$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: aS+2enmzcYOAROG2WDoSv1tJmAOgTRGRBnKUlIk9P9w= Subject key identifier: EE:C9:52:B4:57:6D:70:F6:FD:AC:C8:80:64:32:CF:81:00:80:DF:04 Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584B9B5A664060A5F8621B687060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0AE4 Signing time: Wed 22 Oct 2025 14:00:03 +0000 Manifest this update: Wed 22 Oct 2025 14:00:03 +0000 Manifest next update: Sat 25 Oct 2025 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: vSXhMlLPKzC3mc9sDZu/uXcbN6jyYoK6/lFUlszqt3w=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: eiXTIHrxtu6x8o8AjWkrBCawGEUcl0KcmjRnTGqsUf0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:5a:66:40:60:a5:f8:62:1b:68:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Oct 22 14:00:03 2025 GMT Not After : Oct 25 14:00:00 2025 GMT Subject: CN=344b993c-ce70-49ca-9979-22e10da7ef9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:d4:56:1b:4a:de:0e:e2:d7:83:ca:92:8f: 8f:a8:95:0e:49:d6:9c:47:62:8a:2b:60:08:f2:3b: 8b:7b:6d:d8:71:7a:84:36:49:37:93:75:a5:32:25: dc:83:f1:5d:04:d9:9d:4a:dd:74:df:4f:43:f3:58: 91:04:3c:02:76:f2:28:d0:43:9d:46:2e:9a:74:11: 82:cb:c3:5c:99:f8:83:05:39:97:db:71:56:72:b2: d7:e8:64:99:52:e4:d4:8c:1d:44:2b:79:14:57:f5: 0f:10:b4:cb:5a:f6:4d:85:1d:f5:63:7c:1a:99:1a: 35:fe:71:9d:67:35:74:66:fe:96:7f:c6:53:6e:c0: 20:d5:a1:ea:82:d9:7f:70:c6:b0:86:d8:b5:68:70: f1:96:9f:e6:ba:79:48:c6:b6:09:56:3b:26:79:33: 0c:7f:12:8a:a4:65:f7:76:d8:db:43:29:e7:16:bc: 22:26:2f:34:0e:2f:57:c0:84:14:60:9c:7f:1e:d6: 14:2d:10:1a:14:17:3c:be:38:29:ec:f9:f9:3f:3d: 16:be:9b:c4:b0:7c:70:33:87:cc:f7:d6:78:2e:7b: 06:2c:4d:80:14:96:72:6d:ee:7f:cf:2e:47:f9:85: f7:a7:53:1f:25:93:c6:d7:45:c8:a5:88:51:5d:d2: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C9:52:B4:57:6D:70:F6:FD:AC:C8:80:64:32:CF:81:00:80:DF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e0:0f:3d:ec:4a:4c:f6:8a:bd:65:e9:73:4f:cb:eb:c5:bd: 57:c8:27:26:d5:16:b7:cf:91:26:e6:9b:71:15:28:c4:9d:93: e7:29:f4:e0:f1:cb:b4:f2:cb:18:38:15:86:93:31:d5:e0:2d: bb:10:49:40:71:28:f9:61:39:ff:a1:65:aa:9b:d1:f8:9c:24: 1c:f8:d0:75:f9:63:29:d7:ea:37:69:cc:59:d4:c8:73:90:54: cf:7a:3d:f4:50:0f:e8:31:be:e7:89:50:cd:fc:ab:3d:34:49: 77:9c:4f:cb:89:02:f6:9a:ca:d8:5a:22:ea:b5:89:55:77:f6: c7:bd:ac:8c:19:85:4c:2c:ce:19:2c:e6:66:58:73:7f:fc:e6: 8b:34:85:7e:59:b8:83:d8:4f:61:3c:1c:bd:28:47:3f:33:dd: 41:5a:90:66:28:28:27:a0:a0:1a:ef:3d:8e:18:33:ad:11:34: fb:e1:7e:a8:d1:7b:e4:f8:b0:d8:c0:d0:7a:ff:28:e9:97:e1: ea:d6:b4:46:11:74:21:7f:5c:a2:ee:31:e5:00:84:b3:08:5b: 72:ef:09:6f:6a:13:f2:3a:5f:8d:14:77:3d:0c:89:49:f5:d9: 6c:f4:bb:79:4a:7f:b7:16:09:18:ed:62:b6:b7:d7:e4:82:c3: 43:f1:6a:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEubWmZAYKX4YhtocGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI1MTAyMjE0MDAwM1oXDTI1MTAyNTE0MDAwMFowLzEtMCsGA1UEAxMk MzQ0Yjk5M2MtY2U3MC00OWNhLTk5NzktMjJlMTBkYTdlZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynzUVhtK3g7i14PKko+PqJUOSdacR2KKK2AI 8juLe23YcXqENkk3k3WlMiXcg/FdBNmdSt10309D81iRBDwCdvIo0EOdRi6adBGC y8NcmfiDBTmX23FWcrLX6GSZUuTUjB1EK3kUV/UPELTLWvZNhR31Y3wamRo1/nGd ZzV0Zv6Wf8ZTbsAg1aHqgtl/cMawhti1aHDxlp/munlIxrYJVjsmeTMMfxKKpGX3 dtjbQynnFrwiJi80Di9XwIQUYJx/HtYULRAaFBc8vjgp7Pn5Pz0WvpvEsHxwM4fM 99Z4LnsGLE2AFJZybe5/zy5H+YX3p1MfJZPG10XIpYhRXdJKbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO7JUrRXbXD2/azIgGQyz4EAgN8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB24A897EpM9oq9ZelzT8vr xb1XyCcm1Ra3z5Em5ptxFSjEnZPnKfTg8cu08ssYOBWGkzHV4C27EElAcSj5YTn/ oWWqm9H4nCQc+NB1+WMp1+o3acxZ1MhzkFTPej30UA/oMb7niVDN/Ks9NEl3nE/L iQL2msrYWiLqtYlVd/bHvayMGYVMLM4ZLOZmWHN//OaLNIV+WbiD2E9hPBy9KEc/ M91BWpBmKCgnoKAa7z2OGDOtETT74X6o0Xvk+LDYwNB6/yjpl+Hq1rRGEXQhf1yi 7jHlAISzCFty7wlvahPyOl+NFHc9DIlJ9dls9Lt5Sn+3FgkY7WK2t9fkgsND8WoC -----END CERTIFICATE-----Generated at Wed Oct 22 17:38:01 2025 by rpki-client