$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: tym8vvD8VipJUH0Hz9+O7Edxg7aLTgeGVWmQghdq588= Subject key identifier: D8:CB:B9:7A:DC:97:17:54:62:EE:BD:B0:3A:9A:8B:6B:E4:83:35:06 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584BBED4E1E1AD21FDE687631680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060658 Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Fri 07 Nov 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: YQfCXg0jxaX5zIoqs6nNObwfNrwhiPlWDmw1xrNrUIE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: TKi8lnRMA2QFGTIaysmhqJOfhM8LTh8Fn2eZajqN+2I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:e1:e1:ad:21:fd:e6:87:63:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=c234c389-78cd-4a40-89d1-8e2788ae5d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:27:a8:b6:58:44:e7:4d:7e:b9:e6:cc:37: 1d:a2:c6:15:d9:00:39:ab:a8:2b:0c:45:17:57:27: 88:ae:15:4c:e7:71:a5:24:af:4b:46:4c:a3:68:25: 93:bb:18:5b:45:23:6d:bd:d3:3c:c5:6b:04:02:44: 1b:3c:cb:68:b7:f5:0a:6a:32:60:32:76:46:b3:7f: 39:18:74:f8:5b:dc:38:9b:55:27:d1:0f:35:68:7e: b1:e0:c3:ff:97:1a:57:cb:a9:6b:4b:46:cc:cc:ca: 67:9c:25:3d:f9:aa:2b:56:34:2d:13:b5:ed:73:2a: ca:6e:7a:40:51:65:5a:c2:53:fa:fe:0d:ca:69:46: 09:73:a8:d8:de:21:a2:87:ab:58:e1:04:6b:e7:8e: d0:72:f8:41:79:56:9b:bb:57:ec:a4:29:14:4b:06: 10:39:83:f4:e4:fd:2b:ae:41:c1:6c:e7:d3:04:22: 7a:cf:4c:3e:22:f2:a9:96:17:05:f5:24:57:0b:6c: 00:f0:a0:f5:ae:e9:8a:05:08:3b:90:51:1a:c7:9c: 00:b1:8d:27:03:0e:cf:78:6d:fe:e4:ad:44:ec:52: bb:05:ae:d0:c2:20:37:6e:3c:63:23:59:2f:11:ab: b4:ad:2e:8d:8d:f6:b1:e0:15:16:53:8b:03:a2:9f: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CB:B9:7A:DC:97:17:54:62:EE:BD:B0:3A:9A:8B:6B:E4:83:35:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3e:13:54:b7:7f:15:71:6e:42:7f:0d:c2:24:d8:c5:aa:44: 38:ba:7d:f7:32:27:1e:14:38:b6:68:4f:44:78:5e:d7:90:1b: 36:78:ae:f4:41:25:6f:1d:f1:16:76:11:ee:17:bf:b1:e5:7e: d4:58:c8:24:f7:eb:b8:4c:46:71:f4:ec:48:3b:5a:fc:da:7a: 39:b3:4f:96:38:35:9d:9b:0c:6a:69:dd:aa:e0:ab:f7:05:69: 2f:9f:8d:9c:59:8d:8e:25:ab:7c:98:51:ff:83:cb:0f:d8:a9: 33:ea:d2:08:71:1e:72:b9:1d:19:4d:49:52:44:5f:ab:3c:1d: 93:59:63:7a:cd:e1:1f:66:c1:c7:3f:ad:35:6f:c4:5e:45:86: 76:f5:ba:57:25:58:55:fd:72:a3:27:9d:f5:81:51:a6:30:58: bf:42:2e:b4:9d:4f:b2:11:28:0d:4d:c8:f1:42:80:b8:89:c9: 32:a3:c3:64:77:39:9c:26:20:e8:68:50:e9:67:bb:29:44:f3: 47:85:4f:42:fd:32:ee:8c:5f:c8:bf:3b:6f:ad:cb:54:12:9e: dc:02:66:84:ad:b9:75:df:af:a2:65:3f:46:52:e7:eb:91:fb: 01:a5:2a:5e:a8:b8:70:22:cc:7a:b1:c0:e6:bf:6b:04:84:03: 47:f7:0b:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1OHhrSH95odjFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNzA3MDAwMFowLzEtMCsGA1UEAxMk YzIzNGMzODktNzhjZC00YTQwLTg5ZDEtOGUyNzg4YWU1ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgnqLZYROdNfrnmzDcdosYV2QA5q6grDEUX VyeIrhVM53GlJK9LRkyjaCWTuxhbRSNtvdM8xWsEAkQbPMtot/UKajJgMnZGs385 GHT4W9w4m1Un0Q81aH6x4MP/lxpXy6lrS0bMzMpnnCU9+aorVjQtE7XtcyrKbnpA UWVawlP6/g3KaUYJc6jY3iGih6tY4QRr547QcvhBeVabu1fspCkUSwYQOYP05P0r rkHBbOfTBCJ6z0w+IvKplhcF9SRXC2wA8KD1rumKBQg7kFEax5wAsY0nAw7PeG3+ 5K1E7FK7Ba7QwiA3bjxjI1kvEau0rS6Njfax4BUWU4sDop8K8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNjLuXrclxdUYu69sDqai2vkgzUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABPhNUt38VcW5Cfw3CJNjF qkQ4un33MiceFDi2aE9EeF7XkBs2eK70QSVvHfEWdhHuF7+x5X7UWMgk9+u4TEZx 9OxIO1r82no5s0+WODWdmwxqad2q4Kv3BWkvn42cWY2OJat8mFH/g8sP2Kkz6tII cR5yuR0ZTUlSRF+rPB2TWWN6zeEfZsHHP601b8ReRYZ29bpXJVhV/XKjJ531gVGm MFi/Qi60nU+yESgNTcjxQoC4ickyo8NkdzmcJiDoaFDpZ7spRPNHhU9C/TLujF/I vztvrctUEp7cAmaErbl136+iZT9GUufrkfsBpSpeqLhwIsx6scDmv2sEhANH9wua -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:18 2025 by rpki-client