$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft File: dfc88768-1b58-474d-a340-376827992098.mft (raw, json) Hash identifier: AVA0B5N5/VevwSE1Ng7iwXaGdwKZfcBGnOYugT0jeHw= Subject key identifier: 14:B3:9E:C6:9F:80:AC:AF:2B:62:2B:2A:77:76:9D:F2:5C:8E:BC:4A Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 Certificate issuer: /CN=dfc88768-1b58-474d-a340-376827992098 Certificate serial: 010D0C9F4328584BB350CBB526053751750DAC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft Manifest number: 010D0C9F43285847A798F62B2566C248D60AF60B Signing time: Fri 31 Oct 2025 04:00:08 +0000 Manifest this update: Fri 31 Oct 2025 04:00:08 +0000 Manifest next update: Sun 02 Nov 2025 04:00:00 +0000 Files and hashes: 1: 0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa (hash: cWLOZnCA/CmRSb00t1zVvZpu2k6zmc/cVuu08UT3qb4=) 2: 855b63a5-cefe-3157-be0a-9281c2ca43e4.roa (hash: /QelZTxi5NZ+aXnmnbvh0fi9S4osfoakCWX3BrSJB/w=) 3: ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa (hash: 8sG7QR7JxZZuXkBLxGe+TlSHSzgWdhDcIbwW6HOEUMM=) 4: dfc88768-1b58-474d-a340-376827992098.crl (hash: 120mew/ZKhdPJ3nbbjk7VKfdJNZbVEU0F4L6h/IkOsM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:50:cb:b5:26:05:37:51:75:0d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc88768-1b58-474d-a340-376827992098 Validity Not Before: Oct 31 04:00:08 2025 GMT Not After : Nov 2 04:00:00 2025 GMT Subject: CN=05620431-5191-4610-befc-24dd5417e8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:1d:4e:22:2c:e3:84:79:4a:17:3c:9e:bc: 57:79:e9:e4:d7:f1:25:45:35:4a:09:7b:29:96:ae: ab:1d:cd:8d:44:9e:6c:3e:4e:89:cf:9b:80:93:29: aa:ea:64:86:d8:3a:24:9c:d9:52:65:6d:4b:c6:43: 51:71:05:b5:28:59:c0:39:d9:27:45:f5:21:b1:70: 7b:14:6a:0d:0e:5e:f3:ca:d2:88:a0:89:09:bb:cb: 75:62:c7:ff:73:b4:e1:b5:3f:20:bd:df:88:cc:40: eb:3d:d5:2e:8c:c7:ac:38:97:f7:85:d4:64:85:58: 78:17:ae:46:9f:23:d5:7b:1a:8e:44:ed:27:9b:fb: eb:30:ea:f7:89:0c:3b:13:c6:0e:ef:f3:4d:59:c4: 9a:72:77:72:ac:23:b6:ac:f8:5c:bb:70:cd:0c:19: 7a:3d:28:50:f0:06:68:f3:73:30:1f:a0:be:8e:32: 6d:ca:54:85:53:fd:ca:da:de:2f:a0:a4:07:75:3d: 35:ed:76:ab:d6:a6:00:86:87:c8:ad:37:cf:cc:81: a1:1b:e1:4a:80:0e:53:98:9a:51:79:45:0c:01:84: 49:9e:f8:bd:6d:bb:dc:53:3d:e6:d9:64:7c:89:5d: a5:ac:65:dc:64:f7:2a:98:c1:ae:53:f9:c0:43:7c: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B3:9E:C6:9F:80:AC:AF:2B:62:2B:2A:77:76:9D:F2:5C:8E:BC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl X509v3 Authority Key Identifier: keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:07:f5:59:f7:28:fe:c8:cf:87:28:17:64:8d:c7:ec:e7:2e: 5a:0e:48:72:bd:82:38:65:d1:35:26:d2:6a:61:25:9c:f6:68: 02:e7:a7:9f:7a:66:0f:af:f8:1f:90:f0:df:48:e4:3d:7b:6d: 08:ac:d3:f8:82:d9:25:2b:00:58:14:19:79:a2:0f:e4:0f:1b: e2:bd:ef:5d:01:a4:99:d4:a5:21:b9:3d:b4:90:a0:e3:87:7a: 77:50:e8:c3:49:1d:7a:fc:76:cc:1a:17:cf:4c:58:39:52:32: aa:91:07:77:b8:5b:15:4a:8b:6b:ba:55:1e:eb:1b:3e:f4:c1: fe:fc:34:61:17:77:78:a1:b2:91:b0:d6:55:5c:26:3d:c7:27: f9:ae:ae:7f:e0:22:08:02:03:91:81:c2:5d:eb:ea:5f:bb:25: 93:4c:fe:f6:61:21:43:d9:d1:c4:69:9a:6d:f6:6e:ce:2f:e0: 6e:06:1b:1c:3b:54:af:6f:7e:83:6c:c4:f2:31:12:1d:de:12: 09:d6:de:6e:b1:1e:94:33:93:16:21:92:87:51:bc:43:2f:be: fc:49:95:18:9e:59:72:c2:f7:15:02:71:8a:4a:63:38:80:2e: 1d:3d:06:c7:85:03:a8:a6:dd:cd:f4:15:80:9a:5e:45:6f:36: 45:c4:90:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuzUMu1JgU3UXUNrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjODg3NjgtMWI1OC00NzRkLWEzNDAtMzc2ODI3OTky MDk4MB4XDTI1MTAzMTA0MDAwOFoXDTI1MTEwMjA0MDAwMFowLzEtMCsGA1UEAxMk MDU2MjA0MzEtNTE5MS00NjEwLWJlZmMtMjRkZDU0MTdlOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYYdTiIs44R5Shc8nrxXeenk1/ElRTVKCXsp lq6rHc2NRJ5sPk6Jz5uAkymq6mSG2DoknNlSZW1LxkNRcQW1KFnAOdknRfUhsXB7 FGoNDl7zytKIoIkJu8t1Ysf/c7ThtT8gvd+IzEDrPdUujMesOJf3hdRkhVh4F65G nyPVexqORO0nm/vrMOr3iQw7E8YO7/NNWcSacndyrCO2rPhcu3DNDBl6PShQ8AZo 83MwH6C+jjJtylSFU/3K2t4voKQHdT017Xar1qYAhofIrTfPzIGhG+FKgA5TmJpR eUUMAYRJnvi9bbvcUz3m2WR8iV2lrGXcZPcqmMGuU/nAQ3yenwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSznsafgKyvK2IrKnd2nfJcjrxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4 ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4Mjc5OTIwOTgvZGZjODg3NjgtMWI1OC00 NzRkLWEzNDAtMzc2ODI3OTkyMDk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZjODg3NjgtMWI1OC00NzRkLWEz NDAtMzc2ODI3OTkyMDk4L2RmYzg4NzY4LTFiNTgtNDc0ZC1hMzQwLTM3NjgyNzk5 MjA5OC5jcmwwHwYDVR0jBBgwFoAU9UapEYbSMklkzrvABv6x5EYHaoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4 Mjc5OTIwOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChB/VZ9yj+yM+HKBdkjcfs 5y5aDkhyvYI4ZdE1JtJqYSWc9mgC56efemYPr/gfkPDfSOQ9e20IrNP4gtklKwBY FBl5og/kDxvive9dAaSZ1KUhuT20kKDjh3p3UOjDSR16/HbMGhfPTFg5UjKqkQd3 uFsVSotrulUe6xs+9MH+/DRhF3d4obKRsNZVXCY9xyf5rq5/4CIIAgORgcJd6+pf uyWTTP72YSFD2dHEaZpt9m7OL+BuBhscO1Svb36DbMTyMRId3hIJ1t5usR6UM5MW IZKHUbxDL778SZUYnllywvcVAnGKSmM4gC4dPQbHhQOopt3N9BWAml5FbzZFxJCg -----END CERTIFICATE-----Generated at Fri Oct 31 18:10:33 2025 by rpki-client