$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft File: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json) Hash identifier: tf1QcPAlhkCs1R0qpdA9/9sCRD1S+lxukV55up2ixz0= Subject key identifier: 51:61:B5:97:19:62:8C:20:FD:97:A6:9D:9D:5B:89:8F:F1:03:27:AE Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11 Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f Certificate serial: 6ADE6FDC18733F2007B796B4B51E8A87C2A7FD34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft Manifest number: 4D Signing time: Mon 20 Oct 2025 09:19:35 +0000 Manifest this update: Mon 20 Oct 2025 09:14:35 +0000 Manifest next update: Tue 21 Oct 2025 11:50:35 +0000 Files and hashes: 1: 3136352e3134302e32362e302f32342d3234203d3e203235313938.roa (hash: sbG+gpC1dVT/UMN3WN1JaIkPiM5gEAd+D1ln8D/gYvA=) 2: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: i6SllSmn92lyxwCyF/7XFoj1Qnfc6F7BynX/boNBjW8=) 3: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: /uOm3NZhfzbO8K0EaDwD6+mnAwKqohKi5U32Ftdk/DE=) 4: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: JOe5Bws2Czl2Xfjv8NkbPuCupbQkAHqMlv0J80ZQIuM=) 5: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: VWmVLcZU2ImmYQc/ehPf9GibjoWjkOhTRarQQdROy/s=) 6: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: lj64rmrWe7ke5G75zskJIyhTE16kuRuT7KkQQy9D2cQ=) 7: 3136352e3134302e32352e302f32342d3234203d3e2039333034.roa (hash: oXxBG78HnQQPoVcVjfijLvrQF/Qc12X4uwNAXz0AYZw=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:de:6f:dc:18:73:3f:20:07:b7:96:b4:b5:1e:8a:87:c2:a7:fd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f Validity Not Before: Oct 20 09:14:35 2025 GMT Not After : Oct 21 11:50:35 2025 GMT Subject: CN=5161B59719628C20FD97A69D9D5B898FF10327AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:e3:f2:87:c5:49:ac:d1:05:7d:44:9f:fc: 2e:bf:ea:05:4c:39:b8:d7:c7:1e:0a:dd:39:28:ec: 6a:80:49:ac:de:57:ad:dc:8e:07:b9:46:cb:78:37: 7c:cf:5a:36:5f:d7:de:95:29:91:d5:6f:3e:8c:a8: 2c:0b:5b:53:98:6e:34:14:fb:19:64:c8:fd:7f:60: d4:e2:bb:c8:ba:8f:d5:87:21:80:71:15:75:3b:73: eb:fc:07:16:e0:6f:63:c6:6f:8b:20:ef:7d:fd:75: 1f:67:88:98:0d:fb:71:fb:cc:8d:17:44:8d:50:06: a9:ba:de:90:bf:b7:1d:df:c7:ad:fe:25:de:b4:9d: 91:0c:16:1c:10:9c:c5:19:58:4c:13:c5:6d:30:56: ea:61:32:bf:4c:06:cc:99:d8:ef:74:ef:c2:7b:e8: c7:88:0f:4d:42:6d:71:a6:c2:6a:b5:01:20:88:78: 1b:0d:71:b5:50:22:5f:05:f4:6f:0f:35:7c:5b:a8: af:54:dc:d7:99:2b:59:ad:8d:bd:74:a1:4b:d2:0b: 22:3e:e5:9d:98:25:76:5a:03:b3:5b:c7:27:14:6e: 