$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft File: acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft (raw, json) Hash identifier: K2K6Ann/BeEHf/mEqv3J9UEA5G+2fjtcYV3XUC4Hmjs= Subject key identifier: 59:17:BE:5C:E3:53:A7:C2:10:9D:F9:EF:16:CE:24:D7:3C:D9:F8:43 Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 Certificate issuer: /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Certificate serial: 010D0C9F4328584BB4986221A68626722D950F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft Manifest number: 010D0C9F43285847C75E7603E3E465F7206788F5 Signing time: Fri 31 Oct 2025 15:00:09 +0000 Manifest this update: Fri 31 Oct 2025 15:00:09 +0000 Manifest next update: Mon 03 Nov 2025 15:00:00 +0000 Files and hashes: 1: 510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa (hash: 4B4VX83u9bkGTY+xQQumO5TIZwLmXf4HhpZ+AxP+ZTQ=) 2: acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl (hash: qCGy8bbeLlz7/j6xUsIhJuBlmvg40YNuvPQbUgtQnTo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:98:62:21:a6:86:26:72:2d:95:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Validity Not Before: Oct 31 15:00:09 2025 GMT Not After : Nov 3 15:00:00 2025 GMT Subject: CN=a2a8681a-18b7-464e-b1cc-d2d820b2e8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:31:42:e4:c9:12:bf:25:f2:f5:1a:db:be: af:f7:54:4f:82:89:68:70:05:26:8b:f5:8c:8e:64: 3a:6f:95:dd:09:3c:5f:8b:70:a0:ea:7f:b3:de:ea: 92:93:dc:70:ea:6d:b8:6f:d9:c8:e0:3b:7a:f5:fe: 21:b3:37:a3:04:57:04:ed:b2:eb:61:9c:7e:3b:b8: 11:5e:9d:9c:5f:49:ba:a8:10:af:a0:9d:22:1f:f1: 7b:43:fd:01:2e:a2:4e:5e:3f:04:7b:9e:9f:25:d1: e8:8b:26:49:cd:bf:d7:9a:6f:09:42:45:59:d5:ff: 87:09:f7:5c:9a:df:15:68:da:ed:66:f5:9a:85:bb: 47:25:be:c0:7b:fb:fb:db:17:21:17:8b:e4:07:db: c3:8c:21:d1:2c:47:86:21:4e:a3:96:81:da:5a:93: 8d:4c:16:c2:a9:e6:9b:20:e1:b9:b7:b5:63:3e:69: 59:74:ab:be:d0:9f:c4:e3:45:f8:56:c5:66:ef:64: 6a:30:7c:8a:88:09:93:b5:2c:ca:0b:48:91:79:5d: 85:d5:35:d0:a6:2e:9d:c1:e4:d9:a7:b1:c1:07:cd: 39:a6:96:a8:e5:f9:f2:83:0c:ac:cf:de:88:d2:7a: 76:75:de:b4:b8:04:21:48:19:9e:0d:fb:10:16:67: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:17:BE:5C:E3:53:A7:C2:10:9D:F9:EF:16:CE:24:D7:3C:D9:F8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl X509v3 Authority Key Identifier: keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6a:68:b9:bf:48:07:48:6a:be:da:40:81:94:8c:62:3c:c9: 08:14:ef:75:37:73:07:a9:5d:52:34:91:8d:ad:1e:d4:d9:c2: 72:3e:6c:40:1d:53:45:45:23:2a:1d:b3:54:c2:ef:1e:f5:7a: 2a:a1:e8:b2:03:36:57:c2:03:bb:44:7b:dc:d1:f2:14:c2:02: 52:da:70:bb:5b:9c:4e:c7:20:a8:d8:a3:f6:c3:6f:20:d2:79: 53:c7:c6:52:4c:99:27:2e:af:9d:89:a9:76:f1:6c:61:08:a9: ae:33:27:eb:40:d1:11:09:15:c0:dd:87:81:30:de:41:f1:aa: cc:9d:6b:76:b2:18:e6:05:e4:ac:a4:e7:13:2b:81:57:4b:dd: 16:34:7f:fc:72:1f:8c:6c:46:7c:ce:25:53:33:b7:6e:a4:67: 74:c5:89:f5:74:be:b1:b8:21:a6:04:f3:a7:90:78:a8:c3:ef: 21:7a:fd:26:6e:32:e0:5f:11:70:7b:d0:5f:6f:7a:ff:0c:7b: 22:65:88:02:5b:96:d3:25:cb:8f:61:31:b6:4e:7e:e5:2c:9c: 78:54:f3:1f:9a:d9:42:31:67:1b:52:ed:c0:cf:d7:f2:3d:c8: 68:6f:fa:0d:5f:43:5b:eb:be:ce:bc:23:47:08:8e:44:a7:08: 34:05:87:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu0mGIhpoYmci2VDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmMjFiZmEtOWIwNC00YjUyLThhZjAtZTBiY2M5OTEy OGQzMB4XDTI1MTAzMTE1MDAwOVoXDTI1MTEwMzE1MDAwMFowLzEtMCsGA1UEAxMk YTJhODY4MWEtMThiNy00NjRlLWIxY2MtZDJkODIwYjJlOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXkxQuTJEr8l8vUa276v91RPgolocAUmi/WM jmQ6b5XdCTxfi3Cg6n+z3uqSk9xw6m24b9nI4Dt69f4hszejBFcE7bLrYZx+O7gR Xp2cX0m6qBCvoJ0iH/F7Q/0BLqJOXj8Ee56fJdHoiyZJzb/Xmm8JQkVZ1f+HCfdc mt8VaNrtZvWahbtHJb7Ae/v72xchF4vkB9vDjCHRLEeGIU6jloHaWpONTBbCqeab IOG5t7VjPmlZdKu+0J/E40X4VsVm72RqMHyKiAmTtSzKC0iReV2F1TXQpi6dweTZ p7HBB805ppao5fnygwysz96I0np2dd60uAQhSBmeDfsQFmfbWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFkXvlzjU6fCEJ357xbOJNc82fhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Yy MWJmYS05YjA0LTRiNTItOGFmMC1lMGJjYzk5MTI4ZDMvYWNmMjFiZmEtOWIwNC00 YjUyLThhZjAtZTBiY2M5OTEyOGQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNmMjFiZmEtOWIwNC00YjUyLThh ZjAtZTBiY2M5OTEyOGQzL2FjZjIxYmZhLTliMDQtNGI1Mi04YWYwLWUwYmNjOTkx MjhkMy5jcmwwHwYDVR0jBBgwFoAUC5YR7naTygov1+mx2PUBpLDN7gUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2YyMWJmYS05YjA0LTRiNTItOGFmMC1lMGJj Yzk5MTI4ZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANami5v0gHSGq+2kCBlIxi PMkIFO91N3MHqV1SNJGNrR7U2cJyPmxAHVNFRSMqHbNUwu8e9XoqoeiyAzZXwgO7 RHvc0fIUwgJS2nC7W5xOxyCo2KP2w28g0nlTx8ZSTJknLq+dial28WxhCKmuMyfr QNERCRXA3YeBMN5B8arMnWt2shjmBeSspOcTK4FXS90WNH/8ch+MbEZ8ziVTM7du pGd0xYn1dL6xuCGmBPOnkHiow+8hev0mbjLgXxFwe9Bfb3r/DHsiZYgCW5bTJcuP YTG2Tn7lLJx4VPMfmtlCMWcbUu3Az9fyPchob/oNX0Nb677OvCNHCI5Epwg0BYes -----END CERTIFICATE-----Generated at Sat Nov 1 08:34:16 2025 by rpki-client