$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: wBQ0PNpkYmhlwqHAhONAfwGLZ/KDwOQ8zM1OKEs0R3w= Subject key identifier: 00:A9:AE:60:EC:B5:80:45:AD:F3:A9:C0:EF:09:F0:8D:1E:F8:D3:E1 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584BC0CF1B43CDA11B8F829E9E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACD73 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Sat 08 Nov 2025 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: HvQODO3lqUiQD3yFxYQr8IQYXN5h7thq+m+T0HYeoKA=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: EFzLXrqWyPH4f+hQU6DUkO0DUz4mLawJasX57SuHDCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1b:43:cd:a1:1b:8f:82:9e:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 8 00:00:00 2025 GMT Subject: CN=5e20fc3f-8d3b-44df-a261-5a9f52057560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:f9:e3:27:81:0b:35:93:fa:e8:bf:27:f0: a5:da:0e:c7:5d:e3:9b:df:22:d2:b6:88:91:5e:9c: 63:51:c6:1e:e5:40:bc:ea:53:98:d4:76:22:d8:4e: c7:10:62:48:b2:d1:3d:72:ab:f9:96:c7:a3:cb:ba: 40:03:48:bd:48:b6:dc:05:84:82:70:7f:bc:46:16: 48:86:13:74:fb:46:e1:18:e2:37:f1:51:5e:fd:17: 54:e9:eb:f1:bf:9b:1f:f6:7f:61:3e:ba:f8:a2:af: 95:1d:ec:fb:b6:0a:3d:e9:c8:f0:a3:dd:ce:f4:4e: 60:90:2c:25:5a:10:55:14:bb:b1:7a:b8:39:67:dc: 30:8c:12:63:49:39:44:42:6b:3f:6f:77:fa:39:01: e2:c6:f8:ff:b0:64:26:c7:4b:72:6a:81:9e:be:29: e6:1d:96:e8:fa:ba:73:30:92:62:5d:11:c1:c6:7a: 3f:9f:c5:93:20:2a:d0:c0:26:f1:87:2f:ef:8c:16: a4:4c:75:07:9d:fc:7f:08:98:38:5e:18:7a:1e:77: fa:35:1f:da:1e:7e:b2:93:fa:29:7d:1c:27:64:77: 85:75:a6:e9:d3:25:71:75:8d:e0:2f:07:cb:b9:08: 8d:e7:b2:fb:87:58:b1:dd:77:9b:13:27:a3:97:8b: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A9:AE:60:EC:B5:80:45:AD:F3:A9:C0:EF:09:F0:8D:1E:F8:D3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ff:a7:b7:1e:34:d1:06:da:2b:f0:c0:ca:bf:2f:53:a2:72: f7:da:ea:65:8e:31:45:80:f4:c4:74:6e:24:b5:a1:84:df:34: eb:87:e1:13:65:be:32:e1:81:3c:17:21:8c:f3:be:df:47:d2: c7:05:bf:70:70:46:fe:62:41:77:10:45:19:ea:f3:8d:5d:d6: fc:1d:ce:c8:ac:57:34:10:2a:ab:99:5d:a8:7a:e2:5d:d9:37: a7:2f:47:1c:27:ab:40:a3:ea:c3:a4:28:c6:92:01:bf:cf:da: fb:82:bc:bf:c2:ec:05:d8:8f:bc:69:df:c3:48:c7:98:f5:3a: 39:a3:4d:0b:39:9e:a0:d1:cb:ea:0b:16:39:0a:0b:31:84:97: 2c:aa:ea:ad:3e:47:12:2f:d9:a7:77:5c:5f:a9:94:b7:a6:c7: 18:d6:f6:44:4b:b0:ea:5f:31:84:b7:d2:b4:2d:8a:56:88:14: 73:75:a6:6d:22:88:2c:73:4d:fe:cd:bb:d4:d9:d2:9a:6f:d9: 93:ce:cb:ad:0c:c3:4d:c9:e3:a6:aa:0c:6e:74:80:63:65:00: 74:bc:98:f2:7b:48:4a:5e:a5:2a:66:f4:3f:62:ac:f1:de:f2: 55:ee:28:50:cc:80:c0:42:1f:56:fc:06:9c:1e:39:e5:b7:a4: 15:f5:54:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxtDzaEbj4KenmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwODAwMDAwMFowLzEtMCsGA1UEAxMk NWUyMGZjM2YtOGQzYi00NGRmLWEyNjEtNWE5ZjUyMDU3NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dj54yeBCzWT+ui/J/Cl2g7HXeOb3yLStoiR XpxjUcYe5UC86lOY1HYi2E7HEGJIstE9cqv5lsejy7pAA0i9SLbcBYSCcH+8RhZI hhN0+0bhGOI38VFe/RdU6evxv5sf9n9hPrr4oq+VHez7tgo96cjwo93O9E5gkCwl WhBVFLuxerg5Z9wwjBJjSTlEQms/b3f6OQHixvj/sGQmx0tyaoGevinmHZbo+rpz MJJiXRHBxno/n8WTICrQwCbxhy/vjBakTHUHnfx/CJg4Xhh6Hnf6NR/aHn6yk/op fRwnZHeFdabp0yVxdY3gLwfLuQiN57L7h1ix3XebEyejl4vSqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFACprmDstYBFrfOpwO8J8I0e+NPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf/6e3HjTRBtor8MDKvy9T onL32upljjFFgPTEdG4ktaGE3zTrh+ETZb4y4YE8FyGM877fR9LHBb9wcEb+YkF3 EEUZ6vONXdb8Hc7IrFc0ECqrmV2oeuJd2TenL0ccJ6tAo+rDpCjGkgG/z9r7gry/ wuwF2I+8ad/DSMeY9To5o00LOZ6g0cvqCxY5CgsxhJcsquqtPkcSL9mnd1xfqZS3 pscY1vZES7DqXzGEt9K0LYpWiBRzdaZtIogsc03+zbvU2dKab9mTzsutDMNNyeOm qgxudIBjZQB0vJjye0hKXqUqZvQ/Yqzx3vJV7ihQzIDAQh9W/AacHjnlt6QV9VRn -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:47 2025 by rpki-client