$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: A36N/9r3ChjRNSLb+S/j935w0Hb6WHy1OxBL8bTQAOI= Subject key identifier: BD:AF:FA:88:99:65:A1:DE:D3:1C:46:E6:47:E0:9C:BB:B8:47:40:C7 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584B8AB81F719D8DA30FA672F940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A477EA Signing time: Thu 16 Oct 2025 15:00:08 +0000 Manifest this update: Thu 16 Oct 2025 15:00:08 +0000 Manifest next update: Sun 19 Oct 2025 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: r5NFwIRyLFYi+t3G3jTGj1DHzIfUCqexgENS1RAXG9Y=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: 3f6zZyoR+K1I1MsBb/jG8246pet7DYheLObr032G5mI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:b8:1f:71:9d:8d:a3:0f:a6:72:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Oct 16 15:00:08 2025 GMT Not After : Oct 19 15:00:00 2025 GMT Subject: CN=56f6d60e-72d9-4528-988f-b17547a7616d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:39:b7:2a:1f:2a:a2:27:f8:a0:e9:3d:fe: e5:7b:29:c5:10:06:22:1e:c6:92:b2:c4:8d:a5:bd: 83:db:31:e0:53:14:c3:29:eb:fa:0f:5f:a3:d4:bf: bd:31:da:81:f8:bc:6a:b5:0d:f7:aa:ec:53:29:06: ff:3b:8f:7f:ca:51:61:d9:4c:b5:9d:d3:35:ca:41: 50:83:5a:e3:43:3f:3f:16:75:78:9c:6e:9b:8d:af: 90:99:71:98:68:e0:8e:66:ed:19:79:26:e7:e6:50: 0e:de:72:2e:19:50:03:b0:e4:76:d5:ba:04:6d:9a: 01:89:6c:90:24:5d:76:e6:54:c5:70:54:30:b2:9d: 17:39:4c:21:bf:80:51:93:48:db:96:88:ed:ed:e5: 5b:b7:39:da:de:1a:da:e0:7e:3e:30:44:53:9c:69: 28:00:16:54:20:a7:25:9d:57:d3:d1:da:19:6f:e8: 04:ef:26:e0:64:90:63:57:49:6d:17:b4:04:b0:d0: d4:8a:fc:e6:e6:f7:75:b0:8f:ff:f8:23:3b:07:3c: 35:2a:4c:f7:b2:3e:c9:4f:0b:7f:ea:74:f3:16:d2: 6f:95:33:f0:9e:ed:81:c7:a6:09:9b:5c:02:e2:62: b7:b4:94:8c:47:23:4b:b4:e5:07:9c:88:d6:37:04: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:FA:88:99:65:A1:DE:D3:1C:46:E6:47:E0:9C:BB:B8:47:40:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:48:e3:9e:f9:74:91:01:97:ac:90:29:f2:40:6e:08:29:54: 94:e0:6a:f7:91:fc:5a:97:2e:b2:4a:16:6b:44:5a:3f:c3:e4: 1d:b6:cd:c4:32:e0:36:de:5b:6c:d4:ed:b1:8d:d7:29:df:59: b1:fb:eb:4b:f1:e1:c4:5b:ff:19:2a:5b:ef:96:81:64:78:91: b0:f5:21:e2:82:c4:cf:77:29:5e:e8:17:c9:49:48:9d:11:58: 8f:ff:66:0a:c1:e8:c4:db:58:b5:09:1c:21:70:3d:a5:7c:39: ea:68:87:f8:ef:e9:12:c7:84:b4:96:1b:4a:00:41:e1:94:c5: cc:fb:4d:3d:a8:04:aa:f2:38:56:7c:a0:52:db:4a:9d:88:11: 3b:dd:35:60:40:cc:f6:22:ee:1f:f2:09:7a:8e:3b:46:52:33: ce:62:1e:62:a9:c1:3d:e1:b3:01:44:49:f4:d4:af:a4:9f:8b: 02:7f:52:12:89:ec:ab:bc:4f:7e:ee:83:db:d2:38:5b:2d:0f: ac:f6:af:25:7a:f4:04:d3:29:eb:d7:22:58:a7:24:79:b8:96: 1a:3a:db:17:4c:de:78:19:b5:6d:5c:26:22:7f:c7:08:f7:ed: 6c:58:18:90:1e:12:a1:56:c1:b0:0d:79:06:26:94:d6:28:3c: 26:9a:77:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuKuB9xnY2jD6Zy+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI1MTAxNjE1MDAwOFoXDTI1MTAxOTE1MDAwMFowLzEtMCsGA1UEAxMk NTZmNmQ2MGUtNzJkOS00NTI4LTk4OGYtYjE3NTQ3YTc2MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXA5tyofKqIn+KDpPf7leynFEAYiHsaSssSN pb2D2zHgUxTDKev6D1+j1L+9MdqB+LxqtQ33quxTKQb/O49/ylFh2Uy1ndM1ykFQ g1rjQz8/FnV4nG6bja+QmXGYaOCOZu0ZeSbn5lAO3nIuGVADsOR21boEbZoBiWyQ JF125lTFcFQwsp0XOUwhv4BRk0jblojt7eVbtzna3hra4H4+MERTnGkoABZUIKcl nVfT0doZb+gE7ybgZJBjV0ltF7QEsNDUivzm5vd1sI//+CM7Bzw1Kkz3sj7JTwt/ 6nTzFtJvlTPwnu2Bx6YJm1wC4mK3tJSMRyNLtOUHnIjWNwQu9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL2v+oiZZaHe0xxG5kfgnLu4R0DHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKSOOe+XSRAZeskCnyQG4I KVSU4Gr3kfxaly6yShZrRFo/w+Qdts3EMuA23lts1O2xjdcp31mx++tL8eHEW/8Z KlvvloFkeJGw9SHigsTPdyle6BfJSUidEViP/2YKwejE21i1CRwhcD2lfDnqaIf4 7+kSx4S0lhtKAEHhlMXM+009qASq8jhWfKBS20qdiBE73TVgQMz2Iu4f8gl6jjtG UjPOYh5iqcE94bMBREn01K+kn4sCf1ISieyrvE9+7oPb0jhbLQ+s9q8levQE0ynr 1yJYpyR5uJYaOtsXTN54GbVtXCYif8cI9+1sWBiQHhKhVsGwDXkGJpTWKDwmmneq -----END CERTIFICATE-----Generated at Fri Oct 17 09:38:10 2025 by rpki-client