$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: G6Ag3GKKI6eYrglkPhHowzYv0ODidlWmzSi6/DpH7jY= Subject key identifier: BA:AA:50:E1:8C:72:5C:A4:28:C2:92:3E:42:0F:48:E5:D2:2B:CF:FC Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584BC0B147D14EB4DF12D712C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD3D9 Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: aed05680-7f44-3f44-8086-236e2e2c39d6.roa (hash: YJhxqropJQlQgRO39h3AzzKOSMvdqhYOnk1s0iRjW5k=) 2: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: euDyU46MwEa/Yg0GCzysKGUstO+171WIqksN4Z9EZC4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:47:d1:4e:b4:df:12:d7:12:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=9959a642-a7ab-4698-8c72-aa24f23d86b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:3c:b7:b2:5b:d9:d5:50:d0:68:a2:da:fa: dc:ec:4c:e7:c6:e1:f6:37:21:0e:1a:53:bf:b4:4d: 4f:df:53:44:14:b1:14:9c:ff:b0:ff:48:2f:d2:b1: 6b:05:99:18:43:ae:ae:6d:87:11:c6:d2:b8:2b:c1: e7:da:36:14:1c:6a:28:1a:63:08:69:1f:40:9b:af: 38:d7:76:10:97:4a:2b:58:cc:11:5e:bc:43:c3:e0: 0c:39:a4:c6:8d:0f:a5:6f:93:ba:12:0f:e1:1d:43: a9:6b:02:fb:24:81:03:ce:6c:30:fc:01:0a:d0:95: 60:30:b2:66:d1:f7:1f:61:b4:1d:9d:3f:12:40:ae: 5d:25:32:f9:e0:d1:c6:56:18:b7:e1:08:88:1d:30: 7e:1e:71:c5:3a:3e:4b:10:27:21:a5:f6:9a:63:88: 70:6d:26:2c:ea:07:b6:7b:ff:ef:f6:7c:8a:8c:10: 81:e8:39:cb:b7:4e:44:fd:19:f6:37:27:3a:8d:82: 66:b7:a2:c9:31:44:7d:9d:d1:c4:ef:74:de:48:00: e7:f2:88:a3:79:ce:05:b5:a2:f2:5c:f0:b7:c9:70: 55:3a:6c:5d:ac:a7:64:c0:bb:67:37:5e:48:10:bf: e3:bf:79:dc:5d:63:ea:b4:be:65:7a:4d:f2:ae:30: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:50:E1:8C:72:5C:A4:28:C2:92:3E:42:0F:48:E5:D2:2B:CF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:94:a1:f6:c8:8b:ea:65:52:0c:3d:13:d3:4d:a2:59:bd:5b: 1a:6e:4b:07:0c:3b:f1:14:13:cb:2f:dd:32:dc:6c:5a:54:9a: 81:d1:ec:6b:9c:f7:b6:14:ec:f8:e7:77:43:fb:20:32:ed:81: 66:bd:f5:45:2e:46:cc:3a:17:92:f9:bf:ea:60:04:19:14:c5: 53:4b:60:5e:6e:3b:94:8a:72:ef:00:28:b1:f4:15:67:91:c2: 02:5f:ab:d9:32:2d:37:55:55:ff:17:8f:67:c4:67:89:34:0a: 41:06:df:e1:98:94:e6:82:57:3a:c1:41:66:de:21:08:e9:1d: 9a:e4:a0:75:f9:df:f4:1f:66:76:96:66:bd:28:a4:19:ee:8e: f5:2a:ae:e2:b8:94:96:80:c3:89:88:96:e9:56:c4:da:37:39: eb:d0:b0:16:98:1a:eb:83:c1:1e:c5:1b:ca:6a:97:10:97:35: f3:96:a1:91:f2:78:c1:3a:d3:8d:7c:80:16:25:55:a0:e5:14: 05:75:40:c8:bd:75:c1:0d:3a:4e:19:4f:38:02:0d:fc:15:f3: fe:d6:fb:16:af:e2:07:90:fe:fc:98:1c:9b:e2:31:10:b6:28: aa:97:3c:e0:92:6c:a0:e4:bd:0e:c2:ac:39:8e:ae:21:38:b1: 40:a9:3e:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUfRTrTfEtcSwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk OTk1OWE2NDItYTdhYi00Njk4LThjNzItYWEyNGYyM2Q4NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkc8t7Jb2dVQ0Gii2vrc7EznxuH2NyEOGlO/ tE1P31NEFLEUnP+w/0gv0rFrBZkYQ66ubYcRxtK4K8Hn2jYUHGooGmMIaR9Am684 13YQl0orWMwRXrxDw+AMOaTGjQ+lb5O6Eg/hHUOpawL7JIEDzmww/AEK0JVgMLJm 0fcfYbQdnT8SQK5dJTL54NHGVhi34QiIHTB+HnHFOj5LECchpfaaY4hwbSYs6ge2 e//v9nyKjBCB6DnLt05E/Rn2Nyc6jYJmt6LJMUR9ndHE73TeSADn8oijec4FtaLy XPC3yXBVOmxdrKdkwLtnN15IEL/jv3ncXWPqtL5lek3yrjA2KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLqqUOGMclykKMKSPkIPSOXSK8/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAylKH2yIvqZVIMPRPTTaJZ vVsabksHDDvxFBPLL90y3GxaVJqB0exrnPe2FOz453dD+yAy7YFmvfVFLkbMOheS +b/qYAQZFMVTS2BebjuUinLvACix9BVnkcICX6vZMi03VVX/F49nxGeJNApBBt/h mJTmglc6wUFm3iEI6R2a5KB1+d/0H2Z2lma9KKQZ7o71Kq7iuJSWgMOJiJbpVsTa Nznr0LAWmBrrg8EexRvKapcQlzXzlqGR8njBOtONfIAWJVWg5RQFdUDIvXXBDTpO GU84Ag38FfP+1vsWr+IHkP78mByb4jEQtiiqlzzgkmyg5L0Owqw5jq4hOLFAqT41 -----END CERTIFICATE-----Generated at Wed Nov 5 09:24:53 2025 by rpki-client