$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft (raw, json) Hash identifier: 8yxc313xFtaGLi8GE+Ri6F/GGtlsTEOHLBuQXUpUxjw= Subject key identifier: 32:5E:28:CB:42:CA:34:01:E6:BC:28:DA:AD:54:0E:9C:F3:70:BB:8E Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584BBDC8D4CE2C1C2BEA4ED07140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft Manifest number: 010D0C9F4328584073A82DA05FED0AA5E61198ED Signing time: Mon 03 Nov 2025 22:00:03 +0000 Manifest this update: Mon 03 Nov 2025 22:00:03 +0000 Manifest next update: Wed 05 Nov 2025 22:00:00 +0000 Files and hashes: 1: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (hash: tEKntAqWLbohZGQbcZs1c23XOck5RFmjrVC6kUGSV4w=) 2: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (hash: fQq/+t6aKAOI8BXJwd9/ArGr2Us/icJZChSsDfHR9zg=) 3: 6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (hash: Br6U23TQBeH/ox4ZrawoB+4UqgONy7mV3kVLr+qbMeQ=) 4: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl (hash: spi9FWkrkHc63Cs39IEXGgai9Pg5gLi+kLmPX+d9Glo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:c8:d4:ce:2c:1c:2b:ea:4e:d0:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Nov 3 22:00:03 2025 GMT Not After : Nov 5 22:00:00 2025 GMT Subject: CN=21ee1f80-9207-4a38-b4d9-8a33fd5dcf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:05:9b:9e:37:b9:ba:f7:2e:08:e7:c7:c5: e8:b4:5f:72:04:b6:a2:ab:ea:48:3f:b2:ca:bf:f8: 88:ae:9c:cc:cc:04:fe:7d:27:9f:d9:f7:64:8e:c5: 40:d2:33:24:f7:6c:c9:7b:b1:85:7f:b2:b8:33:6a: 49:8d:28:c5:24:ba:44:0a:3f:35:37:10:c2:4a:58: 53:1d:dc:ea:1d:4f:0c:c2:dc:b6:a1:a3:23:bd:e0: 16:ae:46:3c:9b:92:cc:df:99:7b:4e:9c:3e:76:e9: 49:b5:9e:d6:85:a7:b0:e0:ef:03:b3:30:7e:65:f0: 37:65:36:2d:32:61:eb:09:5f:12:6f:02:88:04:68: c4:5b:d1:16:43:3f:88:d7:4b:8c:f9:68:16:1c:a0: 55:cd:56:c5:ef:27:1b:c3:88:a3:0b:5c:3b:ef:e5: 4c:84:82:1e:43:5b:c7:28:2e:1f:b0:77:30:a3:87: 92:7a:cf:3c:dd:4f:86:bb:11:b6:2d:cc:e3:a2:f9: 35:01:10:a1:83:08:78:83:57:a8:d4:a5:0b:ab:12: d0:ce:f9:36:1c:f0:2f:5e:5a:97:3d:89:4e:4c:10: de:25:38:48:56:aa:2f:ea:9e:1d:0e:1e:a6:a2:d2: 8d:74:4a:59:1b:a4:ca:33:69:69:60:69:50:5b:1f: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5E:28:CB:42:CA:34:01:E6:BC:28:DA:AD:54:0E:9C:F3:70:BB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:44:70:08:52:87:ec:53:4e:84:e6:d0:22:b9:8c:5c:a4:ab: 82:d0:3f:4a:1d:4f:c3:0c:10:ed:9e:31:8c:0b:e5:ee:78:94: 1f:9a:c0:b7:9a:6c:2a:27:b3:31:09:22:e9:a3:d2:2a:20:2b: 09:b1:f2:f0:5f:46:5d:a3:7c:de:69:3a:7f:e6:3a:b2:60:86: 2a:e4:c9:62:d8:dc:72:0c:31:71:75:fb:ba:c6:f1:5d:19:4c: fd:ef:d6:00:37:3c:1e:26:71:62:d0:78:ed:20:a5:83:27:e9: e7:a4:1b:60:a5:3f:78:7b:be:0b:c2:ec:66:c4:c8:b7:c9:c1: b8:d6:ea:ff:16:58:1b:41:57:1d:80:ae:9e:d0:3b:4a:7b:de: 15:2e:10:b5:62:f8:50:0f:e3:4e:c1:9f:42:35:1c:14:d1:66: 5e:df:6b:d1:ed:6b:29:c0:92:97:d0:1f:ed:7b:3a:f0:81:cf: af:e2:74:10:86:29:cc:9f:2c:24:3d:cf:02:10:d4:b5:9d:a0: 4d:90:af:d1:d2:f2:e6:b8:e5:63:ee:5b:36:9f:4d:9d:6a:c2: 2f:2d:a2:0f:f8:65:78:3c:c5:bd:ed:0a:e9:7c:4e:e3:43:20: a5:ad:c3:2b:4c:e3:f1:8f:9c:c2:31:87:4f:bb:63:a6:1d:a2: fd:59:b2:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9yNTOLBwr6k7QcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MTEwMzIyMDAwM1oXDTI1MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk MjFlZTFmODAtOTIwNy00YTM4LWI0ZDktOGEzM2ZkNWRjZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsToFm543ubr3Lgjnx8XotF9yBLaiq+pIP7LK v/iIrpzMzAT+fSef2fdkjsVA0jMk92zJe7GFf7K4M2pJjSjFJLpECj81NxDCSlhT HdzqHU8Mwty2oaMjveAWrkY8m5LM35l7Tpw+dulJtZ7Whaew4O8DszB+ZfA3ZTYt MmHrCV8SbwKIBGjEW9EWQz+I10uM+WgWHKBVzVbF7ycbw4ijC1w77+VMhIIeQ1vH KC4fsHcwo4eSes883U+GuxG2Lczjovk1ARChgwh4g1eo1KULqxLQzvk2HPAvXlqX PYlOTBDeJThIVqov6p4dDh6motKNdEpZG6TKM2lpYGlQWx+AfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJeKMtCyjQB5rwo2q1UDpzzcLuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvY2QyZDdkODUtNjFkMC00 YmE2LWI0ZDItYWZkYTliODIwYTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNRHAIUofsU06E5tAiuYxc pKuC0D9KHU/DDBDtnjGMC+XueJQfmsC3mmwqJ7MxCSLpo9IqICsJsfLwX0Zdo3ze aTp/5jqyYIYq5Mli2NxyDDFxdfu6xvFdGUz979YANzweJnFi0HjtIKWDJ+nnpBtg pT94e74LwuxmxMi3ycG41ur/FlgbQVcdgK6e0DtKe94VLhC1YvhQD+NOwZ9CNRwU 0WZe32vR7WspwJKX0B/tezrwgc+v4nQQhinMnywkPc8CENS1naBNkK/R0vLmuOVj 7ls2n02dasIvLaIP+GV4PMW97QrpfE7jQyClrcMrTOPxj5zCMYdPu2OmHaL9WbL8 -----END CERTIFICATE-----Generated at Tue Nov 4 00:51:57 2025 by rpki-client