$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft File: 2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft (raw, json) Hash identifier: aPadzZiN8yonxaUumwds/G+qlV0kSoyUZMKX+IDXfW4= Subject key identifier: 01:1C:49:61:C7:82:BC:0E:5A:BC:E3:6F:F4:51:F3:E2:31:2D:4F:08 Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Certificate issuer: /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Certificate serial: 010D0C9F4328584BDAA1E36E9D04608E9F71AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft Manifest number: 010D0C9F4328584073A841D9FA90F01D55E5FA36 Signing time: Fri 14 Nov 2025 06:00:03 +0000 Manifest this update: Fri 14 Nov 2025 06:00:03 +0000 Manifest next update: Sun 16 Nov 2025 06:00:00 +0000 Files and hashes: 1: 01339414-921c-3a2c-8206-d657d9438e63.roa (hash: 3rJP+Z2CrvHWEe5Fj0fuf4MIZXQhK7YZARJpdbZ5GfQ=) 2: 1e3d4f97-753b-354c-81de-02471daecfb2.roa (hash: 3zILLZtQYbF3H7YIlkDxNt0l/N4eWkIlGOUbHrgaarU=) 3: 2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl (hash: A+EewengX+bb/f87+OP4EYIrgxx6nThqYkJeVcOjrKc=) 4: 50c11a52-5910-3589-ac82-55cb9bc214ce.roa (hash: lVlqyXfIE0bqFGjEdfaN3w0474jh7E6AaHlkvlc0G2c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:a1:e3:6e:9d:04:60:8e:9f:71:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Validity Not Before: Nov 14 06:00:03 2025 GMT Not After : Nov 16 06:00:00 2025 GMT Subject: CN=584c664c-b3df-4412-9291-797a9c31d03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:09:ee:0a:e7:ed:87:74:c9:79:53:7b:7d: ac:7a:b3:f4:3d:03:72:6d:ad:f9:66:71:78:9a:37: eb:a5:01:99:8e:0d:51:ec:f1:4b:84:c8:53:f5:9b: 56:40:8f:0a:de:57:83:03:d6:69:68:0f:19:dc:8b: 6b:11:d5:59:36:b5:80:df:09:f1:2b:ab:c2:a7:5f: b9:03:3a:85:2e:5d:50:7d:cb:e7:c8:7a:48:f0:37: 37:5c:8a:bd:d7:e8:77:fe:88:42:fe:2c:56:66:1a: be:82:5b:9a:60:fd:37:5c:d3:73:1e:fb:7d:3b:28: 58:2f:4e:38:c0:11:b9:2c:15:c2:cb:42:20:f7:33: 0c:6e:b0:63:42:e5:38:79:36:ff:eb:d8:9a:08:26: 22:91:63:87:fb:b9:60:02:fe:6b:a1:24:4b:d2:63: cc:83:2a:7f:42:c5:29:7e:32:d8:9e:b2:71:b2:5d: 8c:25:e2:66:ef:82:55:c7:4e:8c:06:96:c6:f4:50: 5d:e5:4b:67:53:ca:48:f7:2e:ed:18:53:b7:20:e6: 34:c4:46:63:e7:59:69:06:ae:a3:02:a1:ee:21:bf: f8:c2:a1:ab:7d:36:a4:8b:8a:4c:5e:ac:dc:e8:2d: f7:f0:7c:d8:b5:29:74:ea:8e:88:82:51:61:0f:f5: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1C:49:61:C7:82:BC:0E:5A:BC:E3:6F:F4:51:F3:E2:31:2D:4F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl X509v3 Authority Key Identifier: keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:71:f3:d7:e2:8d:b7:69:c1:f9:65:f2:65:d6:f7:50:31:a6: eb:ab:78:ba:2a:a6:a5:dc:2c:b7:fb:bd:87:59:b4:3c:fe:a8: 1a:26:53:88:0e:5a:e3:66:ec:99:b3:c1:76:df:58:90:2f:8c: 10:06:bf:17:08:d6:80:1a:f7:e9:42:f9:74:d1:6d:8e:0d:b5: cc:7d:17:f8:23:d9:f4:50:95:8d:85:f7:32:2d:dd:c3:71:80: 3a:76:9c:34:0f:24:6e:87:c9:8e:d9:1b:ba:14:d2:64:96:17: 60:f5:23:05:00:fe:75:41:f5:1f:3a:a5:61:b5:15:29:5b:be: 6c:7b:56:e9:56:f2:28:4a:78:80:cd:d9:80:80:d3:bf:14:2e: 17:92:87:14:6e:bd:1e:ee:7e:84:1d:9a:28:0a:98:34:f2:f0: 0e:34:76:4f:82:84:43:20:5d:fc:fa:06:57:9c:cb:76:2b:fe: ee:45:3b:87:81:6b:ee:59:04:7a:ad:e4:9b:46:a0:d0:8c:6b: c9:44:46:6f:7e:fa:a2:1a:f7:69:f4:17:b5:2a:0d:3a:aa:de: 93:6b:71:4c:00:9f:4d:ec:3a:01:63:ad:ee:46:59:aa:77:da: ca:7e:97:fa:d1:f3:67:08:9f:3a:04:d1:76:f9:ea:2c:78:61: 1f:82:96:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvaoeNunQRgjp9xroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRk NmFjMB4XDTI1MTExNDA2MDAwM1oXDTI1MTExNjA2MDAwMFowLzEtMCsGA1UEAxMk NTg0YzY2NGMtYjNkZi00NDEyLTkyOTEtNzk3YTljMzFkMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIJ7grn7Yd0yXlTe32serP0PQNyba35ZnF4 mjfrpQGZjg1R7PFLhMhT9ZtWQI8K3leDA9ZpaA8Z3ItrEdVZNrWA3wnxK6vCp1+5 AzqFLl1QfcvnyHpI8Dc3XIq91+h3/ohC/ixWZhq+gluaYP03XNNzHvt9OyhYL044 wBG5LBXCy0Ig9zMMbrBjQuU4eTb/69iaCCYikWOH+7lgAv5roSRL0mPMgyp/QsUp fjLYnrJxsl2MJeJm74JVx06MBpbG9FBd5UtnU8pI9y7tGFO3IOY0xEZj51lpBq6j AqHuIb/4wqGrfTaki4pMXqzc6C338HzYtSl06o6IglFhD/UVKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAEcSWHHgrwOWrzjb/RR8+IxLU8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZThk OGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvMmU4ZDhkMWMtYTNlZi00 MGUyLTk5MWEtOTc2NDJkZGRkNmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU4ZDhkMWMtYTNlZi00MGUyLTk5 MWEtOTc2NDJkZGRkNmFjLzJlOGQ4ZDFjLWEzZWYtNDBlMi05OTFhLTk3NjQyZGRk ZDZhYy5jcmwwHwYDVR0jBBgwFoAUsN1lnzvrigW9nzMaUiU6k/I7EvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0 MmRkZGQ2YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCycfPX4o23acH5ZfJl1vdQ Mabrq3i6Kqal3Cy3+72HWbQ8/qgaJlOIDlrjZuyZs8F231iQL4wQBr8XCNaAGvfp Qvl00W2ODbXMfRf4I9n0UJWNhfcyLd3DcYA6dpw0DyRuh8mO2Ru6FNJklhdg9SMF AP51QfUfOqVhtRUpW75se1bpVvIoSniAzdmAgNO/FC4XkocUbr0e7n6EHZooCpg0 8vAONHZPgoRDIF38+gZXnMt2K/7uRTuHgWvuWQR6reSbRqDQjGvJREZvfvqiGvdp 9Be1Kg06qt6Ta3FMAJ9N7DoBY63uRlmqd9rKfpf60fNnCJ86BNF2+eoseGEfgpaz -----END CERTIFICATE-----Generated at Sat Nov 15 03:12:01 2025 by rpki-client