$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft File: cf438e4b-3515-40c3-b514-36b1b15593d8.mft (raw, json) Hash identifier: +eEqVffv17b9xDRtm5bl8DctzQXfripAI4D8jNfb1zA= Subject key identifier: 41:D0:05:13:CB:1A:26:67:C5:CD:2A:B0:5C:BA:35:4A:1C:82:04:D3 Authority key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD Certificate issuer: /CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Certificate serial: 010D0C9F4328584B9659E71D1DF2E9CD10E175A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft Manifest number: 010D0C9F43285849387A9FFB6B2F57635D8A4662 Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 331ad1e7-d96a-3e7d-b316-1fdc349fd9dc.roa (hash: IE6jEXURdN3jO9IEUP0pIY+xR6gOIvAmzqBAjstuhL0=) 2: cf438e4b-3515-40c3-b514-36b1b15593d8.crl (hash: 8nMfTOmMcp9rIhzAO5n7aVeVt07MXeupszYfRZWnPsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:e7:1d:1d:f2:e9:cd:10:e1:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=6d252e80-56ea-481b-a85a-9559f4a3883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:e5:1d:95:b7:78:12:ca:34:0c:58:b8:da: 18:85:77:8f:ff:8a:90:09:5b:86:79:56:a4:c8:cf: 9c:51:2d:a0:e9:0b:c3:ae:60:ce:6c:3b:fb:04:7c: 19:74:27:32:b6:27:7a:cd:71:a5:ac:38:fb:57:cc: b6:fd:7e:0e:0b:94:cd:ff:7a:a6:36:27:bb:b5:6c: 06:c1:39:3d:a3:96:3b:b9:7a:36:b6:22:6c:25:cf: 7b:56:8c:e3:7c:a5:44:e4:c8:03:de:be:de:e1:c0: 80:1d:92:6f:eb:28:8d:5a:b6:c4:bb:5b:75:93:3f: fe:b9:07:a8:47:8a:dd:5e:0c:7d:04:2e:f0:b0:e6: 35:d9:2f:e7:4f:f2:9e:86:f9:0a:c2:02:ea:a3:83: e8:22:4a:3f:a2:84:47:d4:ec:af:c1:20:13:11:1d: 73:d1:a3:71:a0:cf:99:11:ef:9a:3d:6b:e9:71:93: f4:de:4e:c7:c9:00:42:3d:d8:f0:db:e0:b4:9c:4d: dd:ae:c6:f8:8d:54:60:48:99:a5:de:d9:f6:a5:b8: 06:25:42:2f:04:d2:18:19:84:03:f7:95:3b:4a:45: 1c:15:9f:e4:e9:1f:0a:40:73:e0:46:38:3b:d2:00: e9:36:ca:61:54:5e:5d:ff:95:fd:50:27:bb:0c:e4: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:05:13:CB:1A:26:67:C5:CD:2A:B0:5C:BA:35:4A:1C:82:04:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl X509v3 Authority Key Identifier: keyid:BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:96:3e:63:29:d1:45:47:f9:28:9f:b2:96:42:41:0a:c3:7b: 8b:a8:2c:62:e0:4e:ed:81:26:07:2b:35:13:48:b2:01:6d:56: b5:fb:47:3c:8b:3c:9c:97:19:08:6d:2f:ac:83:c3:36:78:9b: 94:ba:4f:14:8d:f3:32:b0:12:79:84:e1:bb:47:39:44:89:4b: 21:a4:73:f5:79:77:c5:4d:94:95:66:26:47:61:34:53:91:95: ba:2b:dd:2a:ed:49:3b:ed:0b:f8:ba:bc:b6:64:92:72:b6:ef: 86:36:fd:dc:39:f2:72:7d:8c:c3:8e:ea:a3:3a:54:2c:4d:ea: 6f:4c:e9:56:56:2e:8a:28:15:97:08:67:6b:95:27:12:9e:ea: d1:e7:a5:94:a2:0d:e5:b7:38:88:5a:55:30:a5:0d:e5:bb:4a: 83:f7:23:1e:ac:8f:bd:a9:8d:0d:f5:d8:a9:3f:6b:4e:d4:8a: 38:f0:3c:1f:af:76:c5:00:5f:2e:97:b5:28:9b:7a:11:40:17: 2b:19:51:39:03:6c:f7:39:3b:8d:28:36:95:31:1e:a4:98:be: 00:ea:72:76:76:3f:7d:a2:1e:c0:43:7f:9d:9d:24:15:eb:98: 54:ef:2b:51:85:d1:10:8f:21:14:8c:d1:52:b5:ec:fb:32:06: 9d:ff:b3:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWecdHfLpzRDhdaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y0MzhlNGItMzUxNS00MGMzLWI1MTQtMzZiMWIxNTU5 M2Q4MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk NmQyNTJlODAtNTZlYS00ODFiLWE4NWEtOTU1OWY0YTM4ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwTlHZW3eBLKNAxYuNoYhXeP/4qQCVuGeVak yM+cUS2g6QvDrmDObDv7BHwZdCcytid6zXGlrDj7V8y2/X4OC5TN/3qmNie7tWwG wTk9o5Y7uXo2tiJsJc97VozjfKVE5MgD3r7e4cCAHZJv6yiNWrbEu1t1kz/+uQeo R4rdXgx9BC7wsOY12S/nT/KehvkKwgLqo4PoIko/ooRH1OyvwSATER1z0aNxoM+Z Ee+aPWvpcZP03k7HyQBCPdjw2+C0nE3drsb4jVRgSJml3tn2pbgGJUIvBNIYGYQD 95U7SkUcFZ/k6R8KQHPgRjg70gDpNsphVF5d/5X9UCe7DOS2EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEHQBRPLGiZnxc0qsFy6NUocggTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZjQz OGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1NTkzZDgvY2Y0MzhlNGItMzUxNS00 MGMzLWI1MTQtMzZiMWIxNTU5M2Q4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2Y0MzhlNGItMzUxNS00MGMzLWI1 MTQtMzZiMWIxNTU5M2Q4L2NmNDM4ZTRiLTM1MTUtNDBjMy1iNTE0LTM2YjFiMTU1 OTNkOC5jcmwwHwYDVR0jBBgwFoAUvpJwZfXmDbQRBqzWGqwiJj2MTd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIx YjE1NTkzZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAilj5jKdFFR/kon7KWQkEK w3uLqCxi4E7tgSYHKzUTSLIBbVa1+0c8izyclxkIbS+sg8M2eJuUuk8UjfMysBJ5 hOG7RzlEiUshpHP1eXfFTZSVZiZHYTRTkZW6K90q7Uk77Qv4ury2ZJJytu+GNv3c OfJyfYzDjuqjOlQsTepvTOlWVi6KKBWXCGdrlScSnurR56WUog3ltziIWlUwpQ3l u0qD9yMerI+9qY0N9dipP2tO1Io48Dwfr3bFAF8ul7Uom3oRQBcrGVE5A2z3OTuN KDaVMR6kmL4A6nJ2dj99oh7AQ3+dnSQV65hU7ytRhdEQjyEUjNFStez7Mgad/7Pq -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:06 2025 by rpki-client