$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft File: cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft (raw, json) Hash identifier: TF4iUJikZjeL/AKZiTO2l/Qj861idh+Ziwtc4XIA1gk= Subject key identifier: BB:07:42:4E:4C:E6:6C:D6:67:6A:13:41:E5:D6:AF:F3:D1:7B:41:56 Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Certificate serial: 010D0C9F4328584BBF4BF1590F4F8D7210E54E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft Manifest number: 010D0C9F4328584073A85028723997B010B8C3BF Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (hash: LQeImGRLOIEtuamuEuX7+RFtU0whGfdeXK/kMj6jrCk=) 2: 3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa (hash: oJ+QkL1KunJPyFwr/tFEMtPsu4/jS2nr2dvWjRMu4qs=) 3: 941a96f8-a316-39b6-a890-04ab7a60873f.roa (hash: vmOQTujJmOgip6m/LL/jUSB5qmS9Rt1po5pakYnHbqY=) 4: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (hash: bZOC6M7AXbLAJ3WXygfKCDqOLKeW7HIBtXYWZXYemfs=) 5: cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl (hash: ipai09RMKUGYVzAtFRPhjpofhv0Z+voajQZc4wWRS70=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f1:59:0f:4f:8d:72:10:e5:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=ec77d726-10f5-4bc5-bf6b-6325bead9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:9b:01:4f:1a:58:e8:c2:2f:71:38:12:0d: c6:7e:20:f7:49:87:a0:2f:cf:ef:73:3a:74:ac:15: 31:eb:1b:e1:56:fd:78:ca:1f:b1:72:43:50:e4:5c: 30:35:7c:41:e9:2d:de:e7:4b:ff:23:f1:23:8f:e2: 2c:91:f1:7b:a0:72:8d:a1:27:4b:71:80:4e:ac:60: a3:b1:f0:48:d6:d0:e2:f6:ac:78:d2:c9:a5:6e:17: ef:0c:31:1c:db:50:e4:8f:70:68:cc:ed:28:92:d4: 37:e5:e7:26:3c:00:2f:6e:06:30:42:7e:76:b9:15: a9:d4:93:89:4e:31:28:4f:f4:d2:c5:51:05:8e:5c: c0:d1:d3:ed:e8:00:68:06:03:17:0e:4d:91:7d:44: 4f:9a:e5:de:8a:e9:2f:51:77:20:52:6f:6a:b0:77: 11:6c:21:36:b5:20:8c:53:d4:3d:9b:ba:28:ae:8d: 4d:ea:33:9f:4f:ef:7f:ef:7a:76:93:59:c3:d0:05: d2:52:1a:e2:67:db:fa:e9:bd:8a:b7:63:9b:b8:ed: 36:c1:3d:19:c0:6e:4e:40:1c:80:00:86:cd:fe:3d: 43:83:74:1f:f5:0b:08:a1:11:79:67:06:37:d6:fd: 6a:f7:ee:1a:78:97:da:d6:b3:2f:87:5b:8d:3e:8a: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:42:4E:4C:E6:6C:D6:67:6A:13:41:E5:D6:AF:F3:D1:7B:41:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl X509v3 Authority Key Identifier: keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2c:2d:4c:6f:be:e9:5e:03:73:f2:9b:19:0a:43:39:c2:84: 98:5a:08:3f:ab:52:a7:92:fb:c9:66:36:67:a4:92:01:ac:82: fd:05:a9:7f:08:13:cc:88:53:92:ab:da:39:2e:06:c4:16:34: 61:bb:de:70:dd:34:b9:a8:78:78:4a:60:64:b5:05:84:cd:67: 08:c7:df:d5:28:02:42:46:46:d9:ba:42:d2:cd:27:55:a8:83: 48:4e:ee:fc:3a:e3:17:02:f7:84:59:5e:e3:79:df:24:82:d4: 75:ac:3c:6f:5e:ef:98:a7:09:86:9c:03:0d:d4:07:6c:53:7d: 18:3e:cf:55:f6:74:5a:75:13:91:62:16:cb:5e:df:a2:3b:4c: f5:b7:b0:82:05:99:1c:82:b7:8c:b7:f1:08:c0:d5:07:0a:6c: f4:ce:1d:11:90:ac:0e:65:6c:cb:5f:f7:07:1c:dc:47:62:a1: af:e3:c1:22:92:00:3e:86:85:08:d9:ce:b7:22:c3:82:65:55: b3:55:69:cc:e4:f4:86:23:57:bf:06:33:81:5f:1f:e4:b0:50: 42:09:f8:81:2d:d7:17:97:66:44:c6:77:d5:2e:bc:3c:3b:e8: b7:8b:6d:d1:bf:26:04:d8:0f:77:ea:fd:be:f3:e3:69:55:53: 5b:b0:47:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/FZD0+NchDlToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1 M2JkMB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk ZWM3N2Q3MjYtMTBmNS00YmM1LWJmNmItNjMyNWJlYWQ5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY2bAU8aWOjCL3E4Eg3GfiD3SYegL8/vczp0 rBUx6xvhVv14yh+xckNQ5FwwNXxB6S3e50v/I/Ejj+IskfF7oHKNoSdLcYBOrGCj sfBI1tDi9qx40smlbhfvDDEc21Dkj3BozO0oktQ35ecmPAAvbgYwQn52uRWp1JOJ TjEoT/TSxVEFjlzA0dPt6ABoBgMXDk2RfURPmuXeiukvUXcgUm9qsHcRbCE2tSCM U9Q9m7ooro1N6jOfT+9/73p2k1nD0AXSUhriZ9v66b2Kt2ObuO02wT0ZwG5OQByA AIbN/j1Dg3Qf9QsIoRF5ZwY31v1q9+4aeJfa1rMvh1uNPorrsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLsHQk5M5mzWZ2oTQeXWr/PRe0FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvY2ZjZjE2MDYtYzExYy00 OGU5LWI4ZWUtYzVlN2FiOWU1M2JkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4 ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3 YWI5ZTUzYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPLC1Mb77pXgNz8psZCkM5 woSYWgg/q1KnkvvJZjZnpJIBrIL9Bal/CBPMiFOSq9o5LgbEFjRhu95w3TS5qHh4 SmBktQWEzWcIx9/VKAJCRkbZukLSzSdVqINITu78OuMXAveEWV7jed8kgtR1rDxv Xu+YpwmGnAMN1AdsU30YPs9V9nRadRORYhbLXt+iO0z1t7CCBZkcgreMt/EIwNUH Cmz0zh0RkKwOZWzLX/cHHNxHYqGv48EikgA+hoUI2c63IsOCZVWzVWnM5PSGI1e/ BjOBXx/ksFBCCfiBLdcXl2ZExnfVLrw8O+i3i23RvyYE2A936v2+8+NpVVNbsEf+ -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:56 2025 by rpki-client