$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft File: cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft (raw, json) Hash identifier: WPBnGrF17JQXj2eicYUK0C9w2Z6nHo20F2Pt5U9fRRw= Subject key identifier: 05:9D:91:9C:A5:CA:0B:06:7D:C6:A1:23:3C:FD:2D:B7:16:9F:2B:49 Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 Certificate issuer: /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Certificate serial: 010D0C9F4328584BBE0461DE9CB01D2524D0F940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft Manifest number: 010D0C9F4328584371999EC9F96B5D28EC2D848C Signing time: Tue 04 Nov 2025 00:00:03 +0000 Manifest this update: Tue 04 Nov 2025 00:00:03 +0000 Manifest next update: Thu 06 Nov 2025 00:00:00 +0000 Files and hashes: 1: cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl (hash: AGH4/uWyNFukCKfx2N7pdbPLmNFQBaXFov9BStAlcBY=) 2: dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (hash: vubUoIzYl5Al/cNmKYjHfqH/fQxwvPpyKMx/urIsY0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:04:61:de:9c:b0:1d:25:24:d0:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Validity Not Before: Nov 4 00:00:03 2025 GMT Not After : Nov 6 00:00:00 2025 GMT Subject: CN=45e67b25-9fe7-4ac5-a15c-6625a1eab010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:1e:6b:d4:20:06:3c:65:05:1e:5c:09:e9: df:b2:3f:ff:25:20:6e:14:6c:a2:3b:8f:66:ee:ee: 23:55:94:01:12:04:d4:10:1f:0d:f3:5f:60:a8:40: 32:1b:f3:f2:fa:49:d5:ba:6b:8a:21:7b:89:c5:47: dc:e3:fe:15:93:d5:1f:a8:ff:0e:ce:a7:7c:82:b6: 6f:77:a3:70:9a:ac:f4:9c:99:d9:8d:67:43:93:59: 74:7e:1f:16:dd:03:f2:08:2f:30:e0:69:44:be:3d: f1:bc:0e:ff:fc:24:28:30:7e:22:23:c2:6e:c7:31: 93:e2:08:bb:f9:fb:de:62:91:3d:ea:8e:12:8e:b7: ff:fa:c2:0b:2b:e6:37:c5:9c:be:3b:28:63:ce:50: 40:ff:08:93:df:84:32:16:8d:23:5f:f8:ea:b5:45: 5a:47:2d:e3:50:8f:6a:dc:88:a3:c2:0a:19:e2:61: 43:f7:ab:38:09:95:96:fe:72:91:2b:ac:91:a1:be: fe:44:71:12:34:64:bc:4c:39:eb:47:70:9c:af:c7: ef:87:16:d1:e5:69:d2:4d:39:25:d8:53:ff:a0:0d: 33:8b:13:96:e2:da:13:b5:79:2c:77:cc:ba:8d:3b: 22:aa:24:a4:27:20:12:d9:6c:04:e5:1f:ae:f1:b6: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9D:91:9C:A5:CA:0B:06:7D:C6:A1:23:3C:FD:2D:B7:16:9F:2B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl X509v3 Authority Key Identifier: keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5c:ba:40:6b:d0:ea:82:19:3a:a6:58:4a:36:fa:84:c0:39: 9e:a7:44:cb:d6:0a:08:89:46:82:91:b8:fd:4f:8c:fc:e0:c4: e9:4e:21:0d:77:90:ca:56:7f:28:ca:60:b5:f2:69:0b:2c:29: 35:32:a2:d5:ba:d8:84:fa:ca:8d:73:6a:ee:5e:73:fb:40:c5: 15:51:73:1c:48:95:15:ae:27:f2:a3:ae:90:8c:ea:83:38:fe: a4:38:2e:3c:cd:8d:9a:16:6d:4e:4c:50:02:c7:8e:b0:97:cc: f5:a5:f1:94:9a:d9:ce:95:12:02:76:1f:34:37:b1:39:dc:67: 66:f2:dc:14:18:15:0c:cc:bf:0a:f1:be:45:1d:39:b7:20:fc: 2b:02:8c:81:f6:47:8d:a0:c2:b7:5c:53:4a:01:43:6e:74:7c: 15:27:47:72:f6:ea:c6:eb:d1:25:e2:fe:02:50:7c:72:cd:2f: 46:04:d0:65:67:5f:45:3c:0b:49:99:71:85:ff:02:22:49:c8: 2f:2f:59:e7:54:e3:8c:95:a5:0a:b4:e0:2d:5d:64:95:f8:aa: d3:82:35:ea:37:1e:22:5c:94:01:a5:fa:ca:f8:f9:34:86:eb: 73:26:29:c3:a5:d8:e9:f7:25:81:1b:17:6a:8e:2d:90:5b:73: 6d:ce:be:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+BGHenLAdJSTQ+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyYjUyNGItMTRiOS00N2VlLWI5MzgtMzRiMGNjNDBl YzVlMB4XDTI1MTEwNDAwMDAwM1oXDTI1MTEwNjAwMDAwMFowLzEtMCsGA1UEAxMk NDVlNjdiMjUtOWZlNy00YWM1LWExNWMtNjYyNWExZWFiMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MUea9QgBjxlBR5cCenfsj//JSBuFGyiO49m 7u4jVZQBEgTUEB8N819gqEAyG/Py+knVumuKIXuJxUfc4/4Vk9UfqP8Ozqd8grZv d6Nwmqz0nJnZjWdDk1l0fh8W3QPyCC8w4GlEvj3xvA7//CQoMH4iI8JuxzGT4gi7 +fveYpE96o4Sjrf/+sILK+Y3xZy+OyhjzlBA/wiT34QyFo0jX/jqtUVaRy3jUI9q 3IijwgoZ4mFD96s4CZWW/nKRK6yRob7+RHESNGS8TDnrR3Ccr8fvhxbR5WnSTTkl 2FP/oA0zixOW4toTtXksd8y6jTsiqiSkJyAS2WwE5R+u8bY7xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAWdkZylygsGfcahIzz9LbcWnytJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJi NTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIwY2M0MGVjNWUvY2YyYjUyNGItMTRiOS00 N2VlLWI5MzgtMzRiMGNjNDBlYzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YyYjUyNGItMTRiOS00N2VlLWI5 MzgtMzRiMGNjNDBlYzVlL2NmMmI1MjRiLTE0YjktNDdlZS1iOTM4LTM0YjBjYzQw ZWM1ZS5jcmwwHwYDVR0jBBgwFoAUWHUvLPuR0MXWh7HOPDK2TheF76kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJiNTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIw Y2M0MGVjNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzXLpAa9Dqghk6plhKNvqE wDmep0TL1goIiUaCkbj9T4z84MTpTiENd5DKVn8oymC18mkLLCk1MqLVutiE+sqN c2ruXnP7QMUVUXMcSJUVrifyo66QjOqDOP6kOC48zY2aFm1OTFACx46wl8z1pfGU mtnOlRICdh80N7E53Gdm8twUGBUMzL8K8b5FHTm3IPwrAoyB9keNoMK3XFNKAUNu dHwVJ0dy9urG69El4v4CUHxyzS9GBNBlZ19FPAtJmXGF/wIiScgvL1nnVOOMlaUK tOAtXWSV+KrTgjXqNx4iXJQBpfrK+Pk0hutzJinDpdjp9yWBGxdqji2QW3Ntzr5n -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:10 2025 by rpki-client