$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft File: 2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft (raw, json) Hash identifier: csYTqWCKON9Cr3QFRmdrHzM6I9bV/GOk9YYM0ko9gxQ= Subject key identifier: E3:98:B1:80:A8:50:B4:66:26:BB:31:47:0F:BB:C8:FA:F0:3A:DC:AF Authority key identifier: DB:8C:F6:28:FF:3E:B7:EB:89:80:D5:4E:33:C0:CB:28:07:32:5E:63 Certificate issuer: /CN=2a1354c7-abca-41b6-8b21-4e35a8d9c2b4 Certificate serial: 010D0C9F4328584B96D104323A9F45120E22EF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft Manifest number: 010D0C9F4328584073A82E640F4C79BD5F417CFD Signing time: Mon 20 Oct 2025 23:00:03 +0000 Manifest this update: Mon 20 Oct 2025 23:00:03 +0000 Manifest next update: Wed 22 Oct 2025 23:00:00 +0000 Files and hashes: 1: 2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl (hash: LIMgy11rxUA3/MMLs0IBjbCWZ48zXzEhpklcYrNSwzM=) 2: 8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer (hash: gtXh/NjMNyaWap1oR4AUfv5rKkNTTopJFP+5t9m6aW8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:d1:04:32:3a:9f:45:12:0e:22:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1354c7-abca-41b6-8b21-4e35a8d9c2b4 Validity Not Before: Oct 20 23:00:03 2025 GMT Not After : Oct 22 23:00:00 2025 GMT Subject: CN=bb36aaf9-5bba-4f5e-86bd-bd4c03dc6384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:3f:dc:c1:79:fc:99:92:79:d9:8b:a0:21: f9:f2:10:00:5a:3b:25:a9:04:e9:70:67:71:25:7a: bb:12:8c:c5:cf:75:e4:21:1f:33:91:e7:32:76:2e: 0d:23:9e:f3:f4:af:38:6e:76:ac:60:f6:10:ba:65: af:fd:93:c6:6a:b6:1d:07:77:fd:1f:39:a0:12:10: 7a:cc:fb:ee:1a:f4:65:07:42:bb:6e:2a:15:f2:46: b9:69:4c:23:14:01:ae:a8:91:93:93:2d:4a:b2:08: 82:9b:80:35:77:c2:9c:d6:81:4b:c5:6c:c1:0a:b4: 14:94:0e:68:3e:6c:18:f8:38:e5:7b:15:14:db:79: e8:c1:59:93:d5:5f:93:15:20:9b:0a:ec:9c:89:aa: b7:66:8b:50:11:0b:31:fd:7e:54:50:a1:bd:f8:1d: 8c:17:52:8b:39:5f:13:2a:28:a4:2e:e6:7a:62:5b: 71:d5:5a:88:01:ef:33:65:53:7c:5e:8c:89:be:1e: 04:88:b9:4e:53:7d:96:c3:09:40:39:84:77:34:aa: ea:0a:7d:ab:3d:65:53:10:ec:fb:26:8c:82:f1:2a: a8:b6:20:d7:c8:58:83:98:1c:32:50:bd:cf:ee:62: b4:19:79:e0:99:c4:c3:39:66:00:ef:a4:6f:16:58: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:B1:80:A8:50:B4:66:26:BB:31:47:0F:BB:C8:FA:F0:3A:DC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl X509v3 Authority Key Identifier: keyid:DB:8C:F6:28:FF:3E:B7:EB:89:80:D5:4E:33:C0:CB:28:07:32:5E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2c:9f:62:77:86:e6:9f:1c:bd:9f:18:a9:df:1d:3d:10:f3: 