$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft File: dac9cb7f-b46d-477e-8698-95f66c423aab.mft (raw, json) Hash identifier: K8H/i4cmA4gDCyRPvoVxLwz4P51wdCEL0i0pEWtqcz8= Subject key identifier: 35:33:99:01:29:7D:0C:F8:82:03:EE:16:63:4E:CF:99:9E:E5:DE:85 Authority key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 Certificate issuer: /CN=dac9cb7f-b46d-477e-8698-95f66c423aab Certificate serial: 010D0C9F4328584B95C50645FDBD48CBF39FC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft Manifest number: 010D0C9F4328584531EAF5125504A8C8FE00785F Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 02062a13-ddc4-3a24-911a-1b037896e1c4.roa (hash: /28bijDXRiKLiqIYc04Qsx4ekEAtRwdgaayppvpz9Pw=) 2: dac9cb7f-b46d-477e-8698-95f66c423aab.crl (hash: eR5f4F5imhXKbnsxfhLCKe5XGNMsS9AAqDuDfWLPRww=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:06:45:fd:bd:48:cb:f3:9f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac9cb7f-b46d-477e-8698-95f66c423aab Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=d7fcbfb2-32ea-462c-9e59-d8dbd45f55af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:19:50:2f:ba:82:f5:b3:75:91:30:06:26: ee:8a:95:bf:82:80:1b:7f:fc:63:5d:d7:59:65:c5: c2:b0:ce:57:17:a1:1c:5e:74:ba:88:44:77:26:8d: f8:f6:c3:24:44:58:b3:6f:24:ca:c7:0d:ad:26:41: 6c:d5:40:6c:e4:d5:36:5f:c8:8d:9f:27:b5:b2:6b: ed:b7:3a:f7:bc:fa:00:4c:9b:0b:c1:a9:90:3e:bd: 9d:a7:6f:b4:e0:20:07:31:78:4c:2a:56:7b:e0:e5: ee:9d:cb:4e:60:fe:16:63:b7:50:3a:07:c2:34:f1: 07:cf:46:5f:17:3b:6f:8c:31:8a:7b:55:c9:f3:f2: 40:49:eb:bf:55:e1:8e:fb:44:ac:15:37:0b:d9:3f: be:63:80:19:94:48:52:2b:5d:e1:93:2a:87:ac:8e: 47:e2:b3:da:ed:40:4a:ca:4e:30:84:cd:5b:b4:d1: 59:38:4f:df:57:57:50:85:39:eb:4d:8d:21:31:d9: 98:58:ef:90:44:af:1a:f7:66:c8:6b:e9:b7:b0:49: 0f:8e:fd:55:28:00:7d:b2:05:0a:b9:10:1a:42:66: 2d:66:91:81:20:e7:d3:10:7e:0a:91:3a:f0:80:08: 1f:cd:d0:de:ea:a7:21:90:9d:7f:6c:5b:8f:d5:c4: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:99:01:29:7D:0C:F8:82:03:EE:16:63:4E:CF:99:9E:E5:DE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl X509v3 Authority Key Identifier: keyid:A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:9b:ee:64:a1:04:61:09:04:51:eb:c4:a2:5c:35:50:75:3e: 4b:45:02:8b:77:17:4f:20:eb:d7:e1:b1:d5:39:b2:f7:43:61: 9f:03:90:1c:7c:ad:08:ca:20:ba:fa:80:52:de:d2:4b:e3:51: 44:d1:1f:f6:f6:bb:05:ed:fe:92:c1:77:31:1b:5e:75:71:3b: 9a:48:ba:3f:52:7a:e2:bf:f3:5d:74:2e:2f:25:c2:54:d6:6c: 17:a9:6e:34:a1:2e:c1:a6:77:ef:e5:6a:7d:da:88:be:c6:85: b2:4c:f5:0a:15:35:eb:73:87:ac:ea:75:ce:be:65:f4:30:28: 09:05:0c:08:43:a7:51:2c:df:e3:24:1f:32:0f:9f:81:23:5b: 53:f8:1a:85:2a:04:b2:f7:5e:e8:eb:00:34:cb:ad:fe:ad:dd: 0e:c3:f5:d4:c0:17:24:7b:5b:55:b3:8a:cd:df:50:a5:66:80: 3f:f3:06:68:7e:0f:a7:c8:ad:83:cb:c2:e1:20:fc:a8:62:ef: 67:43:3f:28:f6:36:72:c7:bb:c0:b8:79:fc:49:80:ee:74:e9: ad:90:64:52:c1:2b:9c:13:87:9f:5e:9b:1a:a4:60:6e:f3:4f: b1:2c:92:4c:2d:4f:20:87:45:32:26:61:25:62:a2:c2:d4:60: f0:75:83:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQZF/b1Iy/OfyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjOWNiN2YtYjQ2ZC00NzdlLTg2OTgtOTVmNjZjNDIz YWFiMB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZDdmY2JmYjItMzJlYS00NjJjLTllNTktZDhkYmQ0NWY1NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtAZUC+6gvWzdZEwBibuipW/goAbf/xjXddZ ZcXCsM5XF6EcXnS6iER3Jo349sMkRFizbyTKxw2tJkFs1UBs5NU2X8iNnye1smvt tzr3vPoATJsLwamQPr2dp2+04CAHMXhMKlZ74OXunctOYP4WY7dQOgfCNPEHz0Zf FztvjDGKe1XJ8/JASeu/VeGO+0SsFTcL2T++Y4AZlEhSK13hkyqHrI5H4rPa7UBK yk4whM1btNFZOE/fV1dQhTnrTY0hMdmYWO+QRK8a92bIa+m3sEkPjv1VKAB9sgUK uRAaQmYtZpGBIOfTEH4KkTrwgAgfzdDe6qchkJ1/bFuP1cTbjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDUzmQEpfQz4ggPuFmNOz5me5d6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYWM5 Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2NmM0MjNhYWIvZGFjOWNiN2YtYjQ2ZC00 NzdlLTg2OTgtOTVmNjZjNDIzYWFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGFjOWNiN2YtYjQ2ZC00NzdlLTg2 OTgtOTVmNjZjNDIzYWFiL2RhYzljYjdmLWI0NmQtNDc3ZS04Njk4LTk1ZjY2YzQy M2FhYi5jcmwwHwYDVR0jBBgwFoAUqWRxW/PCUvsFxVI7rmcpaMtuN3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYWM5Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2 NmM0MjNhYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpm+5koQRhCQRR68SiXDVQ dT5LRQKLdxdPIOvX4bHVObL3Q2GfA5AcfK0IyiC6+oBS3tJL41FE0R/29rsF7f6S wXcxG151cTuaSLo/Unriv/NddC4vJcJU1mwXqW40oS7Bpnfv5Wp92oi+xoWyTPUK FTXrc4es6nXOvmX0MCgJBQwIQ6dRLN/jJB8yD5+BI1tT+BqFKgSy917o6wA0y63+ rd0Ow/XUwBcke1tVs4rN31ClZoA/8wZofg+nyK2Dy8LhIPyoYu9nQz8o9jZyx7vA uHn8SYDudOmtkGRSwSucE4efXpsapGBu80+xLJJMLU8gh0UyJmElYqLC1GDwdYMN -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:15 2025 by rpki-client