$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft File: ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft (raw, json) Hash identifier: ocEbGAmQFCvR0mfjwW0jV6O1uKzOq8KT0dfN4AmywLM= Subject key identifier: BB:2B:44:A2:FE:8A:ED:4B:0B:15:B9:F8:4F:99:99:8D:CF:D7:41:00 Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584BBFC31146BC3A5B124268EF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft Manifest number: 010D0C9F4328584A2AF8D6A86D21A3E42E10A108 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (hash: GwhEPxMkcW9Z5w+2+qr4LIZfMX11JRCi6MAkudRFFSE=) 2: 9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (hash: Vu//gFoRGTLuzJRQesGSOP2KYpPuSWSIQi/mQsgxSkA=) 3: bd668f92-776c-355d-9660-3354ba68dbd0.roa (hash: UX3b7i4GS6D1nT5EtEfsKvcxy3/WIGPcJeus+4gtaHw=) 4: ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl (hash: P7lB0sKGNelvvhPQpf/z5gaJRAdC5pkoQYLryI6V5qs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:46:bc:3a:5b:12:42:68:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=79548247-087b-4d90-878d-0f50a4a1776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:49:83:b5:75:df:4d:d4:94:a1:22:f8:79: 28:30:2f:4c:a0:0e:1d:b6:5f:2b:6c:50:48:97:03: 58:85:bf:6d:ef:44:78:97:11:87:bb:c7:0c:25:38: eb:33:c8:bf:8e:25:78:62:4c:b2:9e:1c:a4:55:77: de:1c:0b:f4:f4:c3:6a:2c:be:b2:62:07:7e:7e:f7: 81:a0:f8:38:10:52:9d:c0:25:20:9d:20:b7:ca:b7: 92:4b:8e:14:ad:f1:8c:d8:27:b7:2b:4a:4f:ea:da: 55:7e:d2:fc:d3:0a:3c:36:01:da:02:7a:d1:29:01: 54:de:d7:1a:68:ac:74:22:41:ec:8a:26:5b:23:b2: 88:5d:92:68:7f:28:5f:5d:d3:7e:fd:4e:f0:f9:c5: c3:02:3c:fc:fd:fa:a0:9e:97:07:ef:2c:18:1c:bf: f3:ea:cc:ef:5e:35:31:92:16:38:10:57:58:91:af: 1e:9e:e2:19:e7:ad:36:a2:49:e2:0f:c4:c5:c8:af: b8:11:00:99:60:02:03:90:87:2a:17:8d:18:8b:e8: 6a:8e:b4:80:3f:d5:22:8a:a7:25:30:16:f5:61:fe: 44:39:71:97:f4:5d:92:43:7f:0f:48:22:2b:27:03: ef:1b:7a:1a:8e:1c:5e:ea:53:d4:88:01:d1:5b:31: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:44:A2:FE:8A:ED:4B:0B:15:B9:F8:4F:99:99:8D:CF:D7:41:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ed:c0:08:17:26:bb:39:40:e6:7c:e6:79:ac:77:d0:c4:e5: b9:96:96:08:1e:0f:4b:06:91:04:e6:c0:ee:3d:24:34:e3:92: a6:a4:bb:6e:66:a0:df:41:38:0e:a5:c5:8a:5c:9f:73:b3:02: 7c:3b:84:3e:59:fb:ca:fc:8f:5f:8e:67:eb:ab:b6:6d:1b:a5: 29:a9:aa:81:b8:04:05:1b:2e:d3:4f:8f:b5:42:5b:6d:5e:d3: c8:70:a7:a0:4b:5f:74:57:d9:01:f3:22:15:91:7b:71:29:13: f1:ef:58:ee:45:ea:55:66:71:99:e3:62:df:ea:89:87:32:97: 35:32:9f:d0:ca:bf:31:ba:a5:4c:9d:6a:a3:f4:d2:51:d6:99: 02:05:d4:01:57:2f:cd:18:6a:39:3f:ce:d3:c7:fd:9a:dd:29: 20:bc:3d:a9:ad:4c:67:ad:e1:ab:72:9c:b7:f2:e5:3f:60:54: 1b:bc:1a:8c:73:e5:20:0f:9c:df:de:d3:13:7d:45:11:b7:87: 73:6d:54:63:31:fa:c1:c1:56:4b:dd:38:ee:58:40:2b:ca:de: 30:8e:54:be:43:c7:10:85:17:b8:0b:3a:f2:e7:cb:72:e3:78: f8:20:64:c1:27:88:a5:4b:0d:f6:e5:96:a3:7d:39:ce:de:00: 75:4d:d4:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxFGvDpbEkJo74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk Nzk1NDgyNDctMDg3Yi00ZDkwLTg3OGQtMGY1MGE0YTE3NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf9Jg7V1303UlKEi+HkoMC9MoA4dtl8rbFBI lwNYhb9t70R4lxGHu8cMJTjrM8i/jiV4YkyynhykVXfeHAv09MNqLL6yYgd+fveB oPg4EFKdwCUgnSC3yreSS44UrfGM2Ce3K0pP6tpVftL80wo8NgHaAnrRKQFU3tca aKx0IkHsiiZbI7KIXZJofyhfXdN+/U7w+cXDAjz8/fqgnpcH7ywYHL/z6szvXjUx khY4EFdYka8enuIZ5602okniD8TFyK+4EQCZYAIDkIcqF40Yi+hqjrSAP9Uiiqcl MBb1Yf5EOXGX9F2SQ38PSCIrJwPvG3oajhxe6lPUiAHRWzGgPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLsrRKL+iu1LCxW5+E+ZmY3P10EAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvZGVkODRhNGItOTc5MC00 YTE4LWJjYTktNDNlNDllMmYwYjcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR7cAIFya7OUDmfOZ5rHfQ xOW5lpYIHg9LBpEE5sDuPSQ045KmpLtuZqDfQTgOpcWKXJ9zswJ8O4Q+WfvK/I9f jmfrq7ZtG6UpqaqBuAQFGy7TT4+1QlttXtPIcKegS190V9kB8yIVkXtxKRPx71ju RepVZnGZ42Lf6omHMpc1Mp/Qyr8xuqVMnWqj9NJR1pkCBdQBVy/NGGo5P87Tx/2a 3SkgvD2prUxnreGrcpy38uU/YFQbvBqMc+UgD5zf3tMTfUURt4dzbVRjMfrBwVZL 3TjuWEAryt4wjlS+Q8cQhRe4Czry58ty43j4IGTBJ4ilSw325ZajfTnO3gB1TdSb -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:50 2025 by rpki-client