$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft File: cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft (raw, json) Hash identifier: mrLIsMtSp/vQpCSslZCyXZzX0M7e9i8mTMDXixxli38= Subject key identifier: D2:FD:B0:33:52:C5:E1:E4:84:5C:5E:5B:DB:E9:49:B9:A0:F6:2F:EB Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584B93181C319F3E34372AF96E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft Manifest number: 010D0C9F4328584073A85AE22C63106D5EA59139 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: 2b6966be-0a30-3097-a99a-d635fb439733.roa (hash: 5bzJWSHK2h/qm2sHRdOZl0Ry7Y4ePLFMzK5TYaVDpcs=) 2: 3cd4923c-6128-376c-8446-baffa366fd39.roa (hash: KDFMP3HOqoS/thL3Sw1xeS/lmZFfTB073h/jz4NMx8k=) 3: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (hash: Rb+J3hCVgjG6UIfpvU6/6AinbrgHtEGCOlcuQ32mmS0=) 4: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (hash: ifxCNU0/LwnnuIjYOON/gQM505t3JF0MSlcAbHlPv4E=) 5: a0241a87-ee63-3ca4-8762-01bd022707da.roa (hash: YNicmauJH8K9CqpTEljMQeX6gLwpqdoMQG6EYHRL/zc=) 6: cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl (hash: NxAIrc4IvKl8u0bmIvmwLEbZXt5sDH/ub+hFlR+B3sY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1c:31:9f:3e:34:37:2a:f9:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=60e8a8d9-54e1-45c8-bf07-0a0e954f4aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:6f:ee:8e:34:85:36:c1:99:cb:89:bb:2b: 43:c9:0d:00:d1:57:78:5c:64:a8:11:d1:11:6f:b2: b4:22:d5:3d:97:28:3c:5d:64:e4:0e:01:f5:90:c7: 1c:73:4a:07:d0:b3:37:7e:d9:9b:47:25:65:0d:95: 46:66:9f:93:a7:a8:a7:79:dc:ac:5a:1f:a7:ec:dc: ca:7b:9f:6c:dc:76:62:88:7f:a9:f0:52:40:b3:39: d4:46:38:2f:d3:4e:3b:89:c2:c7:62:06:4f:d8:73: f2:51:a9:1a:a6:60:a9:bd:26:c9:ab:5f:fc:7c:6f: e4:5d:ff:d0:a6:d0:01:8c:70:1b:07:f4:47:ce:4f: ff:1d:ea:6c:25:97:46:17:0c:c3:f3:a0:3f:23:cd: 83:c8:42:f1:2c:43:98:47:f3:0a:08:b3:ed:5d:9d: 2d:66:11:fc:ce:d3:31:64:06:3f:2b:68:16:be:0d: 9c:07:09:df:3a:78:b7:5b:bd:c8:ac:a4:4e:e1:75: ce:db:6b:1b:39:6f:e0:0f:97:42:ec:52:0a:dd:c7: 2a:d1:77:b0:de:61:75:86:67:56:48:e4:1f:e7:0f: 80:67:85:30:f0:3c:4d:b4:bb:30:53:c6:49:3a:c6: 22:50:90:e1:96:6e:07:56:6d:f4:73:4a:56:3d:d8: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:B0:33:52:C5:E1:E4:84:5C:5E:5B:DB:E9:49:B9:A0:F6:2F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:cc:e8:fb:5a:3f:56:d7:df:95:3d:44:95:57:34:be:17:e7: f9:a2:58:34:b3:f7:45:32:39:d9:4d:d6:44:23:89:e1:40:38: dd:db:fa:7a:de:aa:a5:70:23:c9:1b:b9:6c:b9:3c:e5:40:92: bc:3d:aa:30:27:bb:38:cf:f5:b2:57:ea:3d:5f:7b:5a:14:ec: 0e:dd:97:ce:48:cf:f6:62:51:7e:3b:0b:70:66:fd:5c:65:bf: 3a:ca:af:39:01:7b:bc:0f:f7:ed:de:0b:74:2c:54:16:c1:e5: cf:77:3d:74:cd:fe:da:43:ee:ec:4c:0a:29:86:7f:60:19:6d: ab:07:8f:5b:8d:42:5c:d1:72:87:f9:be:c9:fa:4f:17:24:94: a2:94:1c:af:41:81:9c:f3:e0:21:b7:7b:e2:20:b4:85:52:6c: aa:0e:0b:c4:7c:0f:b8:4b:b4:a9:f4:dd:d8:6e:01:eb:71:04: 80:23:c3:ae:76:cc:b3:c1:28:0b:10:b2:cb:8c:59:1b:9e:20: b9:8f:3a:59:83:0e:f9:59:b7:dc:66:4f:60:9e:a0:99:25:c9: 8c:ff:40:b6:43:53:cd:4c:8d:d5:9c:c0:d0:60:b7:aa:e1:8e: f8:49:f3:de:19:0d:06:bd:e5:f4:af:ef:ac:cc:e5:41:b6:b8: 59:e7:6b:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGBwxnz40Nyr5bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk NjBlOGE4ZDktNTRlMS00NWM4LWJmMDctMGEwZTk1NGY0YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Fv7o40hTbBmcuJuytDyQ0A0Vd4XGSoEdER b7K0ItU9lyg8XWTkDgH1kMccc0oH0LM3ftmbRyVlDZVGZp+Tp6inedysWh+n7NzK e59s3HZiiH+p8FJAsznURjgv0047icLHYgZP2HPyUakapmCpvSbJq1/8fG/kXf/Q ptABjHAbB/RHzk//HepsJZdGFwzD86A/I82DyELxLEOYR/MKCLPtXZ0tZhH8ztMx ZAY/K2gWvg2cBwnfOni3W73IrKRO4XXO22sbOW/gD5dC7FIK3ccq0Xew3mF1hmdW SOQf5w+AZ4Uw8DxNtLswU8ZJOsYiUJDhlm4HVm30c0pWPdiyEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNL9sDNSxeHkhFxeW9vpSbmg9i/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvY2YwOWUxOTEtMWNiNy00 NjUwLTk1ZDYtNGUyNGMwYWVjNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpzOj7Wj9W19+VPUSVVzS+ F+f5olg0s/dFMjnZTdZEI4nhQDjd2/p63qqlcCPJG7lsuTzlQJK8PaowJ7s4z/Wy V+o9X3taFOwO3ZfOSM/2YlF+OwtwZv1cZb86yq85AXu8D/ft3gt0LFQWweXPdz10 zf7aQ+7sTAophn9gGW2rB49bjUJc0XKH+b7J+k8XJJSilByvQYGc8+Aht3viILSF UmyqDgvEfA+4S7Sp9N3YbgHrcQSAI8OudsyzwSgLELLLjFkbniC5jzpZgw75Wbfc Zk9gnqCZJcmM/0C2Q1PNTI3VnMDQYLeq4Y74SfPeGQ0GveX0r++szOVBtrhZ52ui -----END CERTIFICATE-----Generated at Sun Oct 19 23:17:22 2025 by rpki-client