$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft (raw, json) Hash identifier: y+3SK7AN3h4iiqKGgpuGpBKmNHIfmMblAtXdc0fIjag= Subject key identifier: F6:FE:4B:8B:AB:49:3A:43:17:51:4E:77:4D:FB:16:CF:1D:0E:D2:BF Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584BC28DCEBEED0CF969061AF200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft Manifest number: 010D0C9F432858474714BFB4E60C762DE243A739 Signing time: Wed 05 Nov 2025 15:00:08 +0000 Manifest this update: Wed 05 Nov 2025 15:00:08 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl (hash: aFJFkMZQOjCsIqsxTVh6F3UWlgGPXUxYCJcO77wYzLQ=) 2: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (hash: ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo=) 3: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (hash: nggQM9isGwW1yLkKvW7Qm9KI9x6WkZUV4QYEzSI0K9Y=) 4: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (hash: Cy55k8QuhtGVkvURk86QEJnGSgpXYIcmqHEsCH+XWuM=) 5: d73dd892-ee55-3262-86e9-4939ca3508af.roa (hash: zSo3K+1VGxHsFzwRub9HghY6bVFMu7wCm03tvaiIS54=) 6: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (hash: tuvsYg9LDaULvngev+tOe4Gcs4+oe0mTh9XEznWQzaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:8d:ce:be:ed:0c:f9:69:06:1a:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Nov 5 15:00:08 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=b92670f9-5915-4792-a75b-2819c896fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:ff:13:e9:1d:e7:ff:54:45:e7:e6:6f:d1: 8a:22:3d:b7:c0:bd:24:39:5a:31:60:b8:1d:09:6a: 6c:e9:43:78:45:0a:31:b3:20:30:67:c2:ea:a6:cf: b7:c9:25:0b:ef:bc:a0:ea:9f:7b:7b:a8:5b:2c:00: ab:62:d1:67:bd:27:64:3a:28:ed:71:d7:56:70:71: f3:2a:28:a9:27:de:3f:49:e1:83:8f:8b:76:d0:0a: a0:fa:16:6f:c3:62:c7:38:4c:0b:d4:c7:3b:f0:0d: f0:ed:4a:c6:dd:4a:f9:a2:14:b7:7a:f5:89:76:7d: 8f:91:bd:a6:b0:89:c3:56:d9:13:00:c6:a9:ca:98: ea:37:82:5a:de:df:83:4f:20:69:40:15:fe:0a:2a: 41:31:4f:e1:2b:f6:36:e2:00:df:af:9f:82:77:be: 69:99:15:75:3f:94:e0:a3:30:68:ba:6f:8e:fb:17: 5c:f6:ee:c5:a6:18:77:1d:e0:97:57:ea:8e:18:2e: 30:6a:85:38:68:5d:08:10:91:22:da:ec:33:3c:a1: 52:3a:97:5c:de:d5:b8:a9:24:23:9e:52:b7:fc:68: 7c:2f:ae:b8:81:db:20:ba:89:f0:3c:6c:62:a4:c1: bc:4f:89:30:e5:5d:e5:a9:17:d0:98:c6:40:53:4b: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:4B:8B:AB:49:3A:43:17:51:4E:77:4D:FB:16:CF:1D:0E:D2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dc:cf:79:c5:42:1c:47:3a:1e:82:eb:d4:58:22:78:8c:5e: 0a:c4:dc:8a:9e:12:59:b3:ec:cc:6b:45:93:2f:b7:11:55:93: bc:80:30:91:79:27:4a:60:ea:9c:ae:63:91:80:94:d5:57:63: 75:e4:26:f5:f2:ed:f1:e7:c7:1c:4d:1b:0a:61:3b:6f:63:a7: 42:9a:2a:48:76:a9:3b:6a:98:83:f2:2d:f6:b5:47:4a:8f:1d: 77:40:92:8c:44:c3:23:41:4d:ab:64:91:62:d2:fe:e1:09:75: e5:82:c5:ed:c3:94:31:99:32:03:ef:aa:a9:33:35:b6:02:0b: f2:78:23:ba:aa:0e:4a:d8:58:18:0c:f8:38:4a:dc:bb:90:4a: 85:f4:88:09:01:6a:c1:e2:9a:b9:d7:4d:85:9a:b8:29:75:23: f2:c4:18:4e:51:8b:71:97:d0:07:4e:30:c3:ed:14:f6:98:68: a7:71:72:e6:ce:d2:66:0b:3f:15:b7:1d:87:21:cb:47:e6:cb: 87:23:b0:44:42:8d:d8:9e:b9:31:14:82:7b:4e:f4:cd:e4:a5: 5c:8d:81:f2:6d:5e:98:91:40:48:1b:89:0a:68:30:ce:70:a8: 5d:51:c7:72:7e:a2:56:bb:11:2f:57:10:05:3b:9a:b4:a9:df: c9:a2:65:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCjc6+7Qz5aQYa8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTEwNTE1MDAwOFoXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk YjkyNjcwZjktNTkxNS00NzkyLWE3NWItMjgxOWM4OTZmYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/f/E+kd5/9URefmb9GKIj23wL0kOVoxYLgd CWps6UN4RQoxsyAwZ8Lqps+3ySUL77yg6p97e6hbLACrYtFnvSdkOijtcddWcHHz KiipJ94/SeGDj4t20Aqg+hZvw2LHOEwL1Mc78A3w7UrG3Ur5ohS3evWJdn2Pkb2m sInDVtkTAMapypjqN4Ja3t+DTyBpQBX+CipBMU/hK/Y24gDfr5+Cd75pmRV1P5Tg ozBoum+O+xdc9u7Fphh3HeCXV+qOGC4waoU4aF0IEJEi2uwzPKFSOpdc3tW4qSQj nlK3/Gh8L664gdsguonwPGxipMG8T4kw5V3lqRfQmMZAU0tgwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPb+S4urSTpDF1FOd037Fs8dDtK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMmZmODVlNzktMTc0Yy00 NmY2LThhNjItYTkyYzJjOTg3NWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA33M95xUIcRzoeguvUWCJ4 jF4KxNyKnhJZs+zMa0WTL7cRVZO8gDCReSdKYOqcrmORgJTVV2N15Cb18u3x58cc TRsKYTtvY6dCmipIdqk7apiD8i32tUdKjx13QJKMRMMjQU2rZJFi0v7hCXXlgsXt w5QxmTID76qpMzW2AgvyeCO6qg5K2FgYDPg4Sty7kEqF9IgJAWrB4pq5102Fmrgp dSPyxBhOUYtxl9AHTjDD7RT2mGincXLmztJmCz8Vtx2HIctH5suHI7BEQo3Ynrkx FIJ7TvTN5KVcjYHybV6YkUBIG4kKaDDOcKhdUcdyfqJWuxEvVxAFO5q0qd/JomX+ -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:52 2025 by rpki-client