$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft File: c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft (raw, json) Hash identifier: z5b+dg1Lg1ZTFd3ytpt6fB/e56z5p410MK/LZJyd9W4= Subject key identifier: 2F:29:9B:BA:DF:8A:1E:F0:C0:9D:4A:00:B8:55:C0:61:C0:2B:3F:39 Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Certificate serial: 010D0C9F4328584BC01C621FB37EBCEBA64A76C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft Manifest number: 010D0C9F43285845F5B42892868162D1AFD49BBA Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa (hash: JNdIDT4TunDSk2S9y0b1fBBdBtc8gc7nZbWogCmV53w=) 2: 4e206120-21a0-3b6c-80db-62308ac9e02c.roa (hash: FG2K8wBqJf4qlR/zvh421sf/h6W9GlRNYv74w4lXVf4=) 3: a142e04a-4bc1-3111-b089-dbf0feff0e10.roa (hash: 1jOHBOx8+Bru9jQfY/Db3PikKYp1zDbhSfwBdEoHxlQ=) 4: c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl (hash: gzG53d9W0VUvae0Zkkc5ckvL9d4Lf2afichDJEgRhYM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:1f:b3:7e:bc:eb:a6:4a:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=c0b6b5c2-d6f0-4173-8f9a-f5f77eecbb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:f7:cf:3d:1d:0f:41:ec:f5:4d:c4:bb:f5: af:74:a8:1c:81:f2:dd:01:d7:0f:26:f6:85:20:73: f9:39:37:22:02:9d:82:e6:22:77:f6:ec:32:b4:0f: 4a:54:6d:63:c0:47:d0:a5:de:83:62:56:ae:cf:a2: af:26:c8:65:70:0c:14:1a:e1:66:d0:8b:95:fd:56: 05:95:d7:0f:6c:f3:48:74:59:1b:3f:0e:42:01:22: 84:72:7c:1d:a4:4c:66:26:1c:58:f9:69:ee:7c:e9: d3:a7:22:74:8f:64:d2:c9:4a:bb:6d:d8:bd:b6:05: 08:6c:a9:2e:b7:3b:6f:17:f6:85:c3:b5:9d:48:c3: da:74:5e:0d:c7:88:72:09:31:bc:c6:55:ff:04:43: f0:b1:0b:81:91:4f:a4:52:fd:e0:8e:26:a9:06:5b: 4b:01:4a:28:85:45:c4:19:25:8b:90:9c:44:a8:64: 1b:ff:30:17:2e:66:fd:37:4a:7a:3a:62:67:23:1c: f6:e3:9c:f9:0b:de:40:53:a8:c6:1d:d3:d8:71:f1: 4e:c8:2b:a1:49:44:66:71:fe:77:29:c9:48:78:e2: 51:73:dd:06:63:1c:6a:4a:93:4a:5a:1e:b9:5c:85: bc:3f:6b:bd:ab:10:7c:21:35:b5:6b:b2:82:30:62: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:29:9B:BA:DF:8A:1E:F0:C0:9D:4A:00:B8:55:C0:61:C0:2B:3F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl X509v3 Authority Key Identifier: keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c5:23:d8:30:6a:20:74:f4:76:d2:19:db:1a:59:5d:2f:f1: ce:a1:9e:56:2c:10:94:46:9b:35:e9:3f:5e:89:8d:22:b8:6b: 7a:99:de:19:8d:3a:ad:2e:3b:64:dc:bc:21:63:3d:2c:71:fc: 96:38:7c:83:a2:5a:19:56:23:bd:eb:f5:86:81:5d:1c:c7:34: 37:92:2d:7f:60:a5:a3:f8:f7:fc:54:9b:5e:4b:0a:d2:ab:66: 2e:62:7c:8c:18:76:d3:68:59:de:11:28:ee:d1:1b:9d:6a:e5: 71:d7:02:da:ad:0c:ee:6b:ea:0d:6a:8c:aa:5f:e7:cf:c5:7b: bb:0d:d5:e0:aa:93:dc:02:18:a0:67:42:65:07:f0:22:b2:ab: 6c:64:af:b9:a6:b9:83:df:91:aa:6d:86:07:bc:b4:b1:58:f9: 83:8b:d9:c4:e8:59:75:db:6b:16:61:c5:39:b6:c5:59:b8:bb: 3d:ff:3a:c5:e8:1f:a9:a8:4d:33:ba:39:81:f7:fb:f5:aa:13: 99:28:ef:00:e7:a5:da:4e:43:d6:81:ae:ed:7d:06:25:da:03: 73:2e:c4:90:a2:14:93:90:f8:e9:61:15:22:c2:d9:06:76:36: 95:50:7e:28:50:e4:67:72:59:ef:81:a3:b2:a5:78:87:19:6b: b3:c9:0b:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGIfs36866ZKdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm YTJlMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk YzBiNmI1YzItZDZmMC00MTczLThmOWEtZjVmNzdlZWNiYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8r3zz0dD0Hs9U3Eu/WvdKgcgfLdAdcPJvaF IHP5OTciAp2C5iJ39uwytA9KVG1jwEfQpd6DYlauz6KvJshlcAwUGuFm0IuV/VYF ldcPbPNIdFkbPw5CASKEcnwdpExmJhxY+WnufOnTpyJ0j2TSyUq7bdi9tgUIbKku tztvF/aFw7WdSMPadF4Nx4hyCTG8xlX/BEPwsQuBkU+kUv3gjiapBltLAUoohUXE GSWLkJxEqGQb/zAXLmb9N0p6OmJnIxz245z5C95AU6jGHdPYcfFOyCuhSURmcf53 KclIeOJRc90GYxxqSpNKWh65XIW8P2u9qxB8ITW1a7KCMGJRcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC8pm7rfih7wwJ1KALhVwGHAKz85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvYzdiM2NmNGMtYmJhMC00 ODFjLThlODItNzRmMDUwYzVmYTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1 ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw NTBjNWZhMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtxSPYMGogdPR20hnbGlld L/HOoZ5WLBCURps16T9eiY0iuGt6md4ZjTqtLjtk3LwhYz0scfyWOHyDoloZViO9 6/WGgV0cxzQ3ki1/YKWj+Pf8VJteSwrSq2YuYnyMGHbTaFneESju0RudauVx1wLa rQzua+oNaoyqX+fPxXu7DdXgqpPcAhigZ0JlB/AisqtsZK+5prmD35GqbYYHvLSx WPmDi9nE6Fl122sWYcU5tsVZuLs9/zrF6B+pqE0zujmB9/v1qhOZKO8A56XaTkPW ga7tfQYl2gNzLsSQohSTkPjpYRUiwtkGdjaVUH4oUORnclnvgaOypXiHGWuzyQsD -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:29 2025 by rpki-client