$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft File: 2bf72053-6e89-4e8b-8a04-02150ff7c010.mft (raw, json) Hash identifier: J2Jz/NyQfR798Lw91Sy4qJ7octd8j6OdkyCbGhi+Pgc= Subject key identifier: CF:7D:BB:33:3E:82:B3:D4:9C:56:F7:39:5C:E0:51:36:88:30:78:91 Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF Certificate issuer: /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010 Certificate serial: 010D0C9F4328584BAA028757870C4C22FE536740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft Manifest number: 010D0C9F4328584A52B332003EED9CFA5BB73484 Signing time: Mon 27 Oct 2025 20:00:09 +0000 Manifest this update: Mon 27 Oct 2025 20:00:09 +0000 Manifest next update: Wed 29 Oct 2025 20:00:00 +0000 Files and hashes: 1: 2bf72053-6e89-4e8b-8a04-02150ff7c010.crl (hash: TjTqCXPzJ4JuFRGiyjvHxiPCSUUT3iHDwjJBTeg1HQk=) 2: 460e511a-a065-33a4-9b94-66aaa249410b.roa (hash: q/PFyIzuEfsHHxCdTb8ulSyh8ktUp9NI61MO32VTLv0=) 3: 929189e4-d56d-3da5-aef3-aa0bc817eb7f.roa (hash: hAwacTvoodRHNLX4TnOdSlpTfrVk1C/asNn6ylbY3Qc=) 4: a7b7d744-610d-3925-8b29-086102f88c05.roa (hash: 4TiSMc3R2yWWnrdc42i0XKdbc8bEn7qZqdyom2Jk/gE=) 5: b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa (hash: h3wgxD9gDO/pQdGIwryNQUlyCugjKFhyRi1pok0/OuE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:02:87:57:87:0c:4c:22:fe:53:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010 Validity Not Before: Oct 27 20:00:09 2025 GMT Not After : Oct 29 20:00:00 2025 GMT Subject: CN=dc907d23-8c12-444c-a7bb-eafacb23d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:8f:b3:88:5a:92:ca:78:7b:65:97:6f:95: f0:45:9e:f3:e9:37:92:dd:d0:af:42:c0:31:8f:18: e6:d9:cd:54:c5:78:cb:16:ef:bb:9e:bc:8f:e5:14: a2:89:2a:3d:e7:95:74:a8:ef:c5:11:c6:30:65:a5: f3:f5:ec:8b:db:0a:ef:e9:3b:cc:19:f0:ef:fa:0e: 07:c9:55:82:8a:fb:a9:55:98:cd:19:ab:9a:8c:10: 71:b9:e2:82:5b:6e:66:48:6c:27:53:c2:d7:ed:ee: 72:ba:7e:f1:c0:60:24:07:00:87:44:92:ce:4d:2e: ce:0b:8f:f0:a4:69:b5:2b:04:8f:64:72:cf:6f:55: 8c:65:26:f2:f4:20:53:73:8e:cd:84:72:df:f9:d4: 1a:0f:5f:8b:18:6c:99:08:fb:a4:ae:53:f8:bc:db: 19:3e:2d:0c:b4:fc:53:9d:99:aa:cf:22:b5:70:95: 7f:f3:3d:94:41:3f:6f:63:f6:83:5e:7a:20:da:f3: 78:24:11:35:44:93:ba:49:19:8d:bc:a9:13:b1:dc: dd:c6:1b:2f:54:00:cc:7f:b5:d9:14:63:77:58:b2: 68:fb:a8:07:d0:30:d3:dd:f2:c9:77:91:e1:0d:2a: 9e:cb:d4:12:5f:98:57:56:d4:3a:2e:a0:56:c0:c5: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7D:BB:33:3E:82:B3:D4:9C:56:F7:39:5C:E0:51:36:88:30:78:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl X509v3 Authority