$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.mft File: ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.mft (raw, json) Hash identifier: jfmCO1qZx6YzNov3wzSB8CsjyL43tUwoOS5+cCzlbM8= Subject key identifier: 6A:AE:C5:5A:39:96:D4:67:4F:37:A3:C7:F2:0C:05:81:DB:6D:EE:5E Authority key identifier: 55:CB:F9:C4:C2:6E:11:BA:EA:EC:3A:77:70:CB:6D:5D:2B:57:DE:E9 Certificate issuer: /CN=ddc89689-60ef-4eb1-bc70-6d52f7e9bf45 Certificate serial: 010D0C9F4328584BA94FD8B80B1ACCB51D4BA480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.mft Manifest number: 010D0C9F43285849B2CCB8776BF160B047086235 Signing time: Mon 27 Oct 2025 14:00:09 +0000 Manifest this update: Mon 27 Oct 2025 14:00:09 +0000 Manifest next update: Thu 30 Oct 2025 14:00:00 +0000 Files and hashes: 1: 544126de-24de-348f-a53d-d929284825a1.roa (hash: tn5ANvMpeyN37XOlQPeCWSA33iIeqqPrhT72QlJ0fio=) 2: ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.crl (hash: H0wXYjeOzP8f5n1Da8RPga8rvLoOLmgYgAFlzFEYgCE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:4f:d8:b8:0b:1a:cc:b5:1d:4b:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc89689-60ef-4eb1-bc70-6d52f7e9bf45 Validity Not Before: Oct 27 14:00:09 2025 GMT Not After : Oct 30 14:00:00 2025 GMT Subject: CN=e1b39c05-b618-48da-9437-ad890134361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:30:59:1d:85:08:56:6c:14:b9:da:f9:7a: bd:0c:a3:77:7b:47:06:ea:b7:43:b4:9c:10:7e:d5: f5:0f:96:f7:92:f9:c3:1f:25:5d:50:44:3d:c9:f5: e1:f2:89:4d:99:55:ee:24:66:4d:68:09:6f:f2:18: f4:a0:18:5c:55:cb:d1:59:ce:83:71:27:bb:7b:14: 22:8e:3e:47:57:57:ce:dd:c8:eb:67:3f:81:a3:31: e4:14:df:d3:26:b3:72:31:3d:ac:76:f8:43:5e:03: 3c:5e:4d:a8:97:6d:e0:21:8a:69:28:4b:47:6e:40: ae:1e:d3:e8:b2:a7:72:09:43:04:97:f7:b1:04:70: ea:90:6f:3d:a9:79:8a:7f:10:42:11:03:e4:74:e1: 5e:64:78:0d:5b:65:70:5f:89:fe:9c:80:fd:19:c9: a6:35:61:7e:3f:03:79:88:fb:30:1f:49:7a:87:78: 20:36:c6:15:68:c9:bc:39:d3:72:2d:0f:9b:42:c2: 0e:2a:17:06:6b:37:34:d3:a4:3e:6b:d3:be:b6:9a: 9e:da:04:6f:aa:e0:af:a8:dc:35:e1:7a:3a:fb:6a: f3:b0:1d:22:a1:cd:d8:7a:a4:37:5a:30:28:ea:86: 42:cc:3e:9a:45:a6:fc:1c:ec:ef:a5:61:75:a3:a5: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AE:C5:5A:39:96:D4:67:4F:37:A3:C7:F2:0C:05:81:DB:6D:EE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.crl X509v3 Authority Key Identifier: keyid:55:CB:F9:C4:C2:6E:11:BA:EA:EC:3A:77:70:CB:6D:5D:2B:57:DE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddc89689-60ef-4eb1-bc70-6d52f7e9bf45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:13:92:49:74:39:ad:4d:87:8c:e7:6e:c3:e6:56:fd:18:98: