$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft File: df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft (raw, json) Hash identifier: fAqLvGOO8eby8aOFbMhBr2zWHVEsCHct/hI7WlQGxUU= Subject key identifier: 99:65:CF:9C:A2:57:C8:06:F4:AD:7E:07:48:D7:91:0C:C3:E6:79:58 Authority key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Certificate issuer: /CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Certificate serial: 010D0C9F4328584BC28DC94DB9D29AEBF42B2280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft Manifest number: 010D0C9F4328584A846795057BAA67210E3FA0F5 Signing time: Wed 05 Nov 2025 15:00:08 +0000 Manifest this update: Wed 05 Nov 2025 15:00:08 +0000 Manifest next update: Sat 08 Nov 2025 15:00:00 +0000 Files and hashes: 1: 0f3992cf-5a89-327d-a390-90748ec5ecbd.roa (hash: MK8JPedPC0l3yPfqmZufpVtxdZHxUc6YYyu1V+q/o0E=) 2: df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl (hash: YW1OobLSH/gDS+u7yVqB5ARt4xW1GvuSwvYbg1AyAf0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:8d:c9:4d:b9:d2:9a:eb:f4:2b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Validity Not Before: Nov 5 15:00:08 2025 GMT Not After : Nov 8 15:00:00 2025 GMT Subject: CN=8d647f12-71a1-45dd-a944-4ea20846ea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:57:d5:ca:e4:31:b8:20:07:82:10:0f:43: c1:18:eb:9c:fc:ad:8e:61:cf:06:f2:dd:78:76:36: 59:05:22:b6:4f:08:b5:2c:0d:b5:96:ef:6b:bc:6b: d0:93:8c:2d:f7:83:d0:e9:66:b4:cd:a3:f5:94:48: 67:3e:6f:6a:4f:22:55:d6:0b:f2:54:12:0e:b4:f3: 75:ec:67:43:d9:92:fd:31:8a:4e:79:08:07:5d:57: 7b:e8:d4:9c:2c:90:41:2a:a0:e7:f3:1f:5b:19:d8: f3:cb:ee:c0:ca:a2:1e:ff:b2:6e:76:16:ad:98:68: 1c:bd:78:83:3f:56:98:93:9d:2b:96:78:bd:b6:cc: 0c:52:ca:b5:43:cd:30:be:b8:62:f7:05:a0:9f:20: a8:1d:cf:72:f2:cc:7b:78:fa:a1:21:58:dc:26:62: 23:13:e0:68:cb:c2:e4:7d:93:53:f9:53:6c:e4:c8: 6c:5c:2f:7a:aa:4c:d9:8e:67:24:0e:c8:cc:21:b2: 1e:46:d8:dd:f2:88:41:90:36:0f:b3:f3:bf:f6:05: af:bc:24:eb:5e:c9:38:f9:b6:61:bf:c8:fd:66:43: dd:88:86:ca:35:31:ac:90:ef:dd:7d:49:a2:cf:48: 97:c3:03:d5:83:a5:fe:93:24:45:17:24:37:52:25: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:CF:9C:A2:57:C8:06:F4:AD:7E:07:48:D7:91:0C:C3:E6:79:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl X509v3 Authority Key Identifier: keyid:E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:67:a9:36:2d:c4:55:5a:76:f7:a9:66:5c:93:6a:b3:6c:57: 23:26:29:8b:82:4e:f2:f7:b7:04:75:b0:63:b1:5a:17:b9:f1: 42:6b:a5:e1:1a:a2:7b:cd:6e:f8:86:01:00:82:7d:4d:3e:b7: 17:fc:2d:4c:76:52:df:1b:9e:15:b7:42:76:fc:2e:3e:02:9f: 5e:e0:c5:a6:0c:f2:a3:43:31:a5:ae:62:f8:bf:62:60:46:ba: 2e:67:45:1e:e1:cf:87:e8:78:a8:24:68:fb:29:ae:4b:5a:5c: 76:34:b6:e5:35:91:50:be:43:13:49:e3:a6:62:de:62:28:5d: 68:20:33:fe:c6:c8:d0:c7:26:9b:c7:62:52:3d:5c:11:12:e7: 8a:54:97:d9:10:2f:30:a9:bb:1b:92:c9:f2:78:ef:3c:f4:86: 0e:15:d7:cf:33:62:7d:c1:cb:ca:8b:d4:70:91:13:a9:4c:8f: a7:1d:46:fa:ac:33:a5:48:2a:07:38:62:91:db:a3:c2:69:6e: 4d:32:9d:65:ea:22:bf:50:0e:5a:1a:e0:2d:62:ce:32:3f:eb: 01:03:2d:2b:9c:83:67:fe:68:3c:1c:b9:cd:32:53:97:4f:f2: 98:8f:c0:7a:7b:3a:6b:ad:2a:7a:2f:4d:0c:cd:02:6d:2a:9e: 6d:af:04:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCjclNudKa6/QrIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZWY5NjctY2EwNC00YWZiLTk2YmEtNmU2NzRhMzVm NGExMB4XDTI1MTEwNTE1MDAwOFoXDTI1MTEwODE1MDAwMFowLzEtMCsGA1UEAxMk OGQ2NDdmMTItNzFhMS00NWRkLWE5NDQtNGVhMjA4NDZlYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoVX1crkMbggB4IQD0PBGOuc/K2OYc8G8t14 djZZBSK2Twi1LA21lu9rvGvQk4wt94PQ6Wa0zaP1lEhnPm9qTyJV1gvyVBIOtPN1 7GdD2ZL9MYpOeQgHXVd76NScLJBBKqDn8x9bGdjzy+7AyqIe/7JudhatmGgcvXiD P1aYk50rlni9tswMUsq1Q80wvrhi9wWgnyCoHc9y8sx7ePqhIVjcJmIjE+Boy8Lk fZNT+VNs5MhsXC96qkzZjmckDsjMIbIeRtjd8ohBkDYPs/O/9gWvvCTrXsk4+bZh v8j9ZkPdiIbKNTGskO/dfUmiz0iXwwPVg6X+kyRFFyQ3UiWV9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJllz5yiV8gG9K1+B0jXkQzD5nlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZl Zjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEzNWY0YTEvZGY2ZWY5NjctY2EwNC00 YWZiLTk2YmEtNmU2NzRhMzVmNGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGY2ZWY5NjctY2EwNC00YWZiLTk2 YmEtNmU2NzRhMzVmNGExL2RmNmVmOTY3LWNhMDQtNGFmYi05NmJhLTZlNjc0YTM1 ZjRhMS5jcmwwHwYDVR0jBBgwFoAU5IiwVBEXG0J2ClybExwZW5Jn0yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3 NGEzNWY0YTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDZ6k2LcRVWnb3qWZck2qz bFcjJimLgk7y97cEdbBjsVoXufFCa6XhGqJ7zW74hgEAgn1NPrcX/C1MdlLfG54V t0J2/C4+Ap9e4MWmDPKjQzGlrmL4v2JgRrouZ0Ue4c+H6HioJGj7Ka5LWlx2NLbl NZFQvkMTSeOmYt5iKF1oIDP+xsjQxyabx2JSPVwREueKVJfZEC8wqbsbksnyeO88 9IYOFdfPM2J9wcvKi9RwkROpTI+nHUb6rDOlSCoHOGKR26PCaW5NMp1l6iK/UA5a GuAtYs4yP+sBAy0rnINn/mg8HLnNMlOXT/KYj8B6ezprrSp6L00MzQJtKp5trwRS -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:20 2025 by rpki-client