Key Identifier: keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:dc:82:ac:0a:4f:67:d0:46:8c:af:6d:b3:56:f4:e4:ea:56: cf:0d:1c:8d:60:e6:38:8b:79:d2:a2:7f:01:6b:ed:87:fb:8d: aa:03:7e:a0:be:46:53:a0:43:fd:e8:9a:b3:97:fe:76:a1:f7: 68:5a:a1:46:f1:b2:28:1d:c4:25:c0:46:de:31:8a:4e:32:a7: 24:e4:86:25:0f:02:4e:6c:83:91:b1:b3:ef:a1:1a:96:b2:63: f2:b4:a7:c0:f2:e6:87:97:3c:32:b2:ac:3e:c4:fa:52:14:72: a7:06:70:a2:ed:0c:e9:33:d8:1f:79:ca:a2:79:89:f5:cf:cb: eb:2f:2a:ad:bb:2d:7a:94:8d:7e:d0:b1:3c:82:17:2a:9c:dd: 14:99:fb:d8:c9:7e:f1:3d:f7:b8:16:b1:dc:4d:54:04:d6:a4: a8:59:fb:c6:1f:e0:56:e5:de:eb:31:04:9e:1b:64:d3:99:34: fd:f3:ee:73:e5:2c:6b:16:43:3f:a5:0a:00:a6:83:f7:52:bd: d9:44:89:c3:62:5e:7a:02:9f:94:5c:a6:fb:e5:a9:e9:12:4f: da:c4:2d:26:21:2b:cf:1f:4f:96:6d:e8:31:c7:42:1f:68:86: 5f:1d:2d:5d:9e:d1:e6:64:15:e2:9c:24:0b:16:f1:66:09:ff: 97:98:3b:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuqAodXhwxMIv5TZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmNzIwNTMtNmU4OS00ZThiLThhMDQtMDIxNTBmZjdj MDEwMB4XDTI1MTAyNzIwMDAwOVoXDTI1MTAyOTIwMDAwMFowLzEtMCsGA1UEAxMk ZGM5MDdkMjMtOGMxMi00NDRjLWE3YmItZWFmYWNiMjNkNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9aPs4haksp4e2WXb5XwRZ7z6TeS3dCvQsAx jxjm2c1UxXjLFu+7nryP5RSiiSo955V0qO/FEcYwZaXz9eyL2wrv6TvMGfDv+g4H yVWCivupVZjNGauajBBxueKCW25mSGwnU8LX7e5yun7xwGAkBwCHRJLOTS7OC4/w pGm1KwSPZHLPb1WMZSby9CBTc47NhHLf+dQaD1+LGGyZCPukrlP4vNsZPi0MtPxT nZmqzyK1cJV/8z2UQT9vY/aDXnog2vN4JBE1RJO6SRmNvKkTsdzdxhsvVADMf7XZ FGN3WLJo+6gH0DDT3fLJd5HhDSqey9QSX5hXVtQ6LqBWwMXPcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM99uzM+grPUnFb3OVzgUTaIMHiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3 MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZmN2MwMTAvMmJmNzIwNTMtNmU4OS00 ZThiLThhMDQtMDIxNTBmZjdjMDEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJmNzIwNTMtNmU4OS00ZThiLThh MDQtMDIxNTBmZjdjMDEwLzJiZjcyMDUzLTZlODktNGU4Yi04YTA0LTAyMTUwZmY3 YzAxMC5jcmwwHwYDVR0jBBgwFoAUxf4s5TdGT5CrmFfPeM8WzIuAz/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1 MGZmN2MwMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO3IKsCk9n0EaMr22zVvTk 6lbPDRyNYOY4i3nSon8Ba+2H+42qA36gvkZToEP96Jqzl/52ofdoWqFG8bIoHcQl wEbeMYpOMqck5IYlDwJObIORsbPvoRqWsmPytKfA8uaHlzwysqw+xPpSFHKnBnCi 7QzpM9gfecqieYn1z8vrLyqtuy16lI1+0LE8ghcqnN0UmfvYyX7xPfe4FrHcTVQE 1qSoWfvGH+BW5d7rMQSeG2TTmTT98+5z5SxrFkM/pQoApoP3Ur3ZRInDYl56Ap+U XKb75anpEk/axC0mISvPH0+Wbegxx0IfaIZfHS1dntHmZBXinCQLFvFmCf+XmDtY -----END CERTIFICATE-----Generated at Tue Oct 28 03:10:15 2025 by rpki-client