$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: ozerKxEZBsOFGwQjIrb//taRTx6Xu85/5ZGJ52TmMbo= Subject key identifier: F3:8B:89:F6:E0:3E:E2:4C:03:A4:E8:7E:22:AF:11:5F:2A:F8:DB:72 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584B728620FA71A9C5925396B1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD3BC Signing time: Tue 07 Oct 2025 23:00:03 +0000 Manifest this update: Tue 07 Oct 2025 23:00:03 +0000 Manifest next update: Fri 10 Oct 2025 23:00:00 +0000 Files and hashes: 1: aed05680-7f44-3f44-8086-236e2e2c39d6.roa (hash: sw7T79LUNfllVeW9e0JV5ptEYU3fukD5lOuA9gw9XtA=) 2: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: SkW3tQfAzoUNdg4fXW/SToNBOrnVh0KCc2Teca/Sm/c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:86:20:fa:71:a9:c5:92:53:96:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Oct 7 23:00:03 2025 GMT Not After : Oct 10 23:00:00 2025 GMT Subject: CN=d2dc9a27-1432-4eb9-af00-02e7d95ab481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:19:d7:3d:19:04:94:38:4c:a8:69:27:16: 35:cb:56:3e:bd:57:19:14:7e:01:d6:e8:5e:b5:4e: 7e:79:cd:1d:d4:91:1d:a8:14:8d:e9:a3:b5:a8:5c: 52:6a:59:7a:d0:21:ac:5e:23:ef:08:56:c5:d0:77: ea:00:c1:ab:94:fb:50:dc:18:2a:44:9b:6c:cf:0f: 3a:37:98:16:20:5d:cf:b3:ac:c8:88:43:8c:5b:89: 77:9e:30:16:b4:db:ca:48:72:bd:0c:36:00:79:88: 94:55:fd:25:89:7c:fd:84:e8:e6:e6:68:77:0a:61: 58:86:ad:04:14:75:ba:3a:f1:af:7e:bb:ec:28:3b: c1:b1:ed:e8:f9:65:fd:61:9b:3e:38:f7:0e:99:18: e8:28:53:87:6e:06:a3:4c:c7:6e:df:4f:f3:76:d5: 41:f6:9b:7b:94:8d:8a:05:86:c7:20:c0:b4:c0:50: 4a:1b:1a:b9:b8:0b:81:ab:d4:97:fe:93:e8:33:f1: bb:ec:58:e0:b7:a2:9d:0a:40:3f:0b:38:52:7f:15: 96:76:6a:98:ed:0c:e9:ad:66:1d:0b:70:68:29:ea: 5b:12:a8:5d:71:f5:1a:5f:ed:b0:f8:4f:e5:04:ad: 81:e1:70:4a:44:d1:f0:a1:e8:e0:bd:a7:a0:2c:64: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:89:F6:E0:3E:E2:4C:03:A4:E8:7E:22:AF:11:5F:2A:F8:DB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:76:74:53:7a:93:1b:32:5d:25:e3:e2:93:48:cf:95:ba:23: 2b:89:49:d9:ea:c1:37:4c:ae:ee:25:ef:5b:b7:ad:54:f9:a5: 30:ad:ae:9f:73:0a:aa:33:50:38:cf:b3:e2:20:0c:15:f3:3c: 36:5e:7f:95:76:a2:4e:a8:45:7e:61:c3:6a:e3:9a:99:78:d6: 79:a4:94:9e:e2:2b:f4:95:18:cb:3a:52:05:c5:db:11:e2:9b: ce:2f:62:05:37:37:41:87:18:8d:0c:00:57:31:e3:7d:9a:b4: a9:cc:b5:ff:31:5a:85:c9:18:2e:16:39:16:56:ed:19:c9:59: d5:18:f1:2e:7e:ca:46:3f:01:44:16:ae:22:00:9e:74:3b:80: 19:be:52:48:bc:a2:d0:36:f5:51:52:62:39:91:e4:99:91:04: c1:13:c1:12:de:fb:94:b2:61:3b:65:38:7b:c7:36:a1:ca:b1: 82:36:61:38:ad:a5:89:6f:ca:68:70:64:1f:01:7f:c5:91:dc: 43:06:9f:19:03:1e:41:7b:bc:2a:f4:55:af:4b:b1:13:0f:31: 60:87:0c:c1:d4:3c:01:fb:78:2d:d8:8b:84:ce:6d:29:ab:d5: 9f:1b:f4:2e:d1:c2:4b:df:9e:af:18:b5:1f:ec:73:e8:99:71: 03:4c:43:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyhiD6canFklOWseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI1MTAwNzIzMDAwM1oXDTI1MTAxMDIzMDAwMFowLzEtMCsGA1UEAxMk ZDJkYzlhMjctMTQzMi00ZWI5LWFmMDAtMDJlN2Q5NWFiNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3sZ1z0ZBJQ4TKhpJxY1y1Y+vVcZFH4B1uhe tU5+ec0d1JEdqBSN6aO1qFxSall60CGsXiPvCFbF0HfqAMGrlPtQ3BgqRJtszw86 N5gWIF3Ps6zIiEOMW4l3njAWtNvKSHK9DDYAeYiUVf0liXz9hOjm5mh3CmFYhq0E FHW6OvGvfrvsKDvBse3o+WX9YZs+OPcOmRjoKFOHbgajTMdu30/zdtVB9pt7lI2K BYbHIMC0wFBKGxq5uAuBq9SX/pPoM/G77Fjgt6KdCkA/CzhSfxWWdmqY7QzprWYd C3BoKepbEqhdcfUaX+2w+E/lBK2B4XBKRNHwoejgvaegLGSm2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPOLifbgPuJMA6TofiKvEV8q+NtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLdnRTepMbMl0l4+KTSM+V uiMriUnZ6sE3TK7uJe9bt61U+aUwra6fcwqqM1A4z7PiIAwV8zw2Xn+VdqJOqEV+ YcNq45qZeNZ5pJSe4iv0lRjLOlIFxdsR4pvOL2IFNzdBhxiNDABXMeN9mrSpzLX/ MVqFyRguFjkWVu0ZyVnVGPEufspGPwFEFq4iAJ50O4AZvlJIvKLQNvVRUmI5keSZ kQTBE8ES3vuUsmE7ZTh7xzahyrGCNmE4raWJb8pocGQfAX/FkdxDBp8ZAx5Be7wq 9FWvS7ETDzFghwzB1DwB+3gt2IuEzm0pq9WfG/Qu0cJL356vGLUf7HPomXEDTEMG -----END CERTIFICATE-----Generated at Wed Oct 8 17:28:51 2025 by rpki-client