$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft File: df45c214-cd13-454c-ac2d-2978c76c6f7f.mft (raw, json) Hash identifier: 9YHI//IP+AWXAsXmQwHUcNDFbpOvr03KcBzOULBdIco= Subject key identifier: 08:06:DB:F9:03:B5:8C:C1:2C:DC:AD:04:28:CE:94:50:99:4D:55:1A Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8 Certificate issuer: /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f Certificate serial: 010D0C9F4328584B94242785E86BD39582135180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft Manifest number: 010D0C9F43285848F622F2E67C320CBC335182FA Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: 278765ee-7e37-387f-89f2-66a24d12e07c.roa (hash: +cYjeUJu3RrrgbCaflHQHrBliAqeHZXzuXooqRGg6sk=) 2: 58d18a9d-961e-38a1-898a-cab3732b33e7.roa (hash: j0sNpmFeTEk4BshPLdcGqoUkX7Fph6rAtYfH79+nYNM=) 3: df45c214-cd13-454c-ac2d-2978c76c6f7f.crl (hash: s369cZBSozAfP4I0X068b6dkm0L8B2IBZnUltHkbhf4=) 4: e3d9753b-d297-3f28-8411-a24b30d79d35.roa (hash: /RvCixeEQxOeN8ysh1kdlBJDlIY9+QNROIMIudf0j5E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:27:85:e8:6b:d3:95:82:13:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=42c992f3-92ad-44ff-8d3e-b43b97568c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:72:86:57:4d:5f:73:92:f4:34:36:02:66: 3a:68:2b:a0:80:6f:98:b4:8d:d4:1b:f5:c3:f4:89: b1:86:c9:bc:67:1f:38:13:9a:2f:0b:5f:7e:99:04: 2b:5a:e8:cb:74:df:60:a6:5e:a8:85:2b:d9:52:b1: 32:0e:ad:bf:1b:6f:64:e4:6c:3b:b8:c1:3a:02:3e: 33:30:bc:c7:07:a6:52:81:96:d3:c5:17:87:4d:49: 6f:b2:4c:fa:ae:15:2b:1f:c4:99:c4:32:d0:f0:b8: 07:b1:ff:e2:ae:bf:80:fc:96:16:64:55:03:c1:d7: ce:ac:9a:1e:89:c4:a1:b6:e7:24:c5:9b:6f:f9:60: 6f:a1:ff:21:64:0a:18:ff:ef:ff:dc:b5:7f:88:d2: d7:f7:96:10:c2:f8:a5:e2:9a:f0:e6:ba:d0:1a:15: f2:f1:7d:3a:f6:28:e7:4d:d4:1e:7b:64:bd:81:4f: e1:b0:2e:ae:64:43:93:bc:e8:07:15:df:c1:7b:38: 8b:32:f4:c5:f2:fa:bf:39:e5:2e:22:96:53:8d:65: 4b:52:b5:94:b5:5b:28:66:2e:ec:99:d6:5f:ba:31: 8a:c1:85:0f:d3:c9:87:80:c1:46:25:b0:47:40:13: 2f:79:03:7f:45:4f:f0:05:74:ee:cc:6f:42:2e:91: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:06:DB:F9:03:B5:8C:C1:2C:DC:AD:04:28:CE:94:50:99:4D:55:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl X509v3 Authority Key Identifier: keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5f:92:36:81:c0:88:c1:34:8a:2b:78:fc:92:3b:d0:55:75: c0:c4:0a:79:73:b6:24:a3:9b:b5:ea:21:fe:01:ed:4b:11:ee: 