35:01:49:c8:a4:01:cf:89:89:6c:4e:12:81:a7:a9:b8:21:ee: 35:70:7f:df:3d:87:7b:d3:91:4a:8a:5e:9a:98:81:58:6b:a4: f6:1e:4c:7b:5f:dc:d7:e8:bd:46:81:a6:31:ff:59:c5:f0:63: b5:e7:98:2e:e2:a9:85:52:86:48:6e:ee:5e:17:83:74:17:ee: f1:46:57:cf:d5:8e:d6:a3:0d:e7:33:be:cf:0e:a6:f3:00:1b: 52:02:01:63:ad:39:bb:85:b0:d0:c1:8a:e9:46:67:55:12:2a: d1:fe:b3:ab:19:7d:ee:87:e0:db:6a:fc:8d:99:fd:04:95:e5: 13:c6:8f:64:6e:d9:85:01:3f:70:95:71:9b:48:1d:68:a5:62: 89:bc:bd:0c:aa:7b:c1:26:63:5b:a5:57:ce:ce:1d:e3:8f:07: 2c:f7:e5:d4:59:5e:d2:1b:0e:7e:88:dd:0a:6c:90:25:2a:e9: f9:f1:4c:93:65:b3:26:2e:3f:12:4d:52:cc:60:10:54:cb:c9: 2f:60:ce:ec:d6:39:dc:ee:d5:55:a3:ff:0e:85:15:ae:f6:11: 33:65:c4:73:5a:2b:5e:17:53:f6:af:2b:a3:02:ed:5c:76:22: 2e:35:4f:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW0QQyOp9FEg4i7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExMzU0YzctYWJjYS00MWI2LThiMjEtNGUzNWE4ZDlj MmI0MB4XDTI1MTAyMDIzMDAwM1oXDTI1MTAyMjIzMDAwMFowLzEtMCsGA1UEAxMk YmIzNmFhZjktNWJiYS00ZjVlLTg2YmQtYmQ0YzAzZGM2Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJA/3MF5/JmSedmLoCH58hAAWjslqQTpcGdx JXq7EozFz3XkIR8zkecydi4NI57z9K84bnasYPYQumWv/ZPGarYdB3f9HzmgEhB6 zPvuGvRlB0K7bioV8ka5aUwjFAGuqJGTky1KsgiCm4A1d8Kc1oFLxWzBCrQUlA5o PmwY+DjlexUU23nowVmT1V+TFSCbCuyciaq3ZotQEQsx/X5UUKG9+B2MF1KLOV8T KiikLuZ6Yltx1VqIAe8zZVN8XoyJvh4EiLlOU32WwwlAOYR3NKrqCn2rPWVTEOz7 JoyC8SqotiDXyFiDmBwyUL3P7mK0GXngmcTDOWYA76RvFlg2lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOOYsYCoULRmJrsxRw+7yPrwOtyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yYTEz NTRjNy1hYmNhLTQxYjYtOGIyMS00ZTM1YThkOWMyYjQvMmExMzU0YzctYWJjYS00 MWI2LThiMjEtNGUzNWE4ZDljMmI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmExMzU0YzctYWJjYS00MWI2LThi MjEtNGUzNWE4ZDljMmI0LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5 YzJiNC5jcmwwHwYDVR0jBBgwFoAU24z2KP8+t+uJgNVOM8DLKAcyXmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yYTEzNTRjNy1hYmNhLTQxYjYtOGIyMS00ZTM1 YThkOWMyYjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/LJ9id4bmnxy9nxip3x09 EPM1AUnIpAHPiYlsThKBp6m4Ie41cH/fPYd705FKil6amIFYa6T2Hkx7X9zX6L1G gaYx/1nF8GO155gu4qmFUoZIbu5eF4N0F+7xRlfP1Y7Wow3nM77PDqbzABtSAgFj rTm7hbDQwYrpRmdVEirR/rOrGX3uh+DbavyNmf0EleUTxo9kbtmFAT9wlXGbSB1o pWKJvL0MqnvBJmNbpVfOzh3jjwcs9+XUWV7SGw5+iN0KbJAlKun58UyTZbMmLj8S TVLMYBBUy8kvYM7s1jnc7tVVo/8OhRWu9hEzZcRzWiteF1P2ryujAu1cdiIuNU+E -----END CERTIFICATE-----Generated at Tue Oct 21 06:19:23 2025 by rpki-client