$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: N1myVElu0o1fxWhfAZ9fojMXHb5WbsffjT1jNVp8/7k= Subject key identifier: 15:54:A6:F3:C6:4E:48:0F:AF:7A:18:07:64:13:89:31:83:E2:CD:D7 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584B38D3FCF62D6E47A83ACE3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060627 Signing time: Wed 17 Sep 2025 07:00:03 +0000 Manifest this update: Wed 17 Sep 2025 07:00:03 +0000 Manifest next update: Sat 20 Sep 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: YQfCXg0jxaX5zIoqs6nNObwfNrwhiPlWDmw1xrNrUIE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: A6+uYmTiBj5Wzrqirrfns/FqF1w7UcPeAWn7fo9BYpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:d3:fc:f6:2d:6e:47:a8:3a:ce:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Sep 17 07:00:03 2025 GMT Not After : Sep 20 07:00:00 2025 GMT Subject: CN=7aa772de-b5eb-4e2b-9c59-ccf6c4aa1f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:e4:d0:55:9b:00:ac:42:d0:79:2c:06:f4: 64:bd:6a:a3:ea:99:11:cb:ae:70:f8:65:1e:69:de: dd:35:b5:48:08:dd:a7:ab:92:8f:5c:d9:f3:fe:f0: ec:e2:ef:53:17:d8:21:66:07:51:aa:f4:80:a4:a8: 55:8a:8b:03:76:7c:2c:ab:a5:24:df:d8:0a:a1:c2: 5e:c1:db:d0:de:19:99:bb:9d:99:44:db:5d:4d:24: 5d:f7:2e:d2:66:5d:07:2c:25:a0:44:e9:a3:ea:c0: 2b:9a:36:9f:a1:01:7c:01:18:a2:8b:dd:1b:70:ca: be:ec:c9:02:fd:e4:67:4c:f7:5d:a9:90:ab:9f:ae: 5e:a7:22:e4:5b:d7:46:0c:cf:93:af:89:d0:d4:89: 69:60:2e:d4:0b:ed:c8:98:68:aa:c7:6f:a1:21:c1: 55:32:4a:d6:6d:a8:7a:cf:b9:99:af:ca:ff:ba:51: 33:6c:de:25:b3:0d:b7:e7:d1:c3:12:b2:0f:2a:32: 26:fd:37:a4:b9:de:dd:d2:d5:73:8d:6c:4d:a4:66: b1:52:8d:86:fb:dd:1d:13:1b:e4:f4:d8:f0:b8:28: f1:51:d2:57:08:36:31:44:fc:7f:df:88:dc:47:8b: e3:e6:12:ca:49:20:bb:2d:5e:21:49:e7:b0:f1:9a: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:A6:F3:C6:4E:48:0F:AF:7A:18:07:64:13:89:31:83:E2:CD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:82:56:ef:a9:b8:7f:1c:ba:b3:f1:29:fd:a7:0a:2c:81:86: e3:b0:19:30:0b:92:68:6b:fb:fc:82:1f:27:50:c4:98:78:c8: a4:c6:d5:80:78:8b:a1:19:b5:11:84:8d:cc:b9:9f:f1:76:6d: 73:55:97:ba:9a:9d:cf:8c:ff:ff:ce:26:a1:03:8c:05:39:6b: ef:e3:f1:58:8b:4a:e5:67:d3:6d:72:b4:d7:29:ec:23:96:40: 1c:85:04:f2:0b:f1:cc:41:25:cc:a8:05:66:05:1f:b8:03:29: fc:77:b7:0b:ec:3f:de:96:be:ad:95:e5:70:38:3b:50:ba:55: 06:57:fa:ef:9d:01:b1:55:0c:38:a5:4f:0c:2f:dd:02:29:1d: ef:77:a2:83:59:3d:c0:03:fc:6c:0e:fc:0a:9a:38:d3:8a:2d: 38:0f:c3:be:1d:c5:b4:39:09:d0:1e:0d:09:d7:33:99:50:ee: 3d:58:44:be:b9:bf:cd:86:c9:9f:fe:bd:b6:af:6b:5d:09:55: a5:78:65:21:ec:a9:35:ca:b7:b7:8a:7c:0c:e0:1c:0a:66:56: 9c:de:12:d4:20:8f:fb:1e:fd:7f:e5:57:71:dd:ff:ac:82:02: 19:34:f7:ea:a5:f1:c3:62:42:29:95:7d:a2:8d:cc:cf:15:10: 5c:45:ce:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs40/z2LW5HqDrOOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDkxNzA3MDAwM1oXDTI1MDkyMDA3MDAwMFowLzEtMCsGA1UEAxMk N2FhNzcyZGUtYjVlYi00ZTJiLTljNTktY2NmNmM0YWExZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWvk0FWbAKxC0HksBvRkvWqj6pkRy65w+GUe ad7dNbVICN2nq5KPXNnz/vDs4u9TF9ghZgdRqvSApKhViosDdnwsq6Uk39gKocJe wdvQ3hmZu52ZRNtdTSRd9y7SZl0HLCWgROmj6sArmjafoQF8ARiii90bcMq+7MkC /eRnTPddqZCrn65epyLkW9dGDM+Tr4nQ1IlpYC7UC+3ImGiqx2+hIcFVMkrWbah6 z7mZr8r/ulEzbN4lsw2359HDErIPKjIm/Tekud7d0tVzjWxNpGaxUo2G+90dExvk 9NjwuCjxUdJXCDYxRPx/34jcR4vj5hLKSSC7LV4hSeew8ZrEVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBVUpvPGTkgPr3oYB2QTiTGD4s3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGglbvqbh/HLqz8Sn9pwos gYbjsBkwC5Joa/v8gh8nUMSYeMikxtWAeIuhGbURhI3MuZ/xdm1zVZe6mp3PjP// ziahA4wFOWvv4/FYi0rlZ9NtcrTXKewjlkAchQTyC/HMQSXMqAVmBR+4Ayn8d7cL 7D/elr6tleVwODtQulUGV/rvnQGxVQw4pU8ML90CKR3vd6KDWT3AA/xsDvwKmjjT ii04D8O+HcW0OQnQHg0J1zOZUO49WES+ub/Nhsmf/r22r2tdCVWleGUh7Kk1yre3 inwM4BwKZlac3hLUII/7Hv1/5Vdx3f+sggIZNPfqpfHDYkIplX2ijczPFRBcRc4+ -----END CERTIFICATE-----Generated at Wed Sep 17 23:49:13 2025 by rpki-client