$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft File: ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft (raw, json) Hash identifier: wV6TFXWAKjZjf8mKSUpoV2l30Wu7Q5LDX7nbcKNsjec= Subject key identifier: 5B:DF:59:6D:0D:8F:15:F5:9F:03:8E:C4:DA:39:02:0F:87:90:66:6D Authority key identifier: 73:CE:0E:42:99:CC:77:4B:A7:6D:98:F2:86:49:D8:C8:E3:D7:05:BA Certificate issuer: /CN=ff1c0ef1-dcbc-46a8-9061-fc92af670326 Certificate serial: 010D0C9F4328584BC057FCF5F65AFB4A1EFF2780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft Manifest number: 010D0C9F4328584073A823CAE31984B363BD9025 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: a26a3c09-bfa9-3d9f-a14a-7f2d7977a191.roa (hash: DbCTmFOI6ClSMOA+bk1jB6cheMjeIIQ/gcd11uLWpJI=) 2: ff1c0ef1-dcbc-46a8-9061-fc92af670326.crl (hash: Ip8PLSdi82Qc+HYEUGC7ttJZ1q8lj8Ig9J3dwcqs4mQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fc:f5:f6:5a:fb:4a:1e:ff:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1c0ef1-dcbc-46a8-9061-fc92af670326 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=1a91562c-b463-4b5c-a112-c42c3cf626c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:0c:58:4e:d9:91:2d:49:9e:f6:d1:e4:70: 51:81:ac:db:0c:e0:29:20:91:52:62:43:57:93:8f: 83:85:cc:af:02:14:96:06:0a:23:25:18:18:1e:06: 51:e6:08:e9:0a:b7:30:bb:4f:4e:5e:bc:a4:b6:20: 45:84:3f:3a:50:d6:41:69:c3:f5:08:5f:26:e8:10: 32:6a:d6:90:81:b3:4c:4b:91:3d:cf:75:b8:59:a1: d1:36:e9:0d:95:2a:4e:1b:06:c1:b3:68:96:89:f7: e4:90:e6:c9:67:be:a4:4f:4a:a7:9a:d3:d5:4d:e9: b2:00:69:ed:fe:ed:86:29:ac:de:5f:21:50:ee:8a: c1:da:0b:51:7a:04:4e:98:46:af:68:6a:e7:f3:9a: c4:90:5d:0e:4e:2e:08:e5:f1:99:43:87:29:13:f6: 32:6e:64:17:bd:b8:bd:15:2a:36:3a:f2:09:5d:bc: 39:65:35:43:e5:e1:54:85:7e:44:e8:48:15:f4:7b: b4:c6:c2:72:1b:04:2f:99:cc:18:48:c5:bf:42:3e: 15:2c:87:36:f1:c5:8e:60:63:e9:61:f7:4c:20:61: dd:1d:cd:23:47:1c:43:ee:cf:c9:d5:17:1a:0d:42: 31:42:4e:ff:d5:1f:d3:00:5d:f7:eb:21:81:bb:54: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:59:6D:0D:8F:15:F5:9F:03:8E:C4:DA:39:02:0F:87:90:66:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.crl X509v3 Authority Key Identifier: keyid:73:CE:0E:42:99:CC:77:4B:A7:6D:98:F2:86:49:D8:C8:E3:D7:05:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:78:ea:3a:58:99:6c:c7:9e:e2:22:15:88:2a:27:ee:03: 16:9e:92:b6:cc:17:f8:7a:38:1f:69:3d:1c:19:84:a6:1f:88: 7d:16:fe:74:e9:fb:9a:06:20:29:bf:c8:ab:28:2c:b4:23:0f: f8:3e:4d:e0:fd:23:9d:04:19:da:f9:07:96:6a:15:95:3e:1c: a1:6a:76:c2:31:42:ff:06:bf:f7:58:1a:0c:fb:a2:d0:f1:f3: 48:45:5e:dd:9c:b4:c4:04:c4:4a:4c:72:fe:af:42:db:9d:92: 0c:c7:5e:a2:c0:b5:5c:61:ee:2b:1c:c0:09:a7:ce:8c:ba:bc: 9a:7b:47:cd:ca:97:5b:f9:87:74:e5:a8:9c:6d:db:e7:b0:42: 05:70:0f:21:16:26:6a:0e:32:49:9f:28:a3:5a:5e:50:03:b8: 57:76:83:6d:45:a1:9e:f4:8b:aa:00:d1:7a:2d:dd:e9:09:16: 46:04:75:f4:18:d3:30:7f:72:39:71:ad:5e:20:7e:59:12:35: db:e6:fd:6a:24:b0:37:d8:8b:81:af:71:4c:f2:59:0c:d9:18: f2:e4:5c:9d:18:ef:31:a3:0f:60:df:63:a9:c0:af:bf:03:92: e5:42:52:84:f8:3d:de:db:60:30:4b:6f:15:d2:95:ec:90:cf: 68:5a:1f:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/z19lr7Sh7/J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYxYzBlZjEtZGNiYy00NmE4LTkwNjEtZmM5MmFmNjcw MzI2MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk MWE5MTU2MmMtYjQ2My00YjVjLWExMTItYzQyYzNjZjYyNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMMMWE7ZkS1JnvbR5HBRgazbDOApIJFSYkNX k4+DhcyvAhSWBgojJRgYHgZR5gjpCrcwu09OXryktiBFhD86UNZBacP1CF8m6BAy ataQgbNMS5E9z3W4WaHRNukNlSpOGwbBs2iWiffkkObJZ76kT0qnmtPVTemyAGnt /u2GKazeXyFQ7orB2gtRegROmEavaGrn85rEkF0OTi4I5fGZQ4cpE/YybmQXvbi9 FSo2OvIJXbw5ZTVD5eFUhX5E6EgV9Hu0xsJyGwQvmcwYSMW/Qj4VLIc28cWOYGPp YfdMIGHdHc0jRxxD7s/J1RcaDUIxQk7/1R/TAF336yGBu1R3RQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFvfWW0NjxX1nwOOxNo5Ag+HkGZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjFj MGVmMS1kY2JjLTQ2YTgtOTA2MS1mYzkyYWY2NzAzMjYvZmYxYzBlZjEtZGNiYy00 NmE4LTkwNjEtZmM5MmFmNjcwMzI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYxYzBlZjEtZGNiYy00NmE4LTkw NjEtZmM5MmFmNjcwMzI2L2ZmMWMwZWYxLWRjYmMtNDZhOC05MDYxLWZjOTJhZjY3 MDMyNi5jcmwwHwYDVR0jBBgwFoAUc84OQpnMd0unbZjyhknYyOPXBbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjFjMGVmMS1kY2JjLTQ2YTgtOTA2MS1mYzky YWY2NzAzMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKI3jqOliZbMee4iIViCon 7gMWnpK2zBf4ejgfaT0cGYSmH4h9Fv506fuaBiApv8irKCy0Iw/4Pk3g/SOdBBna +QeWahWVPhyhanbCMUL/Br/3WBoM+6LQ8fNIRV7dnLTEBMRKTHL+r0LbnZIMx16i wLVcYe4rHMAJp86Muryae0fNypdb+Yd05aicbdvnsEIFcA8hFiZqDjJJnyijWl5Q A7hXdoNtRaGe9IuqANF6Ld3pCRZGBHX0GNMwf3I5ca1eIH5ZEjXb5v1qJLA32IuB r3FM8lkM2Rjy5FydGO8xow9g32OpwK+/A5LlQlKE+D3e22AwS28V0pXskM9oWh+6 -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:31 2025 by rpki-client