$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft File: ff7959e1-b47c-43d5-89e1-72b6a534e066.mft (raw, json) Hash identifier: WtCbnxFWERYhOb6RJOlE/iwu3NxNasRA9pGDZog4Ygg= Subject key identifier: CA:12:DD:3B:0C:A2:1B:BF:59:9A:E8:BB:EF:1D:CE:13:0D:99:69:9D Authority key identifier: AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF Certificate issuer: /CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Certificate serial: 010D0C9F4328584BC058028E2E58079D4CB4F880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft Manifest number: 010D0C9F4328584073A82394A76082DB06435625 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa (hash: BgpKlE5/xK0olOui4A5pSJWhnEPtQ+7v/Cq5fUskSfw=) 2: ff7959e1-b47c-43d5-89e1-72b6a534e066.crl (hash: r+aWx4BVsFDaLg4REooL8Il3G4mgDsv5QPKbo/DjLOk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:02:8e:2e:58:07:9d:4c:b4:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=0aaf70c3-6f6c-445e-a00b-2cf26a094c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:7f:5c:c6:8b:ae:47:2c:d4:32:9e:ed:fd: 7c:be:16:1b:d7:77:2b:0d:4c:ea:06:d6:f2:20:df: a6:93:9f:94:25:34:52:bc:df:9c:61:81:ea:92:d1: 14:34:4c:b7:b1:58:be:77:be:eb:77:15:28:25:30: bf:b0:ee:8a:0f:52:7a:a4:b7:83:02:51:50:2f:18: 88:b9:ff:25:53:54:de:48:40:2c:63:1e:4f:9f:16: bb:24:d7:17:9e:fe:11:58:85:81:c0:19:5d:60:cf: 57:dd:c4:ba:26:bf:2a:ae:74:af:e3:8e:ad:22:7c: 93:80:9d:bd:d8:6d:28:10:8b:02:11:95:ba:92:52: 96:aa:7c:23:43:7a:18:02:f7:7d:98:89:17:57:59: 65:17:c2:7a:37:20:62:39:57:bb:ab:7c:97:3a:22: d3:80:70:b9:fc:59:22:04:96:56:9e:0f:44:71:a3: 63:4a:8b:2b:0f:b6:be:f8:34:e2:76:d9:26:5f:83: 56:4e:f8:22:2d:b8:33:31:08:60:f3:bb:17:45:93: 7b:5a:28:6c:da:91:58:f0:18:88:19:61:64:d7:8e: fc:99:c6:5c:54:e7:a1:f0:b1:e1:a6:ca:4c:1d:8c: d0:62:58:ce:ff:61:b6:3e:96:ce:68:b0:22:8b:5c: 27:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:DD:3B:0C:A2:1B:BF:59:9A:E8:BB:EF:1D:CE:13:0D:99:69:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl X509v3 Authority Key Identifier: keyid:AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:7f:2e:2b:b6:89:8e:5d:54:9c:09:77:57:7e:bb:9a:d0:3c: a7:40:b7:64:ca:b4:a3:9f:71:30:c2:4c:f1:62:b1:5d:a4:59: f9:b2:48:9d:df:22:5e:c1:24:95:ab:97:6b:1d:6e:3a:10:d1: 52:15:8e:1b:ed:bf:e1:ab:c6:ea:2a:1a:dd:12:52:b4:b7:b3: be:aa:56:9e:e0:5b:83:94:4a:ef:d5:cd:4d:26:7c:41:81:ea: 1c:44:70:39:10:5c:25:1f:7a:49:83:56:9c:24:6f:d9:e4:24: b5:02:f8:28:18:00:9a:f8:36:7e:a0:18:3f:52:d8:a3:82:e4: 44:0c:ff:55:f2:03:d5:4e:4b:c1:e4:0f:45:65:11:36:13:53: 97:87:9c:d0:3f:c0:c6:60:4b:c6:6e:bf:6d:2c:c1:87:ab:ce: 64:9d:33:f2:b5:59:de:cf:1f:a3:75:a1:7d:c5:55:7e:01:5d: 5e:b7:55:bd:0e:f7:4f:c6:80:77:95:8f:bd:21:85:8e:d1:28: 3f:51:90:57:f2:b6:1e:01:cd:d9:af:6b:f5:03:b1:23:d6:9a: ba:c5:9c:42:ac:d3:f8:54:98:95:57:8e:4d:15:5c:66:fa:58: a7:3c:6e:65:2b:f8:88:6a:5a:8c:22:5c:e3:7d:a8:10:d0:35: 60:26:92:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAKOLlgHnUy0+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5ZTEtNzJiNmE1MzRl MDY2MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk MGFhZjcwYzMtNmY2Yy00NDVlLWEwMGItMmNmMjZhMDk0YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrl/XMaLrkcs1DKe7f18vhYb13crDUzqBtby IN+mk5+UJTRSvN+cYYHqktEUNEy3sVi+d77rdxUoJTC/sO6KD1J6pLeDAlFQLxiI uf8lU1TeSEAsYx5Pnxa7JNcXnv4RWIWBwBldYM9X3cS6Jr8qrnSv446tInyTgJ29 2G0oEIsCEZW6klKWqnwjQ3oYAvd9mIkXV1llF8J6NyBiOVe7q3yXOiLTgHC5/Fki BJZWng9EcaNjSosrD7a++DTidtkmX4NWTvgiLbgzMQhg87sXRZN7Wihs2pFY8BiI GWFk1478mcZcVOeh8LHhpspMHYzQYljO/2G2PpbOaLAii1wnkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMoS3TsMohu/WZrou+8dzhMNmWmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5 NTllMS1iNDdjLTQzZDUtODllMS03MmI2YTUzNGUwNjYvZmY3OTU5ZTEtYjQ3Yy00 M2Q1LTg5ZTEtNzJiNmE1MzRlMDY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5 ZTEtNzJiNmE1MzRlMDY2L2ZmNzk1OWUxLWI0N2MtNDNkNS04OWUxLTcyYjZhNTM0 ZTA2Ni5jcmwwHwYDVR0jBBgwFoAUrzLB5jW47PfmZnYUm+zn/Veo2r8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5NTllMS1iNDdjLTQzZDUtODllMS03MmI2 YTUzNGUwNjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCufy4rtomOXVScCXdXfrua 0DynQLdkyrSjn3EwwkzxYrFdpFn5skid3yJewSSVq5drHW46ENFSFY4b7b/hq8bq KhrdElK0t7O+qlae4FuDlErv1c1NJnxBgeocRHA5EFwlH3pJg1acJG/Z5CS1Avgo GACa+DZ+oBg/UtijguREDP9V8gPVTkvB5A9FZRE2E1OXh5zQP8DGYEvGbr9tLMGH q85knTPytVnezx+jdaF9xVV+AV1et1W9DvdPxoB3lY+9IYWO0Sg/UZBX8rYeAc3Z r2v1A7Ej1pq6xZxCrNP4VJiVV45NFVxm+linPG5lK/iIalqMIlzjfagQ0DVgJpKm -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:48 2025 by rpki-client