d1:05:3a:67:ef:b3:5c:d5:06:a8:1c:1e:0a:44:b8:c7:de:05: 34:8b:27:f3:44:8b:11:28:5a:7b:f8:05:ae:00:af:f3:0a:d3: f8:b4:b6:dd:fc:89:c7:0d:fe:4c:b0:1f:1f:b6:b1:8d:43:0e: 9d:2d:c1:a6:61:75:31:89:4f:b6:93:19:f3:1b:9b:ee:07:6f: 0a:da:47:48:64:7f:37:4d:9a:a7:36:37:9f:3a:fd:d6:ca:53: 7d:7c:15:b6:52:4f:ab:2b:35:30:c4:14:d3:43:bc:da:82:df: e8:1d:1f:6f:e2:8a:83:ba:17:a6:ed:81:82:94:08:65:b3:61: 1f:2c:84:8f:f9:ab:9e:32:19:28:1f:c9:7a:dd:ed:f7:eb:40: dd:bf:80:dd:5d:4c:8a:b1:0e:5f:88:72:cd:f6:a2:d7:9e:92: ca:f3:17:7b:38:96:2c:7b:9b:e1:37:b8:5f:37:8c:27:ff:a4: 8c:a0:e0:0a:8c:b1:c8:70:c6:a9:4b:70:6a:14:14:e7:76:6b: 1d:14:03:46:8f:a1:07:b6:55:88:0f:da:b3:04:af:34:6c:49: 94:9a:77:07:d3:20:6a:42:03:45:69:1f:04:d4:f9:97:96:05: 92:62:06:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupT9i4CxrMtR1LpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRjODk2ODktNjBlZi00ZWIxLWJjNzAtNmQ1MmY3ZTli ZjQ1MB4XDTI1MTAyNzE0MDAwOVoXDTI1MTAzMDE0MDAwMFowLzEtMCsGA1UEAxMk ZTFiMzljMDUtYjYxOC00OGRhLTk0MzctYWQ4OTAxMzQzNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr4wWR2FCFZsFLna+Xq9DKN3e0cG6rdDtJwQ ftX1D5b3kvnDHyVdUEQ9yfXh8olNmVXuJGZNaAlv8hj0oBhcVcvRWc6DcSe7exQi jj5HV1fO3cjrZz+BozHkFN/TJrNyMT2sdvhDXgM8Xk2ol23gIYppKEtHbkCuHtPo sqdyCUMEl/exBHDqkG89qXmKfxBCEQPkdOFeZHgNW2VwX4n+nID9GcmmNWF+PwN5 iPswH0l6h3ggNsYVaMm8OdNyLQ+bQsIOKhcGazc006Q+a9O+tpqe2gRvquCvqNw1 4Xo6+2rzsB0ioc3YeqQ3WjAo6oZCzD6aRab8HOzvpWF1o6W/0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGquxVo5ltRnTzejx/IMBYHbbe5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZGM4 OTY4OS02MGVmLTRlYjEtYmM3MC02ZDUyZjdlOWJmNDUvZGRjODk2ODktNjBlZi00 ZWIxLWJjNzAtNmQ1MmY3ZTliZjQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGRjODk2ODktNjBlZi00ZWIxLWJj NzAtNmQ1MmY3ZTliZjQ1L2RkYzg5Njg5LTYwZWYtNGViMS1iYzcwLTZkNTJmN2U5 YmY0NS5jcmwwHwYDVR0jBBgwFoAUVcv5xMJuEbrq7Dp3cMttXStX3ukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZGM4OTY4OS02MGVmLTRlYjEtYmM3MC02ZDUy ZjdlOWJmNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcE5JJdDmtTYeM527D5lb9 GJjRBTpn77Nc1QaoHB4KRLjH3gU0iyfzRIsRKFp7+AWuAK/zCtP4tLbd/InHDf5M sB8ftrGNQw6dLcGmYXUxiU+2kxnzG5vuB28K2kdIZH83TZqnNjefOv3WylN9fBW2 Uk+rKzUwxBTTQ7zagt/oHR9v4oqDuhem7YGClAhls2EfLISP+aueMhkoH8l63e33 60Ddv4DdXUyKsQ5fiHLN9qLXnpLK8xd7OJYse5vhN7hfN4wn/6SMoOAKjLHIcMap S3BqFBTndmsdFANGj6EHtlWID9qzBK80bEmUmncH0yBqQgNFaR8E1PmXlgWSYgad -----END CERTIFICATE-----Generated at Tue Oct 28 03:08:04 2025 by rpki-client