$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: dx61RMg82GM1NGx6hPumS7iAaNI6jnE38vOwHgUUd28= Subject key identifier: D6:2A:65:5B:C9:F0:84:F5:05:DA:71:E1:CE:46:16:A0:AC:86:8F:3B Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584B71D38332D51F3D27D94DCE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3647 Signing time: Tue 07 Oct 2025 17:00:09 +0000 Manifest this update: Tue 07 Oct 2025 17:00:09 +0000 Manifest next update: Fri 10 Oct 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: GIP/9/mWHyOfp8Wi6ZJhlAohABD7yjsWi4p0XlIBSrU=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: Pgc/ke6ZpufMQy0q7yVUzHFclLPJ4Io50t1f+e38OA0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:d3:83:32:d5:1f:3d:27:d9:4d:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Oct 7 17:00:09 2025 GMT Not After : Oct 10 17:00:00 2025 GMT Subject: CN=af565d25-c6f0-449e-987f-1f1cd65113a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:72:3f:27:28:75:ad:5f:a7:58:d9:51:73: 37:56:0d:9c:42:76:a6:ea:65:f5:09:8b:d6:40:4a: a1:c0:af:35:5f:b7:9a:00:71:e0:3a:7b:ef:37:13: db:1b:b8:59:16:d3:1a:84:5a:4d:eb:95:37:89:c6: a9:34:ce:d7:32:48:2f:69:98:c9:88:da:81:25:77: 5b:09:4e:65:69:3e:10:63:e4:2c:44:b5:83:4f:33: 8f:1a:db:90:b5:13:66:2f:84:1f:44:7a:c6:50:53: 64:4c:af:13:07:cc:06:d1:bf:b4:59:da:84:d6:36: a2:14:61:e7:9a:11:57:d9:05:66:76:5b:e5:45:1e: 27:48:48:77:fd:49:c5:c3:c1:a6:a1:e9:ba:d0:d7: 5f:42:82:48:c3:11:67:e0:cd:20:7a:47:75:e2:35: ad:d7:03:cf:09:1b:90:e9:3a:e1:a4:3c:49:24:ed: e8:92:1a:6f:1b:44:13:66:87:18:0f:b6:d5:3f:1f: ee:ae:de:1a:20:4c:41:4e:e1:78:5b:58:58:9d:a3: 9a:fa:a8:e5:57:41:e9:47:31:aa:9f:34:80:93:c9: f0:48:e1:54:33:47:97:87:7b:a7:23:00:39:c0:bf: f0:1c:80:da:d7:68:c9:0d:1f:e6:76:f1:44:bb:f5: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2A:65:5B:C9:F0:84:F5:05:DA:71:E1:CE:46:16:A0:AC:86:8F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:b2:49:c7:26:28:1f:6e:56:cd:3f:fc:70:e0:25:1d:78: 69:42:12:cc:e1:c0:2f:a0:3c:fb:28:e6:24:4e:1d:f6:2f:f9: 96:00:49:0e:05:73:51:fb:f1:cf:76:b9:05:fa:79:4d:8e:d4: 14:85:ab:b2:a4:91:c4:c8:47:7e:fc:b3:ff:92:97:01:f1:75: 20:9f:51:5e:db:dc:71:1e:38:a5:35:d7:a0:b4:15:8b:35:3e: 58:36:25:ae:75:be:6d:a9:14:3e:24:05:c5:be:86:ae:cf:6a: ba:6f:6d:1e:cf:7f:75:83:0d:68:bb:fe:63:22:06:05:b5:7f: 53:9f:61:23:c2:60:40:aa:2d:5e:d9:fe:09:d2:cc:b8:e3:0b: 63:22:d4:29:4c:b1:de:8e:bc:a9:b4:66:77:da:1e:20:0d:1c: c2:01:85:20:3c:fd:0b:86:1f:a0:0d:ca:77:a1:02:6d:53:ee: 23:10:f3:ca:26:bd:16:05:07:89:b3:af:a8:7c:56:a2:57:87: 59:c3:da:b7:a0:dd:29:e1:f8:68:ab:67:18:48:17:6b:df:91: b0:c4:f0:6c:04:2c:28:a0:31:c1:db:45:09:c5:c7:8d:35:5e: 43:45:6e:96:02:21:60:93:c3:78:57:99:66:44:d5:0e:21:57: 3a:68:bc:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx04My1R89J9lNzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MTAwNzE3MDAwOVoXDTI1MTAxMDE3MDAwMFowLzEtMCsGA1UEAxMk YWY1NjVkMjUtYzZmMC00NDllLTk4N2YtMWYxY2Q2NTExM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZyPycoda1fp1jZUXM3Vg2cQnam6mX1CYvW QEqhwK81X7eaAHHgOnvvNxPbG7hZFtMahFpN65U3icapNM7XMkgvaZjJiNqBJXdb CU5laT4QY+QsRLWDTzOPGtuQtRNmL4QfRHrGUFNkTK8TB8wG0b+0WdqE1jaiFGHn mhFX2QVmdlvlRR4nSEh3/UnFw8Gmoem60NdfQoJIwxFn4M0gekd14jWt1wPPCRuQ 6TrhpDxJJO3okhpvG0QTZocYD7bVPx/urt4aIExBTuF4W1hYnaOa+qjlV0HpRzGq nzSAk8nwSOFUM0eXh3unIwA5wL/wHIDa12jJDR/mdvFEu/WiHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNYqZVvJ8IT1Bdpx4c5GFqCsho87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQNrJJxyYoH25WzT/8cOAl HXhpQhLM4cAvoDz7KOYkTh32L/mWAEkOBXNR+/HPdrkF+nlNjtQUhauypJHEyEd+ /LP/kpcB8XUgn1Fe29xxHjilNdegtBWLNT5YNiWudb5tqRQ+JAXFvoauz2q6b20e z391gw1ou/5jIgYFtX9Tn2EjwmBAqi1e2f4J0sy44wtjItQpTLHejryptGZ32h4g DRzCAYUgPP0Lhh+gDcp3oQJtU+4jEPPKJr0WBQeJs6+ofFaiV4dZw9q3oN0p4fho q2cYSBdr35GwxPBsBCwooDHB20UJxceNNV5DRW6WAiFgk8N4V5lmRNUOIVc6aLzs -----END CERTIFICATE-----Generated at Wed Oct 8 17:25:54 2025 by rpki-client