$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft File: eff73345-b771-45fd-be81-1f41a7f777ec.mft (raw, json) Hash identifier: YxIpooa3/swC55We9uwdNpOwc/itegFNqJrnk/GU8hg= Subject key identifier: D1:7C:5A:A3:59:7B:83:DA:6D:C4:9B:AD:DC:EA:32:2C:2C:EA:FE:CC Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584BC093810925BC4B3FE892AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft Manifest number: 010D0C9F432858457E20D7078380F0E2B3375AF3 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 08788e9a-4441-35fa-ae0e-b867ca97e82c.roa (hash: GACPTNAchteGMXdrhVqKENeOS6GinvliJUP5CMUQ5yI=) 2: 99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (hash: v83A00hvrrezBzBHpt5tUE2dXIDwJ4Rp/Zo/FAVikoo=) 3: b58fa615-5e8c-35d0-9005-e119e966f41c.roa (hash: HNutZVOrXIQ3gzk+Q94jde8yPY5bM7whW8q/q+G7NSs=) 4: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (hash: P5Jm7TVe5++NaZMErLpXrklLLv9Zp2GqDj1uJ1StkE0=) 5: eff73345-b771-45fd-be81-1f41a7f777ec.crl (hash: oN72toxycYcAbshKnVPCd+qQ7QmbLfLySafIN2Se7/U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:81:09:25:bc:4b:3f:e8:92:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=4d47c16c-364b-4f22-8e1e-e0c5e2118cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:f4:63:45:ca:25:93:b0:26:d6:3c:cf:c8: 22:ae:1e:ac:65:73:ce:3c:97:7c:10:45:08:a6:ac: b6:80:55:14:7a:6e:d5:30:c0:2a:de:27:b9:43:0e: 72:8d:2c:c9:51:06:63:a6:af:6f:d8:54:e4:59:35: a9:50:5a:84:1f:79:2b:82:93:5f:5c:07:07:a6:56: dd:f5:86:1a:79:0d:c3:e3:d9:87:c7:32:2f:93:66: 97:8e:8e:98:43:2c:92:c5:a6:7c:af:aa:2f:01:57: 09:47:b6:af:dd:8b:df:75:0a:24:3c:90:08:d7:92: 11:ca:2b:f1:f8:f4:5d:11:5f:e3:dc:c3:3c:30:56: 68:f6:29:6d:fa:f0:c6:46:5e:2e:bd:e2:b6:ab:c0: 41:87:0a:cf:b0:dd:34:fa:b2:a6:d4:32:a5:e8:47: 9d:77:3c:f0:01:d8:2b:a3:df:0f:c5:63:ac:8a:cf: 8a:7a:d4:a1:a0:10:7d:fe:76:9f:8c:e3:e4:b9:13: 5e:04:7a:76:8b:35:1a:89:71:73:dd:a4:9d:9b:ef: d2:1f:42:5c:39:4a:40:b5:68:ae:7a:46:8b:a4:1d: 9a:f1:12:29:e5:09:5e:82:6d:ff:20:5a:14:c5:b1: f0:0e:f8:7e:62:a2:97:5b:e5:dc:95:2f:dd:f7:1f: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7C:5A:A3:59:7B:83:DA:6D:C4:9B:AD:DC:EA:32:2C:2C:EA:FE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:58:41:ce:96:55:3b:cb:52:68:47:86:66:52:c3:73:a0:4f: 61:6b:79:04:aa:25:69:f1:4a:92:94:fa:84:1e:8e:aa:05:fa: b7:1c:c4:79:1f:2a:20:80:41:44:39:ae:59:c2:3a:0a:ac:2e: 39:a0:08:3d:e4:f1:fb:2d:f7:79:cb:be:10:39:ea:b8:6a:3a: dc:58:99:5b:8a:85:e9:e2:bf:ec:3f:7f:ff:e3:1a:56:5f:90: 1d:62:f6:86:6b:d1:93:37:ef:97:1c:cc:3f:4a:e1:ff:93:d4: ad:c5:a2:99:f9:0c:51:67:63:11:1a:7e:ac:2e:78:f1:50:f9: e9:40:76:51:a7:63:bf:14:15:a5:25:a0:52:ef:e2:05:93:ae: c8:2c:c6:e4:b0:22:5a:0b:0a:2d:9f:a3:47:7d:2a:3b:4c:19: fa:f5:dc:45:02:32:fd:07:d0:8e:98:c7:75:66:fc:96:c0:9f: 63:fe:e1:f5:6c:bd:08:45:c7:e0:cf:78:0b:0b:17:99:fd:be: 6c:14:9a:14:68:1f:3d:f4:7a:69:d1:db:8c:dc:a5:16:40:3e: d2:75:a9:bf:30:35:0c:0c:57:32:46:c7:6a:4c:23:2c:78:87: 86:d6:62:09:78:8a:c9:16:9f:ca:c6:48:55:28:31:dc:64:70: 05:2b:26:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4EJJbxLP+iSqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk NGQ0N2MxNmMtMzY0Yi00ZjIyLThlMWUtZTBjNWUyMTE4Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFT0Y0XKJZOwJtY8z8girh6sZXPOPJd8EEUI pqy2gFUUem7VMMAq3ie5Qw5yjSzJUQZjpq9v2FTkWTWpUFqEH3krgpNfXAcHplbd 9YYaeQ3D49mHxzIvk2aXjo6YQyySxaZ8r6ovAVcJR7av3YvfdQokPJAI15IRyivx +PRdEV/j3MM8MFZo9ilt+vDGRl4uveK2q8BBhwrPsN00+rKm1DKl6EeddzzwAdgr o98PxWOsis+KetShoBB9/nafjOPkuRNeBHp2izUaiXFz3aSdm+/SH0JcOUpAtWiu ekaLpB2a8RIp5Qlegm3/IFoUxbHwDvh+YqKXW+XclS/d9x/6lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNF8WqNZe4PabcSbrdzqMiws6v7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvZWZmNzMzNDUtYjc3MS00 NWZkLWJlODEtMWY0MWE3Zjc3N2VjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9WEHOllU7y1JoR4ZmUsNz oE9ha3kEqiVp8UqSlPqEHo6qBfq3HMR5HyoggEFEOa5ZwjoKrC45oAg95PH7Lfd5 y74QOeq4ajrcWJlbioXp4r/sP3//4xpWX5AdYvaGa9GTN++XHMw/SuH/k9StxaKZ +QxRZ2MRGn6sLnjxUPnpQHZRp2O/FBWlJaBS7+IFk67ILMbksCJaCwotn6NHfSo7 TBn69dxFAjL9B9COmMd1ZvyWwJ9j/uH1bL0IRcfgz3gLCxeZ/b5sFJoUaB899Hpp 0duM3KUWQD7Sdam/MDUMDFcyRsdqTCMseIeG1mIJeIrJFp/KxkhVKDHcZHAFKyYC -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:15 2025 by rpki-client