$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft (raw, json) Hash identifier: kHpbH0l404Q3KTOUcOmdnA4r0PX6rMxeWTMVfojmWxI= Subject key identifier: 24:81:22:E3:19:FA:31:98:59:AA:E7:7C:EE:2E:52:D7:E0:8C:31:2A Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584B98AD7FF8924AC51791490800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft Manifest number: 010D0C9F432858474714BFB4E60C762DE243A729 Signing time: Tue 21 Oct 2025 15:00:04 +0000 Manifest this update: Tue 21 Oct 2025 15:00:04 +0000 Manifest next update: Fri 24 Oct 2025 15:00:00 +0000 Files and hashes: 1: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl (hash: mqC5orYlU3vWTAaMelerqJV7NGUdPSH7Zuxa00JT8UI=) 2: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (hash: ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo=) 3: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (hash: +9wHNw8x8lTKrcrbiK+BX31I4ryiRCgz60lIvS9qTuo=) 4: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (hash: Cy55k8QuhtGVkvURk86QEJnGSgpXYIcmqHEsCH+XWuM=) 5: d73dd892-ee55-3262-86e9-4939ca3508af.roa (hash: zSo3K+1VGxHsFzwRub9HghY6bVFMu7wCm03tvaiIS54=) 6: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (hash: tuvsYg9LDaULvngev+tOe4Gcs4+oe0mTh9XEznWQzaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:ad:7f:f8:92:4a:c5:17:91:49:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Oct 21 15:00:04 2025 GMT Not After : Oct 24 15:00:00 2025 GMT Subject: CN=9989535f-1e26-4fcc-bdc1-c51f1a1135b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:9f:20:f1:ea:4c:a0:ef:40:52:7c:49:64: e6:9d:e9:48:eb:f9:39:99:47:c6:ff:9b:cf:2b:dd: a2:8a:d5:7d:00:b3:09:e3:b2:a7:f9:a9:45:58:1e: 6e:a0:5b:6d:42:ca:c8:45:96:83:f5:07:f5:cd:61: 17:ae:04:c3:08:8b:5a:41:b9:67:16:c1:00:a2:02: 1c:25:ef:de:af:28:f3:0b:91:f9:3d:52:29:e2:7b: 9b:aa:8e:c8:bd:99:90:ab:71:75:23:87:f5:db:62: 1c:3c:46:69:eb:e4:04:00:f5:02:41:26:d1:d2:73: c3:57:e0:95:ee:ed:98:8b:6b:1d:a5:62:fe:ff:e7: 11:00:1e:b7:6b:bf:06:d5:fa:b0:80:e8:f9:78:e0: 73:c4:de:1a:13:63:ed:43:07:dd:3c:2b:f9:d2:13: 0c:2c:2b:45:0e:b3:94:b8:86:59:0d:78:a7:04:0b: 30:58:17:a5:b2:ec:81:6a:84:18:3e:b3:49:00:86: 53:79:f6:98:37:28:48:78:90:cf:ff:64:50:55:cf: 49:39:f0:ac:f8:7d:be:6d:a2:de:01:01:30:e6:40: 63:0e:f7:fd:35:8b:4d:24:af:82:f3:f2:49:34:cd: 05:72:b7:8f:5c:a0:96:08:d5:a0:78:32:79:6d:40: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:22:E3:19:FA:31:98:59:AA:E7:7C:EE:2E:52:D7:E0:8C:31:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:9d:f2:8e:a5:4c:7b:47:6c:97:59:67:9b:06:78:ea:61:f5: c3:80:37:ef:b0:4f:ff:4c:2e:a6:2d:fe:df:01:ac:cc:5e:60: 93:20:ed:c6:f9:2d:e8:99:cf:cb:01:1c:a0:53:6f:af:b9:20: a8:98:07:f3:13:6c:31:27:30:35:1a:6a:a3:15:59:42:1e:ac: ed:a9:35:ad:49:53:28:a9:38:97:2c:01:5d:7b:ec:47:f8:f9: 7c:38:88:8e:66:8e:27:b1:42:97:e8:2d:f2:a4:5b:01:4d:0f: 05:dc:a2:cb:4b:d2:4f:c6:69:b9:6e:1f:c2:70:e7:eb:2d:77: 62:9a:32:e2:33:4f:fd:32:c3:de:43:5e:cf:bc:e3:09:89:98: 0b:13:3b:16:f5:df:d3:78:52:ab:40:b6:a8:67:0b:74:02:40: f4:1f:54:73:8e:42:82:d8:a5:65:02:c2:ce:ce:25:56:5e:c7: af:14:a2:24:34:48:68:28:74:b1:39:28:38:6b:f7:22:cb:a7: 47:2f:49:fb:1e:fa:38:83:23:5f:2f:f9:37:75:e2:87:5d:4c: 9a:b7:9d:b3:79:97:aa:8a:2b:1a:00:c2:4e:dc:5f:24:c3:9b: 49:8b:2e:d7:23:39:c3:3d:0b:2c:b0:7a:e6:9b:54:88:38:fc: d3:7a:d4:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuYrX/4kkrFF5FJCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTAyMTE1MDAwNFoXDTI1MTAyNDE1MDAwMFowLzEtMCsGA1UEAxMk OTk4OTUzNWYtMWUyNi00ZmNjLWJkYzEtYzUxZjFhMTEzNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ufIPHqTKDvQFJ8SWTmnelI6/k5mUfG/5vP K92iitV9ALMJ47Kn+alFWB5uoFttQsrIRZaD9Qf1zWEXrgTDCItaQblnFsEAogIc Je/eryjzC5H5PVIp4nubqo7IvZmQq3F1I4f122IcPEZp6+QEAPUCQSbR0nPDV+CV 7u2Yi2sdpWL+/+cRAB63a78G1fqwgOj5eOBzxN4aE2PtQwfdPCv50hMMLCtFDrOU uIZZDXinBAswWBelsuyBaoQYPrNJAIZTefaYNyhIeJDP/2RQVc9JOfCs+H2+baLe AQEw5kBjDvf9NYtNJK+C8/JJNM0FcrePXKCWCNWgeDJ5bUDtYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSBIuMZ+jGYWarnfO4uUtfgjDEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMmZmODVlNzktMTc0Yy00 NmY2LThhNjItYTkyYzJjOTg3NWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVnfKOpUx7R2yXWWebBnjq YfXDgDfvsE//TC6mLf7fAazMXmCTIO3G+S3omc/LARygU2+vuSComAfzE2wxJzA1 GmqjFVlCHqztqTWtSVMoqTiXLAFde+xH+Pl8OIiOZo4nsUKX6C3ypFsBTQ8F3KLL S9JPxmm5bh/CcOfrLXdimjLiM0/9MsPeQ17PvOMJiZgLEzsW9d/TeFKrQLaoZwt0 AkD0H1RzjkKC2KVlAsLOziVWXsevFKIkNEhoKHSxOSg4a/ciy6dHL0n7Hvo4gyNf L/k3deKHXUyat52zeZeqiisaAMJO3F8kw5tJiy7XIznDPQsssHrmm1SIOPzTetSX -----END CERTIFICATE-----Generated at Wed Oct 22 02:22:29 2025 by rpki-client