$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: iGwqZSkEeZgCryJdWjBPNmmIshIDOfGLE+xXqJ94AW0= Subject key identifier: 8D:C2:48:30:CD:CC:FE:B4:D2:DD:A2:3F:95:88:C8:7A:94:77:27:FE Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F4328584B961E66EED5C47A077D14E0D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5C9E Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: mDag+CmdxoGSmwRGMEuBxzv0GdVaQ6hqgWrbOBivawM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:66:ee:d5:c4:7a:07:7d:14:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=ce2a69a2-d1a4-4d97-ab99-285e244da174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:ce:fe:1b:99:bd:97:b1:9e:be:75:23:33: 68:5f:96:10:80:9d:c2:53:ec:eb:77:9a:2f:b6:ff: 81:5c:35:db:f6:71:a6:df:47:7b:a1:ce:eb:a2:e6: 16:d7:d1:93:4f:1d:f8:eb:7f:0c:92:8e:49:74:14: 3f:c0:d3:37:82:c1:75:f7:65:72:b1:a2:07:f6:b8: e4:85:fb:cb:0a:9e:91:b6:1c:2b:ca:f5:e0:44:d5: 7d:41:25:4f:b5:72:ec:8d:30:15:68:c5:83:02:05: 27:43:f9:d7:a9:9f:2c:3f:69:27:60:f6:9f:b5:9a: 01:0d:00:29:5e:b7:13:cc:cb:87:cb:02:73:57:35: f5:df:b3:f3:b6:7f:ff:94:f0:32:e7:85:aa:94:a6: 00:f4:e7:8a:4e:df:9e:e3:74:cd:5f:b2:d6:63:79: 36:6f:30:74:9e:83:6a:37:05:37:6e:40:4c:07:ac: 7d:d4:8f:56:10:30:a4:36:38:47:c6:44:89:4f:1e: 36:8f:e5:54:48:99:96:43:9a:91:98:26:0e:1f:32: 75:b9:4a:c7:e4:5f:b4:fc:72:2c:50:57:52:76:85: ff:8b:69:51:41:92:ae:5b:93:10:7b:c0:c6:75:3b: 68:71:4f:ec:3d:75:1e:0e:37:a6:92:a5:00:23:12: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C2:48:30:CD:CC:FE:B4:D2:DD:A2:3F:95:88:C8:7A:94:77:27:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:35:eb:54:e6:9e:6d:32:83:28:08:69:cb:c1:4e:e9:60:15: 36:bd:40:08:fa:41:27:f0:b1:17:64:05:80:ae:5d:a1:35:90: 7b:36:71:f3:2d:2c:9e:fd:20:24:16:70:66:cc:34:89:1d:65: ab:55:87:ee:1a:57:ef:ac:84:6d:75:26:f8:d3:cc:04:6d:19: 59:6e:94:78:62:88:b5:8e:01:e6:a4:ef:d1:62:84:12:ab:7f: 22:2c:93:5d:88:fa:b4:92:7b:e7:52:f4:e3:d4:70:47:26:99: d5:ed:59:c1:65:56:8f:b8:aa:df:f5:ed:7a:c2:9d:03:ac:9c: f5:cf:96:dd:65:46:b2:47:67:82:d3:34:48:ea:62:9f:03:71: 7b:3a:3f:7e:f8:ab:3c:66:6c:e9:0b:1a:0a:51:15:fe:20:1a: 36:5a:05:5a:d2:14:b0:2d:4c:a6:09:c1:d4:1c:e2:db:a8:c1: 9c:08:dd:74:53:8c:77:a7:15:6d:8a:26:f9:8f:8a:ad:7e:de: 08:9d:40:b7:77:e9:1d:cb:cf:cd:90:0f:e4:78:8d:fa:aa:3b: d3:77:52:e2:29:ef:54:ad:14:28:b2:99:af:e6:c4:88:78:12: 19:d2:3d:7f:1c:7d:27:49:47:1b:53:f1:d0:5d:58:01:70:29: 4a:a0:ad:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmbu1cR6B30U4NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk Y2UyYTY5YTItZDFhNC00ZDk3LWFiOTktMjg1ZTI0NGRhMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnPO/huZvZexnr51IzNoX5YQgJ3CU+zrd5ov tv+BXDXb9nGm30d7oc7rouYW19GTTx34638Mko5JdBQ/wNM3gsF192VysaIH9rjk hfvLCp6RthwryvXgRNV9QSVPtXLsjTAVaMWDAgUnQ/nXqZ8sP2knYPaftZoBDQAp XrcTzMuHywJzVzX137Pztn//lPAy54WqlKYA9OeKTt+e43TNX7LWY3k2bzB0noNq NwU3bkBMB6x91I9WEDCkNjhHxkSJTx42j+VUSJmWQ5qRmCYOHzJ1uUrH5F+0/HIs UFdSdoX/i2lRQZKuW5MQe8DGdTtocU/sPXUeDjemkqUAIxKrCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI3CSDDNzP600t2iP5WIyHqUdyf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbNetU5p5tMoMoCGnLwU7p YBU2vUAI+kEn8LEXZAWArl2hNZB7NnHzLSye/SAkFnBmzDSJHWWrVYfuGlfvrIRt dSb408wEbRlZbpR4Yoi1jgHmpO/RYoQSq38iLJNdiPq0knvnUvTj1HBHJpnV7VnB ZVaPuKrf9e16wp0DrJz1z5bdZUayR2eC0zRI6mKfA3F7Oj9++Ks8ZmzpCxoKURX+ IBo2WgVa0hSwLUymCcHUHOLbqMGcCN10U4x3pxVtiib5j4qtft4InUC3d+kdy8/N kA/keI36qjvTd1LiKe9UrRQospmv5sSIeBIZ0j1/HH0nSUcbU/HQXVgBcClKoK1D -----END CERTIFICATE-----Generated at Mon Oct 20 23:07:55 2025 by rpki-client