$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft (raw, json) Hash identifier: BqrBeqY8GkLIb4fzK3X54NBjQ3a1ab3bquCUCTA5Krs= Subject key identifier: A8:53:B5:A8:CC:6B:23:02:A6:ED:C9:A3:0E:17:3D:82:47:A9:90:27 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584B93181C13417C7E3DC666D5D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft Manifest number: 010D0C9F432858474714BFB4E60C762DE243A727 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl (hash: gtUZQfLWWynOp4Pvr2Y2xDpFShYZxjIyVKG3TGjwQio=) 2: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (hash: ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo=) 3: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (hash: +9wHNw8x8lTKrcrbiK+BX31I4ryiRCgz60lIvS9qTuo=) 4: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (hash: Cy55k8QuhtGVkvURk86QEJnGSgpXYIcmqHEsCH+XWuM=) 5: d73dd892-ee55-3262-86e9-4939ca3508af.roa (hash: zSo3K+1VGxHsFzwRub9HghY6bVFMu7wCm03tvaiIS54=) 6: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (hash: tuvsYg9LDaULvngev+tOe4Gcs4+oe0mTh9XEznWQzaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1c:13:41:7c:7e:3d:c6:66:d5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=148c05c7-18c3-457b-adc5-29f96e7bbb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:26:86:18:87:9a:62:40:ce:48:27:94:e8: 62:f5:f9:0a:87:9c:6e:5c:5d:62:3f:15:df:61:6a: ff:6f:19:d4:a4:0d:39:f2:81:27:d8:d0:5f:c7:d6: 43:60:30:56:00:ba:0d:9d:c9:09:66:61:39:a6:35: 40:95:cd:2e:f7:44:df:91:e5:ac:9a:b3:24:82:cc: 22:b5:f0:f0:8e:7f:ba:09:7c:2a:5b:7d:60:c9:04: c7:52:69:41:2c:08:a0:e0:92:ea:92:bd:9c:2e:ea: 3f:ba:7a:f6:c2:38:14:6f:cf:1c:26:82:20:d0:1f: 09:4e:b8:72:fe:3b:6e:72:84:f8:fe:a7:6f:d5:38: 3d:2e:7f:7f:ae:37:da:79:ce:5a:dc:f3:b6:9a:65: fa:39:09:ce:f6:17:1a:66:56:e1:f1:d7:12:6e:02: d5:39:d3:83:39:5f:70:12:eb:60:25:a7:bd:1f:cd: f3:39:dd:ed:10:2f:18:3f:9b:d8:3d:88:d9:ad:bc: 78:0c:ca:ca:01:46:ec:d9:e8:7d:d3:f4:d4:3d:c8: d0:11:ff:55:83:ee:4f:fe:83:72:8b:1e:f3:f9:72: 34:31:2a:38:91:4d:33:71:e8:3d:56:4f:61:89:b1: ad:e9:1f:72:9a:9b:2c:80:92:8a:ae:0e:a7:2a:01: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:B5:A8:CC:6B:23:02:A6:ED:C9:A3:0E:17:3D:82:47:A9:90:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d4:8b:e3:43:ff:70:ca:84:62:09:7a:23:5c:c9:01:08:8b: 3f:02:78:9a:26:42:ec:9d:df:11:9c:bd:b5:60:e0:9f:da:5d: 7a:c1:b4:90:36:1f:3b:3c:81:5b:d5:29:0d:42:fd:4b:79:16: 55:ef:7d:27:50:3f:e0:16:ca:03:4d:25:23:68:b2:ab:7a:f8: eb:84:13:ef:e4:22:16:ac:a2:fc:ee:86:b1:6f:5d:35:4e:16: 0a:fa:6f:de:63:49:1c:ad:8f:9e:57:9a:60:5a:45:38:68:23: d8:f7:c0:3b:2b:23:b4:64:82:19:28:de:1b:ed:d9:a3:53:cb: 91:70:7f:46:32:5a:1b:e7:f3:55:cd:8d:ba:29:a3:1a:54:29: 0a:9a:42:05:39:ee:8d:24:ab:92:5b:d9:91:2e:8c:36:1f:ed: de:ab:c4:c2:10:7f:d4:2d:ac:67:44:2b:1d:29:01:b0:c0:10: 7a:dd:68:9f:5b:f9:5e:86:8f:46:a6:09:73:a8:01:22:22:a5: 99:33:81:fd:b3:ca:8c:33:85:1c:e8:25:30:c5:10:89:75:2e: 2b:cf:ae:e1:76:76:24:83:a0:3c:ac:fe:fa:82:a4:3c:47:c2: 98:d6:d9:09:75:b0:dc:77:fb:a4:41:50:54:76:39:d6:4d:a5: 3b:bf:75:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGBwTQXx+PcZm1dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk MTQ4YzA1YzctMThjMy00NTdiLWFkYzUtMjlmOTZlN2JiYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmMmhhiHmmJAzkgnlOhi9fkKh5xuXF1iPxXf YWr/bxnUpA058oEn2NBfx9ZDYDBWALoNnckJZmE5pjVAlc0u90TfkeWsmrMkgswi tfDwjn+6CXwqW31gyQTHUmlBLAig4JLqkr2cLuo/unr2wjgUb88cJoIg0B8JTrhy /jtucoT4/qdv1Tg9Ln9/rjfaec5a3PO2mmX6OQnO9hcaZlbh8dcSbgLVOdODOV9w EutgJae9H83zOd3tEC8YP5vYPYjZrbx4DMrKAUbs2eh90/TUPcjQEf9Vg+5P/oNy ix7z+XI0MSo4kU0zceg9Vk9hibGt6R9ympssgJKKrg6nKgHuyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKhTtajMayMCpu3Jow4XPYJHqZAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMmZmODVlNzktMTc0Yy00 NmY2LThhNjItYTkyYzJjOTg3NWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU1IvjQ/9wyoRiCXojXMkB CIs/AniaJkLsnd8RnL21YOCf2l16wbSQNh87PIFb1SkNQv1LeRZV730nUD/gFsoD TSUjaLKrevjrhBPv5CIWrKL87oaxb101ThYK+m/eY0kcrY+eV5pgWkU4aCPY98A7 KyO0ZIIZKN4b7dmjU8uRcH9GMlob5/NVzY26KaMaVCkKmkIFOe6NJKuSW9mRLow2 H+3eq8TCEH/ULaxnRCsdKQGwwBB63WifW/leho9GpglzqAEiIqWZM4H9s8qMM4Uc 6CUwxRCJdS4rz67hdnYkg6A8rP76gqQ8R8KY1tkJdbDcd/ukQVBUdjnWTaU7v3Vd -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:25 2025 by rpki-client