$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft (raw, json) Hash identifier: vCdcuovQ/TFpxo/sxF3QLMnDcpmmpIvS94sISxc6JT0= Subject key identifier: D4:36:72:9E:3E:05:28:75:52:4B:16:57:D7:11:2F:E7:0D:74:98:C1 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584BC3D65AB38226F06F0CE89580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft Manifest number: 010D0C9F432858474714BFB4E60C762DE243A73A Signing time: Thu 06 Nov 2025 02:02:10 +0000 Manifest this update: Thu 06 Nov 2025 02:02:10 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl (hash: e/ExZz7Kzh6XUUuNX/QP0NcGhtLqnj5NhGpMT+hHjrA=) 2: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (hash: ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo=) 3: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (hash: nggQM9isGwW1yLkKvW7Qm9KI9x6WkZUV4QYEzSI0K9Y=) 4: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (hash: Cy55k8QuhtGVkvURk86QEJnGSgpXYIcmqHEsCH+XWuM=) 5: d73dd892-ee55-3262-86e9-4939ca3508af.roa (hash: zSo3K+1VGxHsFzwRub9HghY6bVFMu7wCm03tvaiIS54=) 6: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (hash: tuvsYg9LDaULvngev+tOe4Gcs4+oe0mTh9XEznWQzaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:d6:5a:b3:82:26:f0:6f:0c:e8:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Nov 6 02:02:10 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=f3c6c609-f31d-4904-84ca-f37856ac6f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:78:de:c8:46:b4:51:34:0d:c0:ad:e1:a8: 0a:ad:ff:23:c0:5d:0e:db:bc:0a:cd:9d:6b:68:9f: 6b:63:75:dd:de:96:00:08:7a:b8:c5:af:6d:b3:c3: b2:54:38:1f:fa:28:f4:30:5b:64:6d:e7:fb:d7:69: 63:cf:2c:53:4c:8a:e8:52:bc:d8:67:7e:25:0a:c9: 6f:f9:a6:bf:1e:46:90:d1:f4:58:73:17:8f:b3:bb: ca:5c:b4:a7:2b:ad:9c:4c:51:58:44:2c:13:30:a9: f7:13:b2:87:87:d7:03:aa:ca:88:04:28:7c:33:6c: b5:b5:d8:57:bd:a6:71:32:33:8b:29:1f:2f:af:78: da:c8:fb:78:3b:6c:f9:41:fe:53:f0:61:0f:fc:7e: bc:5e:c8:4e:7c:df:c3:a9:52:eb:3b:b2:5a:d0:dc: 14:3c:8f:bc:3e:07:06:8d:86:21:65:56:21:13:c0: 67:63:e0:33:87:12:30:07:c5:d5:5c:0e:6d:ce:4b: ef:f1:da:59:75:36:af:e1:50:90:c5:04:b4:73:d4: f8:a9:7e:49:44:c4:73:16:d4:98:12:d0:3e:ce:b2: 37:50:11:64:70:66:76:32:39:b2:e0:80:f0:ca:39: 03:a9:40:5d:fa:d9:d3:1a:dd:e4:1c:8e:7b:17:f2: ae:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:72:9E:3E:05:28:75:52:4B:16:57:D7:11:2F:E7:0D:74:98:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:69:7f:e3:6d:65:68:80:15:6d:7a:b9:47:45:a5:82:6c:9c: df:1c:0a:f0:ce:9a:1c:2e:ca:25:4c:ec:6d:5b:fe:1c:ed:99: e4:f5:5f:89:79:b6:77:58:85:b8:46:86:8b:a4:d1:d3:fe:57: 34:bc:13:f8:61:22:88:b9:6d:e0:d6:ad:5a:3e:a0:ef:4e:cd: 6e:c2:94:8d:f9:5a:33:5d:50:cd:70:91:db:7a:d8:ed:e3:f8: 1b:63:a2:20:ac:50:45:6e:b9:77:17:94:ff:01:7c:50:2b:98: a3:88:29:e9:d4:02:08:1c:30:bf:7b:0c:77:73:28:3a:43:12: 77:bd:64:9b:c9:4e:78:5b:ad:43:15:ce:a8:5a:eb:df:33:3c: 2a:77:10:c4:e3:f0:5a:2e:c5:b8:ec:f5:26:db:16:26:07:ac: 40:f3:30:d5:97:0a:e1:dd:9b:2a:77:73:0d:4b:fe:1c:48:bc: 2d:7c:31:65:c8:79:78:9b:5d:1a:02:f6:12:b6:4d:b0:27:3d: 21:79:b3:17:0f:4e:fc:f4:f2:9b:03:ed:0c:19:67:af:61:97: e5:d8:c7:e8:dd:94:91:39:4e:2d:82:40:b9:04:38:ec:77:76: 12:1d:f5:d9:9d:3f:ec:47:98:64:5d:64:f7:f2:41:e9:73:38: 86:82:7c:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvD1lqzgibwbwzolYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTEwNjAyMDIxMFoXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk ZjNjNmM2MDktZjMxZC00OTA0LTg0Y2EtZjM3ODU2YWM2ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwx43shGtFE0DcCt4agKrf8jwF0O27wKzZ1r aJ9rY3Xd3pYACHq4xa9ts8OyVDgf+ij0MFtkbef712ljzyxTTIroUrzYZ34lCslv +aa/HkaQ0fRYcxePs7vKXLSnK62cTFFYRCwTMKn3E7KHh9cDqsqIBCh8M2y1tdhX vaZxMjOLKR8vr3jayPt4O2z5Qf5T8GEP/H68XshOfN/DqVLrO7Ja0NwUPI+8PgcG jYYhZVYhE8BnY+AzhxIwB8XVXA5tzkvv8dpZdTav4VCQxQS0c9T4qX5JRMRzFtSY EtA+zrI3UBFkcGZ2Mjmy4IDwyjkDqUBd+tnTGt3kHI57F/KuewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNQ2cp4+BSh1UksWV9cRL+cNdJjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMmZmODVlNzktMTc0Yy00 NmY2LThhNjItYTkyYzJjOTg3NWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOaX/jbWVogBVterlHRaWC bJzfHArwzpocLsolTOxtW/4c7Znk9V+JebZ3WIW4RoaLpNHT/lc0vBP4YSKIuW3g 1q1aPqDvTs1uwpSN+VozXVDNcJHbetjt4/gbY6IgrFBFbrl3F5T/AXxQK5ijiCnp 1AIIHDC/ewx3cyg6QxJ3vWSbyU54W61DFc6oWuvfMzwqdxDE4/BaLsW47PUm2xYm B6xA8zDVlwrh3Zsqd3MNS/4cSLwtfDFlyHl4m10aAvYStk2wJz0hebMXD0789PKb A+0MGWevYZfl2Mfo3ZSROU4tgkC5BDjsd3YSHfXZnT/sR5hkXWT38kHpcziGgnxa -----END CERTIFICATE-----Generated at Thu Nov 6 06:05:53 2025 by rpki-client