$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft File: df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft (raw, json) Hash identifier: akiggZ8AfNBXChEzW7JmZAActnRl0gOuA3izI8lt6hs= Subject key identifier: 76:80:3A:94:09:F0:7D:3A:21:47:B1:A0:A6:AD:28:77:F7:CE:45:7D Authority key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Certificate issuer: /CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Certificate serial: 010D0C9F4328584B93181E0B6F5FA681475C0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft Manifest number: 010D0C9F4328584A846795057BAA67210E3FA0E4 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: 0f3992cf-5a89-327d-a390-90748ec5ecbd.roa (hash: MK8JPedPC0l3yPfqmZufpVtxdZHxUc6YYyu1V+q/o0E=) 2: df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl (hash: j0DcpH9zdtTF5Bj07TZ7rBmuMi7WD8y1OxiKJ6UZso0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1e:0b:6f:5f:a6:81:47:5c:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=8676df55-0e2f-45cc-a508-4e400c122471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:23:9b:03:a0:f3:92:04:14:ae:31:74:c8: 78:c3:15:2c:ab:88:cb:20:30:99:b1:a4:6c:f0:6f: 81:b3:d1:92:6f:63:c2:33:a6:b8:af:82:78:69:51: 3b:39:d4:f7:f7:e3:a8:4b:cf:45:ed:1e:3f:26:d1: 59:2f:02:60:a2:c0:43:69:01:0a:13:a1:53:ca:67: d6:af:b8:79:60:8c:ff:e2:e1:4e:5c:26:32:0d:21: 5c:cc:c6:bd:9f:50:1d:7f:02:00:08:e1:07:ee:df: ec:50:a4:a5:34:89:df:b8:30:59:bc:b2:f2:cf:bb: 64:fd:29:a0:50:9d:33:20:26:02:da:a9:ff:7b:83: 0f:04:51:90:61:1b:b2:e1:ef:f5:72:51:bc:b7:7c: bc:dc:71:00:59:c4:50:af:1e:c7:37:3f:fd:ff:8d: 62:3b:e7:d7:95:61:ab:b0:be:17:be:82:cf:ba:68: 5f:c9:d2:1a:50:49:74:a2:c7:27:c0:51:8c:e9:5c: ca:bc:91:b2:02:16:ed:ab:29:97:d2:ab:1b:3d:c6: db:6b:a5:50:bc:11:6f:73:d5:ec:95:13:2d:55:08: 21:32:38:bd:cf:97:fc:f1:54:60:f4:95:92:42:bb: 77:87:cd:13:a0:0e:74:f9:8b:9a:14:64:4f:65:72: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:80:3A:94:09:F0:7D:3A:21:47:B1:A0:A6:AD:28:77:F7:CE:45:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl X509v3 Authority Key Identifier: keyid:E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f8:41:2c:e5:9f:a2:40:91:2b:00:c3:ed:a6:e1:1a:d7:22: 9b:e2:d9:f9:c6:38:48:ba:29:cb:4e:2e:aa:cf:2e:c5:fa:8e: f6:ef:5a:24:4b:b3:85:1b:69:96:df:63:d0:99:f7:2c:f1:96: e6:bd:fa:2b:33:aa:7f:b8:3a:f5:06:7f:5b:66:c8:51:ad:ef: 64:73:a4:af:f2:ad:6b:d7:61:e5:87:ee:05:45:44:9b:31:35: aa:97:e9:a0:c3:99:95:e3:b4:88:7d:95:d4:db:8a:8b:1e:5f: c7:be:cf:b6:13:80:98:88:54:fc:a1:e9:9f:df:be:d0:b4:07: a5:63:ae:ab:ac:7f:66:36:6f:3b:41:68:c4:0b:8f:c6:b1:8d: 01:bd:49:a6:0b:14:70:08:52:88:ce:5e:e5:33:99:55:1f:75: 94:8a:80:ea:3f:97:31:3b:3c:ee:f8:1e:21:c6:6f:48:6f:c9: 20:41:dd:e2:ad:ce:ef:b5:44:c7:ed:88:e4:cd:84:e9:57:6b: 5c:90:b3:3b:17:60:67:1a:61:ed:54:50:af:a5:f4:6e:06:81: 05:7c:7b:b9:0a:06:f3:71:ee:3a:98:11:82:0c:56:71:35:7a: 4c:b2:2c:86:47:50:b1:2d:30:c6:7f:fe:5f:cd:e9:dd:99:70: 78:50:e4:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGB4Lb1+mgUdcDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZWY5NjctY2EwNC00YWZiLTk2YmEtNmU2NzRhMzVm NGExMB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk ODY3NmRmNTUtMGUyZi00NWNjLWE1MDgtNGU0MDBjMTIyNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll0jmwOg85IEFK4xdMh4wxUsq4jLIDCZsaRs 8G+Bs9GSb2PCM6a4r4J4aVE7OdT39+OoS89F7R4/JtFZLwJgosBDaQEKE6FTymfW r7h5YIz/4uFOXCYyDSFczMa9n1AdfwIACOEH7t/sUKSlNInfuDBZvLLyz7tk/Smg UJ0zICYC2qn/e4MPBFGQYRuy4e/1clG8t3y83HEAWcRQrx7HNz/9/41iO+fXlWGr sL4XvoLPumhfydIaUEl0oscnwFGM6VzKvJGyAhbtqymX0qsbPcbba6VQvBFvc9Xs lRMtVQghMji9z5f88VRg9JWSQrt3h80ToA50+YuaFGRPZXKvhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHaAOpQJ8H06IUexoKatKHf3zkV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZl Zjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEzNWY0YTEvZGY2ZWY5NjctY2EwNC00 YWZiLTk2YmEtNmU2NzRhMzVmNGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGY2ZWY5NjctY2EwNC00YWZiLTk2 YmEtNmU2NzRhMzVmNGExL2RmNmVmOTY3LWNhMDQtNGFmYi05NmJhLTZlNjc0YTM1 ZjRhMS5jcmwwHwYDVR0jBBgwFoAU5IiwVBEXG0J2ClybExwZW5Jn0yYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3 NGEzNWY0YTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCz+EEs5Z+iQJErAMPtpuEa 1yKb4tn5xjhIuinLTi6qzy7F+o7271okS7OFG2mW32PQmfcs8ZbmvforM6p/uDr1 Bn9bZshRre9kc6Sv8q1r12Hlh+4FRUSbMTWql+mgw5mV47SIfZXU24qLHl/Hvs+2 E4CYiFT8oemf377QtAelY66rrH9mNm87QWjEC4/GsY0BvUmmCxRwCFKIzl7lM5lV H3WUioDqP5cxOzzu+B4hxm9Ib8kgQd3irc7vtUTH7YjkzYTpV2tckLM7F2BnGmHt VFCvpfRuBoEFfHu5Cgbzce46mBGCDFZxNXpMsiyGR1CxLTDGf/5fzendmXB4UOSY -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:34 2025 by rpki-client