$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft File: df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft (raw, json) Hash identifier: cDoIzQge68ejOVFuJvOedJAWAFpN3FoYh3fw8wM7eSw= Subject key identifier: 06:0E:6E:3C:57:84:5E:D7:0F:54:6C:2A:35:A8:8E:EE:5E:54:F3:3B Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584B911DE8E7A288DC1D1774687C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft Manifest number: 010D0C9F43285845464B28A2C2FBF55DA9F9C7D6 Signing time: Sat 18 Oct 2025 22:00:08 +0000 Manifest this update: Sat 18 Oct 2025 22:00:08 +0000 Manifest next update: Mon 20 Oct 2025 22:00:00 +0000 Files and hashes: 1: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (hash: 7R91mKOwhojGBAAp+KFP1HJSvZlSZwxpfQYZ9u697Ng=) 2: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (hash: +DGyihRnHGpBcLnYR/wzeUSp548ShHsVmS0AOhaxPcs=) 3: bda6574d-81c2-38f7-b624-cdc878c38860.roa (hash: 7Mt8kpjFQBt0E2zVwbYPg/3rINhK6s/1s8mR6kvj0Yk=) 4: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (hash: ZN89WVnlZtXIJPl6sbRzbLxw3UDHy8KBdkb7M+ekdLI=) 5: df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl (hash: Kw3lKV7QgN0uz8/NqHXYy5C5palWkHMeerSXEF8UV24=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:1d:e8:e7:a2:88:dc:1d:17:74:68:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Oct 18 22:00:08 2025 GMT Not After : Oct 20 22:00:00 2025 GMT Subject: CN=ebbbfb28-2a01-442f-8c1c-484e5d779d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:77:a1:f1:1c:f7:64:4e:2a:9a:9d:7c:9e:fc: 3d:3a:b1:28:6e:59:56:20:8b:1b:5f:82:61:f6:cf: 6d:23:73:26:19:b6:12:39:12:df:a4:82:09:98:dd: 01:90:b5:43:a6:f5:1e:d4:25:6d:b6:9f:bd:b5:5a: 55:60:b0:f1:01:53:d9:2d:0d:3a:c9:a7:0a:8c:d1: 5a:ff:62:73:54:22:2b:74:91:36:c0:c4:24:6f:e6: 3a:e7:a0:56:a1:42:64:8a:f3:9d:04:82:f3:63:12: 48:b8:5b:dc:b2:01:29:bd:cc:40:09:bd:e2:f1:9b: cd:f8:5c:f8:4f:42:f4:11:52:69:0f:ce:68:5b:ca: a2:37:8d:c2:cf:f3:53:2a:bc:ec:18:b6:8d:c3:df: e8:f5:50:69:9e:95:e0:26:b8:2c:fb:b0:1f:7d:fe: 33:22:bf:56:fd:ca:e6:e8:7d:b3:5b:de:a7:a5:2c: 40:79:0f:57:ea:1d:ff:e9:85:c2:20:63:00:a5:4f: 78:f4:f8:c1:b5:70:75:fc:56:a6:38:e9:a8:60:57: 84:b1:8e:d2:81:cb:43:82:2f:a7:04:b4:6b:55:63: 9e:6b:67:54:7b:f0:60:81:01:42:0a:ee:a2:87:f7: 7e:99:1a:be:44:c3:9d:43:70:a8:39:65:fa:47:c8: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:6E:3C:57:84:5E:D7:0F:54:6C:2A:35:A8:8E:EE:5E:54:F3:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b0:47:55:75:d3:f1:1e:60:d1:22:06:6c:98:dc:7e:e5:71: b8:aa:b3:f0:29:f6:94:c1:1f:04:68:95:c2:c2:f3:fc:21:1c: 10:fd:e4:7c:5b:c5:27:37:d5:25:0b:8d:56:65:3c:d4:ee:11: 97:ec:3e:c9:8d:35:aa:f6:29:d4:8c:8e:8c:62:b0:9d:b9:6b: fc:1c:d0:0a:dd:8f:08:43:13:e0:62:6d:59:03:88:20:23:7b: 4a:f3:fb:1b:7a:67:5b:33:5c:d7:5e:98:b7:ff:92:35:ca:c1: 43:a3:a0:6b:ef:b8:37:3a:38:33:cc:cc:d7:94:de:48:fe:b2: 88:db:8e:f6:55:a9:dd:df:2b:b3:a5:c4:e4:0f:f0:af:e1:77: a1:c2:4c:16:19:d9:5a:f5:81:71:e3:72:c3:99:17:52:9d:e7: e6:bd:4c:a5:09:f5:b0:cf:9c:88:bf:1b:67:43:20:5a:51:16: ef:18:cf:bf:c5:60:9f:05:f6:28:c3:90:00:96:e2:e9:dc:05: 32:57:d0:d6:7b:67:0e:4d:8d:23:62:01:d3:a7:d7:a2:5b:b7: f2:05:96:15:e5:59:3d:aa:de:7e:28:ee:71:4b:94:70:c4:7c: 2f:cb:bb:48:9a:d3:95:95:a5:47:d5:a6:03:2b:08:77:c5:67: eb:bd:20:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRHejnoojcHRd0aHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MTAxODIyMDAwOFoXDTI1MTAyMDIyMDAwMFowLzEtMCsGA1UEAxMk ZWJiYmZiMjgtMmEwMS00NDJmLThjMWMtNDg0ZTVkNzc5ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXeh8Rz3ZE4qmp18nvw9OrEobllWIIsbX4Jh 9s9tI3MmGbYSORLfpIIJmN0BkLVDpvUe1CVttp+9tVpVYLDxAVPZLQ06yacKjNFa /2JzVCIrdJE2wMQkb+Y656BWoUJkivOdBILzYxJIuFvcsgEpvcxACb3i8ZvN+Fz4 T0L0EVJpD85oW8qiN43Cz/NTKrzsGLaNw9/o9VBpnpXgJrgs+7Afff4zIr9W/crm 6H2zW96npSxAeQ9X6h3/6YXCIGMApU949PjBtXB1/FamOOmoYFeEsY7SgctDgi+n BLRrVWOea2dUe/BggQFCCu6ih/d+mRq+RMOdQ3CoOWX6R8hDDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAYObjxXhF7XD1RsKjWoju5eVPM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGYyZDJhNTItNWNhNy00 YTM2LTg0OWYtYTdkNmI4NzZlNjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCisEdVddPxHmDRIgZsmNx+ 5XG4qrPwKfaUwR8EaJXCwvP8IRwQ/eR8W8UnN9UlC41WZTzU7hGX7D7JjTWq9inU jI6MYrCduWv8HNAK3Y8IQxPgYm1ZA4ggI3tK8/sbemdbM1zXXpi3/5I1ysFDo6Br 77g3OjgzzMzXlN5I/rKI2472Vand3yuzpcTkD/Cv4XehwkwWGdla9YFx43LDmRdS nefmvUylCfWwz5yIvxtnQyBaURbvGM+/xWCfBfYow5AAluLp3AUyV9DWe2cOTY0j YgHTp9eiW7fyBZYV5Vk9qt5+KO5xS5RwxHwvy7tImtOVlaVH1aYDKwh3xWfrvSDI -----END CERTIFICATE-----Generated at Sun Oct 19 14:50:19 2025 by rpki-client