$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: EHdQTbvnNdDcKtwamQ0kuCucc8oA8JuNWb+SxbrwApU= Subject key identifier: 74:A8:D3:10:7E:94:DF:1F:F2:AA:FB:E7:61:C3:00:98:6F:C9:A7:E6 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584BBFC30BE4249EFE57EDAAAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A477FD Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: r5NFwIRyLFYi+t3G3jTGj1DHzIfUCqexgENS1RAXG9Y=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: MrsOgjZYsbRl5MaER3yZNkGRazOyh4lj1OL8WcTMKaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0b:e4:24:9e:fe:57:ed:aa:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=a5e9b624-01a2-4c92-90c1-499ed440f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:8a:ed:1e:11:12:03:db:be:46:e9:b1:ff: 13:b8:2b:77:67:f4:52:38:d5:ab:1a:98:74:41:9c: 67:88:23:a7:ff:cb:88:c2:5f:58:bc:43:fc:8c:2e: b1:ef:db:ce:20:b2:92:2e:42:1a:35:d9:41:e7:ed: 74:6b:d6:dc:1e:4d:5e:9e:7d:e3:18:94:ff:bf:43: 9e:f1:b0:5a:17:88:5a:f5:41:29:3c:41:d7:38:0d: 99:0b:01:a2:63:06:50:04:d8:07:08:ba:a1:c3:7a: 2b:00:5c:04:e6:92:23:0e:05:86:b0:fe:b9:8b:7c: f4:0d:fc:5f:79:d3:8c:d4:95:e1:f0:93:94:8a:bf: 9d:fc:b5:5b:45:b3:99:88:af:55:9c:57:aa:50:10: 91:39:3a:c5:13:7e:09:49:12:5c:db:0c:62:d9:cc: a3:61:79:7e:f3:f1:3c:aa:7b:8b:f6:66:48:b5:4e: 94:77:dd:31:b1:1a:28:25:f9:03:b0:61:a7:ea:71: a4:5b:cf:09:e4:79:b7:8c:20:e3:48:4f:87:c8:ec: 68:de:98:2f:bb:96:ce:5d:ef:6a:37:67:4b:12:bc: 43:cd:df:6e:5d:c9:b4:1b:23:87:49:ac:24:b7:22: c9:03:d7:be:49:5b:31:d7:c3:dc:ee:17:1d:5a:30: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:D3:10:7E:94:DF:1F:F2:AA:FB:E7:61:C3:00:98:6F:C9:A7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:53:5c:12:8d:52:f4:78:e1:69:f5:c6:1b:1e:8f:6a:aa:68: 7c:5c:64:ab:2c:a2:75:63:20:e6:3a:8a:a7:59:54:79:91:fb: 33:37:7b:23:41:c4:77:ca:e9:a0:10:30:5a:73:8e:f1:71:e9: 9c:b4:c6:e9:7a:a6:99:a9:39:47:a7:b9:b0:fa:70:fe:5b:86: fa:fa:74:2f:61:30:c9:ee:7a:97:3e:7c:6c:36:15:e1:a3:33: 30:55:d6:69:0e:39:5b:05:8c:04:25:0e:ab:dd:bf:74:68:d3: 2f:1e:81:73:7b:10:80:57:f2:0f:81:24:29:ba:3b:0c:4e:1f: a6:8a:a9:ad:0c:c6:f0:4b:92:7a:cd:15:5f:3c:45:f3:4d:fb: 44:25:fc:2c:ba:43:ed:db:83:77:d8:e3:6f:fa:25:46:ce:f8: dc:0f:0b:2f:c7:61:ea:a2:64:3a:6a:f2:f2:63:98:d8:47:40: 70:68:3f:07:4f:1b:04:4b:56:62:31:0d:4c:f4:79:e6:a6:77: 83:ab:d8:96:18:63:89:6d:51:f2:42:35:a7:2e:94:e7:e1:30: af:55:e3:b3:f6:4a:e5:28:34:cf:92:c8:09:b0:7a:e3:5d:c5: 90:9e:dc:44:d0:09:45:68:c5:58:a0:41:93:a4:1d:fd:7d:32: 91:d3:78:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wwvkJJ7+V+2qqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk YTVlOWI2MjQtMDFhMi00YzkyLTkwYzEtNDk5ZWQ0NDBmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN6K7R4REgPbvkbpsf8TuCt3Z/RSONWrGph0 QZxniCOn/8uIwl9YvEP8jC6x79vOILKSLkIaNdlB5+10a9bcHk1enn3jGJT/v0Oe 8bBaF4ha9UEpPEHXOA2ZCwGiYwZQBNgHCLqhw3orAFwE5pIjDgWGsP65i3z0Dfxf edOM1JXh8JOUir+d/LVbRbOZiK9VnFeqUBCROTrFE34JSRJc2wxi2cyjYXl+8/E8 qnuL9mZItU6Ud90xsRooJfkDsGGn6nGkW88J5Hm3jCDjSE+HyOxo3pgvu5bOXe9q N2dLErxDzd9uXcm0GyOHSawktyLJA9e+SVsx18Pc7hcdWjCu+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHSo0xB+lN8f8qr752HDAJhvyafmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArU1wSjVL0eOFp9cYbHo9q qmh8XGSrLKJ1YyDmOoqnWVR5kfszN3sjQcR3yumgEDBac47xcemctMbpeqaZqTlH p7mw+nD+W4b6+nQvYTDJ7nqXPnxsNhXhozMwVdZpDjlbBYwEJQ6r3b90aNMvHoFz exCAV/IPgSQpujsMTh+miqmtDMbwS5J6zRVfPEXzTftEJfwsukPt24N32ONv+iVG zvjcDwsvx2HqomQ6avLyY5jYR0BwaD8HTxsES1ZiMQ1M9HnmpneDq9iWGGOJbVHy QjWnLpTn4TCvVeOz9krlKDTPksgJsHrjXcWQntxE0AlFaMVYoEGTpB39fTKR03jg -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:47 2025 by rpki-client