$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft File: cd8deff7-6be9-4d16-8349-9f6439775b0a.mft (raw, json) Hash identifier: zP6W+mqEV5gRmMFSIAuLI5I+yY9jjBtygz/63AJMiBw= Subject key identifier: 41:28:A4:67:49:73:3D:B9:F0:2A:DA:9C:01:CB:70:48:FD:F5:5B:8F Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F4328584BB9B691593970AFD66A1D4E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft Manifest number: 010D0C9F432858455B71E226BA6E1C5A8869455A Signing time: Sun 02 Nov 2025 11:00:04 +0000 Manifest this update: Sun 02 Nov 2025 11:00:04 +0000 Manifest next update: Wed 05 Nov 2025 11:00:00 +0000 Files and hashes: 1: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (hash: Nb26YBMdRQasVIIgOaLXbXoyvUsfpOk9v1OP8TYxHpQ=) 2: 92ecd3af-616b-30b8-8f04-b100fd223035.roa (hash: 7MQ+S6ZXNlGxJulRXULGCMITsUMpjZkDOCW/g9HGSuY=) 3: cd8deff7-6be9-4d16-8349-9f6439775b0a.crl (hash: 6EX1sBsCBWus+VIu3HiFJwtp7G+sAJMegI5zuPqrM0s=) 4: d294f045-3323-3f7a-bd57-473408d74726.roa (hash: gd8cz3tJ8wrIxEIM8ESD6MEkepFvYwBLsvkdjsMbLdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:b6:91:59:39:70:af:d6:6a:1d:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Nov 2 11:00:04 2025 GMT Not After : Nov 5 11:00:00 2025 GMT Subject: CN=86cc995e-b5b4-41d5-86bb-02ec2a255f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:11:4d:19:80:1b:59:eb:ca:d4:e6:ae:3a: e7:df:bf:a3:72:5f:89:b2:cf:f0:ad:5c:2e:f6:20: 5d:73:ff:18:cc:f3:65:81:10:9e:8e:81:0c:6f:dd: c9:8c:ad:ed:ac:af:ac:26:19:7f:e8:a4:97:19:40: 36:42:5f:c5:14:1c:c6:67:d6:60:54:ed:86:a7:33: 0f:57:31:c6:df:4e:51:48:57:71:f2:e7:56:37:19: 3f:e7:a8:8a:8b:80:b5:5e:64:69:4b:0d:8e:85:a7: 8f:c3:d5:3e:7a:67:d1:bb:1d:a8:c2:08:61:8e:36: 8e:8c:b5:fd:04:62:b7:dc:35:d2:8d:10:fd:ef:e1: f1:af:79:4a:29:a7:85:ff:ad:1a:73:ab:2a:22:a8: 67:29:ee:05:94:d5:b4:b3:9a:6c:b9:16:88:59:34: a9:cb:0a:b1:61:a6:4f:73:73:54:7d:85:d4:25:60: 4a:28:4b:fd:9c:f4:dd:86:0e:e2:e5:47:02:8c:25: 1a:4b:47:5f:8a:e8:db:7d:6c:81:df:73:ba:7a:c6: 72:b5:76:97:ec:29:ce:a5:ca:b5:b3:d8:cc:67:b0: bd:b5:cf:7d:85:2f:0e:62:bd:e3:09:c4:d2:c7:f8: 64:b5:c9:01:00:46:2d:1f:fc:03:39:e6:b7:2b:f3: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:A4:67:49:73:3D:B9:F0:2A:DA:9C:01:CB:70:48:FD:F5:5B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:95:32:9a:8e:74:ae:e9:cb:40:5c:44:a9:61:c0:a2:8d:89: 62:73:8e:0e:8a:89:02:a5:f4:48:8c:13:fb:ba:3d:3d:95:46: 4c:ec:f3:19:1b:68:59:d7:5a:64:ce:ed:fe:d1:56:76:58:b7: 0c:ec:95:50:cc:8f:8b:1a:bd:85:ab:0f:78:d2:3e:31:d7:6c: 2d:f4:41:49:73:76:c4:d6:a3:c8:a1:d8:40:b8:e4:27:68:1b: 3f:66:94:08:21:ef:06:f7:d0:17:2e:71:d7:00:8e:51:93:bb: 23:a2:6d:98:f8:3c:89:23:69:0f:c4:32:0a:ef:71:01:b4:24: ff:0b:28:05:9a:e4:b4:1f:50:6d:58:92:bd:35:75:de:21:4c: 7a:90:bf:ef:b2:73:0f:9f:9e:fc:b3:27:a7:a6:65:89:7c:4a: 97:d7:cc:d7:ee:0f:61:32:51:44:79:e8:46:d0:b4:76:0f:ef: 78:2d:ff:ac:10:7b:fe:77:61:e4:0f:b5:94:08:03:91:6a:40: a2:be:de:e6:a6:79:3c:e8:05:7e:8e:90:0f:81:6a:40:64:1a: 1f:59:cd:19:9e:87:c7:e9:c7:e8:b1:b5:c6:99:e0:6a:22:a6: 36:b4:0f:b5:ea:5c:17:2e:ba:fc:08:c7:94:e2:c8:c1:bf:b5: 95:e4:de:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5tpFZOXCv1modTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI1MTEwMjExMDAwNFoXDTI1MTEwNTExMDAwMFowLzEtMCsGA1UEAxMk ODZjYzk5NWUtYjViNC00MWQ1LTg2YmItMDJlYzJhMjU1ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22QRTRmAG1nrytTmrjrn37+jcl+Jss/wrVwu 9iBdc/8YzPNlgRCejoEMb93JjK3trK+sJhl/6KSXGUA2Ql/FFBzGZ9ZgVO2GpzMP VzHG305RSFdx8udWNxk/56iKi4C1XmRpSw2OhaePw9U+emfRux2owghhjjaOjLX9 BGK33DXSjRD97+Hxr3lKKaeF/60ac6sqIqhnKe4FlNW0s5psuRaIWTSpywqxYaZP c3NUfYXUJWBKKEv9nPTdhg7i5UcCjCUaS0dfiujbfWyB33O6esZytXaX7CnOpcq1 s9jMZ7C9tc99hS8OYr3jCcTSx/hktckBAEYtH/wDOea3K/NeFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEEopGdJcz258CranAHLcEj99VuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvY2Q4ZGVmZjctNmJlOS00 ZDE2LTgzNDktOWY2NDM5Nzc1YjBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGlTKajnSu6ctAXESpYcCi jYlic44OiokCpfRIjBP7uj09lUZM7PMZG2hZ11pkzu3+0VZ2WLcM7JVQzI+LGr2F qw940j4x12wt9EFJc3bE1qPIodhAuOQnaBs/ZpQIIe8G99AXLnHXAI5Rk7sjom2Y +DyJI2kPxDIK73EBtCT/CygFmuS0H1BtWJK9NXXeIUx6kL/vsnMPn578syenpmWJ fEqX18zX7g9hMlFEeehG0LR2D+94Lf+sEHv+d2HkD7WUCAORakCivt7mpnk86AV+ jpAPgWpAZBofWc0ZnofH6cfosbXGmeBqIqY2tA+16lwXLrr8CMeU4sjBv7WV5N6l -----END CERTIFICATE-----Generated at Mon Nov 3 02:01:08 2025 by rpki-client