$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft File: af86fe52-5b77-46b6-9502-51ccccf3a755.mft (raw, json) Hash identifier: AKYP17AFxCqtSLw8r3tY+mWClDlyQjjB+f9ENbKAWSk= Subject key identifier: 0A:18:C6:1E:72:CE:1B:06:BB:8E:6F:8E:6B:FE:A6:1D:EE:BB:C9:49 Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584BBEF29AE402E2B714E51A2CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft Manifest number: 010D0C9F4328584073A8493AB2010A55F725C744 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 01a7af66-3ab1-31fc-912e-d07e8faac6cd.roa (hash: 5Wxo7fIUvDYnCUH2+m5QydF9c7HYhx1npb67yhG/bVc=) 2: 4c146698-99de-3bf6-915e-d2a6ca46429b.roa (hash: +FG/3/5zbZ3T4j6oiM08j4ROatDkha2BI002sjTe+ww=) 3: 5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa (hash: uAuZMfhQIVRzS6mb9y5shGqYMjhQan+6vb+WspT1pro=) 4: 9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa (hash: C2z01GVjyEdsqQOVMjbrxIrDNSkRfdKZ/L5HSor/uo4=) 5: af86fe52-5b77-46b6-9502-51ccccf3a755.crl (hash: XfYv52D+HQKl9H1cKkxhpU3srM59UuGgWS0rdRse+/I=) 6: d3cac5c0-7a9d-3036-bd74-de0fa3dba8f7.roa (hash: Hi3Eoq/mdMGwS+xtlmcFuYHKTf5T65mEw42gBRnzBrk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:e4:02:e2:b7:14:e5:1a:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=b6dc8959-153f-438e-8c44-e79dfb05bca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:31:6b:dc:dd:91:30:57:81:3a:a6:5d:2c: 29:c9:57:70:7c:a7:84:e8:b9:6e:1b:94:ea:81:01: 26:95:29:37:49:90:28:fb:80:ac:0f:e5:d1:11:a7: 3c:4d:54:92:9a:de:98:06:19:79:42:af:fa:ba:c7: cb:2d:d8:20:68:5c:f6:d1:78:f0:05:f6:6c:fd:b9: 94:72:6d:7f:9f:91:65:d1:bd:91:92:5a:b0:bd:2d: 39:1e:8a:3d:2a:50:93:83:c8:5c:8a:0c:16:e7:53: 2f:0c:15:d7:59:0a:fb:be:b9:98:07:4d:0f:2f:86: 89:d2:4a:96:32:78:b2:39:05:9f:e5:de:8d:31:82: b8:45:f8:96:a4:24:f2:44:5b:63:64:11:36:8e:c3: 02:a6:d0:de:4e:79:1b:da:c1:c1:04:5a:e5:b4:bb: 4e:e6:ad:f8:60:1d:d2:d1:b9:42:98:9a:c1:d2:b3: f9:24:d9:88:90:3b:18:6c:71:b7:47:b3:94:32:3e: c7:48:f8:be:7a:60:0a:2b:14:58:e1:b5:d6:dd:c9: 74:75:92:a8:00:bf:6d:99:3d:af:91:27:b9:b1:a0: 8b:f7:d5:88:b7:05:c2:a6:df:d2:1d:32:21:62:c3: 28:29:3d:f3:19:ca:6b:09:ce:e6:36:eb:5f:6c:4f: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:18:C6:1E:72:CE:1B:06:BB:8E:6F:8E:6B:FE:A6:1D:EE:BB:C9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:19:5e:72:d1:18:5d:71:2e:ea:49:82:48:c3:26:3b:bd:a3: 54:ee:6a:d0:2e:f2:8b:08:a0:42:18:32:89:48:e4:13:93:a7: 6f:7a:aa:13:47:e5:0e:61:e5:4b:09:13:81:3f:f9:41:16:ce: cb:ef:29:53:2c:3e:8c:48:7e:01:2c:38:2b:b6:2c:12:85:b3: a9:3f:e7:15:52:9d:a3:88:19:73:bf:d4:76:4a:1b:96:84:e3: 56:8d:68:ba:02:66:46:b3:d6:46:c6:86:ca:c7:95:e2:a0:88: 41:60:01:e8:45:cf:5f:34:b4:dc:89:7a:1c:9c:20:44:3a:d5: ff:72:85:ad:bb:78:38:b0:0e:04:1b:63:9f:d8:15:bd:45:fe: 25:dc:87:f3:c7:c8:da:6e:83:04:27:fb:ac:65:99:7a:c7:58: a4:f3:a7:4a:4f:68:47:57:ee:a0:63:69:cd:78:a5:f3:52:f8: 5f:5e:2f:18:cc:cd:d3:fd:3c:b5:97:c8:5c:b8:48:ef:d4:cc: ac:4d:55:36:0a:65:3f:b6:64:f4:32:3b:07:4d:1e:1f:a9:af: e6:62:59:5e:30:40:88:05:80:0a:43:25:b7:da:23:3a:dd:99: 5e:20:e8:45:33:a2:d6:fc:49:94:46:56:61:10:77:df:7b:72: 63:2d:14:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8prkAuK3FOUaLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk YjZkYzg5NTktMTUzZi00MzhlLThjNDQtZTc5ZGZiMDViY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUIxa9zdkTBXgTqmXSwpyVdwfKeE6LluG5Tq gQEmlSk3SZAo+4CsD+XREac8TVSSmt6YBhl5Qq/6usfLLdggaFz20XjwBfZs/bmU cm1/n5Fl0b2RklqwvS05Hoo9KlCTg8hcigwW51MvDBXXWQr7vrmYB00PL4aJ0kqW MniyOQWf5d6NMYK4RfiWpCTyRFtjZBE2jsMCptDeTnkb2sHBBFrltLtO5q34YB3S 0blCmJrB0rP5JNmIkDsYbHG3R7OUMj7HSPi+emAKKxRY4bXW3cl0dZKoAL9tmT2v kSe5saCL99WItwXCpt/SHTIhYsMoKT3zGcprCc7mNutfbE8ChQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAoYxh5yzhsGu45vjmv+ph3uu8lJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvYWY4NmZlNTItNWI3Ny00 NmI2LTk1MDItNTFjY2NjZjNhNzU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhGV5y0RhdcS7qSYJIwyY7 vaNU7mrQLvKLCKBCGDKJSOQTk6dveqoTR+UOYeVLCROBP/lBFs7L7ylTLD6MSH4B LDgrtiwShbOpP+cVUp2jiBlzv9R2ShuWhONWjWi6AmZGs9ZGxobKx5XioIhBYAHo Rc9fNLTciXocnCBEOtX/coWtu3g4sA4EG2Of2BW9Rf4l3Ifzx8jaboMEJ/usZZl6 x1ik86dKT2hHV+6gY2nNeKXzUvhfXi8YzM3T/Ty1l8hcuEjv1MysTVU2CmU/tmT0 MjsHTR4fqa/mYlleMECIBYAKQyW32iM63ZleIOhFM6LW/EmURlZhEHffe3JjLRSh -----END CERTIFICATE-----Generated at Wed Nov 5 02:03:43 2025 by rpki-client