$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.mft File: dd3fc3ce-b780-4a97-9973-818292987f4f.mft (raw, json) Hash identifier: 3qEUBwXUrRWCjX587IxyFTZHX3lZ1mox2nR737WnUMY= Subject key identifier: A3:A8:13:1E:44:77:DE:1F:8A:F7:87:A8:6B:CA:8C:AF:82:2C:9C:16 Authority key identifier: C6:E1:67:7D:64:38:8C:13:80:2B:DE:54:4E:4F:3B:1D:7C:1A:95:AB Certificate issuer: /CN=dd3fc3ce-b780-4a97-9973-818292987f4f Certificate serial: 010D0C9F4328584BC05801D896B4C632E4140D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.mft Manifest number: 010D0C9F432858444D96BB5C5AA1591C93A2F82B Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: dd3fc3ce-b780-4a97-9973-818292987f4f.crl (hash: TYetyLiKStuwplROHPLIp2laPcprbntSNPoz39YeJik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:01:d8:96:b4:c6:32:e4:14:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3fc3ce-b780-4a97-9973-818292987f4f Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=4f4a5fe6-7299-4cda-918a-702c12864a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:a7:4d:2e:e0:e0:55:e3:10:3d:7c:b7:d1: bd:9b:29:a0:e8:db:cb:86:31:36:79:a8:7e:1f:49: 7b:16:9d:53:35:f1:d2:71:11:b0:fb:ec:03:9b:24: e5:85:49:35:b8:a4:ff:53:f2:6c:72:d2:dd:ca:cd: b9:7b:a7:fe:61:13:45:cb:ee:80:4a:c0:cd:24:6a: 26:6e:4a:33:b1:5c:f6:f9:08:16:cf:04:96:57:03: d5:1a:a0:30:ab:d0:2f:85:7d:db:a2:bc:a6:e0:ad: 11:e0:b2:b4:3e:78:af:8c:dd:2f:10:d3:a1:42:65: ea:21:b9:4f:62:34:b4:1b:d6:79:a5:15:23:8d:4e: eb:ef:56:b8:22:f1:05:4b:ba:2e:27:00:3b:a2:1f: 83:c9:8c:e6:c4:98:81:2c:52:0a:68:46:15:63:ba: 46:59:9a:62:e1:0a:9e:98:de:69:eb:5d:74:72:8a: cc:90:87:84:9f:eb:d2:5c:a7:b2:a1:ab:cc:05:94: 51:d2:9f:fc:91:e0:4e:43:50:07:44:db:da:51:56: 15:a1:58:e6:55:65:25:fc:0a:5c:8d:78:fd:af:54: c8:d4:b4:8b:6c:0e:ce:35:cb:d7:b0:6c:ae:97:61: fd:df:7f:b7:cc:b6:c4:c8:91:01:b7:42:5e:12:d4: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:13:1E:44:77:DE:1F:8A:F7:87:A8:6B:CA:8C:AF:82:2C:9C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f/dd3fc3ce-b780-4a97-9973-818292987f4f.crl X509v3 Authority Key Identifier: keyid:C6:E1:67:7D:64:38:8C:13:80:2B:DE:54:4E:4F:3B:1D:7C:1A:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd3fc3ce-b780-4a97-9973-818292987f4f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fc:d6:1e:ae:05:2a:d5:b8:98:85:8e:de:bf:48:d1:17:6d: ce:f5:18:d3:fc:c7:d0:39:8b:96:d4:c7:5e:ba:b2:fe:74:da: b2:40:b0:c4:7e:28:72:ba:c1:6b:bf:df:d1:5a:26:d1:92:bf: 74:e8:2b:3f:7a:3b:b0:9c:9e:ef:9b:81:51:c0:ac:d3:cf:ad: a8:73:39:89:49:1f:59:65:44:3c:6f:9c:72:b3:f0:d6:3f:36: c9:c4:8d:9f:21:25:af:3f:f0:51:1e:0d:e9:8c:b2:08:31:1e: b4:f2:bc:1c:63:fb:9c:31:61:22:18:d5:b9:ce:12:8c:93:5d: de:a6:92:2b:d4:9e:76:c6:5f:d6:43:ab:40:8a:05:5f:15:dd: ee:98:7c:b1:2a:ac:22:e0:6e:f4:23:f6:a5:17:e8:be:25:e9: 81:1a:9d:e3:df:c3:cd:7d:ec:ff:38:27:6d:47:e1:84:58:7c: 46:37:3d:f3:97:23:6c:01:d9:63:65:9c:99:d0:68:1b:ab:fc: 49:62:f8:cf:9a:cf:66:ec:59:e0:5f:eb:88:43:72:2b:bc:9a: c9:ac:bc:95:1d:a1:d3:c4:d1:d4:54:ee:2a:3b:34:b7:7b:6c: fa:ed:41:ca:5d:07:6b:e9:c9:29:b9:db:e6:4a:cc:5e:a0:cc: ff:d9:b3:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAHYlrTGMuQUDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZmMzY2UtYjc4MC00YTk3LTk5NzMtODE4MjkyOTg3 ZjRmMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk NGY0YTVmZTYtNzI5OS00Y2RhLTkxOGEtNzAyYzEyODY0YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvSnTS7g4FXjED18t9G9mymg6NvLhjE2eah+ H0l7Fp1TNfHScRGw++wDmyTlhUk1uKT/U/JsctLdys25e6f+YRNFy+6ASsDNJGom bkozsVz2+QgWzwSWVwPVGqAwq9AvhX3borym4K0R4LK0PnivjN0vENOhQmXqIblP YjS0G9Z5pRUjjU7r71a4IvEFS7ouJwA7oh+DyYzmxJiBLFIKaEYVY7pGWZpi4Qqe mN5p6110corMkIeEn+vSXKeyoavMBZRR0p/8keBOQ1AHRNvaUVYVoVjmVWUl/Apc jXj9r1TI1LSLbA7ONcvXsGyul2H933+3zLbEyJEBt0JeEtQYNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKOoEx5Ed94fiveHqGvKjK+CLJwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDNm YzNjZS1iNzgwLTRhOTctOTk3My04MTgyOTI5ODdmNGYvZGQzZmMzY2UtYjc4MC00 YTk3LTk5NzMtODE4MjkyOTg3ZjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQzZmMzY2UtYjc4MC00YTk3LTk5 NzMtODE4MjkyOTg3ZjRmL2RkM2ZjM2NlLWI3ODAtNGE5Ny05OTczLTgxODI5Mjk4 N2Y0Zi5jcmwwHwYDVR0jBBgwFoAUxuFnfWQ4jBOAK95UTk87HXwalaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDNmYzNjZS1iNzgwLTRhOTctOTk3My04MTgy OTI5ODdmNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw/NYergUq1biYhY7ev0jR F23O9RjT/MfQOYuW1MdeurL+dNqyQLDEfihyusFrv9/RWibRkr906Cs/ejuwnJ7v m4FRwKzTz62oczmJSR9ZZUQ8b5xys/DWPzbJxI2fISWvP/BRHg3pjLIIMR608rwc Y/ucMWEiGNW5zhKMk13eppIr1J52xl/WQ6tAigVfFd3umHyxKqwi4G70I/alF+i+ JemBGp3j38PNfez/OCdtR+GEWHxGNz3zlyNsAdljZZyZ0Ggbq/xJYvjPms9m7Fng X+uIQ3IrvJrJrLyVHaHTxNHUVO4qOzS3e2z67UHKXQdr6ckpudvmSsxeoMz/2bNa -----END CERTIFICATE-----Generated at Tue Nov 4 21:51:09 2025 by rpki-client