$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: Icegb0VLIa9XAD1DhNl1izlFMcROkt8JchOa46hC/0c= Subject key identifier: A3:B5:01:D2:2A:11:27:B7:11:4D:D1:02:C4:F3:30:B4:58:AF:DE:08 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584BC10AA071FE6FC83F8A99B7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F375E5 Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Sat 08 Nov 2025 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: OtxfS7YGcUMY96ttIqMyzfeBH6ECEtVZL1K0mu1XnnE=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: HrKZAaPRXR1mC3Rz21juy1iMcvn14KIv0rkY0jdMXn0=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: +QWrnjsN4aNbr/U0sQhorfq1IXNuVz+SoaioPp7PQ7Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:a0:71:fe:6f:c8:3f:8a:99:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 8 02:00:00 2025 GMT Subject: CN=2ffd68b4-521e-451c-8fb4-2792243909f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:af:16:99:ff:6e:99:8f:1c:02:4f:ac:7f: fd:2c:19:c6:bf:42:c1:49:f8:fa:60:f8:a8:e3:8a: 8d:97:5b:b8:45:55:c4:38:93:c3:8c:da:e5:68:1f: 3b:6f:d8:29:1b:8e:21:68:a9:a3:dd:c1:dc:8f:2e: 25:7c:63:06:f5:bb:8d:ac:94:04:fe:f4:8d:7e:27: 16:66:d7:4d:d4:79:cc:d0:ac:a9:20:70:bc:a7:ac: fb:be:cd:60:ee:db:dc:83:2b:c5:6d:69:c8:c7:b9: 0a:4f:cb:a0:ec:78:38:5d:5c:79:80:dd:d7:d4:c3: 49:8e:46:51:74:dc:38:dd:59:42:90:65:f3:8d:cf: a6:fd:f4:8b:fa:73:63:d1:4e:7a:50:8e:8d:a9:79: b8:4c:4d:40:f6:69:28:67:02:f8:f5:a7:a0:78:b2: d7:b9:03:b7:ef:53:b7:c2:f6:86:d7:12:c4:bc:fd: af:7e:21:6f:45:15:68:27:ea:f9:14:53:f0:ac:b6: df:1f:13:25:6c:e9:95:77:6e:94:70:a7:45:fc:bc: a2:ea:94:23:30:7f:cc:ec:e9:1e:f5:f5:31:de:ca: a2:49:aa:b2:aa:fd:6b:11:55:44:05:90:bc:38:c3: 25:73:0b:94:77:13:b0:2c:75:db:55:f2:89:9f:d2: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B5:01:D2:2A:11:27:B7:11:4D:D1:02:C4:F3:30:B4:58:AF:DE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:73:6e:fa:53:43:00:25:cf:2a:fc:fe:7c:42:5a:c7:a8:63: 80:33:0e:58:58:2b:c0:67:c8:69:14:e6:21:36:4b:eb:74:96: 1b:d9:09:2a:3d:7e:08:37:8f:ea:8e:6d:e4:ed:db:e0:fb:36: 7a:4b:80:b9:81:e7:f8:56:de:b9:7d:3e:b4:5f:35:02:ce:e3: ee:7a:0b:62:ff:a8:8c:b9:ff:83:c0:53:78:26:aa:94:45:a0: 4d:b1:84:00:dc:40:a5:30:a3:a8:25:32:a9:3f:95:3a:c1:90: 2b:bb:2d:06:74:60:5f:f7:98:d6:44:8e:7c:a5:3f:19:88:f4: 3a:cd:9c:12:3d:be:7b:2d:2e:fd:9c:58:3f:b5:a7:52:25:8e: ea:c0:74:10:3b:2b:0c:72:21:25:53:0c:fc:17:eb:a1:19:04: fa:70:43:0e:d5:ba:10:b8:2a:c9:e7:3a:ae:79:71:04:6f:6f: a6:86:e0:9b:11:4a:82:68:c4:11:58:e8:eb:70:31:83:df:68: 41:6b:ef:81:7d:a4:55:b8:d9:0e:60:48:ad:ad:30:82:62:04: d9:6e:43:0d:8d:53:36:ed:51:51:3c:70:c6:ee:f4:7a:7b:72: 84:79:da:cb:15:ea:6b:13:63:95:f3:40:40:77:3e:2e:ea:be: a6:74:74:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCqBx/m/IP4qZt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwODAyMDAwMFowLzEtMCsGA1UEAxMk MmZmZDY4YjQtNTIxZS00NTFjLThmYjQtMjc5MjI0MzkwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqevFpn/bpmPHAJPrH/9LBnGv0LBSfj6YPio 44qNl1u4RVXEOJPDjNrlaB87b9gpG44haKmj3cHcjy4lfGMG9buNrJQE/vSNficW ZtdN1HnM0KypIHC8p6z7vs1g7tvcgyvFbWnIx7kKT8ug7Hg4XVx5gN3X1MNJjkZR dNw43VlCkGXzjc+m/fSL+nNj0U56UI6NqXm4TE1A9mkoZwL49aegeLLXuQO371O3 wvaG1xLEvP2vfiFvRRVoJ+r5FFPwrLbfHxMlbOmVd26UcKdF/Lyi6pQjMH/M7Oke 9fUx3sqiSaqyqv1rEVVEBZC8OMMlcwuUdxOwLHXbVfKJn9KflQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKO1AdIqESe3EU3RAsTzMLRYr94IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArc276U0MAJc8q/P58QlrH qGOAMw5YWCvAZ8hpFOYhNkvrdJYb2QkqPX4IN4/qjm3k7dvg+zZ6S4C5gef4Vt65 fT60XzUCzuPuegti/6iMuf+DwFN4JqqURaBNsYQA3EClMKOoJTKpP5U6wZAruy0G dGBf95jWRI58pT8ZiPQ6zZwSPb57LS79nFg/tadSJY7qwHQQOysMciElUwz8F+uh GQT6cEMO1boQuCrJ5zqueXEEb2+mhuCbEUqCaMQRWOjrcDGD32hBa++BfaRVuNkO YEitrTCCYgTZbkMNjVM27VFRPHDG7vR6e3KEedrLFeprE2OV80BAdz4u6r6mdHQ4 -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:42 2025 by rpki-client