$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft File: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft (raw, json) Hash identifier: qELskn2hI9yQ5PGjPxitz0FVBWgYT7VYcV689k9TWnk= Subject key identifier: B9:45:F1:D7:F2:96:75:DF:AE:EB:A3:6C:BF:EE:26:90:7C:39:25:6C Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 Certificate issuer: /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Certificate serial: 010D0C9F4328584B969582616D5F8D4632E54700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft Manifest number: 010D0C9F4328584073A828BB106FC730EFBA8E95 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (hash: M3uoBHsjR9k/FeYWc2eWAf/cwPpzlwDitmYjTot9zzI=) 2: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl (hash: +j7NrmLToJMGfv9TEewWmcoQCKPD8JwmEVSO8KNb7U0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:82:61:6d:5f:8d:46:32:e5:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=3ca55ff3-9aac-4019-b552-cc7aafd4b7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8b:61:a6:be:2e:dc:d6:d4:a6:53:c4:2c:85: a6:80:f6:e1:8f:1e:b6:46:f8:87:c8:d6:e1:72:e5: 59:6a:b3:08:45:e8:6a:bf:24:9b:de:6b:53:66:a9: 52:8f:4c:7d:b9:fe:06:22:15:98:ac:03:14:57:8e: e6:70:a5:d0:77:97:2a:8b:69:56:32:83:14:da:8f: d3:42:33:28:e1:21:78:cc:a0:81:01:97:26:ff:03: bf:64:2e:9b:99:bf:9f:76:e2:80:24:39:df:df:9c: 84:ef:c8:24:52:79:71:e4:93:2b:6c:96:18:3c:3e: eb:3c:b1:c3:3a:3b:7c:85:f7:6f:8a:3a:78:c2:45: 7e:ea:70:b6:45:d4:91:69:e5:b5:3b:49:b2:c1:c4: 1f:cd:1e:fb:a5:0b:47:c4:fc:af:16:d5:6e:57:e6: 36:b1:19:de:c0:97:90:7c:6d:17:ef:20:02:53:6b: 6b:23:bf:fc:1f:97:1a:ae:b4:27:9a:a0:4f:b7:ae: e5:6e:b0:59:c2:cf:7a:ae:af:2a:6d:0d:c4:2b:bf: fc:29:06:b8:a7:0a:89:f6:3f:6d:55:a7:90:fd:1d: 79:00:d0:0e:34:ed:32:a0:79:eb:3f:29:fc:7f:d3: a4:96:98:d6:28:63:f1:51:11:4a:02:21:e7:40:9a: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:F1:D7:F2:96:75:DF:AE:EB:A3:6C:BF:EE:26:90:7C:39:25:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl X509v3 Authority Key Identifier: keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:f3:e6:8a:43:e7:a8:bf:ba:0f:d4:e8:78:d2:0d:b8:1d: 7c:54:00:6e:67:9a:3c:f9:f3:48:52:81:78:7b:1f:6e:9f:7c: da:69:7b:85:67:5d:96:55:9a:eb:9c:eb:91:98:7e:1b:03:37: 9b:ee:96:cf:13:7d:d7:55:e2:91:bd:7d:c8:e8:a3:5f:77:17: 08:52:35:67:d8:b9:f5:2a:2b:f2:31:90:e8:71:5f:4b:d8:9a: ac:a0:29:26:8d:fd:ed:8c:95:e8:3a:c6:d6:4b:9b:0e:d5:03: d8:5f:a1:b7:81:57:1c:fd:0c:ef:82:77:00:bf:3c:66:4c:b0: ec:03:62:25:85:cb:87:f1:0b:a1:2a:14:93:94:08:b0:f3:ed: bc:e7:c7:58:cb:99:9c:5f:77:5b:f4:90:6f:b1:af:57:2d:b1: 70:ec:c2:f1:ac:06:d1:3d:a0:95:31:af:d7:d5:6d:b2:40:c3: 06:55:6e:2b:9b:c4:89:ee:50:a9:10:49:15:4a:6b:2d:98:2c: 18:86:56:dd:18:04:b5:c7:a7:30:01:0f:1e:17:e2:47:a4:ac: 3a:9b:d2:4b:38:c0:f4:25:5f:e5:b7:7d:ae:e4:05:cc:8a:c1: 6c:7a:6d:0b:d5:38:aa:8c:23:e0:53:19:2a:36:91:98:58:00: 82:d3:1a:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYJhbV+NRjLlRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz ZjhlMB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk M2NhNTVmZjMtOWFhYy00MDE5LWI1NTItY2M3YWFmZDRiN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYthpr4u3NbUplPELIWmgPbhjx62RviHyNbh cuVZarMIRehqvySb3mtTZqlSj0x9uf4GIhWYrAMUV47mcKXQd5cqi2lWMoMU2o/T QjMo4SF4zKCBAZcm/wO/ZC6bmb+fduKAJDnf35yE78gkUnlx5JMrbJYYPD7rPLHD Ojt8hfdvijp4wkV+6nC2RdSRaeW1O0mywcQfzR77pQtHxPyvFtVuV+Y2sRnewJeQ fG0X7yACU2trI7/8H5carrQnmqBPt67lbrBZws96rq8qbQ3EK7/8KQa4pwqJ9j9t VaeQ/R15ANAONO0yoHnrPyn8f9OklpjWKGPxURFKAiHnQJqw8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLlF8dfylnXfruujbL/uJpB8OSVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2 OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvZGY5Njk2ZjYtN2NhNS00 ZWI3LWJkMjEtZWFlZTNiMWUzZjhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl M2IxZTNmOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+j/PmikPnqL+6D9ToeNIN uB18VABuZ5o8+fNIUoF4ex9un3zaaXuFZ12WVZrrnOuRmH4bAzeb7pbPE33XVeKR vX3I6KNfdxcIUjVn2Ln1KivyMZDocV9L2JqsoCkmjf3tjJXoOsbWS5sO1QPYX6G3 gVcc/QzvgncAvzxmTLDsA2IlhcuH8QuhKhSTlAiw8+2858dYy5mcX3db9JBvsa9X LbFw7MLxrAbRPaCVMa/X1W2yQMMGVW4rm8SJ7lCpEEkVSmstmCwYhlbdGAS1x6cw AQ8eF+JHpKw6m9JLOMD0JV/lt32u5AXMisFsem0L1TiqjCPgUxkqNpGYWACC0xqF -----END CERTIFICATE-----Generated at Tue Oct 21 15:17:48 2025 by rpki-client