$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft File: cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft (raw, json) Hash identifier: QgOn39rq4IWPtJFVrtLcS2A57/IsuMpbcKnQblypQAI= Subject key identifier: 46:9A:7B:7F:90:9A:11:4F:A6:27:18:F6:83:59:03:2A:A4:36:E3:77 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584BBFC30E82BC38F00EB325BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft Manifest number: 010D0C9F4328584073A85AE22C63106D5EA5914A Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 2b6966be-0a30-3097-a99a-d635fb439733.roa (hash: rV+j2MJ7c3zLlMLs8kxYpWEFYnYwno/yk8RKfNcd/jg=) 2: 3cd4923c-6128-376c-8446-baffa366fd39.roa (hash: KDFMP3HOqoS/thL3Sw1xeS/lmZFfTB073h/jz4NMx8k=) 3: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (hash: Rb+J3hCVgjG6UIfpvU6/6AinbrgHtEGCOlcuQ32mmS0=) 4: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (hash: IoUPhGHhVmKTA59y0kNCk/NE+wbCXYYn5oqi1vW/qu0=) 5: a0241a87-ee63-3ca4-8762-01bd022707da.roa (hash: YNicmauJH8K9CqpTEljMQeX6gLwpqdoMQG6EYHRL/zc=) 6: cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl (hash: 4e2vBLuZZCRlgi1X+2XgBkhmEZT/bEZZdjKzSUVM3R4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:82:bc:38:f0:0e:b3:25:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=d295eeea-038a-464c-96b0-0ba49fe80987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b2:f4:6d:bc:40:fc:55:18:81:e4:72:b5:6f: a1:3d:ad:56:df:4f:0c:8e:6e:83:d1:44:06:e8:6d: d1:87:86:14:5c:cd:10:3b:b4:23:9f:eb:0f:11:1a: 70:50:77:d2:47:8b:ea:d0:ab:a7:c6:31:fc:b3:4e: 05:f8:4c:f7:04:22:c3:25:05:f3:66:18:79:bf:6c: c7:03:0a:cd:72:4e:b0:f2:dc:3b:da:f3:a6:ef:88: b5:4c:5d:57:e9:27:9c:1d:40:45:42:ff:10:5a:cb: 28:25:53:79:97:9c:d1:90:d4:42:b9:e7:5a:8d:a1: 65:e1:7a:c1:0e:2b:b1:c5:42:89:b2:a2:98:6a:b2: f1:56:9e:d5:46:96:c8:b6:e3:7f:75:9b:c6:7f:93: af:e7:27:25:6c:24:e8:6c:2c:0c:c9:c5:7d:82:ed: 75:8e:ae:b5:e0:95:14:e3:31:35:08:c6:35:de:2d: 4b:96:ed:6c:47:68:27:45:2b:2c:35:60:b1:f2:41: b7:fb:6e:f0:34:11:78:a4:3e:75:85:31:b1:f2:5a: f9:c5:04:80:10:57:6f:bd:da:38:79:f1:3a:de:e6: 79:7f:22:3f:9f:5a:0f:c2:8d:2b:af:e7:e6:53:74: 33:13:99:a4:a9:71:55:ee:1e:aa:49:89:b2:1d:45: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9A:7B:7F:90:9A:11:4F:A6:27:18:F6:83:59:03:2A:A4:36:E3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:56:1a:70:c0:1f:8f:67:88:de:5d:64:17:3a:78:ff:0e:c7: 03:23:8d:f6:19:ce:a9:ab:43:ff:d2:08:26:11:2b:5c:3a:67: 2d:51:32:74:6e:70:15:d3:f5:69:9b:20:b9:10:0c:7b:b3:f6: e1:03:61:a6:39:74:a8:cb:6f:93:1a:05:7c:07:a6:49:74:10: 0e:8e:05:a9:3b:42:0b:dc:7e:86:6c:34:a0:46:53:57:b9:43: 08:5c:c5:b4:aa:89:55:b1:6c:39:7d:eb:07:f3:46:c1:bd:58: 90:97:3d:44:49:f9:d8:c0:d3:2d:9b:9e:0e:c8:a8:b8:1c:cc: c5:e3:23:2e:15:ce:1f:73:40:1a:a4:ff:03:de:ab:95:8c:e5: 37:17:5d:7b:c4:5b:49:7b:6e:36:67:f9:a6:1f:0f:a0:41:20: 12:d0:e6:f3:ed:ad:95:07:a7:8d:92:01:4b:1c:47:8f:b8:7a: 30:cb:5d:d8:e3:2b:58:55:bb:92:06:5b:e9:a3:e2:ae:59:19: bd:01:08:ab:4c:79:4d:3a:59:f6:a0:dd:78:e5:2e:e3:45:17: 1f:56:bc:36:b3:90:b7:84:20:16:b5:ba:a9:0f:6b:9d:69:92: 64:d4:67:14:38:39:54:41:5c:67:39:42:5b:07:29:12:e7:02: 16:71:6f:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww6CvDjwDrMlvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk ZDI5NWVlZWEtMDM4YS00NjRjLTk2YjAtMGJhNDlmZTgwOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LL0bbxA/FUYgeRytW+hPa1W308Mjm6D0UQG 6G3Rh4YUXM0QO7Qjn+sPERpwUHfSR4vq0KunxjH8s04F+Ez3BCLDJQXzZhh5v2zH AwrNck6w8tw72vOm74i1TF1X6SecHUBFQv8QWssoJVN5l5zRkNRCuedajaFl4XrB DiuxxUKJsqKYarLxVp7VRpbItuN/dZvGf5Ov5yclbCTobCwMycV9gu11jq614JUU 4zE1CMY13i1Llu1sR2gnRSssNWCx8kG3+27wNBF4pD51hTGx8lr5xQSAEFdvvdo4 efE63uZ5fyI/n1oPwo0rr+fmU3QzE5mkqXFV7h6qSYmyHUWkdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEaae3+QmhFPpicY9oNZAyqkNuN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvY2YwOWUxOTEtMWNiNy00 NjUwLTk1ZDYtNGUyNGMwYWVjNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqVhpwwB+PZ4jeXWQXOnj/ DscDI432Gc6pq0P/0ggmEStcOmctUTJ0bnAV0/VpmyC5EAx7s/bhA2GmOXSoy2+T GgV8B6ZJdBAOjgWpO0IL3H6GbDSgRlNXuUMIXMW0qolVsWw5fesH80bBvViQlz1E SfnYwNMtm54OyKi4HMzF4yMuFc4fc0AapP8D3quVjOU3F117xFtJe242Z/mmHw+g QSAS0Obz7a2VB6eNkgFLHEePuHowy13Y4ytYVbuSBlvpo+KuWRm9AQirTHlNOln2 oN145S7jRRcfVrw2s5C3hCAWtbqpD2udaZJk1GcUODlUQVxnOUJbBykS5wIWcW/i -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:45 2025 by rpki-client