$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: RFK/MdDiLTofpPG5HRG7ZlBQj/zVWGZW26hAcahOKHA= Subject key identifier: D4:45:20:7D:61:22:61:17:B2:B2:BC:A2:1B:4C:07:AE:A9:56:FA:7C Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584B961E68704A7CA2B4FF029540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3654 Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: GIP/9/mWHyOfp8Wi6ZJhlAohABD7yjsWi4p0XlIBSrU=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: aPZ3YR3yIdgL6M1/QvS2mzNYO9Y4zCvpzbPFGb5GDU0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:68:70:4a:7c:a2:b4:ff:02:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=9565e2bb-49cf-4523-9eba-bae2d6424bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:17:6e:f0:e1:93:62:37:b2:b2:77:0e:0a: df:eb:5b:f2:16:68:e3:62:0f:71:d9:b1:1b:d7:71: d8:d6:f6:6e:00:c0:de:6c:59:92:0c:ef:f4:51:3d: af:b3:c1:eb:c9:b3:9b:35:5b:b4:b6:80:1a:0b:62: bc:c6:9a:0c:43:0a:bc:2d:24:0c:ef:48:c6:b3:6f: 01:01:cd:d2:d7:41:a9:7e:f6:06:7e:d8:39:7e:8d: 2f:00:b5:b3:44:c8:04:ce:a5:f4:14:e3:c9:10:6c: 9c:22:3c:3f:57:a1:f7:e8:2d:33:fb:f4:6a:d9:7e: c1:c6:51:0b:fc:db:49:fa:b5:89:59:39:0c:5f:79: 72:a9:aa:7a:ad:64:ca:08:50:8d:5e:0a:ab:d5:65: 7b:ce:df:03:9e:83:b8:e7:fa:fd:52:53:96:31:80: 08:85:29:ed:2f:86:95:ea:92:3c:f7:48:7f:f5:26: 23:79:d4:57:9f:c7:0f:97:a2:1b:57:74:2a:88:cf: 0c:06:b0:2e:ef:67:d8:af:a4:ce:b8:15:b7:f9:ff: 1c:35:bd:e6:31:c3:c0:e5:f1:f7:a5:8b:23:53:9b: 6d:ed:a1:27:c6:4f:1b:ea:8f:b0:c9:b9:87:c8:21: 90:2b:00:bb:42:4b:54:10:bd:6a:ce:a4:e0:78:17: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:20:7D:61:22:61:17:B2:B2:BC:A2:1B:4C:07:AE:A9:56:FA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:cf:00:ee:be:16:8c:99:46:2e:0e:17:0f:09:dc:0c:eb:58: a7:7c:c9:87:17:20:44:41:f6:04:5c:e8:ec:4e:70:90:e6:30: b6:b5:02:84:61:76:d7:9e:08:c9:57:c8:65:39:f2:23:b6:a8: 42:cf:8c:10:da:9c:24:ee:f7:2a:20:e3:ed:8d:3d:87:25:b0: 35:8b:36:b6:e8:8a:80:12:eb:a8:fe:71:b1:87:03:8a:09:98: 11:4c:7c:75:63:02:0e:c8:c7:38:60:05:e3:6c:27:7f:33:a6: 96:20:a9:15:b1:d7:9b:0e:a3:82:8e:1f:88:e0:f4:cd:54:40: da:7e:fa:d4:d3:a4:a0:58:9c:8e:d7:fb:a7:91:0e:ab:f4:0e: 1c:66:1d:ae:3c:44:9d:47:15:33:2a:53:e9:86:a4:da:ce:f5: ba:15:c5:ba:d9:1f:a3:5d:5a:4b:0b:50:01:d0:1c:b1:47:6c: 7c:bc:8d:9c:3d:10:1a:b8:03:31:3f:d8:0c:12:65:32:70:11: 81:f9:8b:4a:69:49:d4:6d:c1:b7:fa:95:08:60:1d:57:25:06: 0d:42:a3:3d:90:bc:8c:ad:64:4c:11:a9:c6:3d:3f:8e:6c:94: 81:1e:87:aa:23:4b:8e:01:3d:9a:45:6f:fe:1d:d3:37:45:f4: a6:17:cc:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmhwSnyitP8ClUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk OTU2NWUyYmItNDljZi00NTIzLTllYmEtYmFlMmQ2NDI0YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhgXbvDhk2I3srJ3Dgrf61vyFmjjYg9x2bEb 13HY1vZuAMDebFmSDO/0UT2vs8HrybObNVu0toAaC2K8xpoMQwq8LSQM70jGs28B Ac3S10GpfvYGftg5fo0vALWzRMgEzqX0FOPJEGycIjw/V6H36C0z+/Rq2X7BxlEL /NtJ+rWJWTkMX3lyqap6rWTKCFCNXgqr1WV7zt8DnoO45/r9UlOWMYAIhSntL4aV 6pI890h/9SYjedRXn8cPl6IbV3QqiM8MBrAu72fYr6TOuBW3+f8cNb3mMcPA5fH3 pYsjU5tt7aEnxk8b6o+wybmHyCGQKwC7QktUEL1qzqTgeBeF1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNRFIH1hImEXsrK8ohtMB66pVvp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuzwDuvhaMmUYuDhcPCdwM 61infMmHFyBEQfYEXOjsTnCQ5jC2tQKEYXbXngjJV8hlOfIjtqhCz4wQ2pwk7vcq IOPtjT2HJbA1iza26IqAEuuo/nGxhwOKCZgRTHx1YwIOyMc4YAXjbCd/M6aWIKkV sdebDqOCjh+I4PTNVEDafvrU06SgWJyO1/unkQ6r9A4cZh2uPESdRxUzKlPphqTa zvW6FcW62R+jXVpLC1AB0ByxR2x8vI2cPRAauAMxP9gMEmUycBGB+YtKaUnUbcG3 +pUIYB1XJQYNQqM9kLyMrWRMEanGPT+ObJSBHoeqI0uOAT2aRW/+HdM3RfSmF8zX -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:11 2025 by rpki-client