 9 14:00:03 2025 GMT Not After : Oct 11 14:00:00 2025 GMT Subject: CN=3fc36749-0eb2-4a20-b703-a099bffafbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:42:32:63:c7:08:46:09:71:13:8b:fa:8c: b2:60:03:9e:8d:9c:c1:47:cf:c1:42:17:e6:8e:6a: c1:4c:c5:45:55:0e:7a:2b:78:a3:86:d7:d1:02:64: 92:fb:40:b0:48:36:1f:dc:7d:94:8c:a7:09:3a:b0: 21:60:5a:e8:c2:17:e4:9c:3a:06:01:c0:11:1b:dd: 1a:91:1b:59:9b:d5:be:8c:6d:ab:49:ea:9c:c5:cb: 1e:0c:80:a0:aa:ef:de:0a:03:4d:60:5b:6d:0d:50: 95:e6:f8:f2:aa:2f:24:4e:0d:ba:ca:05:e9:0c:ea: cc:f6:cc:27:fd:7a:67:68:97:b7:1e:ff:62:19:15: 18:43:73:4c:07:dd:6f:39:7d:84:f6:e7:35:12:d2: 1e:e6:a6:ea:71:70:94:72:7d:27:dc:4d:ca:29:ea: 91:60:af:ad:97:89:1a:2f:d6:0f:71:b5:53:c3:59: 56:00:77:90:55:e7:4d:ab:b0:12:f9:91:8c:95:0f: a3:ae:0c:c8:e0:85:5f:84:13:16:8f:40:2e:2b:f5: 0c:14:d1:90:68:f4:b5:98:52:d1:90:df:48:e2:17: 0d:ab:af:aa:07:a3:48:df:9b:e5:3c:74:1b:2a:37: 5f:ec:d5:f9:ee:00:10:bd:4d:ec:34:5e:0f:d6:5a: cb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:FD:46:EA:FE:14:5E:87:D6:38:73:9A:0B:F0:82:B5:E8:47:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b1:de:bb:b1:d8:89:61:fc:88:eb:97:0c:09:c1:66:3a:35: a5:65:57:51:83:5c:3e:dc:9c:0f:1b:50:d4:db:e8:c5:bd:12: ce:34:9f:f7:b8:e7:a4:91:21:76:b7:9f:bb:35:9a:ba:42:35: 33:a7:c2:f9:86:b2:74:56:f2:51:be:b4:77:5f:32:79:c6:ad: ff:27:c9:6a:72:07:70:89:68:93:09:9c:0c:bc:d8:ff:6b:76: d0:fb:56:61:91:a8:27:0a:41:5d:cb:aa:2b:8c:7d:98:af:91: 82:83:99:28:59:36:02:16:ed:f3:04:ca:ab:7f:8b:5a:e4:d9: 16:fa:8a:36:ea:7a:60:a9:52:d7:42:f8:63:10:56:1b:92:58: 38:ea:2e:08:00:7b:bf:1e:ca:35:98:63:a0:63:88:54:d3:56: 1e:1c:16:41:ce:70:6a:d6:91:c0:e0:5e:58:17:bb:61:90:3c: 44:d4:40:a6:54:7e:46:d1:d8:e2:7b:55:2b:1c:10:24:63:4e: 44:33:a5:16:e9:14:02:60:b2:ed:18:a2:8a:91:4e:c4:d4:2e: b1:06:d4:ab:fa:57:0c:d1:51:24:0c:cf:dd:93:36:79:ae:b0: 16:14:c9:b2:78:e6:26:b8:45:4a:39:69:f0:74:25:10:6e:d5: f8:9d:47:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3D3/Z0/nxWhbjiGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MTAwOTE0MDAwM1oXDTI1MTAxMTE0MDAwMFowLzEtMCsGA1UEAxMk M2ZjMzY3NDktMGViMi00YTIwLWI3MDMtYTA5OWJmZmFmYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBZCMmPHCEYJcROL+oyyYAOejZzBR8/BQhfm jmrBTMVFVQ56K3ijhtfRAmSS+0CwSDYf3H2UjKcJOrAhYFrowhfknDoGAcARG90a kRtZm9W+jG2rSeqcxcseDICgqu/eCgNNYFttDVCV5vjyqi8kTg26ygXpDOrM9swn /XpnaJe3Hv9iGRUYQ3NMB91vOX2E9uc1EtIe5qbqcXCUcn0n3E3KKeqRYK+tl4ka L9YPcbVTw1lWAHeQVedNq7AS+ZGMlQ+jrgzI4IVfhBMWj0AuK/UMFNGQaPS1mFLR kN9I4hcNq6+qB6NI35vlPHQbKjdf7NX57gAQvU3sNF4P1lrLNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCix/Ubq/hReh9Y4c5oL8IK16EesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYsd67sdiJYfyI65cMCcFm OjWlZVdRg1w+3JwPG1DU2+jFvRLONJ/3uOekkSF2t5+7NZq6QjUzp8L5hrJ0VvJR vrR3XzJ5xq3/J8lqcgdwiWiTCZwMvNj/a3bQ+1ZhkagnCkFdy6orjH2Yr5GCg5ko WTYCFu3zBMqrf4ta5NkW+oo26npgqVLXQvhjEFYbklg46i4IAHu/Hso1mGOgY4hU 01YeHBZBznBq1pHA4F5YF7thkDxE1ECmVH5G0djie1UrHBAkY05EM6UW6RQCYLLt GKKKkU7E1C6xBtSr+lcM0VEkDM/dkzZ5rrAWFMmyeOYmuEVKOWnwdCUQbtX4nUek -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:29 2025 by rpki-client