$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: 9cPFqqnTM2Vs1dqkYDnYx6Nf+cTUKfril9OQbQPeDAs= Subject key identifier: EC:0B:48:32:AB:F6:28:74:17:A7:62:F4:35:02:95:2F:F1:7D:4F:D6 Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584B94F4922DDC20E72D02685120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA195 Signing time: Mon 20 Oct 2025 07:00:03 +0000 Manifest this update: Mon 20 Oct 2025 07:00:03 +0000 Manifest next update: Thu 23 Oct 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: mSiG+mZ2M6Y3CpCq2lo9p+8dwx8ej/VNgqZSIcKChvk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:f4:92:2d:dc:20:e7:2d:02:68:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Oct 20 07:00:03 2025 GMT Not After : Oct 23 07:00:00 2025 GMT Subject: CN=970de875-7f7f-4c10-99fd-055505a799a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:38:61:1d:86:43:b3:b6:0f:06:31:39:58: a9:bd:9e:8c:29:6d:6f:76:1f:d2:60:f5:8f:cd:7c: 80:79:73:73:bc:d3:c8:3e:d4:71:a5:cd:f2:da:a7: 47:7f:3d:07:71:70:d2:11:de:23:8b:5a:81:db:a9: eb:5b:2d:7a:6a:ed:10:74:03:10:02:e1:57:56:2a: f2:8c:71:1c:1d:52:2f:2d:07:43:6d:eb:89:9a:d6: 10:08:88:82:89:ec:73:43:ca:8b:55:cc:bb:23:36: 73:c3:6f:1a:a7:d0:3d:e4:7b:e0:1e:3c:f6:8c:9f: b8:e7:f3:ad:20:98:dc:1a:36:78:8d:4b:ed:1e:7c: a3:8d:ab:55:1f:3a:f1:5c:a3:c7:71:aa:80:83:33: 0c:70:2b:c3:0a:c8:67:a4:00:30:4b:4d:30:e3:1d: 89:8f:42:8d:8b:ce:a7:9a:28:fd:62:64:7c:a5:5b: e6:9a:a3:f6:79:f8:95:b3:1a:2c:d2:51:63:e9:6b: e9:c1:b4:79:cf:8c:c6:e6:9a:10:fa:64:9c:36:82: bc:1b:9a:ce:3d:b4:68:6d:7a:03:93:3f:53:e5:1c: de:56:1f:ed:b1:e4:1e:fd:f0:6d:72:06:30:7a:01: 38:b8:14:6e:97:b8:c1:9e:db:2f:8b:08:b2:6a:7e: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:48:32:AB:F6:28:74:17:A7:62:F4:35:02:95:2F:F1:7D:4F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b7:0f:4b:04:a5:da:aa:37:08:f4:b2:fb:56:1e:7a:27:b4: 3a:52:c1:4c:95:51:36:b0:1b:89:e9:58:1f:2b:40:92:a4:1f: 67:c1:78:af:60:a0:53:6f:32:35:ec:75:d3:93:83:4d:b6:62: 5b:41:f0:e1:2d:c0:f0:b0:5e:3c:a1:34:3a:07:b4:22:78:3a: 72:72:c3:3c:68:c9:be:9f:ca:6c:fd:79:54:d5:0d:87:f4:54: 3e:29:e4:43:fb:90:9c:fe:f6:88:45:24:1e:fe:9c:99:a2:e7: c6:8f:5d:b5:82:1a:bc:f9:57:41:15:b5:4e:b8:fb:a2:e0:31: ef:2c:c6:e6:e5:6e:82:2d:81:b6:ed:83:5b:01:ec:98:65:c1: b9:b7:cf:92:be:9f:74:5b:6d:4c:fc:bd:3d:f9:30:48:9e:35: 40:c5:f5:a2:27:de:41:cf:83:e7:b8:2e:de:0d:81:c5:4b:97: cd:53:06:4b:db:27:43:ec:9b:2d:7b:fd:22:1a:c3:52:51:14: 56:1c:5e:9c:cd:d9:fd:64:82:8b:31:7c:85:ad:cb:a5:60:c4: 31:5f:30:0d:13:4a:c4:26:70:50:b5:34:3f:8d:dd:67:f0:aa: b0:70:a8:39:a7:89:09:ee:9d:42:af:07:9c:ea:55:e9:46:2f: 1a:e6:c9:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU9JIt3CDnLQJoUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTAyMDA3MDAwM1oXDTI1MTAyMzA3MDAwMFowLzEtMCsGA1UEAxMk OTcwZGU4NzUtN2Y3Zi00YzEwLTk5ZmQtMDU1NTA1YTc5OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8s4YR2GQ7O2DwYxOVipvZ6MKW1vdh/SYPWP zXyAeXNzvNPIPtRxpc3y2qdHfz0HcXDSEd4ji1qB26nrWy16au0QdAMQAuFXViry jHEcHVIvLQdDbeuJmtYQCIiCiexzQ8qLVcy7IzZzw28ap9A95HvgHjz2jJ+45/Ot IJjcGjZ4jUvtHnyjjatVHzrxXKPHcaqAgzMMcCvDCshnpAAwS00w4x2Jj0KNi86n mij9YmR8pVvmmqP2efiVsxos0lFj6WvpwbR5z4zG5poQ+mScNoK8G5rOPbRobXoD kz9T5RzeVh/tseQe/fBtcgYwegE4uBRul7jBntsviwiyan4LuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOwLSDKr9ih0F6di9DUClS/xfU/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAutw9LBKXaqjcI9LL7Vh56 J7Q6UsFMlVE2sBuJ6VgfK0CSpB9nwXivYKBTbzI17HXTk4NNtmJbQfDhLcDwsF48 oTQ6B7QieDpycsM8aMm+n8ps/XlU1Q2H9FQ+KeRD+5Cc/vaIRSQe/pyZoufGj121 ghq8+VdBFbVOuPui4DHvLMbm5W6CLYG27YNbAeyYZcG5t8+Svp90W21M/L09+TBI njVAxfWiJ95Bz4PnuC7eDYHFS5fNUwZL2ydD7Jste/0iGsNSURRWHF6czdn9ZIKL MXyFrculYMQxXzANE0rEJnBQtTQ/jd1n8KqwcKg5p4kJ7p1Crwec6lXpRi8a5skX -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:45 2025 by rpki-client