$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft File: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft (raw, json) Hash identifier: 2WD1CU3WISIvYaaTN5aLBPLbZbJSGgEPv41tshAUunM= Subject key identifier: 37:43:31:9A:A1:5C:18:7C:2B:5D:1D:06:6C:D0:D7:4C:58:F8:DC:1E Authority key identifier: 10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 Certificate issuer: /CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Certificate serial: 010D0C9F4328584B97BF4A01680B0AA0FABEF100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft Manifest number: 010D0C9F4328584073A8466E0185068C437FF03D Signing time: Tue 21 Oct 2025 07:00:09 +0000 Manifest this update: Tue 21 Oct 2025 07:00:09 +0000 Manifest next update: Thu 23 Oct 2025 07:00:00 +0000 Files and hashes: 1: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl (hash: AVdY8yAgnZr5aFPlXLCYdSZES8Jjvt9RA0GX7JSGA1s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:bf:4a:01:68:0b:0a:a0:fa:be:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Validity Not Before: Oct 21 07:00:09 2025 GMT Not After : Oct 23 07:00:00 2025 GMT Subject: CN=633d7009-bc9f-4790-abc5-c7a82b5b1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:4e:af:79:93:1c:a5:c3:5e:5f:83:f2:c9: 5d:b5:57:97:ee:19:56:de:98:40:38:76:69:5f:10: ab:d9:23:3b:8c:9e:d0:ee:07:21:f0:f5:9d:29:3e: 61:af:28:98:7b:18:76:31:12:6d:29:48:a0:02:d8: e3:45:e7:62:54:8b:73:40:f4:47:69:d8:7e:fa:1d: ca:34:71:c4:6b:b6:cc:76:65:8a:05:bb:06:40:50: 1c:d0:79:82:33:fd:6e:25:dc:eb:67:45:77:b8:b2: 6b:ed:f9:86:4d:d2:5f:c0:49:c5:6a:e7:fb:8a:8b: dd:4d:4f:4d:02:6d:90:1d:f3:02:b9:4d:a4:c9:81: c9:52:1b:15:49:a3:4f:da:af:0a:4a:bb:d4:25:f7: ae:40:64:e9:85:de:f0:04:c5:33:89:46:98:6d:e9: bd:80:38:f1:51:e8:0e:27:3a:07:59:48:00:f6:0d: 9b:5d:14:8d:0c:5f:b5:0c:85:64:fd:48:32:cf:ae: 86:c7:45:0d:2f:69:ad:c2:94:e0:6d:2b:db:94:d4: f3:dc:ef:90:59:47:0e:ac:4f:0c:68:b3:c3:28:79: fb:63:ef:5d:8d:75:36:d6:f6:6b:7c:4e:38:53:33: fe:2b:cb:95:e0:b2:26:6f:a7:f0:7a:74:39:6d:28: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:31:9A:A1:5C:18:7C:2B:5D:1D:06:6C:D0:D7:4C:58:F8:DC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl X509v3 Authority Key Identifier: keyid:10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c0:07:9c:eb:4b:03:ac:de:0f:3f:34:d7:4b:2d:54:a7:1c: 62:a7:55:a2:4f:da:96:3f:a6:bd:34:db:fe:96:4b:1f:a6:36: f0:d1:47:a3:64:0a:55:15:eb:9e:91:87:c7:25:b9:92:dc:f2: 62:01:f3:d8:f1:26:8c:92:e7:2b:f7:a6:c4:27:32:46:9d:fe: c9:cc:b9:d9:95:a6:c7:e1:a6:0f:2e:fa:76:95:a0:e8:6b:0a: a2:77:6e:46:ae:07:fd:5c:95:a7:9e:d0:95:56:36:72:da:79: d1:a0:19:00:53:a8:f0:1d:a3:66:3d:47:21:9f:c7:b8:01:29: 9f:41:f3:29:15:17:c7:c8:ad:19:5b:68:2e:45:06:83:0b:33: d7:71:d1:85:17:e4:16:f1:c0:5f:1c:ab:0a:20:10:73:a7:f3: 5e:a4:72:c1:a9:24:3f:be:a0:95:b7:0a:91:77:52:c5:b6:a1: 5c:13:d0:3e:19:0a:38:71:05:26:dc:fb:f7:a1:c0:f5:86:c8: 80:b5:60:e8:7f:f5:42:6b:db:22:e5:b5:b6:80:5e:f9:30:76: 9a:c3:cf:d8:93:00:c6:ec:71:9b:e9:a0:2c:86:45:16:d0:33: b0:d0:4f:42:c0:1e:a3:90:f7:d6:11:fb:d6:a6:5c:f6:99:45: ce:1b:9c:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXv0oBaAsKoPq+8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkMzk3M2QtMGQ0MC00ZmZlLWJhZWQtODFlYTdjN2Vh MGIwMB4XDTI1MTAyMTA3MDAwOVoXDTI1MTAyMzA3MDAwMFowLzEtMCsGA1UEAxMk NjMzZDcwMDktYmM5Zi00NzkwLWFiYzUtYzdhODJiNWIxMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl9Or3mTHKXDXl+D8sldtVeX7hlW3phAOHZp XxCr2SM7jJ7Q7gch8PWdKT5hryiYexh2MRJtKUigAtjjRediVItzQPRHadh++h3K NHHEa7bMdmWKBbsGQFAc0HmCM/1uJdzrZ0V3uLJr7fmGTdJfwEnFauf7iovdTU9N Am2QHfMCuU2kyYHJUhsVSaNP2q8KSrvUJfeuQGTphd7wBMUziUaYbem9gDjxUegO JzoHWUgA9g2bXRSNDF+1DIVk/Ugyz66Gx0UNL2mtwpTgbSvblNTz3O+QWUcOrE8M aLPDKHn7Y+9djXU21vZrfE44UzP+K8uV4LImb6fwenQ5bSgPsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDdDMZqhXBh8K10dBmzQ10xY+NweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Qz OTczZC0wZDQwLTRmZmUtYmFlZC04MWVhN2M3ZWEwYjAvMmNkMzk3M2QtMGQ0MC00 ZmZlLWJhZWQtODFlYTdjN2VhMGIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNkMzk3M2QtMGQ0MC00ZmZlLWJh ZWQtODFlYTdjN2VhMGIwLzJjZDM5NzNkLTBkNDAtNGZmZS1iYWVkLTgxZWE3Yzdl YTBiMC5jcmwwHwYDVR0jBBgwFoAUEMZmJZliYoIzz2VgAFz9kPIAZ6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2QzOTczZC0wZDQwLTRmZmUtYmFlZC04MWVh N2M3ZWEwYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCwAec60sDrN4PPzTXSy1U pxxip1WiT9qWP6a9NNv+lksfpjbw0UejZApVFeuekYfHJbmS3PJiAfPY8SaMkucr 96bEJzJGnf7JzLnZlabH4aYPLvp2laDoawqid25Grgf9XJWnntCVVjZy2nnRoBkA U6jwHaNmPUchn8e4ASmfQfMpFRfHyK0ZW2guRQaDCzPXcdGFF+QW8cBfHKsKIBBz p/NepHLBqSQ/vqCVtwqRd1LFtqFcE9A+GQo4cQUm3Pv3ocD1hsiAtWDof/VCa9si 5bW2gF75MHaaw8/YkwDG7HGb6aAshkUW0DOw0E9CwB6jkPfWEfvWplz2mUXOG5yz -----END CERTIFICATE-----Generated at Tue Oct 21 15:17:48 2025 by rpki-client