$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft File: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft (raw, json) Hash identifier: 330UqXcTgvBzDCTy7vSTAJMBujIszYYJkAjFrzx2NjQ= Subject key identifier: E7:27:74:FD:FC:3D:0A:67:05:88:4B:88:C9:11:AE:2C:90:4F:A2:78 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584B961E6490C9B5BF2E9A355400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft Manifest number: 010D0C9F4328584073A81EA95548D8D821DD443F Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (hash: N3asuscqhlTTkKI8WGmaOJ5rP+M8ai0WWJqZZIPoWbM=) 2: dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl (hash: Tm++1BB8FHUVZU4pO9wRQ1obrQgm1ryCJTJcZsaZBqA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:64:90:c9:b5:bf:2e:9a:35:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=2342fc02-f498-44c6-8e73-3fff8831a3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:4b:c8:9d:2e:94:bc:ca:eb:f8:b8:1a:0a: 8e:1a:92:a2:31:7c:b7:b1:27:dc:82:cf:52:38:d7: b1:34:97:a4:b4:5f:18:15:d6:b5:2a:61:77:37:e8: 4b:e2:c1:fd:9e:88:4a:c0:7e:68:9e:34:24:dd:f2: df:99:fb:23:ad:0f:60:6e:9d:e6:99:ba:27:30:27: c2:ab:6f:41:b2:31:93:08:2c:f1:cb:8a:bf:d4:dd: 49:4c:ec:12:7e:85:52:02:5a:e4:15:d7:4a:2b:6a: 55:c2:cf:31:92:4b:80:9b:d1:47:3b:26:c7:c9:88: 85:5f:09:6e:39:62:c3:be:7b:06:3e:b0:c2:a7:9d: 61:a6:67:19:16:da:89:28:77:e8:0e:6d:c7:1c:4e: 18:16:c4:dd:8e:3a:c4:ef:52:b5:d4:81:bb:ed:0f: 55:90:ee:24:dc:a8:ea:e3:b2:c9:75:81:85:30:2b: 20:65:b9:29:ae:9c:2a:79:6b:b4:72:cb:5e:f2:cb: 8d:d1:a2:50:d9:70:a7:b9:92:04:11:2f:b2:4b:cc: 7a:8d:71:45:4e:7d:20:66:66:8f:77:61:c6:c9:23: 16:80:e1:af:65:7b:7f:74:37:d1:6e:cb:4d:e5:5b: 79:da:34:8f:68:01:ac:ac:75:92:fc:c4:54:c1:11: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:74:FD:FC:3D:0A:67:05:88:4B:88:C9:11:AE:2C:90:4F:A2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:51:0c:a0:09:66:3e:1c:d6:e6:d2:d7:98:20:8a:97:51:76: cd:23:d4:39:72:0a:a3:4c:c8:d7:b8:12:40:46:e1:a5:65:bf: d0:0c:27:a3:b9:d7:eb:ff:c7:54:c5:87:b5:e4:3a:a4:d2:1e: fd:48:d7:54:25:89:e4:be:90:be:2d:49:91:31:ba:87:8e:1f: ee:c8:48:aa:40:ee:5d:53:19:bc:5a:56:05:6d:a5:0f:67:2b: 65:00:11:63:a5:b1:9a:f2:fa:74:8b:df:d9:76:a8:2f:88:7a: 7b:6b:d6:d9:dc:f0:b7:c4:3c:80:20:52:44:83:ff:98:56:34: 8d:d7:da:23:de:0b:ee:94:02:93:c0:8b:9f:3b:95:68:9b:c3: 74:88:10:0c:72:34:de:bb:e0:b8:e4:b7:df:9f:9c:55:c9:f7: ee:05:12:a4:b0:ba:6b:07:b7:10:94:62:80:53:f3:e0:32:ad: 4f:e7:b6:bf:9c:8c:2d:52:59:da:8c:a4:bc:5b:66:b0:16:89: 28:fb:1c:be:8a:e9:f8:eb:90:8b:cc:16:46:ff:f9:a9:7c:c3: d2:67:fd:f3:ac:c8:a2:0b:13:bf:82:48:29:20:bd:28:4c:9e: 09:0f:b2:21:4a:80:92:48:80:6c:20:fd:75:2c:b7:fe:87:40: a9:ac:72:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmSQybW/Lpo1VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk MjM0MmZjMDItZjQ5OC00NGM2LThlNzMtM2ZmZjg4MzFhM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MVLyJ0ulLzK6/i4GgqOGpKiMXy3sSfcgs9S ONexNJektF8YFda1KmF3N+hL4sH9nohKwH5onjQk3fLfmfsjrQ9gbp3mmbonMCfC q29BsjGTCCzxy4q/1N1JTOwSfoVSAlrkFddKK2pVws8xkkuAm9FHOybHyYiFXwlu OWLDvnsGPrDCp51hpmcZFtqJKHfoDm3HHE4YFsTdjjrE71K11IG77Q9VkO4k3Kjq 47LJdYGFMCsgZbkprpwqeWu0cste8suN0aJQ2XCnuZIEES+yS8x6jXFFTn0gZmaP d2HGySMWgOGvZXt/dDfRbstN5Vt52jSPaAGsrHWS/MRUwRGDbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOcndP38PQpnBYhLiMkRriyQT6J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZGZmZmE1YzMtYjVjNy00 MzQ3LThkNTctOTZiYzMxMDJkZjhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7UQygCWY+HNbm0teYIIqX UXbNI9Q5cgqjTMjXuBJARuGlZb/QDCejudfr/8dUxYe15Dqk0h79SNdUJYnkvpC+ LUmRMbqHjh/uyEiqQO5dUxm8WlYFbaUPZytlABFjpbGa8vp0i9/ZdqgviHp7a9bZ 3PC3xDyAIFJEg/+YVjSN19oj3gvulAKTwIufO5Vom8N0iBAMcjTeu+C45Lffn5xV yffuBRKksLprB7cQlGKAU/PgMq1P57a/nIwtUlnajKS8W2awFoko+xy+iun465CL zBZG//mpfMPSZ/3zrMiiCxO/gkgpIL0oTJ4JD7IhSoCSSIBsIP11LLf+h0CprHIl -----END CERTIFICATE-----Generated at Tue Oct 21 14:20:32 2025 by rpki-client