$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft File: df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json) Hash identifier: Y6hqAucwpZbzG/9hILiSvsKEnFW2/cmYKZ608iaxLkk= Subject key identifier: CB:9C:20:68:82:2A:FD:B3:35:55:AD:F9:76:34:86:BB:89:4F:39:A9 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584BC0CF1D2F7F632B37092B4C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft Manifest number: 010D0C9F4328584073A83206E308BDBACFE90538 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Sat 08 Nov 2025 00:00:00 +0000 Files and hashes: 1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: HIxeGyh1b83nJuDUwHGaJ+3Y5rfiXU8fGpwvDpSkuHc=) 2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: K0UK1sWoUuBurLk8GPeb4LGcvoSEQr5wrkjz+N6+9po=) 3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: G2FYGWXyYKpRfDrfAXaicHp+1lSF93faLzrvOsgabt8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1d:2f:7f:63:2b:37:09:2b:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 8 00:00:00 2025 GMT Subject: CN=2aee5858-237d-4550-9449-79924a08e501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:86:9c:0e:20:53:21:d6:2d:7e:0d:0f:65: 77:13:55:58:46:67:f5:f9:ab:13:21:9d:6e:4a:bb: 5c:dc:c8:0b:62:a1:6b:cc:dc:44:31:5e:57:1c:1e: 7f:9c:c9:f9:83:9c:5b:14:45:05:22:97:b7:26:c2: 91:14:73:15:e7:e3:44:d3:65:91:80:2b:ba:61:eb: 39:7e:11:3d:7c:42:b1:dc:12:0f:f5:46:0b:ee:07: d0:0c:45:71:cd:33:68:72:25:bf:70:c4:59:e7:47: e3:9d:c4:f9:d9:2f:93:fa:34:1b:65:c1:5f:c0:fc: 6b:be:ca:91:1f:21:1e:eb:ea:6b:0a:a9:4a:25:30: 0a:64:78:33:6d:a5:f9:2e:8f:84:1f:c9:b7:e5:2a: 4e:4e:9e:33:14:bd:ec:17:c3:e1:32:57:74:58:9f: b3:55:d1:6e:77:7b:e5:68:b1:5d:cc:9a:ce:d9:9e: c3:76:e0:17:27:9d:bf:0b:ce:db:c4:39:d9:7f:bd: c9:79:a6:4a:71:8c:dd:b5:cb:d4:57:5b:d0:1e:9a: 4d:75:61:76:da:18:9b:b8:09:4d:51:f7:5a:bf:e3: fd:03:ce:7e:1b:18:64:b5:f8:38:71:82:5a:ed:76: be:6e:bb:e1:c2:63:48:c1:eb:88:e2:70:a0:b7:d9: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:20:68:82:2A:FD:B3:35:55:AD:F9:76:34:86:BB:89:4F:39:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5c:ad:a2:5f:28:e3:09:98:4e:13:8a:fc:93:5b:d3:3f:23: 41:cb:5a:72:1f:72:c6:b1:9d:c9:50:e9:e9:a5:a9:60:a8:cd: 8a:b3:d4:ad:dc:b2:79:cb:cf:21:2d:b5:67:0d:85:4a:15:cc: 7c:d0:7e:79:be:29:2c:a4:19:c7:21:07:91:0e:cd:f8:d3:91: 86:99:48:29:70:ae:f2:b0:44:52:aa:47:ca:77:48:00:29:48: a0:25:26:98:af:3f:cf:d8:d2:84:26:78:3c:9a:33:27:07:e2: b4:fb:de:17:b8:b1:0f:b3:ee:be:1f:70:c0:cd:06:ef:f9:14: 59:7d:9f:9e:42:54:a6:4c:50:ce:c6:3b:25:19:d2:f1:d1:db: b1:22:15:00:05:19:b2:fb:ed:29:b9:73:9c:8f:65:3a:61:43: cd:dc:bd:e9:d5:8f:4c:fb:e7:07:9c:57:72:dc:45:62:18:14: 48:b6:09:52:9b:80:d3:27:b3:62:c7:16:9f:d0:b6:5d:d1:ae: c8:cd:bf:8d:bb:c1:f7:45:2f:3e:a8:3e:a2:df:7f:99:ff:36: 30:5e:59:31:01:76:ee:80:83:6f:33:5b:49:b9:bc:36:af:f5: 42:24:4f:7b:e4:37:a4:93:e7:1b:4a:b0:12:5c:f0:d8:9b:e2: 8b:f9:93:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzx0vf2MrNwkrTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwODAwMDAwMFowLzEtMCsGA1UEAxMk MmFlZTU4NTgtMjM3ZC00NTUwLTk0NDktNzk5MjRhMDhlNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EiGnA4gUyHWLX4ND2V3E1VYRmf1+asTIZ1u Srtc3MgLYqFrzNxEMV5XHB5/nMn5g5xbFEUFIpe3JsKRFHMV5+NE02WRgCu6Yes5 fhE9fEKx3BIP9UYL7gfQDEVxzTNociW/cMRZ50fjncT52S+T+jQbZcFfwPxrvsqR HyEe6+prCqlKJTAKZHgzbaX5Lo+EH8m35SpOTp4zFL3sF8PhMld0WJ+zVdFud3vl aLFdzJrO2Z7DduAXJ52/C87bxDnZf73JeaZKcYzdtcvUV1vQHppNdWF22hibuAlN Ufdav+P9A85+Gxhktfg4cYJa7Xa+brvhwmNIweuI4nCgt9m05QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMucIGiCKv2zNVWt+XY0hruJTzmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvZGYyODQ5NGYtMWQzZi00 YTQ1LThhNzQtYmRlNDFjMjUwMmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCrXK2iXyjjCZhOE4r8k1vT PyNBy1pyH3LGsZ3JUOnppalgqM2Ks9St3LJ5y88hLbVnDYVKFcx80H55vikspBnH IQeRDs3405GGmUgpcK7ysERSqkfKd0gAKUigJSaYrz/P2NKEJng8mjMnB+K0+94X uLEPs+6+H3DAzQbv+RRZfZ+eQlSmTFDOxjslGdLx0duxIhUABRmy++0puXOcj2U6 YUPN3L3p1Y9M++cHnFdy3EViGBRItglSm4DTJ7Nixxaf0LZd0a7Izb+Nu8H3RS8+ qD6i33+Z/zYwXlkxAXbugINvM1tJubw2r/VCJE975Dekk+cbSrASXPDYm+KL+ZO5 -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:49 2025 by rpki-client