$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft File: cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft (raw, json) Hash identifier: XIczp8964E0AEpPPVOLGRVXbR1CF/zyWEQvdoPzKEbw= Subject key identifier: 6F:59:4E:A0:07:25:B0:E2:D4:17:BA:41:11:4C:FC:5A:D1:AB:1F:D7 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584BC09383B0652966A37C8D1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft Manifest number: 010D0C9F4328584073A82A28F077B993AC8B96BD Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (hash: uNCV0wH27wZt45uXvmNoAXuCaik5FcYpUg79KzndQgg=) 2: cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl (hash: 0P1ZZxzxAJi/rAtvZyDooVhmeZVS0hPqP4LX/iFCEbw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:83:b0:65:29:66:a3:7c:8d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=4bb9975e-4e0b-4d74-b7d3-478826f04988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:b1:3b:af:53:57:24:d2:8a:c0:67:92:6a: 74:1b:48:b5:2d:50:d6:25:ae:a8:c7:c3:2e:db:87: b2:ea:0f:41:fa:f7:37:71:4c:06:34:17:64:83:17: a1:82:87:99:e8:58:27:93:03:88:5f:11:ff:94:b1: 88:9e:24:52:f2:7f:6f:d0:54:91:3e:11:9b:3c:2a: 98:5b:ba:b0:99:7f:bd:0e:f1:a2:6c:1f:65:9c:17: 5d:6d:03:21:d4:c9:a8:00:d0:41:cc:f3:31:d1:4a: 6d:04:66:8c:e0:19:b4:b5:5a:91:5b:57:e0:ae:96: 8c:65:07:7c:2e:db:b0:f2:95:ff:b9:6c:d2:76:84: 56:f0:ea:be:94:2c:39:a0:5a:06:3d:c4:0f:ae:d0: 52:b9:b4:f1:8d:e4:ca:62:02:e8:99:db:2b:8f:d0: b7:40:3d:9d:04:c8:9a:21:ea:99:34:f2:b9:71:3b: 5e:62:84:a3:6e:15:a9:7a:a2:3e:1e:c8:50:b3:75: 70:66:5e:14:e1:65:3f:c9:04:c0:3b:e6:b2:9f:47: bc:33:c9:0a:8e:a6:94:c5:c9:c4:eb:20:e0:39:9a: 5a:8d:53:fc:a7:d2:9e:bc:77:03:4f:b2:9a:c2:03: c2:49:ea:a6:1b:2e:dc:4b:9a:8e:35:5c:f2:6d:30: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:4E:A0:07:25:B0:E2:D4:17:BA:41:11:4C:FC:5A:D1:AB:1F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f8:74:9e:21:78:91:8c:eb:39:e6:32:2f:4b:67:db:86:88: 7a:6e:8f:41:55:48:87:2a:1e:38:92:ed:7c:bc:ac:95:40:6a: a1:b5:9c:f6:00:d1:28:6d:6b:64:58:14:ee:94:96:a5:91:7a: c9:72:47:e2:ba:21:11:67:e6:7d:67:e0:49:71:34:58:11:4b: e1:2a:fd:01:f0:4a:22:9b:84:cb:c2:b8:41:80:6c:fd:21:4a: f3:2e:cf:19:c5:63:84:4e:4d:dd:c3:0e:f4:50:15:cc:e7:d2: da:09:49:83:c0:53:a7:74:b2:03:78:35:73:be:f9:a1:9d:ff: 1c:d8:af:0a:98:ba:2f:d9:12:cc:1c:75:4d:ff:9a:83:61:bd: 05:f3:ee:30:7e:31:4f:ea:ea:38:0a:f2:b6:d9:ff:af:24:14: c8:c3:a6:ac:1e:82:bf:e3:4e:70:02:3f:a5:e1:9c:3e:a3:f9: f0:f4:e7:ec:4e:c6:d5:2b:4d:db:ca:e9:61:9c:cc:1c:67:68: 96:59:bd:2e:b6:5e:7c:da:98:37:8d:d9:6b:67:73:c8:5a:48: 5a:bf:27:38:ef:c8:23:6c:97:4e:b8:1c:e8:db:ab:de:8f:0a: f7:04:40:ca:80:dd:d5:32:11:cf:08:b5:db:11:e6:5c:55:db: 73:69:00:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4OwZSlmo3yNEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk NGJiOTk3NWUtNGUwYi00ZDc0LWI3ZDMtNDc4ODI2ZjA0OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK2xO69TVyTSisBnkmp0G0i1LVDWJa6ox8Mu 24ey6g9B+vc3cUwGNBdkgxehgoeZ6FgnkwOIXxH/lLGIniRS8n9v0FSRPhGbPCqY W7qwmX+9DvGibB9lnBddbQMh1MmoANBBzPMx0UptBGaM4Bm0tVqRW1fgrpaMZQd8 Ltuw8pX/uWzSdoRW8Oq+lCw5oFoGPcQPrtBSubTxjeTKYgLomdsrj9C3QD2dBMia IeqZNPK5cTteYoSjbhWpeqI+HshQs3VwZl4U4WU/yQTAO+ayn0e8M8kKjqaUxcnE 6yDgOZpajVP8p9KevHcDT7KawgPCSeqmGy7cS5qONVzybTB5bwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG9ZTqAHJbDi1Be6QRFM/FrRqx/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvY2Y1YjllZjYtM2I3Yy00 ODVlLTk4MDQtZTNhZDY1YzU0ZjY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAA+HSeIXiRjOs55jIvS2fb hoh6bo9BVUiHKh44ku18vKyVQGqhtZz2ANEobWtkWBTulJalkXrJckfiuiERZ+Z9 Z+BJcTRYEUvhKv0B8Eoim4TLwrhBgGz9IUrzLs8ZxWOETk3dww70UBXM59LaCUmD wFOndLIDeDVzvvmhnf8c2K8KmLov2RLMHHVN/5qDYb0F8+4wfjFP6uo4CvK22f+v JBTIw6asHoK/405wAj+l4Zw+o/nw9OfsTsbVK03byulhnMwcZ2iWWb0utl582pg3 jdlrZ3PIWkhavyc478gjbJdOuBzo26vejwr3BEDKgN3VMhHPCLXbEeZcVdtzaQDs -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:43 2025 by rpki-client