$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft File: cffdb071-c372-4fb8-ae3c-ab449c400178.mft (raw, json) Hash identifier: Jf/f2mLqfsX4jMP61sQbbtpYtunJSkkDjjOS5zyGZv8= Subject key identifier: C8:A2:6F:22:C0:FA:07:DA:81:BD:6F:07:05:55:99:9E:9A:75:A8:BF Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584BBFFEA965FFA5EF659893C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft Manifest number: 010D0C9F4328584073A81F0B758DBA9E7925C968 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (hash: XBE+Y150B7UqbXZrAYaKK3swCL15MSaFjNuamQzVnBw=) 2: 372527a6-bb91-3566-8da6-f837ff4a29fb.roa (hash: 5pm1UcwZiwPO5iuO5ZnzJ+RJPrKGskaBJKsuy5tAOJk=) 3: 7ba90678-5506-3097-8a4a-c53ede395ba8.roa (hash: cCchsYrxs3KHmUVG6/Nf7iXzkRrm0kzPPyWXb/+Iw/c=) 4: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (hash: Pm+7bR1pxmsjG/6703zsQhFBk1tjKsFu2u5V+eOH7aI=) 5: cffdb071-c372-4fb8-ae3c-ab449c400178.crl (hash: Trl/1rBwUreENCmZAugQeUB0aNhwkjDcUZL86H8Sixw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a9:65:ff:a5:ef:65:98:93:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=ed56ef68-fa56-4139-9b77-8d4f25b00900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:9b:2f:82:e9:10:c3:19:ee:e0:7a:c5:48: 41:1f:82:63:67:69:a1:f8:6f:b4:6b:6c:e1:55:59: 1b:3b:df:e9:e1:9b:d5:45:1a:d1:16:22:c9:48:74: 64:c7:6f:44:15:4a:98:38:cd:d6:4d:07:ad:30:bf: db:b5:bb:75:1c:ba:9c:77:20:0a:0f:fc:35:00:91: 1a:98:42:c6:0c:ad:52:97:ac:31:12:22:00:4e:c6: 63:44:1b:58:6d:d8:08:65:dd:f7:d6:3a:24:f0:e3: d8:14:f2:9e:16:1a:a6:e8:4f:12:d7:81:41:72:32: e5:8c:7a:91:57:69:1f:15:f8:95:03:27:c5:d7:28: 3a:03:1d:af:f8:e0:9d:d8:9b:d7:e0:c2:9b:6a:de: f3:06:77:7a:91:70:c8:fd:e0:bc:77:de:cd:ac:e4: c3:e0:8a:c6:1b:cc:f4:fb:0e:0e:e5:a9:5f:f6:fc: 8f:de:03:2c:c8:d8:6e:d3:d4:fa:fd:48:45:33:36: 67:b9:53:14:3d:ee:78:46:70:17:7b:ad:96:40:ae: 13:a8:14:5e:e7:67:f3:0d:52:86:4e:0b:54:35:9d: ac:02:59:2a:43:4f:75:e0:b9:2b:52:ca:aa:3f:6f: e6:98:12:7e:50:65:c9:8e:83:f9:5f:4f:c5:28:d3: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A2:6F:22:C0:FA:07:DA:81:BD:6F:07:05:55:99:9E:9A:75:A8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:aa:c3:f8:1d:b6:43:ae:79:1f:f5:f2:d9:13:7d:4b:7f:1a: 72:97:85:fb:6d:82:64:bd:3e:e2:6d:f2:4f:d3:29:5b:85:83: 00:c8:57:36:8a:f5:7e:7d:cf:9c:bf:3b:20:52:ef:31:7d:00: 61:f7:f9:2b:f7:a4:e2:81:14:df:cf:9c:73:bb:ad:82:84:f1: c1:6d:85:ba:3c:8d:f2:bb:5f:09:ae:5f:b2:df:63:e0:3f:26: 74:02:3c:72:e2:1f:b8:77:55:ed:a8:38:4d:40:59:36:6e:e9: 0f:0f:a8:44:17:8c:b6:75:61:84:c6:cd:cc:f8:6e:3f:0a:f8: 1b:d0:a7:15:91:3a:c0:e3:71:cd:5d:21:f7:36:a5:42:68:a0: af:6c:6d:df:20:f6:12:ba:e6:d1:a2:99:3a:2e:bb:09:91:dd: 8a:d3:e9:e4:e1:79:2d:f0:dc:44:e2:ce:53:6e:e0:58:46:1d: ad:c7:30:0b:8c:39:2f:cd:c1:38:d0:c3:62:7d:e2:63:8b:56: a2:7e:b6:ff:a9:f5:a5:61:0c:f9:e0:9a:3a:e7:60:64:06:52: 4a:32:17:a1:0d:79:99:8d:ab:85:c4:52:8b:0b:4e:76:40:ec: fb:67:bb:80:e6:12:45:12:69:6a:9c:5b:2b:db:49:08:48:6d: 4c:7a:19:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qll/6XvZZiTyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk ZWQ1NmVmNjgtZmE1Ni00MTM5LTliNzctOGQ0ZjI1YjAwOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqbL4LpEMMZ7uB6xUhBH4JjZ2mh+G+0a2zh VVkbO9/p4ZvVRRrRFiLJSHRkx29EFUqYOM3WTQetML/btbt1HLqcdyAKD/w1AJEa mELGDK1Sl6wxEiIATsZjRBtYbdgIZd331jok8OPYFPKeFhqm6E8S14FBcjLljHqR V2kfFfiVAyfF1yg6Ax2v+OCd2JvX4MKbat7zBnd6kXDI/eC8d97NrOTD4IrGG8z0 +w4O5alf9vyP3gMsyNhu09T6/UhFMzZnuVMUPe54RnAXe62WQK4TqBRe52fzDVKG TgtUNZ2sAlkqQ0914LkrUsqqP2/mmBJ+UGXJjoP5X0/FKNNW8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMiibyLA+gfagb1vBwVVmZ6adai/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvY2ZmZGIwNzEtYzM3Mi00 ZmI4LWFlM2MtYWI0NDljNDAwMTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdqsP4HbZDrnkf9fLZE31L fxpyl4X7bYJkvT7ibfJP0ylbhYMAyFc2ivV+fc+cvzsgUu8xfQBh9/kr96TigRTf z5xzu62ChPHBbYW6PI3yu18Jrl+y32PgPyZ0Ajxy4h+4d1XtqDhNQFk2bukPD6hE F4y2dWGExs3M+G4/Cvgb0KcVkTrA43HNXSH3NqVCaKCvbG3fIPYSuubRopk6LrsJ kd2K0+nk4Xkt8NxE4s5TbuBYRh2txzALjDkvzcE40MNifeJji1aifrb/qfWlYQz5 4Jo652BkBlJKMhehDXmZjauFxFKLC052QOz7Z7uA5hJFEmlqnFsr20kISG1MehlE -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:16 2025 by rpki-client