$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: 5MfDEMrBEnde2QNr9K1evALBukabBKex+WQOdcqjV14= Subject key identifier: 21:45:38:6A:90:48:FD:79:C6:E0:AE:25:15:D2:B5:A6:1E:5C:55:CE Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584BBFFEA671353661265E763B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3664 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: 7Pwh8V6lyQ3WXEmS1Aw3cCBJxJv1Mf3adlnoNsMzjvc=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: qqyHw2/EDr3MwJZfu92QfXpWBH2bENLZ9sAmK1wM0y4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:71:35:36:61:26:5e:76:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=bafa5a78-00ba-44c4-ae30-52838d07f7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:92:9a:44:ba:77:45:f2:a9:a4:a5:35:dc: 11:7e:46:37:62:59:7a:d9:b1:ca:57:f7:e2:4b:56: 98:38:73:5b:cb:d4:33:bb:08:08:81:de:06:19:2d: 39:64:25:87:11:ed:b4:e1:0f:35:ad:b7:9f:19:ef: c3:42:bd:3c:75:1b:da:45:fa:74:3e:c6:94:5c:10: 1b:af:62:9d:05:c8:93:ab:a8:ed:09:55:70:c5:d9: 2f:cf:f1:4b:bb:2f:a2:bb:9c:40:34:64:6f:47:54: 5b:71:dd:88:ca:43:27:4b:59:3a:bc:16:2d:d8:e1: dd:33:4f:62:86:aa:69:5b:3e:56:2e:97:73:cd:48: 40:e5:25:0c:5b:b9:37:34:29:d7:db:ce:a4:85:6b: c3:55:54:80:32:72:73:9f:1b:47:08:a6:94:29:84: 76:4e:45:39:98:aa:a8:ec:4a:90:2f:4e:e3:47:29: f7:47:8c:c7:eb:90:a5:e8:33:7c:b0:93:ce:44:90: 23:ce:d6:55:f6:99:74:96:60:f0:15:4b:8e:2a:af: b9:b7:bb:bd:92:25:4a:f1:ad:2d:46:2a:b0:cd:bb: 10:6b:12:d6:09:0c:bd:66:9a:c4:4b:93:10:4b:cc: 32:bc:90:0a:44:6f:74:47:32:85:38:2e:d0:c7:bc: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:45:38:6A:90:48:FD:79:C6:E0:AE:25:15:D2:B5:A6:1E:5C:55:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:63:cf:2a:34:15:3e:57:ea:88:89:a9:b4:14:eb:3c:a1:b9: 0e:8f:34:37:82:0e:63:dd:1f:a4:00:24:df:9d:9a:c6:48:68: 36:a2:87:68:7c:b4:22:71:97:a6:10:24:96:93:e0:55:5e:db: 05:7e:c4:1e:ad:89:a2:c6:9b:17:22:96:f4:d9:2b:4a:f7:b5: be:33:2f:25:9a:26:04:73:4e:0d:dd:05:b5:38:b8:f6:70:a6: 75:1f:da:ec:4c:07:fb:06:77:c3:31:c9:68:d6:4b:0c:5b:3e: 10:9c:67:f0:2e:a2:a0:77:64:81:30:19:dc:4f:95:75:b8:19: 1d:cb:b5:46:21:cb:5f:f4:ad:88:5b:ce:d9:f5:6b:5d:42:4c: 60:22:b1:fa:85:20:37:1e:ed:5b:77:67:f8:d2:bd:f4:76:d5: 23:d0:2c:ce:0b:e5:33:a3:ae:85:c6:19:e2:77:08:9b:f0:0f: 12:f8:bc:59:dc:3a:84:5c:c9:e3:7d:63:9e:a6:75:66:ae:62: 0c:1d:ff:e7:d2:22:34:56:22:62:6a:b8:07:c2:04:32:ab:2a: 69:e3:dd:90:0a:11:a1:53:5b:34:f6:56:22:94:cc:76:f5:f1: 83:76:87:24:4d:11:83:6a:79:34:8a:68:0c:c4:42:f2:3e:fa: 98:19:ec:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qZxNTZhJl52O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk YmFmYTVhNzgtMDBiYS00NGM0LWFlMzAtNTI4MzhkMDdmN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJqSmkS6d0XyqaSlNdwRfkY3Yll62bHKV/fi S1aYOHNby9QzuwgIgd4GGS05ZCWHEe204Q81rbefGe/DQr08dRvaRfp0PsaUXBAb r2KdBciTq6jtCVVwxdkvz/FLuy+iu5xANGRvR1Rbcd2IykMnS1k6vBYt2OHdM09i hqppWz5WLpdzzUhA5SUMW7k3NCnX286khWvDVVSAMnJznxtHCKaUKYR2TkU5mKqo 7EqQL07jRyn3R4zH65Cl6DN8sJPORJAjztZV9pl0lmDwFUuOKq+5t7u9kiVK8a0t RiqwzbsQaxLWCQy9ZprES5MQS8wyvJAKRG90RzKFOC7Qx7zGRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFFOGqQSP15xuCuJRXStaYeXFXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTY88qNBU+V+qIiam0FOs8 obkOjzQ3gg5j3R+kACTfnZrGSGg2oodofLQicZemECSWk+BVXtsFfsQerYmixpsX Ipb02StK97W+My8lmiYEc04N3QW1OLj2cKZ1H9rsTAf7BnfDMclo1ksMWz4QnGfw LqKgd2SBMBncT5V1uBkdy7VGIctf9K2IW87Z9WtdQkxgIrH6hSA3Hu1bd2f40r30 dtUj0CzOC+Uzo66Fxhnidwib8A8S+LxZ3DqEXMnjfWOepnVmrmIMHf/n0iI0ViJi argHwgQyqypp492QChGhU1s09lYilMx29fGDdockTRGDank0imgMxELyPvqYGeym -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:26 2025 by rpki-client