$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft File: d0df77c4-4a94-461b-9582-441eb75796a4.mft (raw, json) Hash identifier: S7Irtb+nZ0up1vJssdBXZ4VKMjT9J6TaD9Jtd3rhFVc= Subject key identifier: FF:07:11:4E:4B:54:F9:03:08:F0:A0:30:E5:2F:45:D5:91:63:AF:77 Authority key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Certificate issuer: /CN=d0df77c4-4a94-461b-9582-441eb75796a4 Certificate serial: 010D0C9F4328584B93AD0045A650930AE75F2340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft Manifest number: 010D0C9F432858441E26108686929E8AC4BEDA3D Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: d0df77c4-4a94-461b-9582-441eb75796a4.crl (hash: gx/2+2ItfS5N8Wj8M2yueVqq+QW+X1tMgUYXm3J1RnQ=) 2: e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa (hash: PViLueqXDkc1XyCl7HWTy0GfrQ2GH5/4c1AnbQqJq0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:00:45:a6:50:93:0a:e7:5f:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0df77c4-4a94-461b-9582-441eb75796a4 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=ad58df7a-fb18-4a27-91b7-81746f91e3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:9f:ec:0c:9c:9a:a6:aa:58:e5:a4:48:68: bb:e9:45:df:03:dc:b7:31:ff:7d:46:71:56:c9:80: 31:6f:f1:d4:12:c0:86:0a:8a:ea:3d:18:a3:12:99: ce:2e:29:7f:55:00:29:86:17:04:9a:92:a5:80:8d: 76:18:ce:eb:dc:8e:99:96:c2:44:f9:cb:f3:a3:6d: 11:77:4e:16:47:78:c8:2f:79:40:dd:a9:de:67:31: 14:f3:5d:73:17:a6:68:df:2d:40:23:98:be:b2:81: 5b:8b:a8:d7:f7:92:42:a9:3b:d4:94:4a:f6:23:0f: c3:3b:eb:d7:3b:e6:b0:45:4a:bc:f9:6e:8f:11:0e: 3f:5b:9f:b6:ab:c3:16:e2:50:e4:97:af:14:9b:f3: e9:39:13:6b:7b:fc:61:d7:2a:a9:af:69:2b:9a:b4: 19:5e:01:8a:49:58:0b:90:91:25:67:87:37:85:29: ce:a8:30:df:a3:19:c0:d6:0b:ff:a7:44:ac:78:8a: b2:27:fa:62:4a:ab:c5:8a:69:cd:bd:d0:f7:12:7d: 58:17:fe:af:05:c3:b6:cf:d9:3c:95:17:a6:f4:02: 66:76:38:56:dc:0a:dc:3f:5e:c3:b1:82:63:9b:30: 1c:ee:9b:4b:8d:63:c5:fd:d5:bd:f7:db:dc:36:23: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:11:4E:4B:54:F9:03:08:F0:A0:30:E5:2F:45:D5:91:63:AF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl X509v3 Authority Key Identifier: keyid:DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:39:83:8a:85:5b:13:25:df:74:50:53:a9:8a:5b:49:1c:3c: d8:b9:14:d2:a6:ab:ca:b2:12:4b:3c:2d:80:95:1d:c9:7e:cc: be:f7:19:88:3e:76:2b:55:fe:51:0c:da:48:32:e4:30:da:9a: 34:42:29:d5:ea:35:dd:8e:1a:66:0f:97:f7:3b:ec:3b:67:82: 5e:00:a1:63:04:eb:83:bc:bc:6b:a0:aa:3f:27:46:7a:84:3e: a3:e8:46:6a:ec:a1:64:08:2a:da:62:ea:22:f9:db:20:a1:39: b0:d0:6f:93:5c:df:3e:8b:e8:2c:aa:d9:88:15:ae:08:64:e4: 0e:9e:e3:8c:3a:f3:33:3c:92:83:22:8e:2c:59:76:52:69:49: bf:27:a8:af:17:6f:42:8a:82:b0:a3:36:c4:70:6a:11:ae:11: 55:8e:10:3f:4e:64:eb:6f:b8:4c:2c:94:93:0f:fa:69:13:ec: 61:22:0f:6c:2f:41:7a:96:06:f0:fb:a0:b5:39:f9:d6:57:9b: 17:e4:ad:c9:3a:ff:af:63:d6:d9:64:82:a2:a2:3a:b0:33:c1: e2:db:a4:7a:de:4c:63:0c:38:5e:01:6f:90:cf:81:b6:67:81: 3f:46:71:8b:cc:9e:61:56:9e:1c:ac:97:7e:15:e5:0c:bc:a0: 75:ac:da:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQBFplCTCudfI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBkZjc3YzQtNGE5NC00NjFiLTk1ODItNDQxZWI3NTc5 NmE0MB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk YWQ1OGRmN2EtZmIxOC00YTI3LTkxYjctODE3NDZmOTFlM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliuf7AycmqaqWOWkSGi76UXfA9y3Mf99RnFW yYAxb/HUEsCGCorqPRijEpnOLil/VQAphhcEmpKlgI12GM7r3I6ZlsJE+cvzo20R d04WR3jIL3lA3aneZzEU811zF6Zo3y1AI5i+soFbi6jX95JCqTvUlEr2Iw/DO+vX O+awRUq8+W6PEQ4/W5+2q8MW4lDkl68Um/PpORNre/xh1yqpr2krmrQZXgGKSVgL kJElZ4c3hSnOqDDfoxnA1gv/p0SseIqyJ/piSqvFimnNvdD3En1YF/6vBcO2z9k8 lRem9AJmdjhW3ArcP17DsYJjmzAc7ptLjWPF/dW999vcNiMbYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP8HEU5LVPkDCPCgMOUvRdWRY693MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGRm NzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1Nzk2YTQvZDBkZjc3YzQtNGE5NC00 NjFiLTk1ODItNDQxZWI3NTc5NmE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBkZjc3YzQtNGE5NC00NjFiLTk1 ODItNDQxZWI3NTc5NmE0L2QwZGY3N2M0LTRhOTQtNDYxYi05NTgyLTQ0MWViNzU3 OTZhNC5jcmwwHwYDVR0jBBgwFoAU2mHk3zZxNooVYVBLk3hGBfB7yfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFl Yjc1Nzk2YTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8OYOKhVsTJd90UFOpiltJ HDzYuRTSpqvKshJLPC2AlR3Jfsy+9xmIPnYrVf5RDNpIMuQw2po0QinV6jXdjhpm D5f3O+w7Z4JeAKFjBOuDvLxroKo/J0Z6hD6j6EZq7KFkCCraYuoi+dsgoTmw0G+T XN8+i+gsqtmIFa4IZOQOnuOMOvMzPJKDIo4sWXZSaUm/J6ivF29CioKwozbEcGoR rhFVjhA/TmTrb7hMLJSTD/ppE+xhIg9sL0F6lgbw+6C1OfnWV5sX5K3JOv+vY9bZ ZIKiojqwM8Hi26R63kxjDDheAW+Qz4G2Z4E/RnGLzJ5hVp4crJd+FeUMvKB1rNoq -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:47 2025 by rpki-client