$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: hBXm1ZpAeWcrcHdubpgQkEsUErvjMqV1U+PfVtRUsDc= Subject key identifier: 0D:F5:11:72:D6:E0:7F:0D:FD:00:0F:04:6F:4F:5F:90:54:1D:3F:95 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584B94F491913AFF3D206A353A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060649 Signing time: Mon 20 Oct 2025 07:00:03 +0000 Manifest this update: Mon 20 Oct 2025 07:00:03 +0000 Manifest next update: Wed 22 Oct 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: YQfCXg0jxaX5zIoqs6nNObwfNrwhiPlWDmw1xrNrUIE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: pQAC1XDNlH/uSQSWGikdgnd3jITikmQosD3rqoKTIeg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:f4:91:91:3a:ff:3d:20:6a:35:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Oct 20 07:00:03 2025 GMT Not After : Oct 22 07:00:00 2025 GMT Subject: CN=f91c2fa1-b02d-4a6c-a719-34f5d9feb477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:96:02:17:57:2f:c8:93:ae:98:f6:ba:78: 08:78:43:b9:18:b1:75:7a:5a:d3:1b:2b:97:dc:f4: dd:d4:05:8e:bb:29:f6:57:59:3a:24:c6:d6:12:17: bb:aa:20:b8:f1:92:1d:0b:7f:d9:32:f5:5c:02:bd: ef:99:ca:bb:90:13:26:db:37:8e:a3:97:22:2c:ff: 59:c6:b3:ee:7a:d2:d6:1c:12:10:00:1c:f4:14:d4: d9:6c:99:b2:66:49:7b:26:a9:b0:5c:00:aa:49:05: 53:2b:3f:21:86:f3:8f:11:2a:04:74:33:4b:ea:30: 13:55:c6:1a:d8:e4:7c:17:73:1a:15:dc:d6:f6:62: 8b:fe:37:6c:03:d3:ea:8c:0b:e0:eb:83:3d:2a:f1: 81:d5:92:51:e0:0a:2f:26:01:b9:8b:e0:5a:d8:a9: eb:98:aa:a4:7d:1b:07:3d:ca:a9:ad:11:ad:58:3f: b6:6c:73:6f:44:00:3a:2f:d9:f5:02:5c:1a:a9:4a: ce:c1:3e:0f:4f:e5:0e:9b:d9:6e:22:03:26:0d:f7: 8d:47:72:75:e6:c8:c3:d1:6a:87:5e:38:b0:4a:65: 5b:c9:c8:c1:5c:69:ba:95:cb:c2:5e:5c:69:6a:4f: 69:9e:24:30:85:09:19:69:35:d2:cb:97:26:66:39: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:11:72:D6:E0:7F:0D:FD:00:0F:04:6F:4F:5F:90:54:1D:3F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:13:4d:77:f9:76:cf:75:04:6d:07:47:80:a4:72:a9:01:90: 08:33:ac:7c:45:e9:7e:4b:50:5d:a4:9e:12:32:c4:b2:8f:69: ea:e6:cc:94:aa:75:c5:37:80:f9:cd:1c:2f:14:3e:03:81:5c: 8b:ba:23:56:e3:50:7d:28:e4:8b:77:d9:91:81:9c:57:34:6f: ea:5c:0c:08:fa:fe:cb:9f:cb:9d:f1:61:9c:d4:a0:da:34:21: bc:f9:6f:06:31:47:06:44:37:ed:b1:71:c5:f8:0c:10:9d:a9: 94:5c:4c:28:d7:36:17:39:f5:3c:54:20:51:a1:a1:01:36:26: 00:5c:38:fd:a5:04:ed:94:97:1d:52:79:15:dd:d5:ee:21:96: 9f:b0:5b:25:ad:dd:ca:87:a5:18:cd:1e:5a:18:16:2d:14:50: 2e:0d:6e:66:c3:2c:41:a1:59:75:d1:ea:92:fa:a6:29:df:58: a0:3f:76:ef:9f:a0:fa:fe:9b:d0:f5:6b:b6:4d:3f:ad:06:44: da:4d:4c:40:ff:ff:de:d0:0c:10:60:7f:a2:ce:69:22:90:f5: b2:36:bb:52:28:18:64:fe:9b:53:a4:79:90:b7:26:5d:62:e5: 26:08:28:5e:f9:d7:32:34:db:85:00:5a:64:5c:d3:bc:32:f3: f4:46:4e:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU9JGROv89IGo1OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MTAyMDA3MDAwM1oXDTI1MTAyMjA3MDAwMFowLzEtMCsGA1UEAxMk ZjkxYzJmYTEtYjAyZC00YTZjLWE3MTktMzRmNWQ5ZmViNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAiWAhdXL8iTrpj2ungIeEO5GLF1elrTGyuX 3PTd1AWOuyn2V1k6JMbWEhe7qiC48ZIdC3/ZMvVcAr3vmcq7kBMm2zeOo5ciLP9Z xrPuetLWHBIQABz0FNTZbJmyZkl7JqmwXACqSQVTKz8hhvOPESoEdDNL6jATVcYa 2OR8F3MaFdzW9mKL/jdsA9PqjAvg64M9KvGB1ZJR4AovJgG5i+Ba2KnrmKqkfRsH PcqprRGtWD+2bHNvRAA6L9n1AlwaqUrOwT4PT+UOm9luIgMmDfeNR3J15sjD0WqH XjiwSmVbycjBXGm6lcvCXlxpak9pniQwhQkZaTXSy5cmZjk6RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA31EXLW4H8N/QAPBG9PX5BUHT+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlE013+XbPdQRtB0eApHKp AZAIM6x8Rel+S1BdpJ4SMsSyj2nq5syUqnXFN4D5zRwvFD4DgVyLuiNW41B9KOSL d9mRgZxXNG/qXAwI+v7Ln8ud8WGc1KDaNCG8+W8GMUcGRDftsXHF+AwQnamUXEwo 1zYXOfU8VCBRoaEBNiYAXDj9pQTtlJcdUnkV3dXuIZafsFslrd3Kh6UYzR5aGBYt FFAuDW5mwyxBoVl10eqS+qYp31igP3bvn6D6/pvQ9Wu2TT+tBkTaTUxA///e0AwQ YH+izmkikPWyNrtSKBhk/ptTpHmQtyZdYuUmCChe+dcyNNuFAFpkXNO8MvP0Rk6u -----END CERTIFICATE-----Generated at Mon Oct 20 19:43:35 2025 by rpki-client