$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft File: dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft (raw, json) Hash identifier: mmfHT3JPBeaHVWdQfJCsg3UdxwJnNBjks/TmJOSTB0s= Subject key identifier: 21:32:D4:B0:17:0F:84:7A:DE:16:78:9C:96:51:F7:C4:F5:D0:CB:43 Authority key identifier: 44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32 Certificate issuer: /CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960 Certificate serial: 010D0C9F4328584BBFC3100906429047C9E4F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft Manifest number: 010D0C9F4328584073A859859A6D6FC1DB91EBA5 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 05bf2ef5-55ab-3860-b148-9e16f4e86ba6.roa (hash: 1kx/d9SmjnbLtxMgHnUBxB9R+KtulBy0zEikgNrJXDA=) 2: c0f5b104-40cb-33aa-b6e5-6f6866c14714.roa (hash: Fen8m1lXmwtLwAtjWaUSZSbCer6ADlG9FaZqTz5L904=) 3: dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl (hash: auOQ4qbKJq7zYahjwXH9VncsZDIPmtVvRMf/KzCUBbU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:10:09:06:42:90:47:c9:e4:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=9c696439-de1d-455e-bf89-360da69e6dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:e7:82:18:b6:87:3d:3d:6a:00:25:8f:61: 2e:d8:8c:87:1c:5e:f1:3d:7f:9f:90:80:83:b6:27: 23:87:a3:16:b4:20:98:d9:4b:2e:f2:d5:1a:e3:92: 5b:5f:8e:a2:e5:ee:fa:3d:06:4d:b9:2e:dd:f1:9a: 0f:c8:67:07:65:1c:51:89:4b:5d:37:17:b1:e4:f2: aa:42:32:11:02:25:a0:dd:2e:2e:e4:44:e7:ae:3f: d4:9d:d8:2f:37:9e:98:51:08:dd:10:91:4f:af:d3: 67:c4:c6:f0:2f:e7:2b:ab:01:13:d2:62:f1:0c:a2: 28:0c:0d:8d:7e:8c:9d:d1:0c:d7:00:34:47:98:f1: af:91:56:5e:15:f3:8b:2b:50:3e:45:49:cb:d7:7b: fc:37:a1:1a:7a:fe:70:50:4c:94:2d:7a:e1:47:32: 95:68:11:8a:c2:a0:c8:27:81:1d:99:5b:83:00:ec: 06:4b:8e:b9:d3:3a:33:7a:df:14:35:eb:19:f5:2b: 1f:6d:31:ef:19:cc:07:4e:98:91:99:ac:ad:ba:56: 9c:e1:22:82:75:7d:22:36:45:92:6a:10:3b:9d:e8: ad:67:c1:5e:d9:5d:fd:45:03:0f:26:94:f8:bf:4e: fa:1e:ce:79:d5:95:97:a0:b3:a2:22:76:39:13:86: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:D4:B0:17:0F:84:7A:DE:16:78:9C:96:51:F7:C4:F5:D0:CB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl X509v3 Authority Key Identifier: keyid:44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7a:df:63:e7:85:79:f0:49:32:0a:4f:0d:d5:05:88:46:f8: c8:5c:2e:8a:3d:d7:40:5a:67:00:65:4d:85:84:11:50:10:50: 0f:80:fa:6a:26:40:80:72:73:d7:da:f8:c5:5d:63:d6:16:b0: 3f:8d:d5:ea:15:b2:02:59:ce:a0:c3:9f:5b:42:88:88:95:65: 94:3d:db:9b:08:36:f6:84:da:0d:97:41:99:0f:82:40:d9:b8: 70:f7:aa:c0:49:34:42:52:83:67:60:36:ae:3a:1b:10:a8:18: f3:7c:ff:c6:17:9a:75:5d:58:9d:36:51:e5:b4:b5:b8:07:f5: 80:9e:c3:4c:b0:f0:23:74:64:27:b1:f6:f2:58:e5:2c:71:73: 47:dd:14:39:83:4c:f4:7b:04:17:92:01:dc:f0:c4:64:de:ca: f3:3e:7c:75:af:d8:92:5f:ec:35:53:bb:99:ba:05:2f:55:a2: 59:14:cd:09:f6:c7:c5:d4:55:06:08:23:97:30:ef:46:81:fc: 3c:22:3e:b4:51:bc:81:47:a5:0e:e3:f0:5f:ab:57:86:f0:a7: 30:93:83:17:87:5e:ae:ab:8d:9f:9f:b3:94:8a:85:87:fa:44: d8:a2:a8:17:87:74:1d:5b:30:c0:f8:53:2c:2c:76:49:5e:ce: 7d:ea:a9:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxAJBkKQR8nk9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiYjQxNDQtM2JkNi00YzVjLTliMWYtNjBhZjhkZGEw OTYwMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk OWM2OTY0MzktZGUxZC00NTVlLWJmODktMzYwZGE2OWU2ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr3nghi2hz09agAlj2Eu2IyHHF7xPX+fkICD ticjh6MWtCCY2Usu8tUa45JbX46i5e76PQZNuS7d8ZoPyGcHZRxRiUtdNxex5PKq QjIRAiWg3S4u5ETnrj/UndgvN56YUQjdEJFPr9NnxMbwL+crqwET0mLxDKIoDA2N foyd0QzXADRHmPGvkVZeFfOLK1A+RUnL13v8N6Eaev5wUEyULXrhRzKVaBGKwqDI J4EdmVuDAOwGS4650zozet8UNesZ9SsfbTHvGcwHTpiRmaytulac4SKCdX0iNkWS ahA7neitZ8Fe2V39RQMPJpT4v076Hs551ZWXoLOiInY5E4YEIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCEy1LAXD4R63hZ4nJZR98T10MtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJi NDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFmOGRkYTA5NjAvZGZiYjQxNDQtM2JkNi00 YzVjLTliMWYtNjBhZjhkZGEwOTYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGZiYjQxNDQtM2JkNi00YzVjLTli MWYtNjBhZjhkZGEwOTYwL2RmYmI0MTQ0LTNiZDYtNGM1Yy05YjFmLTYwYWY4ZGRh MDk2MC5jcmwwHwYDVR0jBBgwFoAURFDmnYJhuCw/e6h5U+/K5nQrkDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJiNDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFm OGRkYTA5NjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAset9j54V58EkyCk8N1QWI RvjIXC6KPddAWmcAZU2FhBFQEFAPgPpqJkCAcnPX2vjFXWPWFrA/jdXqFbICWc6g w59bQoiIlWWUPdubCDb2hNoNl0GZD4JA2bhw96rASTRCUoNnYDauOhsQqBjzfP/G F5p1XVidNlHltLW4B/WAnsNMsPAjdGQnsfbyWOUscXNH3RQ5g0z0ewQXkgHc8MRk 3srzPnx1r9iSX+w1U7uZugUvVaJZFM0J9sfF1FUGCCOXMO9Ggfw8Ij60UbyBR6UO 4/Bfq1eG8Kcwk4MXh16uq42fn7OUioWH+kTYoqgXh3QdWzDA+FMsLHZJXs596qkz -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:48 2025 by rpki-client