$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: e3FjmbezEkveaih8eXC9MQopEqOijcllJdrlf/gk5D4= Subject key identifier: 9B:54:D4:89:8A:E2:86:95:14:7B:47:83:8F:0D:3B:0D:F4:BA:27:7E Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584B8828EF45FCA45734F192A8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A8778 Signing time: Wed 15 Oct 2025 17:00:03 +0000 Manifest this update: Wed 15 Oct 2025 17:00:03 +0000 Manifest next update: Sat 18 Oct 2025 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: lmaTFWvzavA9uFBL1C4JKHXylBcWzhbYpDdBAqSuAP8=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: AmsEty7OLggSGjWseBD51LqKkirauw//qKVMwrGrcg8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:28:ef:45:fc:a4:57:34:f1:92:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Oct 15 17:00:03 2025 GMT Not After : Oct 18 17:00:00 2025 GMT Subject: CN=ad49497f-8a28-4b37-937b-ea602d0def5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a3:ab:63:21:10:f3:31:2f:74:4a:d7:6e:fa: f6:45:f9:51:7b:01:a1:cd:2c:6b:53:20:b9:b4:26: 00:b4:78:80:4a:c9:f6:f8:a2:3c:b1:1d:0c:e6:18: 4b:11:f6:19:24:fb:29:f1:7b:24:dc:fc:43:22:d4: f3:8c:66:7e:18:b6:50:69:6e:16:20:e6:a1:3b:f2: fa:08:a7:09:d7:78:cf:b2:2a:d3:5d:d4:a2:a4:3c: 2b:c8:4b:01:96:42:94:2d:72:86:86:57:23:c3:03: d5:a9:b7:2b:0f:8d:79:ab:b2:69:b8:5a:2a:8d:64: 7c:46:80:6d:98:79:64:6b:6e:93:33:7c:59:22:22: 0f:02:49:75:0b:5d:06:82:1f:a2:df:24:92:d1:f0: 90:b1:58:c1:ed:97:45:aa:62:c9:c7:23:73:7f:e2: cb:47:c3:6f:49:3c:04:9b:41:7c:f9:5f:57:85:7b: 30:18:81:e2:f5:86:9b:e5:4e:21:e7:e1:12:4a:7f: f9:6e:77:bd:83:7e:78:a0:25:81:ea:bd:62:e3:86: a9:07:bb:e4:ba:f5:48:44:79:0c:fa:eb:36:41:32: a5:1d:cd:b3:9f:6d:b6:d1:77:29:8a:16:73:3a:c2: 44:41:87:8d:9c:46:a2:7d:86:0c:20:1e:96:35:f7: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:54:D4:89:8A:E2:86:95:14:7B:47:83:8F:0D:3B:0D:F4:BA:27:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:02:cc:71:45:73:8f:82:c0:d2:29:2a:16:e9:3c:76:87:2e: 42:61:61:bc:4a:fb:13:6a:fe:ec:07:5b:d0:0b:7d:b5:9b:75: e4:80:78:36:2a:d7:ff:71:49:2f:74:a8:51:97:2a:27:ac:d3: fe:af:25:14:a6:77:4b:bd:b1:75:7e:8f:ad:e4:59:f3:17:57: 81:3e:89:19:19:40:f2:97:91:88:5b:95:42:c6:89:d0:31:61: 32:bb:08:7e:20:2b:66:d4:eb:ea:a2:10:83:b3:be:79:58:8e: e1:0a:a2:1e:a9:cb:65:fd:a5:62:6f:14:9e:88:4f:ff:a9:1c: 64:51:33:66:1f:bf:57:bf:54:f4:fc:88:f8:61:d5:d0:42:8a: cb:ff:05:1e:bd:ac:3e:cf:87:d2:6e:b8:d5:8e:76:72:0d:ec: a3:0f:c9:02:d5:f7:9f:dd:4a:72:17:84:00:e8:d3:50:d5:d3: 22:49:2b:03:24:9a:56:e7:dc:00:6e:65:cc:de:d6:d8:9c:1c: 02:cf:c0:5d:be:12:94:bb:46:82:37:af:e7:c1:a0:a8:d2:61: 4a:a3:65:03:f4:d6:01:47:70:19:a8:86:e8:ab:c8:a5:cd:68: e4:79:24:8e:6b:98:1e:23:66:87:b3:18:7d:a7:e1:6a:6a:bd: ca:d0:3a:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuIKO9F/KRXNPGSqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MTAxNTE3MDAwM1oXDTI1MTAxODE3MDAwMFowLzEtMCsGA1UEAxMk YWQ0OTQ5N2YtOGEyOC00YjM3LTkzN2ItZWE2MDJkMGRlZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56OrYyEQ8zEvdErXbvr2RflRewGhzSxrUyC5 tCYAtHiASsn2+KI8sR0M5hhLEfYZJPsp8Xsk3PxDItTzjGZ+GLZQaW4WIOahO/L6 CKcJ13jPsirTXdSipDwryEsBlkKULXKGhlcjwwPVqbcrD415q7JpuFoqjWR8RoBt mHlka26TM3xZIiIPAkl1C10Ggh+i3ySS0fCQsVjB7ZdFqmLJxyNzf+LLR8NvSTwE m0F8+V9XhXswGIHi9Yab5U4h5+ESSn/5bne9g354oCWB6r1i44apB7vkuvVIRHkM +us2QTKlHc2zn2220XcpihZzOsJEQYeNnEaifYYMIB6WNfd/WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJtU1ImK4oaVFHtHg48NOw30uid+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGAsxxRXOPgsDSKSoW6Tx2 hy5CYWG8SvsTav7sB1vQC321m3XkgHg2Ktf/cUkvdKhRlyonrNP+ryUUpndLvbF1 fo+t5FnzF1eBPokZGUDyl5GIW5VCxonQMWEyuwh+ICtm1OvqohCDs755WI7hCqIe qctl/aVibxSeiE//qRxkUTNmH79Xv1T0/Ij4YdXQQorL/wUevaw+z4fSbrjVjnZy DeyjD8kC1fef3UpyF4QA6NNQ1dMiSSsDJJpW59wAbmXM3tbYnBwCz8BdvhKUu0aC N6/nwaCo0mFKo2UD9NYBR3AZqIboq8ilzWjkeSSOa5geI2aHsxh9p+Fqar3K0DoK -----END CERTIFICATE-----Generated at Wed Oct 15 20:15:04 2025 by rpki-client