$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft File: df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json) Hash identifier: d0vVrqbs/iWse3Cg2qV40IFpRFqj6aOUkY9dxDcTbjU= Subject key identifier: F9:44:5A:E4:92:8F:78:35:C1:42:6D:22:D4:30:F0:A6:F8:E1:EE:68 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584B96EECC6DC28C49328023A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft Manifest number: 010D0C9F4328584073A83206E308BDBACFE90529 Signing time: Tue 21 Oct 2025 00:00:03 +0000 Manifest this update: Tue 21 Oct 2025 00:00:03 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: HIxeGyh1b83nJuDUwHGaJ+3Y5rfiXU8fGpwvDpSkuHc=) 2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: K0UK1sWoUuBurLk8GPeb4LGcvoSEQr5wrkjz+N6+9po=) 3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: +4K8Zz/oZYXCo3fwq4/X3zBW53hesVvFaAMCYUYQ/b8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:ee:cc:6d:c2:8c:49:32:80:23:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Oct 21 00:00:03 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=3ea34a5c-26bf-4c19-ba1c-6a7527dd05a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:82:7c:ba:e5:ca:8e:e8:e6:b1:48:6c:5a: e8:65:f2:fd:b4:ea:4d:4c:ad:97:e4:a9:b1:3a:cb: a1:00:25:a4:6b:3c:bd:e0:57:76:ec:c5:28:84:56: 3a:91:17:97:47:7b:d8:7b:3e:8d:52:e4:e5:3b:ae: e3:83:14:ee:67:be:e0:4e:b1:c1:7b:7e:19:4b:5c: 6e:83:fd:53:81:e4:46:d7:75:d2:d6:f6:15:d8:f0: 08:37:56:7f:62:57:b2:85:cd:f8:26:63:51:97:77: 0f:aa:cf:28:f3:16:e0:90:f1:0f:de:99:c1:04:ea: c9:4a:79:65:7e:13:62:cd:09:e8:a5:a2:7f:6a:65: 5d:c7:f4:37:b3:64:91:6a:cf:5d:f4:41:40:d3:9f: c4:2f:81:c9:e0:43:95:86:a6:39:85:8b:22:e5:74: 4d:8a:82:8c:80:35:11:80:cf:e0:c8:92:b6:15:2d: 09:aa:e7:7c:6f:8a:64:b5:77:85:e6:ca:71:21:ff: 20:38:f5:87:ac:0c:31:ff:4d:13:3e:1a:93:3b:e0: bc:f3:0a:b1:f6:c8:0b:80:4d:a0:e4:f9:68:12:8e: 75:ea:9a:a1:b8:6d:27:37:f2:c8:74:32:45:a8:9a: 82:9d:2c:26:c5:10:fa:a9:b5:23:8f:41:db:5b:e3: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:44:5A:E4:92:8F:78:35:C1:42:6D:22:D4:30:F0:A6:F8:E1:EE:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ef:14:33:0d:b1:36:24:47:a8:3b:ec:b3:c5:15:b4:3a:75: 81:f5:5e:4d:73:f1:9a:38:bc:bf:73:29:bd:ad:18:82:eb:e3: 5f:1a:39:6f:ab:d6:fa:7e:db:63:b0:df:d7:5c:fb:8e:ac:07: 50:90:46:72:f0:45:df:6c:9f:5e:bf:35:b3:16:c8:bd:69:87: 71:42:c7:53:fe:c9:e8:16:8f:9c:3f:c3:5f:84:e7:9e:fe:c8: db:85:4c:e1:6c:99:c9:d7:a7:12:a6:e2:80:2e:2b:64:15:4b: 95:43:ef:29:63:9a:1e:7f:52:32:29:e0:ab:36:4f:fb:57:cb: 9e:99:f1:9b:07:c7:92:41:5c:da:61:7d:e5:90:47:3b:28:63: 79:37:85:e4:c0:62:aa:d5:01:f2:e5:dc:db:35:16:66:6e:5f: a9:d1:15:07:55:4c:a5:5f:16:d3:4e:ca:a8:48:9b:0d:41:8d: 0f:d1:50:16:c7:25:91:e7:f8:86:66:9a:06:47:a3:db:a5:a6: 35:45:75:9d:82:88:13:d5:4d:53:d8:e5:4e:ee:af:dc:49:82: f2:70:3e:02:d8:ad:63:e7:e3:1f:bc:86:b4:e7:53:9e:1b:4e: d6:5c:46:9d:0f:0d:58:59:91:30:b4:91:dc:56:60:33:7d:a3: b0:e3:fc:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW7sxtwoxJMoAjpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MTAyMTAwMDAwM1oXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk M2VhMzRhNWMtMjZiZi00YzE5LWJhMWMtNmE3NTI3ZGQwNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnueCfLrlyo7o5rFIbFroZfL9tOpNTK2X5Kmx OsuhACWkazy94Fd27MUohFY6kReXR3vYez6NUuTlO67jgxTuZ77gTrHBe34ZS1xu g/1TgeRG13XS1vYV2PAIN1Z/Yleyhc34JmNRl3cPqs8o8xbgkPEP3pnBBOrJSnll fhNizQnopaJ/amVdx/Q3s2SRas9d9EFA05/EL4HJ4EOVhqY5hYsi5XRNioKMgDUR gM/gyJK2FS0Jqud8b4pktXeF5spxIf8gOPWHrAwx/00TPhqTO+C88wqx9sgLgE2g 5PloEo516pqhuG0nN/LIdDJFqJqCnSwmxRD6qbUjj0HbW+ORHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPlEWuSSj3g1wUJtItQw8Kb44e5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvZGYyODQ5NGYtMWQzZi00 YTQ1LThhNzQtYmRlNDFjMjUwMmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt7xQzDbE2JEeoO+yzxRW0 OnWB9V5Nc/GaOLy/cym9rRiC6+NfGjlvq9b6fttjsN/XXPuOrAdQkEZy8EXfbJ9e vzWzFsi9aYdxQsdT/snoFo+cP8NfhOee/sjbhUzhbJnJ16cSpuKALitkFUuVQ+8p Y5oef1IyKeCrNk/7V8uemfGbB8eSQVzaYX3lkEc7KGN5N4XkwGKq1QHy5dzbNRZm bl+p0RUHVUylXxbTTsqoSJsNQY0P0VAWxyWR5/iGZpoGR6PbpaY1RXWdgogT1U1T 2OVO7q/cSYLycD4C2K1j5+MfvIa051OeG07WXEadDw1YWZEwtJHcVmAzfaOw4/zG -----END CERTIFICATE-----Generated at Tue Oct 21 01:58:26 2025 by rpki-client