61:7e:75:ff:d4:da:bd:07:70:61:74:f1:34:88:a0:62:0c:53: f3:03:c2:dd:9d:94:63:88:ab:14:5a:46:fb:11:b8:d1:00:8b: 1f:df:87:2c:fe:20:08:7b:64:16:a5:86:2f:38:56:95:03:48: 30:73:77:24:bd:68:26:7a:64:a9:ed:07:c6:39:93:36:1f:c7: dd:a5:bf:e6:bc:bd:c6:50:e7:2f:73:0e:f4:82:cf:fd:e3:ea: 78:9f:b8:3d:aa:de:3e:89:71:c6:23:db:82:61:69:e0:cb:72: c2:b0:4b:8a:8f:de:da:5e:a3:64:dd:37:fa:d9:47:a8:eb:37: 94:b7:7f:4b:a7:77:df:ff:85:93:e2:52:d0:6f:f1:dc:f2:f1: 8c:83:0b:b7:f8:ec:fe:30:ca:74:62:a5:25:b1:12:b4:6c:9f: 76:f2:b0:12:67:af:35:6a:81:c7:bb:4a:76:32:70:4b:cf:79: 8a:21:26:80:9b:06:7a:b9:c4:29:61:e8:82:f9:45:73:76:4a: 23:9a:f6:c6:4b:8c:eb:53:04:6f:e7:2c:a6:d9:2c:a3:ff:bd: d3:af:ea:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCeF6GvTlYITUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY0NWMyMTQtY2QxMy00NTRjLWFjMmQtMjk3OGM3NmM2 ZjdmMB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk NDJjOTkyZjMtOTJhZC00NGZmLThkM2UtYjQzYjk3NTY4YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA061yhldNX3OS9DQ2AmY6aCuggG+YtI3UG/XD 9Imxhsm8Zx84E5ovC19+mQQrWujLdN9gpl6ohSvZUrEyDq2/G29k5Gw7uME6Aj4z MLzHB6ZSgZbTxReHTUlvskz6rhUrH8SZxDLQ8LgHsf/irr+A/JYWZFUDwdfOrJoe icShtuckxZtv+WBvof8hZAoY/+//3LV/iNLX95YQwvil4prw5rrQGhXy8X069ijn TdQee2S9gU/hsC6uZEOTvOgHFd/BeziLMvTF8vq/OeUuIpZTjWVLUrWUtVsoZi7s mdZfujGKwYUP08mHgMFGJbBHQBMveQN/RU/wBXTuzG9CLpFd9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgG2/kDtYzBLNytBCjOlFCZTVUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjQ1 YzIxNC1jZDEzLTQ1NGMtYWMyZC0yOTc4Yzc2YzZmN2YvZGY0NWMyMTQtY2QxMy00 NTRjLWFjMmQtMjk3OGM3NmM2ZjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY0NWMyMTQtY2QxMy00NTRjLWFj MmQtMjk3OGM3NmM2ZjdmL2RmNDVjMjE0LWNkMTMtNDU0Yy1hYzJkLTI5NzhjNzZj NmY3Zi5jcmwwHwYDVR0jBBgwFoAU2C/19hmAM6tpVBqzKGpekEXVYugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjQ1YzIxNC1jZDEzLTQ1NGMtYWMyZC0yOTc4 Yzc2YzZmN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCX5I2gcCIwTSKK3j8kjvQ VXXAxAp5c7Yko5u16iH+Ae1LEe5hfnX/1Nq9B3BhdPE0iKBiDFPzA8LdnZRjiKsU Wkb7EbjRAIsf34cs/iAIe2QWpYYvOFaVA0gwc3ckvWgmemSp7QfGOZM2H8fdpb/m vL3GUOcvcw70gs/94+p4n7g9qt4+iXHGI9uCYWngy3LCsEuKj97aXqNk3Tf62Ueo 6zeUt39Lp3ff/4WT4lLQb/Hc8vGMgwu3+Oz+MMp0YqUlsRK0bJ928rASZ681aoHH u0p2MnBLz3mKISaAmwZ6ucQpYeiC+UVzdkojmvbGS4zrUwRv5yym2Syj/73Tr+pJ -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:10 2025 by rpki-client