$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: mnYMFOvGUqiFb2QiLrqJ6cb0keuxcQZhKi+FBWxqLhM= Subject key identifier: C3:19:B0:9E:AD:0E:3E:5F:EB:41:A9:AB:5B:1F:46:56:DA:EB:EC:4D Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584BBFFEA95EEE62BE426E643140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A878C Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: lmaTFWvzavA9uFBL1C4JKHXylBcWzhbYpDdBAqSuAP8=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: CdPs0rwxlAVikLjqc3nD0JZESI4S1Hg9JXRUtfGpjkI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a9:5e:ee:62:be:42:6e:64:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=9c60a3e9-6cde-4d07-a3df-530b8f0fc525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:ca:7c:7b:26:1f:96:e1:29:1f:a5:7c:6e: 66:91:9d:f7:33:ad:fc:dd:b3:2d:1e:d2:d7:b8:52: ba:1e:30:e5:ce:df:87:52:a5:da:bd:89:d8:bb:4b: 38:53:f1:8c:38:14:6d:88:66:53:99:43:15:2f:e7: 9d:d4:ee:5e:14:52:db:9a:bb:ca:40:ee:6b:56:6c: a8:6a:e7:46:1b:d5:9b:96:80:e1:27:7a:30:32:38: df:00:0a:a2:14:c5:bf:d2:5e:77:c5:ff:37:7c:f2: c7:44:4c:e3:99:52:a7:8b:a0:95:c2:8c:4c:9d:99: 08:b3:62:a6:93:e5:19:2b:7b:4d:32:93:47:cd:60: 43:2d:36:0e:30:94:7b:c8:76:7b:fd:46:7c:77:88: 7c:8d:c5:b2:e4:4b:79:5e:05:62:85:6a:17:35:27: e0:8b:61:e8:4c:cf:90:fa:ef:53:37:15:9d:2d:47: 7e:34:dc:91:af:a7:27:cb:2d:96:37:f0:b4:b7:33: 84:fa:6f:5e:86:58:14:84:c8:fc:93:84:7f:5e:3e: 62:78:89:17:61:5c:52:2a:b6:d5:f4:01:e2:e1:a2: f3:6d:79:1c:e9:e2:74:05:24:58:50:39:2a:17:fc: a8:ae:78:c3:ac:36:1b:32:65:78:b1:42:72:ec:56: 4e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:B0:9E:AD:0E:3E:5F:EB:41:A9:AB:5B:1F:46:56:DA:EB:EC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1a:8b:e7:35:b2:28:06:71:24:ae:14:c5:0d:e6:96:e9:e6: 8e:4a:db:2e:ce:88:28:21:59:fc:d7:6d:fd:aa:27:ee:da:90: 95:b9:30:6a:d6:32:8c:a1:8f:43:92:ab:44:0b:ab:a0:c0:a4: 80:6c:6e:d6:e1:e3:94:af:81:3e:4d:a4:7b:16:f7:74:ae:a0: cb:f6:47:47:75:fd:55:eb:55:e2:09:1a:b9:ab:f0:e6:c8:a0: 43:ea:d5:1e:00:09:b6:d6:63:22:5e:dd:df:26:b5:21:6e:36: 29:45:89:59:3b:f6:7f:65:dd:3b:80:a8:73:7d:48:bc:3d:36: 2c:a5:d4:0f:2f:7b:c6:53:a1:4b:12:cf:bc:29:7c:00:7c:b8: b6:04:08:a4:3d:6c:5a:82:5d:1d:5b:de:9a:7d:10:a6:25:7a: 7e:65:af:a4:8b:2f:10:7d:f6:be:b0:b4:44:9e:77:57:2f:b4: f0:6e:28:8d:c7:2b:15:96:d2:17:bf:29:da:1a:11:bb:70:66: b0:7a:4b:0d:d7:63:5c:88:f3:14:3b:fb:a9:d1:c8:60:d3:33: 74:44:38:ed:96:5e:b9:10:96:d0:a3:95:5d:c3:6b:33:22:35: 9d:e6:55:0e:2b:8d:72:ad:71:14:b9:00:cc:12:89:23:fb:27: 57:40:4f:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qle7mK+Qm5kMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk OWM2MGEzZTktNmNkZS00ZDA3LWEzZGYtNTMwYjhmMGZjNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQTKfHsmH5bhKR+lfG5mkZ33M6383bMtHtLX uFK6HjDlzt+HUqXavYnYu0s4U/GMOBRtiGZTmUMVL+ed1O5eFFLbmrvKQO5rVmyo audGG9WbloDhJ3owMjjfAAqiFMW/0l53xf83fPLHREzjmVKni6CVwoxMnZkIs2Km k+UZK3tNMpNHzWBDLTYOMJR7yHZ7/UZ8d4h8jcWy5Et5XgVihWoXNSfgi2HoTM+Q +u9TNxWdLUd+NNyRr6cnyy2WN/C0tzOE+m9ehlgUhMj8k4R/Xj5ieIkXYVxSKrbV 9AHi4aLzbXkc6eJ0BSRYUDkqF/yornjDrDYbMmV4sUJy7FZOnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMMZsJ6tDj5f60Gpq1sfRlba6+xNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+GovnNbIoBnEkrhTFDeaW 6eaOStsuzogoIVn81239qifu2pCVuTBq1jKMoY9DkqtEC6ugwKSAbG7W4eOUr4E+ TaR7Fvd0rqDL9kdHdf1V61XiCRq5q/DmyKBD6tUeAAm21mMiXt3fJrUhbjYpRYlZ O/Z/Zd07gKhzfUi8PTYspdQPL3vGU6FLEs+8KXwAfLi2BAikPWxagl0dW96afRCm JXp+Za+kiy8Qffa+sLREnndXL7TwbiiNxysVltIXvynaGhG7cGaweksN12NciPMU O/up0chg0zN0RDjtll65EJbQo5Vdw2szIjWd5lUOK41yrXEUuQDMEokj+ydXQE9R -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:21 2025 by rpki-client