$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: uR+GIAsy8w5kr9G72ZKJUA4jElf5BwL2gmm4OXPednM= Subject key identifier: 01:45:DE:38:E0:4B:CC:33:64:FE:05:99:C6:3A:67:86:BF:B6:04:3C Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584BBFFEA90830B196F5EB009FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD444F Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: N3asuscqhlTTkKI8WGmaOJ5rP+M8ai0WWJqZZIPoWbM=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: +ecjEMc154MSHa/0MrFMcThs4issuWa+RyrHA+bNAxQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a9:08:30:b1:96:f5:eb:00:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=8eefc7de-c1e6-470c-96bc-640bc614361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:d7:35:86:78:08:b9:36:23:c0:74:31:df: 43:26:97:55:eb:38:86:b2:d4:15:4d:ac:de:92:ad: 02:53:50:7f:66:a0:c3:3c:de:38:8d:a4:e8:f3:db: 65:53:c1:29:65:89:3e:b5:19:50:3a:54:a1:b6:35: e6:a5:69:5e:22:5b:8b:bd:cf:72:b1:d8:b9:a7:22: b0:67:75:34:ff:38:ba:2d:dd:af:23:68:8e:d1:d5: d7:bd:72:ca:f9:9e:6c:25:46:67:f5:52:bc:ac:c9: 0b:b8:11:51:df:39:39:f9:dc:d9:ef:ac:1f:d4:cb: 14:fe:2a:44:90:a4:40:91:0b:00:35:23:6c:ce:b5: 17:cf:97:71:31:e0:12:da:a5:a3:e4:5a:f1:ca:b1: 5c:e9:a2:cb:6b:47:56:8b:e2:ba:0e:0c:3d:86:f2: d9:8d:2d:25:94:dd:9a:6c:36:18:f7:5d:20:11:89: 94:e6:92:08:38:48:7c:f9:89:a0:00:40:c0:8c:db: d1:8d:70:16:90:8c:8a:68:c7:9a:58:9b:31:e4:f4: 81:fb:ad:93:f7:9a:7d:03:bc:77:56:5d:a8:54:32: 4f:a1:a2:20:7d:98:9e:68:e4:ab:8e:a0:bc:f5:2c: c2:e5:e5:da:f5:22:d5:af:4b:cf:f0:7a:4b:e7:b9: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:45:DE:38:E0:4B:CC:33:64:FE:05:99:C6:3A:67:86:BF:B6:04:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c0:a3:76:0b:e6:9d:1a:8f:9e:76:ca:f3:df:4d:d5:b1:5a: a1:54:6d:06:56:96:66:aa:3f:60:54:66:ae:64:da:67:9f:b0: eb:f6:14:9b:4f:d0:4a:44:fd:fc:db:e8:b8:5b:9d:6d:44:60: e4:3b:2a:c0:dd:15:15:52:07:6b:62:1b:d3:ab:92:c4:f9:54: ee:df:c7:2e:e9:7c:5c:9b:f1:af:56:b2:5d:cf:b4:31:db:95: 91:31:cb:9f:37:03:16:33:75:7d:20:5a:d2:45:ec:95:94:2f: 68:b7:20:e5:68:14:c0:f7:7a:dc:66:63:34:0f:98:28:89:6f: c2:63:ea:c1:06:2e:61:a5:f9:bc:d0:a3:85:50:f5:3a:f2:6b: bc:45:b9:de:36:8d:4e:ea:3e:34:fd:11:cd:b1:9c:74:7b:5b: 42:64:80:9b:cc:9d:ea:ef:6f:69:ea:bb:ed:84:40:9e:45:c0: a8:6b:c6:38:61:e5:6e:5e:43:ba:a1:4d:b4:2b:e0:86:d5:9c: 14:5e:09:5c:44:9c:24:4f:97:91:be:c8:da:8e:82:32:ce:7b: cd:37:cb:a0:3b:63:b4:b0:50:74:20:cf:ec:28:f6:ff:74:bd: a2:40:2f:e9:ec:5f:f7:0e:6d:21:cf:c4:e3:61:84:1b:21:f4: 7a:da:42:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qkIMLGW9esAn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk OGVlZmM3ZGUtYzFlNi00NzBjLTk2YmMtNjQwYmM2MTQzNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlevXNYZ4CLk2I8B0Md9DJpdV6ziGstQVTaze kq0CU1B/ZqDDPN44jaTo89tlU8EpZYk+tRlQOlShtjXmpWleIluLvc9ysdi5pyKw Z3U0/zi6Ld2vI2iO0dXXvXLK+Z5sJUZn9VK8rMkLuBFR3zk5+dzZ76wf1MsU/ipE kKRAkQsANSNszrUXz5dxMeAS2qWj5FrxyrFc6aLLa0dWi+K6Dgw9hvLZjS0llN2a bDYY910gEYmU5pIIOEh8+YmgAEDAjNvRjXAWkIyKaMeaWJsx5PSB+62T95p9A7x3 Vl2oVDJPoaIgfZieaOSrjqC89SzC5eXa9SLVr0vP8HpL57kAOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFF3jjgS8wzZP4FmcY6Z4a/tgQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHwKN2C+adGo+edsrz303V sVqhVG0GVpZmqj9gVGauZNpnn7Dr9hSbT9BKRP382+i4W51tRGDkOyrA3RUVUgdr YhvTq5LE+VTu38cu6Xxcm/GvVrJdz7Qx25WRMcufNwMWM3V9IFrSReyVlC9otyDl aBTA93rcZmM0D5goiW/CY+rBBi5hpfm80KOFUPU68mu8RbneNo1O6j40/RHNsZx0 e1tCZICbzJ3q729p6rvthECeRcCoa8Y4YeVuXkO6oU20K+CG1ZwUXglcRJwkT5eR vsjajoIyznvNN8ugO2O0sFB0IM/sKPb/dL2iQC/p7F/3Dm0hz8TjYYQbIfR62kI4 -----END CERTIFICATE-----Generated at Wed Nov 5 07:21:33 2025 by rpki-client