$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: /Vi8Ulj1GX7QSRI+DcHXOIjci652Ijg/wFGT+BQMaDE= Subject key identifier: 27:85:44:A0:2F:7A:71:D6:71:A4:8A:FD:7D:A1:39:E0:BE:AE:B7:F6 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584B9353AA13D4AAE3302A384290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD443E Signing time: Sun 19 Oct 2025 17:00:03 +0000 Manifest this update: Sun 19 Oct 2025 17:00:03 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: N3asuscqhlTTkKI8WGmaOJ5rP+M8ai0WWJqZZIPoWbM=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: 8mlUK865qqMr8efcpPs2dOzQ6ogiQiXdtsB2TF87460=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:53:aa:13:d4:aa:e3:30:2a:38:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Oct 19 17:00:03 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=43a1155a-10dd-4821-bc91-ac523e677757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:1c:38:82:7e:f2:f1:dd:4b:64:ae:13:7d: ad:7e:2e:18:ff:aa:28:a2:3e:c6:fa:df:25:ed:ad: 5c:15:fd:5d:7b:8a:16:cc:e0:ed:34:03:a2:82:d9: 55:d3:de:5e:cd:45:ee:4b:d7:95:b2:df:e3:84:25: 80:77:d4:e0:ac:87:c3:eb:a4:dd:b3:8f:50:a3:53: 9a:44:81:fa:e3:26:34:58:b9:02:4c:87:52:1a:87: 3b:e3:d5:ee:c4:2b:21:13:91:08:40:3a:7b:03:31: 5f:5c:ed:48:0d:8d:b2:a2:8a:e9:54:f0:87:89:2b: a8:b4:97:d4:80:bd:35:03:95:a1:9a:75:9f:10:00: d6:76:d2:46:75:2f:c0:67:50:60:77:3e:ee:6c:e2: d3:b9:d6:8c:2e:9f:28:96:c2:7f:65:b1:5d:98:ed: 47:ca:2b:e2:49:7d:a9:aa:b8:4b:53:f1:b1:14:35: ec:6d:f8:8b:91:38:dd:7d:ec:d0:27:dc:cb:b2:75: d0:21:ab:9a:20:ff:3f:fb:59:8a:77:81:00:ef:5d: 0e:17:00:e8:5e:a8:d0:0c:e3:3b:ed:88:fb:f0:a5: 66:d8:c1:8e:7b:9f:79:37:f8:13:b9:44:b2:62:ec: 68:c2:81:ae:99:85:99:a2:ab:3f:2c:33:4f:c5:ca: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:44:A0:2F:7A:71:D6:71:A4:8A:FD:7D:A1:39:E0:BE:AE:B7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:61:6c:3f:a7:ea:e4:6f:64:08:15:4b:90:5a:5d:56:8f:5f: 63:e7:fb:a1:6f:30:9f:06:89:79:fc:24:97:08:3e:1f:60:c3: 98:4f:47:c4:54:7b:a5:ac:d8:ef:21:54:af:57:e6:df:c5:f0: 58:dd:b0:d1:82:cc:38:6b:02:a7:b4:f3:22:90:84:c4:b9:b3: 5f:8f:3f:9d:61:55:3f:9e:8f:08:cc:3b:e0:e8:ec:8d:76:94: 58:1b:bb:54:5c:ee:02:9b:6d:75:1e:bc:d5:72:d2:d9:f9:94: 4c:b5:d8:5c:e2:6e:64:df:e5:49:d7:a4:e1:a9:fb:1f:5f:37: cd:54:0c:ec:1a:ab:21:90:c1:9c:13:63:3c:87:8c:70:2f:71: 31:15:aa:29:33:ae:b5:2f:24:6b:2c:21:dc:5b:6e:f8:0e:2b: 3e:4d:3a:01:76:1a:64:6f:a3:6a:28:24:df:a4:5d:ad:d4:e8: 64:36:1c:38:0e:d6:af:7a:48:1f:50:77:e2:75:52:8d:a0:8e: 42:52:21:0b:c0:65:fd:af:ff:53:c4:f5:e1:4f:e1:e8:67:f3: 12:0a:7c:53:4c:26:89:5a:bd:da:f7:e2:d8:f4:a8:b9:51:7b: 87:2f:f6:ee:e2:e5:fe:c9:10:47:72:d2:8c:3a:be:37:b3:6d: 2e:d1:ba:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTU6oT1KrjMCo4QpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MTAxOTE3MDAwM1oXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk NDNhMTE1NWEtMTBkZC00ODIxLWJjOTEtYWM1MjNlNjc3NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQcOIJ+8vHdS2SuE32tfi4Y/6oooj7G+t8l 7a1cFf1de4oWzODtNAOigtlV095ezUXuS9eVst/jhCWAd9TgrIfD66Tds49Qo1Oa RIH64yY0WLkCTIdSGoc749XuxCshE5EIQDp7AzFfXO1IDY2yoorpVPCHiSuotJfU gL01A5WhmnWfEADWdtJGdS/AZ1Bgdz7ubOLTudaMLp8olsJ/ZbFdmO1HyiviSX2p qrhLU/GxFDXsbfiLkTjdfezQJ9zLsnXQIauaIP8/+1mKd4EA710OFwDoXqjQDOM7 7Yj78KVm2MGOe595N/gTuUSyYuxowoGumYWZoqs/LDNPxcrfxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCeFRKAvenHWcaSK/X2hOeC+rrf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbYWw/p+rkb2QIFUuQWl1W j19j5/uhbzCfBol5/CSXCD4fYMOYT0fEVHulrNjvIVSvV+bfxfBY3bDRgsw4awKn tPMikITEubNfjz+dYVU/no8IzDvg6OyNdpRYG7tUXO4Cm211HrzVctLZ+ZRMtdhc 4m5k3+VJ16ThqfsfXzfNVAzsGqshkMGcE2M8h4xwL3ExFaopM661LyRrLCHcW274 Dis+TToBdhpkb6NqKCTfpF2t1OhkNhw4DtavekgfUHfidVKNoI5CUiELwGX9r/9T xPXhT+HoZ/MSCnxTTCaJWr3a9+LY9Ki5UXuHL/bu4uX+yRBHctKMOr43s20u0bo+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:41 2025 by rpki-client