$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft File: 2d00478e-6a9e-4570-970a-f0a5baefc323.mft (raw, json) Hash identifier: 70ykFEzTfd5JvJfdg8z4kZa7qaRywKe9LiKy17UagOY= Subject key identifier: 66:77:AC:91:50:43:77:12:E0:C8:BB:24:C8:C7:DB:44:C0:F4:68:C0 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584B963C2AD7F2BF4AD25B702540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft Manifest number: 010D0C9F4328584073A81EB2087DF5616A46D42E Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 2d00478e-6a9e-4570-970a-f0a5baefc323.crl (hash: BIKM1H62jfFZLWe6l+3xTRQmy5B8IdRp0hlFnIKbmCY=) 2: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (hash: 7+ONbCoJqmGUSQ6G0xvaZKufEnVXb115NVvU42aL11Q=) 3: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (hash: A2DT2dDOzTN3Z6KNQx+q8kKOnzzqUcGXbkRZAax9UgY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2a:d7:f2:bf:4a:d2:5b:70:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=2a70c2ea-9f30-469c-8c38-2ed3d6b9c291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:4d:3a:80:e8:50:f5:0e:ff:3b:2a:30:28: a6:fd:5c:45:a0:50:7c:4d:7b:c8:0d:47:cb:b3:85: bf:31:1d:d9:e8:06:75:db:e6:be:ae:32:4f:83:7b: 51:5d:01:b1:4a:75:ce:4f:49:b9:ba:6a:8b:a0:18: 95:d4:f7:7a:1d:8c:69:c8:8b:8b:3f:ba:5a:13:b4: fb:3b:de:3a:eb:3d:e2:70:c4:d9:73:65:01:9b:21: e3:2f:3f:cf:c8:0e:35:67:7c:8c:63:5e:0a:4c:1c: 23:e5:7e:fe:5d:ec:58:c6:0c:db:dd:a5:d1:de:20: 98:cd:92:6a:f1:d5:a0:7a:0a:14:f7:7a:f4:21:81: c6:d6:05:fb:ed:67:bd:bc:0b:70:0b:3a:a7:ce:ef: ec:8e:55:b7:94:35:f8:ca:91:69:f6:64:2b:ed:6d: 92:f5:29:ab:7c:e4:cc:b6:dc:0f:45:39:74:d6:9e: f1:21:54:2d:3b:88:16:03:30:74:9c:17:be:f3:c3: f9:88:f5:6a:4c:e5:fb:9e:8f:c3:d3:97:6f:e4:b0: be:a8:a1:02:65:2b:ce:f6:d3:69:7d:10:f9:7c:c2: 04:2d:9b:78:5f:8b:0f:78:49:0e:2a:ce:b2:c6:dd: d4:ea:8d:44:05:3a:9c:39:9f:a2:fc:7f:be:b9:56: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:77:AC:91:50:43:77:12:E0:C8:BB:24:C8:C7:DB:44:C0:F4:68:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ea:c0:61:43:cc:6b:b0:7c:4e:4c:37:36:80:95:fe:7f:47: e4:83:56:47:1f:96:20:ce:a2:25:08:86:98:a4:fe:ad:46:04: 18:6f:f7:c1:ab:4e:6b:de:cc:37:d1:f5:97:52:51:3d:ae:ee: 16:fd:51:c2:e1:f3:e0:72:82:de:26:41:3f:0f:69:da:1a:e7: a5:0b:17:01:1f:6b:5f:0f:6d:8e:5e:47:67:80:1b:09:66:12: aa:0d:93:5a:99:ef:98:cd:0b:8e:a5:c2:7a:58:eb:51:fe:41: e1:10:6c:8e:33:c4:3a:fa:49:99:da:c0:b7:69:66:7d:6a:5d: 05:92:7a:5e:05:90:bf:34:32:da:d8:a0:07:83:2a:76:45:ea: 03:2a:42:67:77:fc:dd:6d:0d:92:cd:0a:67:6e:59:ed:06:d5: a4:08:54:12:2e:2c:51:5e:8b:43:dc:0d:20:22:41:1f:da:41: 88:d8:65:68:57:98:f4:4d:f4:89:8f:9a:94:c3:2e:32:35:bf: 4f:82:c1:ed:6e:68:a8:14:3f:6b:0a:7a:8f:8e:51:9b:97:17: de:7d:74:d4:1a:be:b9:72:a8:88:dd:d8:ce:65:c2:82:d6:39: 27:79:f5:f8:a1:59:63:ed:69:c7:ce:9f:49:13:b6:80:38:8f: 90:d7:f3:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCrX8r9K0ltwJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk MmE3MGMyZWEtOWYzMC00NjljLThjMzgtMmVkM2Q2YjljMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueBNOoDoUPUO/zsqMCim/VxFoFB8TXvIDUfL s4W/MR3Z6AZ12+a+rjJPg3tRXQGxSnXOT0m5umqLoBiV1Pd6HYxpyIuLP7paE7T7 O9466z3icMTZc2UBmyHjLz/PyA41Z3yMY14KTBwj5X7+XexYxgzb3aXR3iCYzZJq 8dWgegoU93r0IYHG1gX77We9vAtwCzqnzu/sjlW3lDX4ypFp9mQr7W2S9SmrfOTM ttwPRTl01p7xIVQtO4gWAzB0nBe+88P5iPVqTOX7no/D05dv5LC+qKECZSvO9tNp fRD5fMIELZt4X4sPeEkOKs6yxt3U6o1EBTqcOZ+i/H++uVYgfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGZ3rJFQQ3cS4Mi7JMjH20TA9GjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvMmQwMDQ3OGUtNmE5ZS00 NTcwLTk3MGEtZjBhNWJhZWZjMzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg6sBhQ8xrsHxOTDc2gJX+ f0fkg1ZHH5YgzqIlCIaYpP6tRgQYb/fBq05r3sw30fWXUlE9ru4W/VHC4fPgcoLe JkE/D2naGuelCxcBH2tfD22OXkdngBsJZhKqDZName+YzQuOpcJ6WOtR/kHhEGyO M8Q6+kmZ2sC3aWZ9al0FknpeBZC/NDLa2KAHgyp2ReoDKkJnd/zdbQ2SzQpnblnt BtWkCFQSLixRXotD3A0gIkEf2kGI2GVoV5j0TfSJj5qUwy4yNb9PgsHtbmioFD9r CnqPjlGblxfefXTUGr65cqiI3djOZcKC1jknefX4oVlj7WnHzp9JE7aAOI+Q1/PM -----END CERTIFICATE-----Generated at Tue Oct 21 15:23:57 2025 by rpki-client