$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft File: cfe58959-04ed-4c71-a14d-8066ccb1353a.mft (raw, json) Hash identifier: qhwG4JsmHiMuC+tWNapnRGOeZaX5MyJCQ2+fE/yoJBI= Subject key identifier: CE:52:12:2F:74:ED:60:64:37:31:A9:28:B4:8F:06:F2:58:DC:41:9E Authority key identifier: 13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA Certificate issuer: /CN=cfe58959-04ed-4c71-a14d-8066ccb1353a Certificate serial: 010D0C9F4328584BC058001EC327E685D44FEC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft Manifest number: 010D0C9F43285841D114BD90D8F5816ACF07A728 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: 6baba012-218c-3bcb-ac7a-45c289968d81.roa (hash: o1m4xay3oDO3SRdvlCPHyMTeGKkLIsrQWihyLiYEefA=) 2: cfe58959-04ed-4c71-a14d-8066ccb1353a.crl (hash: 3eaGZ3P7UbbjU8K1RV0/2+i9Tn20Rxube7nA+BMPStg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:1e:c3:27:e6:85:d4:4f:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe58959-04ed-4c71-a14d-8066ccb1353a Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=60101231-ada3-4473-bf1f-47138f044430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:8f:c0:91:d6:1e:d7:a4:41:6b:3d:d2:6d: 14:10:61:5d:9e:7a:a4:62:bc:a5:80:87:a8:b0:00: 86:d0:4a:ed:36:64:d2:4a:8e:b8:98:9f:63:86:1f: ab:90:98:8d:20:9d:67:08:03:88:19:bf:62:f1:8a: 41:5d:af:80:5d:c4:dc:53:55:e7:5f:a9:5e:96:e7: ac:d4:8b:b2:5f:64:35:54:92:ce:3d:14:42:d6:a5: 22:88:aa:ab:43:1f:da:e2:12:e4:9a:51:f5:2a:ac: 44:17:74:cd:fa:39:d3:a5:24:c2:b3:59:72:4e:4d: ee:4b:60:60:14:50:22:88:19:55:7e:ed:ea:94:84: 27:4e:82:28:ec:8d:b5:8a:e5:9b:7c:ac:48:41:78: 9e:e3:f4:24:55:ba:ca:ec:88:53:13:83:17:ad:c9: fb:a9:66:4a:b9:81:d9:e5:47:a2:97:71:af:06:22: 7f:5c:bf:df:9b:b3:8e:24:5f:92:42:77:df:03:35: 56:28:29:f9:10:5f:71:94:8f:d1:f0:9b:e3:33:7d: 13:df:16:74:9c:6b:2e:ea:e1:20:f1:ab:9b:f5:25: f6:b2:9e:e5:a8:46:8c:7c:0a:83:0a:8f:ad:fa:1b: 68:87:28:ec:6e:f9:81:5c:88:8d:b8:61:46:d2:87: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:12:2F:74:ED:60:64:37:31:A9:28:B4:8F:06:F2:58:DC:41:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.crl X509v3 Authority Key Identifier: keyid:13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a6:9a:fc:f4:7e:3c:57:34:69:f2:53:d7:cd:09:96:4b:f6: c0:b9:32:60:3c:06:17:31:0c:61:74:9c:9d:b5:70:7c:22:16: 0a:4b:e8:96:ee:42:4a:da:60:48:6a:03:ff:68:db:0b:b6:2a: 99:ea:e6:c2:8e:21:b1:ec:ec:61:00:46:34:a6:43:f5:31:d4: c3:fa:97:9c:29:4d:0f:f4:98:54:60:d7:9d:2d:d8:e7:5d:49: 27:d7:a8:2c:c0:95:cb:60:8d:b1:8c:46:2f:8f:8c:7b:8b:9e: 91:65:f1:8d:a0:8f:b0:05:07:9c:00:d0:62:38:9f:c1:14:95: 1a:8b:32:d9:cc:c0:cd:28:39:01:63:c1:47:46:f7:2a:0f:bd: 71:39:a6:5c:aa:f6:c9:4e:eb:6c:a1:24:53:d9:f0:ab:3d:cc: 0e:bc:1a:34:8d:df:8e:49:dd:61:ea:03:5e:34:b1:f8:bc:c3: 35:12:15:87:c7:e1:25:14:96:ed:de:10:bb:f8:30:b0:35:5f: 52:e7:36:93:fe:0e:0c:37:bb:b8:b6:8a:d8:c2:6b:e5:2c:f4: 95:74:d8:47:d7:c6:34:12:2c:ab:26:cd:79:46:6d:69:8e:fa: b1:90:b0:6b:3e:bd:4a:bf:be:49:1d:15:73:25:23:30:42:03: 3d:7d:9d:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAAewyfmhdRP7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZlNTg5NTktMDRlZC00YzcxLWExNGQtODA2NmNjYjEz NTNhMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk NjAxMDEyMzEtYWRhMy00NDczLWJmMWYtNDcxMzhmMDQ0NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnSPwJHWHtekQWs90m0UEGFdnnqkYrylgIeo sACG0ErtNmTSSo64mJ9jhh+rkJiNIJ1nCAOIGb9i8YpBXa+AXcTcU1XnX6lelues 1IuyX2Q1VJLOPRRC1qUiiKqrQx/a4hLkmlH1KqxEF3TN+jnTpSTCs1lyTk3uS2Bg FFAiiBlVfu3qlIQnToIo7I21iuWbfKxIQXie4/QkVbrK7IhTE4MXrcn7qWZKuYHZ 5Ueil3GvBiJ/XL/fm7OOJF+SQnffAzVWKCn5EF9xlI/R8JvjM30T3xZ0nGsu6uEg 8aub9SX2sp7lqEaMfAqDCo+t+htohyjsbvmBXIiNuGFG0odSMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM5SEi907WBkNzGpKLSPBvJY3EGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmU1 ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2Y2NiMTM1M2EvY2ZlNTg5NTktMDRlZC00 YzcxLWExNGQtODA2NmNjYjEzNTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZlNTg5NTktMDRlZC00YzcxLWEx NGQtODA2NmNjYjEzNTNhL2NmZTU4OTU5LTA0ZWQtNGM3MS1hMTRkLTgwNjZjY2Ix MzUzYS5jcmwwHwYDVR0jBBgwFoAUEw963dwvaZ0yeGSXvXm6W0XNxeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmU1ODk1OS0wNGVkLTRjNzEtYTE0ZC04MDY2 Y2NiMTM1M2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyppr89H48VzRp8lPXzQmW S/bAuTJgPAYXMQxhdJydtXB8IhYKS+iW7kJK2mBIagP/aNsLtiqZ6ubCjiGx7Oxh AEY0pkP1MdTD+pecKU0P9JhUYNedLdjnXUkn16gswJXLYI2xjEYvj4x7i56RZfGN oI+wBQecANBiOJ/BFJUaizLZzMDNKDkBY8FHRvcqD71xOaZcqvbJTutsoSRT2fCr PcwOvBo0jd+OSd1h6gNeNLH4vMM1EhWHx+ElFJbt3hC7+DCwNV9S5zaT/g4MN7u4 torYwmvlLPSVdNhH18Y0EiyrJs15Rm1pjvqxkLBrPr1Kv75JHRVzJSMwQgM9fZ1F -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:43 2025 by rpki-client