$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft File: 2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft (raw, json) Hash identifier: vyegbfDzzXusQL95gFLIdiTS6NxHxrY5vlS5h/HSAR0= Subject key identifier: AC:12:64:8E:29:D0:CB:C2:0C:C1:1C:9A:F2:BC:6A:86:35:C1:35:4F Authority key identifier: 1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC Certificate issuer: /CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Certificate serial: 010D0C9F4328584B949B477B2B4F484E08ACA180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft Manifest number: 010D0C9F432858495B219973CF1EFE1C76C2FA50 Signing time: Mon 20 Oct 2025 04:00:09 +0000 Manifest this update: Mon 20 Oct 2025 04:00:09 +0000 Manifest next update: Thu 23 Oct 2025 04:00:00 +0000 Files and hashes: 1: 15009c05-1bc4-304e-87d5-ab788644da3a.roa (hash: LKK1v1IkPjRmkqC+tRgv1XsiaHMrPYD+CRjjTuNqp8A=) 2: 2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl (hash: 9vHih26IjqlJ1rAY2G9jSmqp/vOcoHxyb4enw3znA50=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:9b:47:7b:2b:4f:48:4e:08:ac:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Validity Not Before: Oct 20 04:00:09 2025 GMT Not After : Oct 23 04:00:00 2025 GMT Subject: CN=bd7311a3-fb4a-4300-976b-cd140ba96c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:56:f0:a7:8b:45:3f:87:8d:2e:5a:a7:51: 04:31:3c:2a:8c:0f:8f:b0:9c:37:22:16:7c:b5:ce: 6e:de:a7:8b:43:85:89:48:d1:dc:f5:3d:d4:c8:3c: f1:e9:5e:03:a0:99:69:b8:dd:9c:66:27:1e:60:03: 69:cc:cd:fb:a9:94:c5:f7:ed:bd:cb:20:39:bd:7e: a8:05:19:c9:6e:56:08:13:30:9e:68:52:56:b4:74: 97:de:4c:aa:d5:3e:00:db:12:e5:5a:ce:b0:c9:8e: 2a:62:4c:72:62:cf:97:2f:98:55:95:35:ee:31:8e: 48:a8:fa:0a:16:2d:22:d6:75:81:90:20:70:52:1c: da:d6:68:cc:25:f0:38:ea:71:3c:31:8d:41:74:df: 75:3c:02:99:36:5b:5c:ec:19:bf:35:5d:e3:c7:2c: 8b:84:ec:67:f8:e0:ca:c8:3b:c1:74:9f:8d:33:3b: 70:56:af:e4:f8:c8:4c:69:f1:f7:70:52:34:38:ad: 7f:65:5e:c2:64:6e:d2:61:50:05:32:b8:18:71:8f: fe:ca:91:a6:e0:de:a1:c0:99:19:6f:e6:89:05:29: 9d:8e:18:7c:90:ce:25:fb:4f:d6:de:d3:ab:04:f4: a1:12:ff:09:a0:5e:9e:d4:6b:66:a9:7c:7d:63:63: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:12:64:8E:29:D0:CB:C2:0C:C1:1C:9A:F2:BC:6A:86:35:C1:35:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl X509v3 Authority Key Identifier: keyid:1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:22:c1:65:60:84:ff:8c:bd:1a:fc:b7:ff:a0:42:fc:0c:51: 71:7f:70:85:73:e0:38:80:d1:12:bc:75:7d:de:68:28:b0:bc: b3:0c:79:08:05:91:e0:a3:a6:df:6d:9b:b3:31:aa:be:14:e3: aa:7f:ef:88:8b:f1:c5:5c:dc:85:5e:d2:70:9a:c9:3f:18:6a: fd:f9:d9:3b:2b:0e:bf:48:83:7e:15:e0:0b:50:c4:34:ae:34: 56:0a:87:48:5c:25:f5:b5:a4:ec:bc:d5:c3:60:61:6f:ae:b0: 81:63:1b:89:6c:03:4b:cb:7f:12:a4:11:b2:00:61:e5:20:ca: 7b:61:e6:36:37:d6:df:51:81:e8:76:f7:a6:b5:64:0a:a4:54: 4b:d8:3a:f7:b8:e7:e8:2f:aa:b0:b2:bd:af:b1:79:6e:23:b1: 5d:9e:07:35:0c:3b:92:97:88:01:3b:81:5c:d0:22:b2:46:2a: 5f:3b:86:01:47:62:07:43:8b:42:30:84:62:63:9e:e9:62:79: 3e:b4:17:82:2b:5b:17:7e:45:08:f2:e0:a5:b2:5b:9f:20:9b: 5c:e2:2f:c0:e4:3f:aa:4c:d4:41:be:3b:68:18:4c:d0:f7:bc: 5e:0e:9f:8f:49:fc:a9:ba:18:a1:db:04:46:aa:4b:98:5e:7c: d9:f0:2f:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUm0d7K09ITgisoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ1MzZkMWYtM2RhYy00YmQ1LWIxYjgtYzhjNmY4YWFk NjQ2MB4XDTI1MTAyMDA0MDAwOVoXDTI1MTAyMzA0MDAwMFowLzEtMCsGA1UEAxMk YmQ3MzExYTMtZmI0YS00MzAwLTk3NmItY2QxNDBiYTk2YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7dW8KeLRT+HjS5ap1EEMTwqjA+PsJw3IhZ8 tc5u3qeLQ4WJSNHc9T3UyDzx6V4DoJlpuN2cZiceYANpzM37qZTF9+29yyA5vX6o BRnJblYIEzCeaFJWtHSX3kyq1T4A2xLlWs6wyY4qYkxyYs+XL5hVlTXuMY5IqPoK Fi0i1nWBkCBwUhza1mjMJfA46nE8MY1BdN91PAKZNltc7Bm/NV3jxyyLhOxn+ODK yDvBdJ+NMztwVq/k+MhMafH3cFI0OK1/ZV7CZG7SYVAFMrgYcY/+ypGm4N6hwJkZ b+aJBSmdjhh8kM4l+0/W3tOrBPShEv8JoF6e1GtmqXx9Y2MQ6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKwSZI4p0MvCDMEcmvK8aoY1wTVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUz NmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2ZjhhYWQ2NDYvMmQ1MzZkMWYtM2RhYy00 YmQ1LWIxYjgtYzhjNmY4YWFkNjQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ1MzZkMWYtM2RhYy00YmQ1LWIx YjgtYzhjNmY4YWFkNjQ2LzJkNTM2ZDFmLTNkYWMtNGJkNS1iMWI4LWM4YzZmOGFh ZDY0Ni5jcmwwHwYDVR0jBBgwFoAUG5qQsrNiN9sQtT2TbtUDWXqdKuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUzNmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2 ZjhhYWQ2NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJIsFlYIT/jL0a/Lf/oEL8 DFFxf3CFc+A4gNESvHV93mgosLyzDHkIBZHgo6bfbZuzMaq+FOOqf++Ii/HFXNyF XtJwmsk/GGr9+dk7Kw6/SIN+FeALUMQ0rjRWCodIXCX1taTsvNXDYGFvrrCBYxuJ bANLy38SpBGyAGHlIMp7YeY2N9bfUYHodvemtWQKpFRL2Dr3uOfoL6qwsr2vsXlu I7Fdngc1DDuSl4gBO4Fc0CKyRipfO4YBR2IHQ4tCMIRiY57pYnk+tBeCK1sXfkUI 8uClslufIJtc4i/A5D+qTNRBvjtoGEzQ97xeDp+PSfypuhih2wRGqkuYXnzZ8C/s -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:10 2025 by rpki-client