$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft File: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json) Hash identifier: qqCfxSe/lrSvvrZK6iOpYCRZflF74Ms1zO3tXNhXkak= Subject key identifier: 4A:44:23:3D:D4:5B:C6:DB:C9:AA:E6:37:FC:BA:3A:45:9B:25:C4:07 Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11 Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f Certificate serial: 549A067E3EC6D8F904C74CF7414453A5B2272136 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft Manifest number: 62 Signing time: Wed 05 Nov 2025 12:05:25 +0000 Manifest this update: Wed 05 Nov 2025 12:00:25 +0000 Manifest next update: Thu 06 Nov 2025 15:21:25 +0000 Files and hashes: 1: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: mIIXHenAPapTQowmrDKNB8vBMtX0XhQAPt4whMDsQKs=) 2: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: VWmVLcZU2ImmYQc/ehPf9GibjoWjkOhTRarQQdROy/s=) 3: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: JOe5Bws2Czl2Xfjv8NkbPuCupbQkAHqMlv0J80ZQIuM=) 4: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: /uOm3NZhfzbO8K0EaDwD6+mnAwKqohKi5U32Ftdk/DE=) 5: 3136352e3134302e32352e302f32342d3234203d3e2039333034.roa (hash: oXxBG78HnQQPoVcVjfijLvrQF/Qc12X4uwNAXz0AYZw=) 6: 3136352e3134302e32362e302f32342d3234203d3e203235313938.roa (hash: sbG+gpC1dVT/UMN3WN1JaIkPiM5gEAd+D1ln8D/gYvA=) 7: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: i6SllSmn92lyxwCyF/7XFoj1Qnfc6F7BynX/boNBjW8=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 15:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:06:7e:3e:c6:d8:f9:04:c7:4c:f7:41:44:53:a5:b2:27:21:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f Validity Not Before: Nov 5 12:00:25 2025 GMT Not After : Nov 6 15:21:25 2025 GMT Subject: CN=4A44233DD45BC6DBC9AAE637FCBA3A459B25C407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:cf:be:f6:24:b4:3a:2a:c2:43:b5:ad:aa: 3f:a4:99:91:49:5e:9f:8f:ce:b3:ae:e0:aa:d7:07: 8d:a7:03:8f:74:3a:66:bf:da:51:b0:eb:a1:59:b2: 05:2d:a6:d4:a2:8e:e0:35:8b:f3:ca:9d:f2:78:03: 73:ee:5d:9d:40:ba:70:5f:a2:aa:05:16:d4:30:88: 79:eb:da:5a:ad:07:39:f2:4a:54:39:40:de:b0:f1: a7:bf:e4:0f:85:bb:60:59:db:85:2b:69:72:04:ee: ac:a6:95:ce:b5:bf:77:a6:71:24:c0:eb:88:e5:a4: c1:c1:0c:3c:34:b0:57:17:22:6d:6a:6c:35:81:ea: d0:e2:81:67:4e:58:89:05:83:47:a3:dd:ea:74:79: cd:15:53:ab:5a:23:36:76:9b:79:ec:58:e7:ef:48: 01:0a:8a:1b:46:dd:7f:22:c7:ae:3d:09:59:8b:cd: 5f:d7:02:70:71:53:aa:c4:d4:27:10:c6:19:6e:88: a3:9c:28:35:0a:8c:5b:e2:f1:31:fc:cf:42:68:de: