$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: mEslWlzoGFINAFFrpsRZm29tlTtcb/zmPtoz+NzieeI= Subject key identifier: 7B:62:9B:BA:5A:35:8A:F3:62:BF:A6:AE:26:18:7E:AB:77:14:6C:02 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584B961E6303F5F6DDE97B37C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A877D Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: lmaTFWvzavA9uFBL1C4JKHXylBcWzhbYpDdBAqSuAP8=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: ArszsN41miFeQ7chWr2JrKDh64HWgpEyA8CEMzhJHdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:63:03:f5:f6:dd:e9:7b:37:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=6ca6c122-aa2d-44b1-adf0-c107d4a65cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:9f:92:52:d2:80:85:e0:b8:5d:f9:93:76: 67:33:5d:5b:91:14:33:63:77:2c:51:c7:1f:93:48: 55:20:f5:8e:54:38:94:14:c6:b7:77:99:c5:c7:42: d2:97:e3:d2:4a:22:f2:c3:cd:52:59:05:3e:e4:fc: 0d:f8:51:52:80:be:e3:16:ab:a1:4b:f4:a4:7d:9a: bc:4d:cd:5c:46:34:3b:1b:87:3d:d0:f0:36:38:24: 5b:6a:d5:e0:ef:13:ad:94:88:5c:7f:b5:4e:4f:8c: cf:d5:7f:93:11:9d:ba:4c:cb:87:5e:a2:18:96:c5: 63:bc:40:f6:b1:d7:bd:40:0f:37:9a:50:46:ba:bd: 90:0c:e8:36:ae:a8:6f:16:be:3e:33:54:cb:0f:a7: 69:dc:56:77:e9:78:69:50:b0:66:60:cf:fd:5d:f5: a1:de:0d:ae:fb:7c:14:5b:ee:6d:01:c4:ba:93:58: 36:73:cf:14:d4:18:fc:74:eb:84:60:07:91:3f:52: d9:d3:5f:e8:88:d7:23:60:3a:85:4d:42:eb:b7:31: 70:2a:c8:3e:bb:48:fa:5f:55:68:56:57:33:e1:82: 10:b4:64:61:68:49:0a:45:96:d5:8e:2c:8a:3b:09: b5:96:70:44:de:6a:e3:a4:58:ba:66:a3:6e:8e:9c: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:62:9B:BA:5A:35:8A:F3:62:BF:A6:AE:26:18:7E:AB:77:14:6C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:79:8a:f2:c7:c6:e6:b9:58:89:ec:25:22:66:a9:92:64:9b: d3:20:2f:a7:6d:76:7c:3e:9b:87:7a:59:c1:1d:04:82:31:d8: 4b:df:29:8a:2b:eb:7c:04:93:f7:db:05:2e:88:7d:62:19:bb: 9f:68:89:23:9b:d4:3f:e1:a9:98:79:a9:23:8c:6a:3a:e7:89: cc:3a:38:13:31:fb:c7:7c:ba:18:3d:e7:77:11:fb:8d:42:b8: 5f:97:d4:d4:c9:7c:5f:27:f4:74:d7:02:43:7e:fb:9e:41:7f: 13:ef:b4:75:51:9c:44:4e:95:57:21:d1:2a:ac:91:fb:16:d4: e2:4e:f8:ed:4a:db:1c:19:99:39:14:e3:9c:b4:13:44:00:39: 85:f1:d0:b6:03:f7:77:73:b6:27:e7:6c:82:0b:2e:0c:82:b1: 34:89:36:eb:7e:ac:64:44:96:5e:46:0c:e4:d3:bc:f6:39:c9: e4:9a:29:81:6a:f9:3c:c0:fd:e6:62:34:3f:72:4a:11:bf:f0: d8:c0:57:1a:a9:dd:23:9b:89:ce:08:f2:8a:b8:19:47:ab:3b: 17:72:b2:de:cb:46:c4:57:74:a2:19:76:5d:0d:ee:92:61:3e: 03:44:d0:a1:89:9e:a1:bf:6f:14:84:19:36:3c:73:d3:90:a1: 8f:70:31:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmMD9fbd6Xs3xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk NmNhNmMxMjItYWEyZC00NGIxLWFkZjAtYzEwN2Q0YTY1Y2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AWfklLSgIXguF35k3ZnM11bkRQzY3csUccf k0hVIPWOVDiUFMa3d5nFx0LSl+PSSiLyw81SWQU+5PwN+FFSgL7jFquhS/SkfZq8 Tc1cRjQ7G4c90PA2OCRbatXg7xOtlIhcf7VOT4zP1X+TEZ26TMuHXqIYlsVjvED2 sde9QA83mlBGur2QDOg2rqhvFr4+M1TLD6dp3FZ36XhpULBmYM/9XfWh3g2u+3wU W+5tAcS6k1g2c88U1Bj8dOuEYAeRP1LZ01/oiNcjYDqFTULrtzFwKsg+u0j6X1Vo Vlcz4YIQtGRhaEkKRZbVjiyKOwm1lnBE3mrjpFi6ZqNujpwshwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHtim7paNYrzYr+mriYYfqt3FGwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCeYryx8bmuViJ7CUiZqmS ZJvTIC+nbXZ8PpuHelnBHQSCMdhL3ymKK+t8BJP32wUuiH1iGbufaIkjm9Q/4amY eakjjGo654nMOjgTMfvHfLoYPed3EfuNQrhfl9TUyXxfJ/R01wJDfvueQX8T77R1 UZxETpVXIdEqrJH7FtTiTvjtStscGZk5FOOctBNEADmF8dC2A/d3c7Yn52yCCy4M grE0iTbrfqxkRJZeRgzk07z2OcnkmimBavk8wP3mYjQ/ckoRv/DYwFcaqd0jm4nO CPKKuBlHqzsXcrLey0bEV3SiGXZdDe6SYT4DRNChiZ6hv28UhBk2PHPTkKGPcDFf -----END CERTIFICATE-----Generated at Tue Oct 21 15:35:51 2025 by rpki-client