$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft File: cf438e4b-3515-40c3-b514-36b1b15593d8.mft (raw, json) Hash identifier: kXrFTDFdnQkpLUhZDoAPGbLfpeWr+wfoupvGh0IrM+E= Subject key identifier: 01:6E:24:B6:7F:D2:6E:9E:76:91:60:FF:AF:BA:61:86:F2:80:43:6E Authority key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD Certificate issuer: /CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Certificate serial: 010D0C9F4328584BC03A2C8CD3BE34882AD5A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft Manifest number: 010D0C9F43285849387A9FFB6B2F57635D8A4671 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa (hash: IE6jEXURdN3jO9IEUP0pIY+xR6gOIvAmzqBAjstuhL0=) 2: cf438e4b-3515-40c3-b514-36b1b15593d8.crl (hash: 8zRJD/8e/7AQY0U493OE7jblaus7mnzw9AGhJ/lPaFk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2c:8c:d3:be:34:88:2a:d5:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=793e5f6d-955c-40a5-bee9-f86a5561f91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:56:43:e9:f4:b1:7e:29:0e:80:1f:13:15: 67:28:3c:f4:bb:fe:5d:c8:7f:fe:04:17:4b:a8:4a: bd:f4:f7:c3:1e:8d:42:2b:2b:a5:57:c4:51:88:b6: f4:ff:72:ad:68:b7:a1:57:6d:2e:6e:31:39:a8:16: a6:c2:60:60:ec:13:c1:fb:20:59:68:6a:ba:9a:9a: ff:24:12:1d:96:55:27:bb:5c:92:3a:3a:23:aa:d0: de:c3:83:40:a3:18:20:8d:1f:51:68:15:84:e7:ce: bd:e3:ef:13:64:33:c9:e7:64:3a:a1:54:d1:6c:5f: 01:cd:89:ee:51:27:b8:a9:1d:19:68:fa:90:df:e5: 96:ac:5b:5c:b8:d9:3c:33:55:8b:58:e8:40:22:2a: 3c:6d:9e:1b:20:3b:79:4c:e5:a1:e6:a0:9b:3b:2f: 92:3e:73:c3:40:2a:55:86:fc:5c:28:b5:86:ce:8a: 67:58:8c:06:2f:06:61:1a:17:5d:0d:a7:ec:33:77: 3c:8c:ca:61:be:9b:ea:c3:07:5a:b0:c9:7f:ae:5b: 38:6a:aa:63:c2:c9:74:0e:a5:54:f4:ab:e6:39:e8: 2d:34:0f:1a:d7:08:64:6c:a2:1f:67:05:b6:55:79: 46:51:2e:9c:e4:84:39:80:e7:41:4f:3f:a3:40:e6: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6E:24:B6:7F:D2:6E:9E:76:91:60:FF:AF:BA:61:86:F2:80:43:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl X509v3 Authority Key Identifier: keyid:BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a6:f4:38:56:b9:4b:0c:30:41:de:0a:77:3f:ee:05:e0:68: fa:b7:e2:07:a4:3a:d2:78:d4:8b:69:0e:5f:8e:d2:ba:89:99: aa:e1:f8:42:b0:9a:ed:2c:d6:16:53:ee:89:f9:68:7c:64:1f: 27:f9:e7:15:38:2a:86:fb:ce:89:9a:9c:d6:de:7c:99:0d:65: 94:91:66:c8:ec:de:63:6f:ea:b8:33:fa:2c:c7:72:ac:03:10: 23:a1:2f:33:e6:93:88:e6:31:08:f4:6e:98:81:59:6c:e9:2c: 48:31:16:07:b4:8a:2b:81:8c:3c:e1:3d:60:ad:75:2b:bf:c3: 97:4e:8e:19:38:5e:a5:0f:68:6b:60:f2:77:ac:ba:1b:0e:93: 04:6d:58:83:d0:de:18:ab:30:4e:6f:05:e4:ec:12:56:c7:12: af:e0:24:69:4f:91:d4:1f:8f:9e:33:d6:a6:94:73:5c:dd:2e: fd:d0:27:72:a5:99:47:4e:e7:94:15:6f:e2:ed:d6:25:d4:c9: 5c:62:38:c2:1a:ad:51:c8:c8:ec:c5:7b:46:e9:d2:db:4d:02: 3a:d3:c5:74:7a:ad:67:fb:44:6b:bf:64:c7:90:e0:ed:b7:d9: fe:81:d5:42:8b:ea:b8:67:e1:fa:6a:19:6b:23:32:8f:a6:9a: d9:1c:f0:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOiyM0740iCrVowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y0MzhlNGItMzUxNS00MGMzLWI1MTQtMzZiMWIxNTU5 M2Q4MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NzkzZTVmNmQtOTU1Yy00MGE1LWJlZTktZjg2YTU1NjFmOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+5WQ+n0sX4pDoAfExVnKDz0u/5dyH/+BBdL qEq99PfDHo1CKyulV8RRiLb0/3KtaLehV20ubjE5qBamwmBg7BPB+yBZaGq6mpr/ JBIdllUnu1ySOjojqtDew4NAoxggjR9RaBWE58694+8TZDPJ52Q6oVTRbF8BzYnu USe4qR0ZaPqQ3+WWrFtcuNk8M1WLWOhAIio8bZ4bIDt5TOWh5qCbOy+SPnPDQCpV hvxcKLWGzopnWIwGLwZhGhddDafsM3c8jMphvpvqwwdasMl/rls4aqpjwsl0DqVU 9KvmOegtNA8a1whkbKIfZwW2VXlGUS6c5IQ5gOdBTz+jQObNDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFuJLZ/0m6edpFg/6+6YYbygENuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZjQz OGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1NTkzZDgvY2Y0MzhlNGItMzUxNS00 MGMzLWI1MTQtMzZiMWIxNTU5M2Q4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2Y0MzhlNGItMzUxNS00MGMzLWI1 MTQtMzZiMWIxNTU5M2Q4L2NmNDM4ZTRiLTM1MTUtNDBjMy1iNTE0LTM2YjFiMTU1 OTNkOC5jcmwwHwYDVR0jBBgwFoAUvpJwZfXmDbQRBqzWGqwiJj2MTd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIx YjE1NTkzZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/pvQ4VrlLDDBB3gp3P+4F 4Gj6t+IHpDrSeNSLaQ5fjtK6iZmq4fhCsJrtLNYWU+6J+Wh8ZB8n+ecVOCqG+86J mpzW3nyZDWWUkWbI7N5jb+q4M/osx3KsAxAjoS8z5pOI5jEI9G6YgVls6SxIMRYH tIorgYw84T1grXUrv8OXTo4ZOF6lD2hrYPJ3rLobDpMEbViD0N4YqzBObwXk7BJW xxKv4CRpT5HUH4+eM9amlHNc3S790CdypZlHTueUFW/i7dYl1MlcYjjCGq1RyMjs xXtG6dLbTQI608V0eq1n+0Rrv2THkODtt9n+gdVCi+q4Z+H6ahlrIzKPpprZHPAr -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:15 2025 by rpki-client