4f:94:07:41:2d:6e:59:a7:65:18:d6:cc:5b:89:60: 4c:de:ff:a1:77:e6:a5:58:f7:f2:75:0d:09:1f:0e: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:B5:97:19:62:8C:20:FD:97:A6:9D:9D:5B:89:8F:F1:03:27:AE X509v3 Authority Key Identifier: keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3b:9c:38:dd:c0:09:d9:0e:e3:ba:e6:86:47:69:03:ac:6d: fb:f4:51:85:34:79:93:23:46:4b:6c:19:86:3a:27:fd:82:82: d9:d2:af:75:c0:38:4e:8c:76:a5:e4:6f:c8:42:98:cf:a5:3e: 37:b7:0d:4d:22:09:bf:90:4a:e2:00:f6:9e:69:bb:f1:bd:cf: c9:74:c1:d7:92:d1:73:ab:ef:b4:01:69:b5:17:70:5d:e2:ef: 3d:84:3d:9b:54:67:45:6f:5b:eb:9f:05:a6:a2:54:09:a2:b2: 44:20:05:4e:83:90:fb:ff:ea:47:0c:dd:18:4f:b7:b6:18:39: f4:52:7d:01:c9:fa:65:0d:b7:69:54:bd:92:fe:ec:5c:88:d3: 26:fb:21:85:14:01:35:7f:bc:86:03:fd:1e:0b:a0:58:d1:58: 43:5d:b1:70:f5:39:fd:d6:55:e5:fb:71:0a:d6:d8:e1:1c:5a: 11:85:70:95:53:af:df:f2:c8:fc:99:a3:16:a5:cd:f7:e3:bd: 42:97:13:14:59:1c:ae:8e:ad:a2:18:c7:fb:5c:36:16:c3:71: 1a:1e:e8:39:eb:65:2a:03:2a:a0:ce:fe:1e:f0:2e:3b:38:a4: e9:f6:db:30:73:78:a9:d8:0f:8f:01:a5:92:4e:8b:57:55:36: e7:99:66:ca -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUat5v3BhzPyAHt5a0tR6Kh8Kn/TQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUxMDIwMDkxNDM1WhcNMjUxMDIxMTE1MDM1 WjAzMTEwLwYDVQQDEyg1MTYxQjU5NzE5NjI4QzIwRkQ5N0E2OUQ5RDVCODk4RkYx MDMyN0FFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoTj8ofFSazR BX1En/wuv+oFTDm418ceCt05KOxqgEms3let3I4HuUbLeDd8z1o2X9felSmR1W8+ jKgsC1tTmG40FPsZZMj9f2DU4rvIuo/VhyGAcRV1O3Pr/AcW4G9jxm+LIO99/XUf Z4iYDftx+8yNF0SNUAaput6Qv7cd38et/iXetJ2RDBYcEJzFGVhME8VtMFbqYTK/ TAbMmdjvdO/Ce+jHiA9NQm1xpsJqtQEgiHgbDXG1UCJfBfRvDzV8W6ivVNzXmStZ rY29dKFL0gsiPuWdmCV2WgOzW8cnFG5PlAdBLW5Zp2UY1sxbiWBM3v+hd+alWPfy dQ0JHw5qowIDAQABo4ICvDCCArgwHQYDVR0OBBYEFFFhtZcZYowg/ZemnZ1biY/x AyeuMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3 ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1 YTU0NmU2ZWY0LzAvREQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVF M0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBAB47nDjdwAnZDuO65oZHaQOsbfv0UYU0eZMjRktsGYY6 J/2CgtnSr3XAOE6MdqXkb8hCmM+lPje3DU0iCb+QSuIA9p5pu/G9z8l0wdeS0XOr 77QBabUXcF3i7z2EPZtUZ0VvW+ufBaaiVAmiskQgBU6DkPv/6kcM3RhPt7YYOfRS fQHJ+mUNt2lUvZL+7FyI0yb7IYUUATV/vIYD/R4LoFjRWENdsXD1Of3WVeX7cQrW 2OEcWhGFcJVTr9/yyPyZoxalzffjvUKXExRZHK6OraIYx/tcNhbDcRoe6DnrZSoD KqDO/h7wLjs4pOn22zBzeKnYD48BpZJOi1dVNueZZso= -----END CERTIFICATE-----Generated at Mon Oct 20 16:52:39 2025 by rpki-client