$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft File: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft (raw, json) Hash identifier: 9GY3fWPX/UMltf+Q2j0LzyT1B6iBZD9mpzzsbtdk8tw= Subject key identifier: 16:8C:34:05:63:84:D6:92:96:D9:1A:B4:B8:DE:9C:97:A3:D7:99:57 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584B94065672910C9B790F572100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft Manifest number: 010D0C9F4328584073A82DFC0659598689D49993 Signing time: Sun 19 Oct 2025 23:00:03 +0000 Manifest this update: Sun 19 Oct 2025 23:00:03 +0000 Manifest next update: Wed 22 Oct 2025 23:00:00 +0000 Files and hashes: 1: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (hash: pC8wbyeG8wpw441VKcT6Vpt3uI44fvHTC7hHBW5UNlU=) 2: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl (hash: 5HWJ8JuFZyA8osNRpOGMtDM/kW1+TTnnKNkzFTrq4SQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:06:56:72:91:0c:9b:79:0f:57:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Oct 19 23:00:03 2025 GMT Not After : Oct 22 23:00:00 2025 GMT Subject: CN=b667e9c7-85c2-48b0-b5a7-58772b76c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:c3:d5:a4:03:57:3f:8e:c9:60:17:01:ae: 84:87:aa:a4:4f:7c:c8:8f:b5:69:79:74:be:0c:23: 4f:ad:88:9d:02:93:6e:0c:a8:ef:81:58:27:ec:10: af:79:ae:6c:bc:f5:d0:64:f5:e5:91:12:2a:a6:5d: a6:18:d2:28:d9:d7:4c:21:74:c3:c3:7f:67:4e:cb: 24:41:42:8f:3b:f0:88:6f:b2:9b:e2:ef:b6:c2:94: 4d:b6:9d:22:29:ca:bc:23:da:2b:08:c6:c7:b1:b4: dd:06:b0:24:03:e5:83:c2:b5:21:84:7b:86:c3:90: 8b:75:a0:9f:a6:67:0d:d5:c9:54:b2:bf:90:5e:1e: 3f:74:a0:11:8d:01:e1:91:9b:dc:63:98:dd:c9:01: 72:af:84:e1:33:10:35:eb:23:b6:4e:92:07:a5:b5: a2:5b:98:fd:52:93:30:6d:ef:a4:34:72:a1:36:a7: 83:51:83:99:8e:7a:a4:9e:2f:67:03:10:b3:28:05: 56:c0:92:56:17:f9:2c:58:e3:cc:ed:ba:8a:ce:8f: 7a:79:fa:b7:9c:c6:78:c2:4e:a6:58:75:9a:7f:db: fc:88:fa:41:95:55:c1:83:14:ad:d1:4d:a8:02:c1: 16:f8:7f:95:98:0a:c7:da:65:58:a8:a1:05:7b:23: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:34:05:63:84:D6:92:96:D9:1A:B4:B8:DE:9C:97:A3:D7:99:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:33:17:0b:12:b4:22:a1:fb:5e:db:e3:df:9a:37:be:3b:81: fd:f9:7d:fa:f2:62:ab:50:4b:80:4b:b3:7e:18:9d:ae:df:5f: 1e:c9:2b:9b:e5:be:dd:a2:0c:39:29:c7:c8:93:1e:4d:df:94: 65:61:53:54:4a:45:3a:31:eb:73:9b:0e:25:f2:e7:18:60:69: 0d:ed:07:ba:d7:ca:ce:9d:53:41:eb:35:37:bf:60:97:53:fc: 1c:5e:bc:74:4f:a1:55:5d:85:09:45:63:d8:75:f6:d0:ba:8c: ef:d1:ba:da:d5:df:83:17:a8:81:d8:2e:ae:d0:96:b7:d3:8b: 7b:be:8a:b2:d9:3e:f7:1d:d2:82:3f:31:4d:34:61:5d:86:04: 90:cd:a1:17:3e:6b:b7:71:d3:e8:ae:a9:30:3b:d6:bc:fa:ce: 23:1e:15:b2:a9:75:c4:b2:31:a1:05:08:be:8b:2c:6d:7c:1f: 5a:2e:01:01:6d:92:c1:84:78:3d:fd:20:ed:95:0a:11:38:ae: 59:72:49:9f:79:7c:d8:6f:2a:24:5c:a0:7f:21:95:66:db:85: a9:bc:24:a5:de:35:78:1d:02:26:01:bd:7f:cc:f1:45:9e:59: be:2a:fe:d6:41:97:e3:b3:98:0c:9a:85:fc:12:d8:48:2c:24: 8e:11:bb:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUBlZykQybeQ9XIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI1MTAxOTIzMDAwM1oXDTI1MTAyMjIzMDAwMFowLzEtMCsGA1UEAxMk YjY2N2U5YzctODVjMi00OGIwLWI1YTctNTg3NzJiNzZjOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrD1aQDVz+OyWAXAa6Eh6qkT3zIj7VpeXS+ DCNPrYidApNuDKjvgVgn7BCvea5svPXQZPXlkRIqpl2mGNIo2ddMIXTDw39nTssk QUKPO/CIb7Kb4u+2wpRNtp0iKcq8I9orCMbHsbTdBrAkA+WDwrUhhHuGw5CLdaCf pmcN1clUsr+QXh4/dKARjQHhkZvcY5jdyQFyr4ThMxA16yO2TpIHpbWiW5j9UpMw be+kNHKhNqeDUYOZjnqkni9nAxCzKAVWwJJWF/ksWOPM7bqKzo96efq3nMZ4wk6m WHWaf9v8iPpBlVXBgxSt0U2oAsEW+H+VmArH2mVYqKEFeyObNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBaMNAVjhNaSltkatLjenJej15lXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvZGFmYjdiNGMtMDhjYy00 ZDc2LWFkYTItYjU3MmEyZDIzM2E5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgMxcLErQiofte2+Pfmje+ O4H9+X368mKrUEuAS7N+GJ2u318eySub5b7dogw5KcfIkx5N35RlYVNUSkU6Metz mw4l8ucYYGkN7Qe618rOnVNB6zU3v2CXU/wcXrx0T6FVXYUJRWPYdfbQuozv0bra 1d+DF6iB2C6u0Ja304t7voqy2T73HdKCPzFNNGFdhgSQzaEXPmu3cdPorqkwO9a8 +s4jHhWyqXXEsjGhBQi+iyxtfB9aLgEBbZLBhHg9/SDtlQoROK5ZckmfeXzYbyok XKB/IZVm24WpvCSl3jV4HQImAb1/zPFFnlm+Kv7WQZfjs5gMmoX8EthILCSOEbvW -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:04 2025 by rpki-client