$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft File: ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft (raw, json) Hash identifier: vCpyZ8vM60S8tvtdH+Q3+PaRfe5cn7QsNjSXKp7be44= Subject key identifier: 84:A1:E5:04:97:33:42:1B:22:57:4E:90:95:6A:4E:05:31:25:25:0A Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Certificate serial: 010D0C9F4328584BB1CDA323AC832BDB2652E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft Manifest number: 010D0C9F432858472E1853B9171E31B9E7E635E9 Signing time: Thu 30 Oct 2025 15:00:03 +0000 Manifest this update: Thu 30 Oct 2025 15:00:03 +0000 Manifest next update: Sun 02 Nov 2025 15:00:00 +0000 Files and hashes: 1: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (hash: 2rLI7MhoKO41b39FIIls5d/YkFNJVYByGat9HYzFwn4=) 2: ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl (hash: VsJ/Bk131PlHn9aDX9TOiqq3Y3x8IcRlecp5cBOWVaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:cd:a3:23:ac:83:2b:db:26:52:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Validity Not Before: Oct 30 15:00:03 2025 GMT Not After : Nov 2 15:00:00 2025 GMT Subject: CN=33e34755-1627-441c-a465-92f148143c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:53:4c:cb:95:c9:cd:7a:35:3b:c4:41:c0: 6b:4a:49:67:d4:9c:18:b4:78:4b:f3:a6:d7:09:9f: 9e:ad:95:c2:0f:41:e5:ad:fa:7d:d1:73:11:13:30: 0d:9d:6b:03:83:45:9f:4e:ce:a5:04:b1:7e:03:8d: 4b:e7:74:c1:17:af:8f:88:d3:5d:3e:36:6c:46:77: 8b:20:e6:84:14:24:5b:49:e8:10:c8:9a:6d:9c:95: 61:d1:3f:6a:77:1f:5b:21:71:cf:05:3d:b3:8e:45: ab:b1:ab:cc:35:81:c8:2e:23:95:ed:9e:fe:34:fd: 82:8b:29:a4:94:c2:4a:a7:e0:ce:f3:3a:1e:70:27: 67:a7:89:0b:99:e5:09:be:ae:b8:7a:7a:c2:ef:2e: 89:8e:0b:06:63:ac:fb:ea:e4:88:96:17:6e:82:c0: 6f:6f:3e:95:a8:b7:c4:38:e3:4a:14:18:28:11:29: 94:b1:f6:4e:49:7f:e2:d0:6d:87:51:45:89:be:23: ba:b4:67:04:83:7e:9e:e8:99:0b:7c:6c:b0:53:68: 78:58:a0:0a:75:04:17:35:68:07:5c:85:be:de:17: b8:ae:69:15:d3:70:7d:f8:64:e9:d2:a8:43:3d:ef: 4e:2e:e6:ba:c2:37:50:39:9a:d5:3a:08:3b:66:ed: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:E5:04:97:33:42:1B:22:57:4E:90:95:6A:4E:05:31:25:25:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl X509v3 Authority Key Identifier: keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:87:65:de:3c:4a:4c:ac:3c:f7:12:2e:34:37:b4:4e:bc:9a: 6f:ff:f7:55:98:58:8d:f9:68:73:86:f3:22:c9:c4:40:c6:c3: 89:01:3d:17:67:ad:58:d2:de:7d:d3:fe:25:18:e1:b8:e4:e4: 3c:76:71:09:8b:ad:31:c9:98:ec:72:d2:a9:73:9b:c4:09:32: 74:4f:aa:b9:1d:40:54:51:b3:bc:8f:d2:d2:5d:00:85:8f:e4: 80:b7:07:50:9e:cb:cf:f7:5a:71:9b:ae:39:76:7f:66:29:6d: 5b:e1:cd:54:9c:54:91:c1:e9:c2:4b:58:01:0e:0b:f5:c1:40: f6:51:8e:fe:85:85:61:bc:c0:8d:c6:e5:47:aa:a1:e1:d2:f4: df:cd:7a:b1:95:7d:5a:17:2e:64:2b:90:2e:99:05:c3:24:d1: 93:d5:24:4f:e3:d3:29:3a:b9:ba:61:87:ba:1a:03:c0:07:8f: 45:c9:6e:c4:1b:11:0c:31:df:b0:92:80:ec:1d:b2:d6:54:25: 5b:2a:89:0c:ed:9a:95:d5:da:20:62:4f:80:49:c6:43:32:54: da:95:17:ad:c4:f6:36:34:1f:97:71:01:8e:53:fa:ee:b6:f4: 2e:f5:bf:a9:1b:54:44:4f:de:b4:0f:3c:0f:f5:9a:b8:b8:7e: 02:f1:00:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuxzaMjrIMr2yZS6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZhMGFiZDUtN2NmOC00MmNmLThhNDYtNjI2YjUwZWZk MzBlMB4XDTI1MTAzMDE1MDAwM1oXDTI1MTEwMjE1MDAwMFowLzEtMCsGA1UEAxMk MzNlMzQ3NTUtMTYyNy00NDFjLWE0NjUtOTJmMTQ4MTQzYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNlTTMuVyc16NTvEQcBrSkln1JwYtHhL86bX CZ+erZXCD0Hlrfp90XMREzANnWsDg0WfTs6lBLF+A41L53TBF6+PiNNdPjZsRneL IOaEFCRbSegQyJptnJVh0T9qdx9bIXHPBT2zjkWrsavMNYHILiOV7Z7+NP2Ciymk lMJKp+DO8zoecCdnp4kLmeUJvq64enrC7y6JjgsGY6z76uSIlhdugsBvbz6VqLfE OONKFBgoESmUsfZOSX/i0G2HUUWJviO6tGcEg36e6JkLfGywU2h4WKAKdQQXNWgH XIW+3he4rmkV03B9+GTp0qhDPe9OLua6wjdQOZrVOgg7Zu0eQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFISh5QSXM0IbIldOkJVqTgUxJSUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEw YWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZiNTBlZmQzMGUvZmZhMGFiZDUtN2NmOC00 MmNmLThhNDYtNjI2YjUwZWZkMzBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZhMGFiZDUtN2NmOC00MmNmLThh NDYtNjI2YjUwZWZkMzBlL2ZmYTBhYmQ1LTdjZjgtNDJjZi04YTQ2LTYyNmI1MGVm ZDMwZS5jcmwwHwYDVR0jBBgwFoAU73PAu59X8k66/FW5U4oSDxo0itkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEwYWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZi NTBlZmQzMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDBh2XePEpMrDz3Ei40N7RO vJpv//dVmFiN+WhzhvMiycRAxsOJAT0XZ61Y0t590/4lGOG45OQ8dnEJi60xyZjs ctKpc5vECTJ0T6q5HUBUUbO8j9LSXQCFj+SAtwdQnsvP91pxm645dn9mKW1b4c1U nFSRwenCS1gBDgv1wUD2UY7+hYVhvMCNxuVHqqHh0vTfzXqxlX1aFy5kK5AumQXD JNGT1SRP49MpOrm6YYe6GgPAB49FyW7EGxEMMd+wkoDsHbLWVCVbKokM7ZqV1dog Yk+AScZDMlTalRetxPY2NB+XcQGOU/rutvQu9b+pG1RET960DzwP9Zq4uH4C8QAn -----END CERTIFICATE-----Generated at Fri Oct 31 13:06:07 2025 by rpki-client