$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: 3JjTkih8TcYtfem3wH+Aore5wlttDBLLFRT8pN54QVg= Subject key identifier: 2B:79:35:E1:A5:39:5A:63:A7:3E:51:6A:18:FC:BD:F0:07:B4:DD:C0 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584B95C5059C5282907D2D8BB3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDDEA Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: FNuJ45xQYce/cxcpwmiaiA1zWNqCjSD+5QRlc4lZcDk=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: cMvHYjAOSx3lo/HH///HlQ5lbiDUSklR+PBu4L1sHHM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:05:9c:52:82:90:7d:2d:8b:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=856d7566-771c-4a33-ac1c-287af3b8cd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:4a:29:d0:5d:3f:45:28:77:28:ed:c1:24: ae:8b:5c:ab:1e:d9:53:06:8e:08:d1:e1:55:91:8e: c5:5b:ed:91:68:a7:6f:10:5e:19:f8:73:49:4c:5f: 5c:81:36:6f:58:13:48:68:4c:3f:70:31:e5:eb:01: 50:e4:29:83:5b:3a:35:39:74:63:f4:4a:b2:28:8e: d7:87:0f:84:3f:29:25:8e:8b:b3:78:5e:02:37:09: 94:23:54:21:24:f5:68:17:f2:f6:35:97:cf:46:da: 40:dc:22:99:67:96:06:e4:98:fe:94:75:39:a8:a4: 0e:74:12:74:de:95:f8:ab:08:a3:58:45:68:b9:62: 88:bd:a9:a8:67:02:4d:36:ca:0b:21:bd:d4:66:9e: 06:40:67:41:14:52:f8:48:c2:ce:72:a5:dd:e1:7e: 8c:99:6b:3e:ea:a9:9b:b4:c6:bb:85:64:25:04:c8: 61:88:98:3f:f8:3d:03:e1:cc:f9:38:da:fc:9c:2d: a3:ac:22:b9:32:32:42:c3:bb:98:4f:4f:65:cb:be: 4a:86:d3:44:e0:33:48:b9:14:ef:e8:2f:51:67:ae: ee:ac:9d:fe:a3:a2:09:e3:7d:07:c7:5a:c0:e1:a0: 8f:93:bd:0a:0c:fd:ac:87:c2:4a:8d:f0:cf:1c:1b: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:35:E1:A5:39:5A:63:A7:3E:51:6A:18:FC:BD:F0:07:B4:DD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bc:4a:2f:19:bc:33:0f:9e:47:0c:0e:d5:0b:82:49:ce:d6: 57:b7:14:f4:92:62:ef:34:79:8b:50:c0:00:e0:1d:34:b0:f6: 5e:df:84:c4:96:1f:60:c6:5c:e8:94:a6:1a:12:a6:54:8e:de: 95:b7:fc:e8:08:1f:07:fd:8b:3d:11:a6:90:49:92:68:ab:79: 55:7b:02:76:8f:1b:34:bc:4a:ef:51:8e:4c:c0:29:d9:3d:91: 0e:62:d0:24:a5:c0:47:1f:59:d7:fe:71:aa:15:10:c6:57:85: b5:56:bf:05:84:aa:c9:c8:52:8a:69:75:83:a6:fa:cd:ad:25: 5b:d4:fc:d7:38:f7:c6:e5:af:c7:c5:a4:47:df:b6:f2:18:b9: 67:57:9f:12:44:dc:30:bd:2b:2e:fc:4b:09:f2:63:53:ea:e6: 34:34:1f:ac:4d:91:09:a8:11:1f:ff:47:c5:6e:8f:c5:be:87: 10:b3:07:bc:c0:df:0d:0e:43:14:06:33:01:98:0e:c1:4f:cc: 43:55:b5:4f:1f:bc:27:5a:ba:a0:52:f6:de:23:06:31:05:7b: 52:08:fc:46:1a:e6:6f:ed:69:97:b4:0d:71:0a:44:7a:68:ea: 64:75:a7:c4:f4:10:ff:12:c0:4f:bb:02:69:94:57:0c:d3:7f: 81:39:3e:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQWcUoKQfS2Ls8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ODU2ZDc1NjYtNzcxYy00YTMzLWFjMWMtMjg3YWYzYjhjZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmNKKdBdP0UodyjtwSSui1yrHtlTBo4I0eFV kY7FW+2RaKdvEF4Z+HNJTF9cgTZvWBNIaEw/cDHl6wFQ5CmDWzo1OXRj9EqyKI7X hw+EPykljouzeF4CNwmUI1QhJPVoF/L2NZfPRtpA3CKZZ5YG5Jj+lHU5qKQOdBJ0 3pX4qwijWEVouWKIvamoZwJNNsoLIb3UZp4GQGdBFFL4SMLOcqXd4X6MmWs+6qmb tMa7hWQlBMhhiJg/+D0D4cz5ONr8nC2jrCK5MjJCw7uYT09ly75KhtNE4DNIuRTv 6C9RZ67urJ3+o6IJ430Hx1rA4aCPk70KDP2sh8JKjfDPHBt0YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCt5NeGlOVpjpz5Rahj8vfAHtN3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlvEovGbwzD55HDA7VC4JJ ztZXtxT0kmLvNHmLUMAA4B00sPZe34TElh9gxlzolKYaEqZUjt6Vt/zoCB8H/Ys9 EaaQSZJoq3lVewJ2jxs0vErvUY5MwCnZPZEOYtAkpcBHH1nX/nGqFRDGV4W1Vr8F hKrJyFKKaXWDpvrNrSVb1PzXOPfG5a/HxaRH37byGLlnV58SRNwwvSsu/EsJ8mNT 6uY0NB+sTZEJqBEf/0fFbo/FvocQswe8wN8NDkMUBjMBmA7BT8xDVbVPH7wnWrqg UvbeIwYxBXtSCPxGGuZv7WmXtA1xCkR6aOpkdafE9BD/EsBPuwJplFcM03+BOT4H -----END CERTIFICATE-----Generated at Mon Oct 20 19:42:19 2025 by rpki-client