$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft File: 2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft (raw, json) Hash identifier: 9EmYKObtfQh+YPAK78X2BOJdsB0L8AqsHK5RKOfyhRU= Subject key identifier: 9D:42:A6:9F:BE:C4:3B:F6:29:D4:3C:B8:25:88:9D:95:F9:32:1C:81 Authority key identifier: 7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6 Certificate issuer: /CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d Certificate serial: 010D0C9F4328584BB498625BA97035335DFE9B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft Manifest number: 010D0C9F432858413F56422DAE6FED71B86A163F Signing time: Fri 31 Oct 2025 15:00:09 +0000 Manifest this update: Fri 31 Oct 2025 15:00:09 +0000 Manifest next update: Sun 02 Nov 2025 15:00:00 +0000 Files and hashes: 1: 2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl (hash: miwWLVPPltOYzJmpz353tMkSvQGr8PM/Z9bgw/d/0NM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:98:62:5b:a9:70:35:33:5d:fe:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d Validity Not Before: Oct 31 15:00:09 2025 GMT Not After : Nov 2 15:00:00 2025 GMT Subject: CN=f7d29ad5-d540-40c3-9a1f-e724103128a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:9b:c5:a2:07:ca:ed:12:3d:72:f2:62:9a: 1f:e8:f7:52:2f:45:41:f0:09:99:99:9a:66:3b:72: 00:29:27:11:cd:c6:61:40:a7:6c:bc:87:0f:96:7a: 22:5d:99:59:36:43:85:13:82:5b:95:02:07:73:d8: 30:ed:2f:93:5a:c9:09:ca:87:20:eb:57:f1:e3:07: c5:75:7c:61:b5:c8:2a:34:21:3e:93:af:78:db:c5: a2:45:d9:94:96:38:5f:03:97:aa:22:30:ad:43:b8: a7:3a:6b:8b:25:93:3a:59:9b:5f:cb:87:b8:3a:e0: 65:2f:93:d8:45:d1:d4:1b:cf:cb:0c:89:70:e9:56: c2:25:f0:9d:13:0e:10:c0:61:b9:54:ef:b3:df:ff: dc:7b:e2:d7:e1:4e:07:29:38:4d:09:b8:91:6a:62: 0e:a8:dd:20:bf:a5:7c:28:a0:46:99:9a:72:eb:57: b1:87:1d:2b:33:ae:8a:e8:22:de:20:14:5a:28:ed: 4e:87:aa:1e:ca:65:14:4e:b2:bd:c3:c5:c9:4e:0e: 9c:3c:7d:b5:fa:ed:a2:2e:75:13:92:1c:5c:bc:10: 43:8b:bf:9e:76:fc:a7:3d:ea:0b:67:e9:87:22:1e: 1b:2d:8e:a0:6a:e4:0f:34:08:c3:d8:79:70:9c:1c: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:42:A6:9F:BE:C4:3B:F6:29:D4:3C:B8:25:88:9D:95:F9:32:1C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl X509v3 Authority Key Identifier: keyid:7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:26:71:32:87:4a:02:a2:7a:73:0f:24:c2:0c:cd:46:02:2e: 80:53:7f:29:d1:14:5b:32:1b:1d:49:9b:86:e0:06:3d:90:92: 0a:ec:ed:f6:4d:71:b9:c4:1a:35:9d:0b:d8:bc:bd:b6:0c:47: 46:89:69:90:07:cc:ad:21:82:f4:ca:05:eb:9c:e3:2c:df:f6: e3:29:3a:56:e5:8e:22:2a:2a:91:f0:e6:cc:ea:8e:3f:9d:7a: 89:d9:04:18:b0:fb:c5:58:2a:5e:b7:98:21:ea:37:22:ca:2a: 98:d9:f6:57:73:57:dd:4e:75:f5:c0:6d:c4:fa:22:20:83:c4: f1:9d:a2:bc:11:76:eb:d2:9d:1c:ef:c5:e7:7d:d3:90:0d:a7: 74:0e:9c:a5:85:6e:5d:c7:e8:d2:82:42:b7:08:3b:fb:96:39: 9e:15:2f:20:80:a9:57:87:06:cd:45:54:70:d2:95:21:3a:7b: a9:19:05:46:a1:23:5c:c0:ac:66:df:e7:0f:a7:34:55:fc:76: ac:87:7c:a7:fe:a9:dd:09:77:92:bc:1d:c4:45:22:86:b9:4f: b1:a4:3d:50:bf:d9:47:b9:96:84:87:d8:8e:dc:5f:e7:93:61: 40:8a:c4:b6:8a:2a:30:48:e6:f8:da:79:e4:95:2a:33:17:e2: 85:df:6a:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu0mGJbqXA1M13+m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyYWM3NTktYWQzZi00YThhLTk4OGQtOWI5ZWI2NTk0 YzNkMB4XDTI1MTAzMTE1MDAwOVoXDTI1MTEwMjE1MDAwMFowLzEtMCsGA1UEAxMk ZjdkMjlhZDUtZDU0MC00MGMzLTlhMWYtZTcyNDEwMzEyOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WabxaIHyu0SPXLyYpof6PdSL0VB8AmZmZpm O3IAKScRzcZhQKdsvIcPlnoiXZlZNkOFE4JblQIHc9gw7S+TWskJyocg61fx4wfF dXxhtcgqNCE+k69428WiRdmUljhfA5eqIjCtQ7inOmuLJZM6WZtfy4e4OuBlL5PY RdHUG8/LDIlw6VbCJfCdEw4QwGG5VO+z3//ce+LX4U4HKThNCbiRamIOqN0gv6V8 KKBGmZpy61exhx0rM66K6CLeIBRaKO1Oh6oeymUUTrK9w8XJTg6cPH21+u2iLnUT khxcvBBDi7+edvynPeoLZ+mHIh4bLY6gauQPNAjD2HlwnByuSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ1Cpp++xDv2KdQ8uCWInZX5MhyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDJh Yzc1OS1hZDNmLTRhOGEtOTg4ZC05YjllYjY1OTRjM2QvMmQyYWM3NTktYWQzZi00 YThhLTk4OGQtOWI5ZWI2NTk0YzNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQyYWM3NTktYWQzZi00YThhLTk4 OGQtOWI5ZWI2NTk0YzNkLzJkMmFjNzU5LWFkM2YtNGE4YS05ODhkLTliOWViNjU5 NGMzZC5jcmwwHwYDVR0jBBgwFoAUfYZx3tVrkfBtAN9VWasQGd7+xaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDJhYzc1OS1hZDNmLTRhOGEtOTg4ZC05Yjll YjY1OTRjM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByJnEyh0oConpzDyTCDM1G Ai6AU38p0RRbMhsdSZuG4AY9kJIK7O32TXG5xBo1nQvYvL22DEdGiWmQB8ytIYL0 ygXrnOMs3/bjKTpW5Y4iKiqR8ObM6o4/nXqJ2QQYsPvFWCpet5gh6jciyiqY2fZX c1fdTnX1wG3E+iIgg8TxnaK8EXbr0p0c78XnfdOQDad0DpylhW5dx+jSgkK3CDv7 ljmeFS8ggKlXhwbNRVRw0pUhOnupGQVGoSNcwKxm3+cPpzRV/Hash3yn/qndCXeS vB3ERSKGuU+xpD1Qv9lHuZaEh9iO3F/nk2FAisS2iiowSOb42nnklSozF+KF32r7 -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:51 2025 by rpki-client