$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: kjEtsbCdnaOnsM9zdGS3BJXxyZyobavc9lNTm56kAkM= Subject key identifier: 9C:09:82:E0:A4:E9:4B:AA:AB:6D:BD:59:DD:F1:9E:6E:6B:A8:60:20 Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584BBFFEA6D3562BB38ACE6C0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AED8 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: FsVJGnUd0tr7a3Li2xY1E87Pm3cIuxZgwyrXWHGhdGo=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: JvPU9HhuF6cSvIJPYOMRjNmM2x6sLb9kzOttK36xrlQ=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: eXpR8T3Ea2iC5g/xvaz9k7aqAWFYfKxQWfUmk1B5Ujc=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: Esb/CZ0mvCzc5YxZs1zDvP4BkmYuB/uhrdsNRkLRR1Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:d3:56:2b:b3:8a:ce:6c:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=0c9bb170-9449-4ca9-a8be-1642553f6980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:81:5b:26:b3:bb:df:ee:58:74:76:98:6c: 28:b1:e1:a2:03:c2:86:2b:79:fd:c3:b7:86:97:43: 5c:94:ec:6a:9e:33:f9:a3:43:94:21:a1:13:60:76: 53:a1:5e:f9:e2:66:4f:19:48:b5:ea:45:1b:d8:34: c1:4f:8c:27:c7:8a:26:b2:93:41:be:54:d9:b8:16: 7c:2d:44:fc:a3:04:42:f1:9d:22:7c:da:1b:e2:5a: e7:8d:1b:5d:d5:a2:0c:09:63:ee:71:8e:25:ef:6a: 9c:17:40:fa:08:f2:a9:0b:9f:d5:f3:f4:74:78:4f: ba:56:3d:84:27:2e:ec:67:68:b5:0c:00:e7:27:f6: 2c:60:3d:39:55:80:2e:e0:a7:1a:51:1a:be:33:00: 22:bd:a2:f3:5a:d4:a1:9b:a4:6f:53:f8:b2:d8:12: 15:af:0b:a0:49:ca:07:96:b5:67:70:88:3d:b6:0b: 44:be:5b:4a:88:80:96:98:00:f4:30:f6:28:67:86: d4:17:db:86:99:a6:60:0e:f1:3f:12:b5:1e:4e:67: 61:f3:41:66:a8:d1:f7:ed:3f:e6:6e:ef:d3:77:be: 3a:8c:21:c0:ec:fb:14:dc:d7:aa:15:6c:7e:45:bd: c6:53:d1:2b:6f:80:91:3c:8e:9d:ed:25:e3:18:2b: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:82:E0:A4:E9:4B:AA:AB:6D:BD:59:DD:F1:9E:6E:6B:A8:60:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:54:39:d5:26:45:b5:30:5f:8c:01:b8:20:34:5f:d7:e0:26: b9:d0:28:a8:c6:11:ba:4a:07:eb:c9:f0:0e:47:9f:e1:cd:15: 44:44:50:57:90:14:03:99:84:bc:15:37:48:e9:95:52:ba:b2: 41:09:54:c6:ca:b0:4e:e3:a9:ad:13:df:4b:d9:4a:27:12:1c: 5d:d6:e6:74:80:70:69:65:40:3f:a2:de:bc:98:1d:4d:c6:e2: 2e:85:55:28:d4:b7:88:38:71:24:e6:77:22:26:e9:4a:1a:6b: 9e:8d:74:27:27:31:17:7b:b5:f5:fd:d1:80:2f:49:30:5e:aa: ab:45:f7:12:cf:13:e8:65:dc:0b:57:d2:05:9c:d0:8d:f9:f1: b6:df:b6:c0:af:26:65:6e:a4:05:bf:75:0c:92:20:2f:b1:dd: c0:00:b9:7e:ed:42:93:a9:08:c1:aa:36:fe:06:9a:05:f0:ad: e2:0f:09:95:f5:7e:f5:e4:bd:f6:9c:9f:8d:c6:d7:f5:c4:08: ef:62:4d:a7:78:7b:7b:39:8c:ad:ca:82:ac:b7:2f:fa:fe:77: d5:c4:85:28:b7:d2:7c:fd:36:8b:79:2a:7f:24:6b:d3:32:47: 00:0c:00:8e:9e:dd:c6:7f:c1:31:cf:2f:0d:bf:d0:50:17:ab: 47:a1:be:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qbTViuzis5sDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MGM5YmIxNzAtOTQ0OS00Y2E5LWE4YmUtMTY0MjU1M2Y2OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD+BWyazu9/uWHR2mGwoseGiA8KGK3n9w7eG l0NclOxqnjP5o0OUIaETYHZToV754mZPGUi16kUb2DTBT4wnx4omspNBvlTZuBZ8 LUT8owRC8Z0ifNob4lrnjRtd1aIMCWPucY4l72qcF0D6CPKpC5/V8/R0eE+6Vj2E Jy7sZ2i1DADnJ/YsYD05VYAu4KcaURq+MwAivaLzWtShm6RvU/iy2BIVrwugScoH lrVncIg9tgtEvltKiICWmAD0MPYoZ4bUF9uGmaZgDvE/ErUeTmdh80FmqNH37T/m bu/Td746jCHA7PsU3NeqFWx+Rb3GU9Erb4CRPI6d7SXjGCsgfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJwJguCk6Uuqq229Wd3xnm5rqGAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwVDnVJkW1MF+MAbggNF/X 4Ca50CioxhG6SgfryfAOR5/hzRVERFBXkBQDmYS8FTdI6ZVSurJBCVTGyrBO46mt E99L2UonEhxd1uZ0gHBpZUA/ot68mB1NxuIuhVUo1LeIOHEk5nciJulKGmuejXQn JzEXe7X1/dGAL0kwXqqrRfcSzxPoZdwLV9IFnNCN+fG237bAryZlbqQFv3UMkiAv sd3AALl+7UKTqQjBqjb+BpoF8K3iDwmV9X715L32nJ+Nxtf1xAjvYk2neHt7OYyt yoKsty/6/nfVxIUot9J8/TaLeSp/JGvTMkcADACOnt3Gf8Exzy8Nv9BQF6tHob4o -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:40 2025 by rpki-client