$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft File: 9ffa2885-cbaa-44e8-babb-180936652b5c.mft (raw, json) Hash identifier: N10zzxokhfdy25XhlTKcb0+NASsamcpgrOe0k8i7tIU= Subject key identifier: 31:2C:00:87:0F:37:EF:A6:12:E1:E1:BA:79:0C:94:76:84:A4:77:49 Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 Certificate issuer: /CN=9ffa2885-cbaa-44e8-babb-180936652b5c Certificate serial: 010D0C9F4328584B9677AF0D52E8EE63771F5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft Manifest number: 010D0C9F432858487DA65FABD0C4C10191808122 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Thu 23 Oct 2025 20:00:00 +0000 Files and hashes: 1: 59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (hash: h9+mDniSJGOjosLWiGH8CNpHfpSDSw75DlucY7LwZlY=) 2: 9ffa2885-cbaa-44e8-babb-180936652b5c.crl (hash: JfPIxkgk6OL7sIaGtIP/cMOVHPr+di3ZoHb6PaGMcZo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:af:0d:52:e8:ee:63:77:1f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 23 20:00:00 2025 GMT Subject: CN=c3321acc-c172-41f8-b1d9-22ab42df3867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:5a:99:f7:d9:c7:a9:11:4a:16:86:0f:75: 27:71:f6:94:20:a3:10:fa:b8:a4:17:71:85:bf:87: c7:b4:25:64:d4:08:69:a5:12:d5:7e:60:17:7e:9f: 77:16:4f:e3:a4:9b:fb:5a:2f:74:a0:ef:1f:7d:49: cc:d0:7b:d3:12:4e:98:a1:2b:e8:a6:1e:99:7b:5f: 0f:36:12:d6:3d:d2:8a:8c:f7:d4:36:b5:f6:65:b2: 43:4e:60:64:13:91:e6:bd:50:63:31:f2:0a:cb:05: 21:c1:79:b5:83:42:bc:1a:92:39:e2:ba:45:8e:1e: 7a:8c:fa:e3:b4:dc:2a:39:c9:35:0e:b8:f5:2e:8f: e8:30:e8:7f:b1:09:51:7c:99:b4:cb:ba:14:8b:17: 71:f3:03:73:1a:c0:b7:be:7e:3d:a1:6b:a2:b5:12: 6c:6a:f3:c7:5d:20:1b:0a:14:1f:61:e3:43:b7:4d: 52:ee:eb:19:73:ea:86:6c:d3:60:b6:35:f5:28:7b: ad:ed:9b:85:ff:95:1b:80:2a:5e:68:af:df:7c:fb: 3c:4d:47:ad:be:bd:21:e9:9b:75:8f:a8:b3:9f:ad: 32:c7:68:74:17:c6:5c:5e:1a:0c:69:6c:65:c7:e3: 5c:86:11:ad:54:ca:5f:32:4d:0d:d9:3d:4e:e9:ee: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:00:87:0F:37:EF:A6:12:E1:E1:BA:79:0C:94:76:84:A4:77:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl X509v3 Authority Key Identifier: keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f9:08:f3:b5:9e:6e:00:47:73:c1:e5:17:3d:32:7f:d9:4a: 9c:18:3e:d7:93:ef:b1:6d:2f:c2:43:38:7a:66:88:0e:e2:75: 73:c4:3e:d1:67:fd:c7:40:25:fd:52:bc:5d:0c:4d:2a:7c:9e: cb:f8:c7:da:07:c3:96:c7:e9:3c:14:13:4f:94:a4:c0:70:82: d4:c9:c3:d9:99:3b:d5:91:68:8a:89:ff:13:84:e5:6d:07:85: 6e:f4:83:dd:2a:20:ef:93:ac:7a:ae:ef:b0:74:15:5d:9b:01: 66:4f:12:43:f0:a4:6f:d0:46:ba:f5:ed:d0:0c:4f:09:2b:1e: be:da:1a:be:fa:a0:36:a4:9c:f7:f2:65:a0:aa:33:d7:5b:0e: 21:13:91:1c:92:4e:3d:f6:ad:3f:3e:d1:fe:64:8e:43:c7:fb: 97:09:a0:d5:55:0f:61:c6:1f:78:c8:03:7a:12:80:f4:43:8a: 90:40:fb:9a:4c:7c:30:d7:d1:bc:17:3b:e0:6d:69:27:d7:73: 50:32:50:5f:60:f3:79:aa:07:30:fa:87:01:85:3f:1c:1b:e1: f3:52:72:58:f0:8c:66:e4:bd:e5:74:c0:e5:30:ad:00:cc:6a: e5:6b:95:79:53:c3:a8:ec:94:9c:42:2a:98:c5:4a:95:e3:f8: 98:f5:3e:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd68NUujuY3cfVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmYTI4ODUtY2JhYS00NGU4LWJhYmItMTgwOTM2NjUy YjVjMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMzIwMDAwMFowLzEtMCsGA1UEAxMk YzMzMjFhY2MtYzE3Mi00MWY4LWIxZDktMjJhYjQyZGYzODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL9amffZx6kRShaGD3UncfaUIKMQ+rikF3GF v4fHtCVk1AhppRLVfmAXfp93Fk/jpJv7Wi90oO8ffUnM0HvTEk6YoSvoph6Ze18P NhLWPdKKjPfUNrX2ZbJDTmBkE5HmvVBjMfIKywUhwXm1g0K8GpI54rpFjh56jPrj tNwqOck1Drj1Lo/oMOh/sQlRfJm0y7oUixdx8wNzGsC3vn49oWuitRJsavPHXSAb ChQfYeNDt01S7usZc+qGbNNgtjX1KHut7ZuF/5UbgCpeaK/ffPs8TUetvr0h6Zt1 j6izn60yx2h0F8ZcXhoMaWxlx+NchhGtVMpfMk0N2T1O6e4MVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDEsAIcPN++mEuHhunkMlHaEpHdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZmZh Mjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5MzY2NTJiNWMvOWZmYTI4ODUtY2JhYS00 NGU4LWJhYmItMTgwOTM2NjUyYjVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWZmYTI4ODUtY2JhYS00NGU4LWJh YmItMTgwOTM2NjUyYjVjLzlmZmEyODg1LWNiYWEtNDRlOC1iYWJiLTE4MDkzNjY1 MmI1Yy5jcmwwHwYDVR0jBBgwFoAUG08Q6/n+g/SryYbQjldjvXHGDekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZmZhMjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5 MzY2NTJiNWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN+QjztZ5uAEdzweUXPTJ/ 2UqcGD7Xk++xbS/CQzh6ZogO4nVzxD7RZ/3HQCX9UrxdDE0qfJ7L+MfaB8OWx+k8 FBNPlKTAcILUycPZmTvVkWiKif8ThOVtB4Vu9IPdKiDvk6x6ru+wdBVdmwFmTxJD 8KRv0Ea69e3QDE8JKx6+2hq++qA2pJz38mWgqjPXWw4hE5Eckk499q0/PtH+ZI5D x/uXCaDVVQ9hxh94yAN6EoD0Q4qQQPuaTHww19G8FzvgbWkn13NQMlBfYPN5qgcw +ocBhT8cG+HzUnJY8Ixm5L3ldMDlMK0AzGrla5V5U8Oo7JScQiqYxUqV4/iY9T6L -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:35 2025 by rpki-client