$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft File: df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json) Hash identifier: A+KL9Y/bAAR1vpfU3owjBiQrOIDKVfgzI49e4UKygaA= Subject key identifier: 7E:5D:30:E1:0F:71:1A:D9:2E:E7:CD:7A:CE:35:25:C7:D5:B0:14:D7 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584B94242B4FBC463038641E5200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft Manifest number: 010D0C9F4328584073A83206E308BDBACFE90528 Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: HIxeGyh1b83nJuDUwHGaJ+3Y5rfiXU8fGpwvDpSkuHc=) 2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: K0UK1sWoUuBurLk8GPeb4LGcvoSEQr5wrkjz+N6+9po=) 3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: eWDzwOpbijUfM83ZofdUv7TKqBHtq3uQwIZUFrLHQeE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2b:4f:bc:46:30:38:64:1e:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=d67dc5ec-c381-46e8-9bf2-33fed686cff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:60:42:03:35:68:46:60:ed:40:d5:e6:65: 20:b4:93:50:e5:d5:bc:8f:47:07:7e:2b:6e:30:cb: e2:a2:96:70:d5:18:ff:24:10:4f:d6:a9:a8:0c:05: c9:39:22:1e:a8:1c:b9:4c:26:33:ee:06:d0:5d:01: 85:0a:45:b1:38:b1:f5:45:0f:86:7a:3d:ae:3f:a3: f6:40:4e:a3:cb:4f:e1:0b:92:34:6e:3a:13:d9:bf: d0:73:df:84:95:ef:b8:75:a7:b7:b3:d1:0a:be:95: 5b:18:b7:5d:52:af:69:41:aa:74:8f:d1:87:9b:37: ab:d3:07:06:bc:49:d7:5b:e9:c1:b1:42:9e:55:78: dc:a9:ab:e3:13:64:4f:af:3a:cf:67:4d:a0:e7:7d: e0:f4:cb:cf:b5:8d:0b:bf:65:87:bc:f3:70:6f:1a: e1:d8:fe:e7:41:9f:58:b3:ed:1e:05:42:a4:12:50: bd:c9:3e:cb:ab:f3:98:3a:69:e1:b1:b7:0a:30:72: a9:59:87:4d:f9:93:8f:cc:57:aa:34:4f:bb:09:ad: 9b:4c:ba:bc:94:1a:6a:96:46:bc:0a:98:63:10:d2: eb:da:21:19:c0:30:8f:93:e4:ba:4f:3d:c0:fd:ef: 1c:a8:b9:ac:ca:68:62:da:a7:d7:a4:4d:17:92:67: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:30:E1:0F:71:1A:D9:2E:E7:CD:7A:CE:35:25:C7:D5:B0:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7d:cd:ed:67:c9:68:28:a6:0b:a2:ef:36:c2:8e:5d:4e:b8: 6a:92:64:1c:f9:b8:f5:9e:51:06:a5:3b:4b:b5:94:c1:15:d2: 2a:74:78:cc:46:c0:ae:5a:82:07:e1:34:32:8f:88:09:f1:41: 77:f1:3a:8c:c7:84:16:02:eb:ab:c0:5c:f5:f8:7e:ab:f0:a2: 1e:23:3f:24:b2:3f:83:4a:1d:db:19:ce:08:5c:1c:0d:0a:91: de:2d:de:d6:ac:0c:d9:8c:a1:5e:e6:96:d5:a8:3b:6c:d1:cd: 56:f9:c5:23:81:4a:e3:49:cc:41:86:21:01:75:68:dc:4d:a9: b0:5c:fd:01:5e:80:2d:39:b8:5c:ff:21:c0:60:db:18:7d:09: 9a:4b:db:f6:64:3a:8b:c8:ea:21:22:c4:5f:d7:8b:46:4c:b4: 53:29:dc:68:b3:68:2a:6c:ac:d6:9e:cc:26:5e:0a:ac:4d:38: ce:a1:d0:97:8c:79:1a:8d:25:62:1c:91:62:c6:9d:df:3c:ae: fb:e0:f6:39:a4:bc:9d:38:57:80:71:b4:47:64:d4:27:7e:e2: 20:3b:a7:8c:ee:5b:3b:e3:a9:90:37:75:e5:f4:a7:06:72:7c: 2b:b7:67:20:21:a7:e7:32:f1:e9:1f:0f:44:7c:8a:d0:89:c4: 49:c1:4c:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCtPvEYwOGQeUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk ZDY3ZGM1ZWMtYzM4MS00NmU4LTliZjItMzNmZWQ2ODZjZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ShgQgM1aEZg7UDV5mUgtJNQ5dW8j0cHfitu MMviopZw1Rj/JBBP1qmoDAXJOSIeqBy5TCYz7gbQXQGFCkWxOLH1RQ+Gej2uP6P2 QE6jy0/hC5I0bjoT2b/Qc9+Ele+4dae3s9EKvpVbGLddUq9pQap0j9GHmzer0wcG vEnXW+nBsUKeVXjcqavjE2RPrzrPZ02g533g9MvPtY0Lv2WHvPNwbxrh2P7nQZ9Y s+0eBUKkElC9yT7Lq/OYOmnhsbcKMHKpWYdN+ZOPzFeqNE+7Ca2bTLq8lBpqlka8 CphjENLr2iEZwDCPk+S6Tz3A/e8cqLmsymhi2qfXpE0XkmdNDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH5dMOEPcRrZLufNes41JcfVsBTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvZGYyODQ5NGYtMWQzZi00 YTQ1LThhNzQtYmRlNDFjMjUwMmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1fc3tZ8loKKYLou82wo5d TrhqkmQc+bj1nlEGpTtLtZTBFdIqdHjMRsCuWoIH4TQyj4gJ8UF38TqMx4QWAuur wFz1+H6r8KIeIz8ksj+DSh3bGc4IXBwNCpHeLd7WrAzZjKFe5pbVqDts0c1W+cUj gUrjScxBhiEBdWjcTamwXP0BXoAtObhc/yHAYNsYfQmaS9v2ZDqLyOohIsRf14tG TLRTKdxos2gqbKzWnswmXgqsTTjOodCXjHkajSViHJFixp3fPK774PY5pLydOFeA cbRHZNQnfuIgO6eM7ls746mQN3Xl9KcGcnwrt2cgIafnMvHpHw9EfIrQicRJwUzR -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:19 2025 by rpki-client