$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft File: af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft (raw, json) Hash identifier: MyA4y6znzzkojZ97SSOzxvqQz0IvVZJK7xEwWl6wT24= Subject key identifier: 4E:87:F7:26:81:14:D1:87:D9:79:54:AB:7F:6A:D1:87:8C:63:65:82 Authority key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Certificate issuer: /CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Certificate serial: 010D0C9F4328584BC03A2BBB92F2E1271DE0D200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft Manifest number: 010D0C9F4328584073A8233177FD88AEE3115A24 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 00b8bd76-9778-3e13-90d1-44c43d4c3610.roa (hash: Y19ViPSD2h15gk5bu0sMV24qD29E4//6KYQt/2LcKSk=) 2: af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl (hash: KuxvZ1qpTUHafe+WEg71cJaJE6Szi8OubEciNNttxdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2b:bb:92:f2:e1:27:1d:e0:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=b3bdbcca-7016-4722-ac36-810beae7d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:5a:01:cd:cf:ed:04:68:03:dc:db:da:94: 03:ac:83:43:29:e5:4b:64:d4:e4:ed:92:de:06:f6: 3d:2b:90:b1:4b:0d:b6:51:57:63:42:d3:39:0d:e9: eb:71:e4:20:c9:25:7d:d6:87:a0:4b:46:80:ef:8b: a2:b6:94:71:5b:20:af:c9:bc:2d:21:98:fe:84:10: 5d:c5:19:26:bb:79:e8:9a:8f:85:37:1a:4e:a8:71: eb:50:38:0c:20:23:74:ea:7f:9a:14:6f:fe:b6:45: c7:db:e6:45:bd:04:a7:33:f6:bd:e4:b0:de:35:8e: ea:b4:df:c6:b7:bc:f3:f4:c1:91:bd:78:32:35:ca: 6d:f4:0d:78:3e:19:27:51:cb:24:c0:4f:c1:1b:36: 7c:06:c8:52:26:b0:de:2d:13:4c:9b:c7:d4:9b:78: 7c:53:d5:f5:9a:8f:88:d9:a6:4f:7f:d7:9b:46:2b: 69:f9:02:f9:ff:f0:09:d5:b8:48:22:57:e1:59:f4: 8c:2c:1d:5b:72:2a:a7:b9:fd:7a:08:0b:1e:0a:2a: d6:d0:5d:a6:13:5a:69:95:f2:4b:78:44:f2:02:5e: 42:bc:3d:26:41:fc:b5:d2:ec:98:81:56:be:dd:8e: 0f:dd:ca:ff:4c:91:55:f9:ae:d2:ef:ca:9d:64:50: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:F7:26:81:14:D1:87:D9:79:54:AB:7F:6A:D1:87:8C:63:65:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl X509v3 Authority Key Identifier: keyid:41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fb:a9:80:54:b2:f4:69:78:b9:90:2d:e4:b0:8b:54:b0:bf: ed:fc:69:2d:5d:5b:19:83:bc:e3:58:5b:d3:d0:68:85:4a:6f: 5c:08:95:3f:ff:62:30:11:c1:a9:f4:bb:ca:fb:b3:4d:e1:6f: 5b:2f:7f:44:47:20:bc:85:e9:a0:c7:58:7a:a0:45:3f:01:fd: ab:88:4c:6a:ac:a6:bb:76:16:10:a8:a1:f6:d1:c6:30:2d:2c: 75:7a:60:a5:26:7f:4e:25:b8:78:6d:48:57:72:00:fb:b2:85: da:6a:f5:53:9d:bb:6f:2d:a4:ca:b1:eb:78:0e:78:70:2d:1d: 32:53:de:ab:f9:d7:f3:45:72:71:9e:18:4a:93:91:98:c5:2c: a8:c1:fc:92:8b:17:63:b8:63:36:09:47:95:e9:45:dc:7b:0e: cc:94:52:1d:4c:1e:af:01:d1:a6:cc:a2:2d:8e:c2:e9:1b:36: 08:d3:ee:d9:a0:4f:8f:36:29:24:94:f1:58:97:7f:49:aa:98: a9:fc:f5:9e:6b:e1:f1:8a:6a:8b:92:76:81:91:b1:1f:7b:4e: 18:f4:2b:64:09:26:a1:45:2c:bb:fe:00:92:64:14:b4:ca:9d: b5:41:fc:1d:c7:e7:88:c6:99:d5:a1:d7:d3:3f:ce:97:96:de: 66:56:5d:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOiu7kvLhJx3g0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYx Yzc1MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk YjNiZGJjY2EtNzAxNi00NzIyLWFjMzYtODEwYmVhZTdkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXZaAc3P7QRoA9zb2pQDrINDKeVLZNTk7ZLe BvY9K5CxSw22UVdjQtM5DenrceQgySV91oegS0aA74uitpRxWyCvybwtIZj+hBBd xRkmu3nomo+FNxpOqHHrUDgMICN06n+aFG/+tkXH2+ZFvQSnM/a95LDeNY7qtN/G t7zz9MGRvXgyNcpt9A14PhknUcskwE/BGzZ8BshSJrDeLRNMm8fUm3h8U9X1mo+I 2aZPf9ebRitp+QL5//AJ1bhIIlfhWfSMLB1bciqnuf16CAseCirW0F2mE1pplfJL eETyAl5CvD0mQfy10uyYgVa+3Y4P3cr/TJFV+a7S78qdZFA0pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE6H9yaBFNGH2XlUq39q0YeMY2WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJm Njk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvYWYyZjY5NjEtMDkxZi00 YmIyLTkwZDEtZGNkZDk2OWYxYzc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWYyZjY5NjEtMDkxZi00YmIyLTkw ZDEtZGNkZDk2OWYxYzc1L2FmMmY2OTYxLTA5MWYtNGJiMi05MGQxLWRjZGQ5Njlm MWM3NS5jcmwwHwYDVR0jBBgwFoAUQdUiRGVyuzxnZ2XnKD6/fTQXGCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2Rk OTY5ZjFjNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCg+6mAVLL0aXi5kC3ksItU sL/t/GktXVsZg7zjWFvT0GiFSm9cCJU//2IwEcGp9LvK+7NN4W9bL39ERyC8hemg x1h6oEU/Af2riExqrKa7dhYQqKH20cYwLSx1emClJn9OJbh4bUhXcgD7soXaavVT nbtvLaTKset4DnhwLR0yU96r+dfzRXJxnhhKk5GYxSyowfySixdjuGM2CUeV6UXc ew7MlFIdTB6vAdGmzKItjsLpGzYI0+7ZoE+PNikklPFYl39Jqpip/PWea+HximqL knaBkbEfe04Y9CtkCSahRSy7/gCSZBS0yp21Qfwdx+eIxpnVodfTP86Xlt5mVl3+ -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:25 2025 by rpki-client