ff:fd:cb:f7:0f:cd:46:06:14:6f:ed:e8:da:b3:9b: a5:22:e7:9b:2a:87:d2:c4:87:92:8a:bc:17:f2:62: 3b:b3:d6:18:e2:fa:63:19:c0:86:22:1e:d0:f8:3a: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:44:23:3D:D4:5B:C6:DB:C9:AA:E6:37:FC:BA:3A:45:9B:25:C4:07 X509v3 Authority Key Identifier: keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:61:2a:33:40:0e:29:f5:1e:a8:e9:ce:4f:d3:16:13:28: 0a:e6:62:23:ad:00:bf:88:09:87:8e:24:15:7b:96:41:76:e4: 54:8c:22:6f:69:95:22:05:26:26:4c:91:77:20:c8:71:fa:9d: 82:be:08:c9:1c:96:1c:02:78:bf:f1:66:73:14:7c:ab:2b:66: 49:85:f6:1f:90:a2:ea:c1:1f:79:d5:a0:a8:80:81:dd:b9:d6: 3a:95:e9:df:6d:9f:87:8c:b5:d5:99:a6:73:73:a2:23:a7:53: 64:ed:eb:e4:77:22:2e:ff:f9:62:83:71:8a:99:d4:3c:b0:e1: a7:d4:13:64:6b:12:0c:3e:6c:fc:39:a5:bd:0f:d5:9e:bc:c5: 47:6f:23:1f:6f:52:6e:ee:67:36:8c:4f:91:40:03:5f:e5:97: e3:33:ac:d6:bc:31:ef:ef:50:94:3e:3b:b8:9e:d1:b4:4b:d4: 03:fb:a2:1e:7d:66:ad:bf:f6:a8:72:f2:b3:1b:b8:9f:ec:e1: 6d:27:6c:99:4d:55:b8:6a:4d:be:75:82:c3:90:e7:12:59:4d: 1a:d3:08:9a:c3:ba:98:bb:16:88:d7:e1:c1:8c:71:f7:dd:3c: 82:45:46:cf:56:fb:66:83:03:4f:69:22:20:29:0b:0b:d6:bc: 5b:eb:76:ca -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUVJoGfj7G2PkEx0z3QURTpbInITYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUxMTA1MTIwMDI1WhcNMjUxMTA2MTUyMTI1 WjAzMTEwLwYDVQQDEyg0QTQ0MjMzREQ0NUJDNkRCQzlBQUU2MzdGQ0JBM0E0NTlC MjVDNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgvPvvYktDoq wkO1rao/pJmRSV6fj86zruCq1weNpwOPdDpmv9pRsOuhWbIFLabUoo7gNYvzyp3y eANz7l2dQLpwX6KqBRbUMIh569parQc58kpUOUDesPGnv+QPhbtgWduFK2lyBO6s ppXOtb93pnEkwOuI5aTBwQw8NLBXFyJtamw1gerQ4oFnTliJBYNHo93qdHnNFVOr WiM2dpt57Fjn70gBCoobRt1/IseuPQlZi81f1wJwcVOqxNQnEMYZboijnCg1Coxb 4vEx/M9CaN7//cv3D81GBhRv7ejas5ulIuebKofSxIeSirwX8mI7s9YY4vpjGcCG Ih7Q+DqZVwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFEpEIz3UW8bbyarmN/y6OkWb JcQHMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3 ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1 YTU0NmU2ZWY0LzAvREQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVF M0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBAG14YSozQA4p9R6o6c5P0xYTKArmYiOtAL+ICYeOJBV7 lkF25FSMIm9plSIFJiZMkXcgyHH6nYK+CMkclhwCeL/xZnMUfKsrZkmF9h+QourB H3nVoKiAgd251jqV6d9tn4eMtdWZpnNzoiOnU2Tt6+R3Ii7/+WKDcYqZ1Dyw4afU E2RrEgw+bPw5pb0P1Z68xUdvIx9vUm7uZzaMT5FAA1/ll+MzrNa8Me/vUJQ+O7ie 0bRL1AP7oh59Zq2/9qhy8rMbuJ/s4W0nbJlNVbhqTb51gsOQ5xJZTRrTCJrDupi7 FojX4cGMcffdPIJFRs9W+2aDA09pIiApCwvWvFvrdso= -----END CERTIFICATE-----Generated at Wed Nov 5 18:30:16 2025 by rpki-client