$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: 5liMUXYd9YuRyygOlbT5LRINm/WNPmfot9Zyee1P07M= Subject key identifier: AB:F8:57:E9:60:F5:3F:F3:FE:36:D9:4D:56:71:7B:59:D6:42:E0:09 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584BC10A9D8AC1A094277784E270 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E862CB Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Sat 08 Nov 2025 02:00:00 +0000 Files and hashes: 1: 09762465-b2e6-360a-b0d4-36522e5d15ce.roa (hash: aNAzKU0B1uvxwr+fCUeC7WJLmtfPRlyhwyxd0gN5xzs=) 2: 67048364-819f-3191-853f-4269ffe18a99.roa (hash: UE5VqhUriowvZPkqh8bZr0VKiVrn4CuvspUy9aVvlto=) 3: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: +j7Xx9qEGvZ9EVsMuN5y0DzHEGkA8eQaS1gHgL+7Pbo=) 4: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: PhEPu8osuJLPLZoB5ZeooeTQIOV2bB1YStJ1YTUBgMo=) 5: e6d28505-b7fb-390f-8e44-e0df401bef2e.roa (hash: R2q/aWm3u7dMtVikhhQS9SnuNWyUK//84ilEwfFBFcs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9d:8a:c1:a0:94:27:77:84:e2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 8 02:00:00 2025 GMT Subject: CN=08724f07-1c93-4a9f-953a-f3711707abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:92:31:fa:95:f3:ae:4e:3c:79:b7:be:20: af:1b:94:76:46:f0:7b:6b:85:ac:b6:c0:04:56:81: 3a:42:6c:5e:75:b7:d9:e2:f2:8f:15:2d:fa:0b:04: d6:5b:bf:47:e6:35:42:03:a4:5b:c0:e9:27:ad:df: 57:95:e3:b2:62:62:8a:31:c0:76:08:74:11:99:58: d1:26:88:05:76:1c:d2:b8:8e:dd:6c:8b:c0:83:60: 11:47:60:4c:05:01:59:4d:35:bc:06:47:a3:98:fa: 83:a5:01:f5:97:c8:a1:b9:e6:d7:ff:33:02:5c:97: 14:9d:0a:07:72:c0:52:fc:5d:f1:e6:71:79:87:44: a4:9e:82:37:b2:e9:f3:06:c8:16:5f:d1:c4:1a:23: 72:51:97:52:25:b3:ef:d6:39:38:76:b9:e1:c5:ca: ae:2c:c5:dd:f0:f6:27:8d:31:9f:b9:f0:7a:f5:21: 55:0d:d9:56:d4:b3:c8:88:56:11:38:c1:0a:4e:9d: 3b:c1:9b:9b:22:f5:fb:21:d8:c4:76:f5:b0:56:d3: d2:99:8e:fa:ef:da:dd:9a:3a:ab:10:d4:46:69:f6: 78:61:26:cb:a8:d1:4c:35:b9:c5:11:45:92:b1:d5: c2:85:61:f6:66:0e:c6:11:60:8a:39:ac:4d:b3:bf: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F8:57:E9:60:F5:3F:F3:FE:36:D9:4D:56:71:7B:59:D6:42:E0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:a3:83:30:14:fc:cf:f0:bf:8b:b9:48:87:08:36:ce:f8:a9: d8:1b:c5:ce:cf:4b:94:54:ee:b9:b7:16:1f:17:e9:03:ea:d7: 3b:7f:84:cb:eb:90:cd:0e:1b:e1:07:80:7e:9a:a0:d5:91:c6: 3c:fe:c4:0d:1d:a5:e7:1d:4b:6c:b3:ef:37:96:bd:ef:d1:3f: de:58:3b:56:5d:ff:69:56:4d:81:7b:9d:d8:ae:00:46:27:66: e8:33:22:39:5f:22:99:b8:bf:79:66:2a:24:75:e5:b0:6a:0f: 2d:34:58:cb:4e:34:fd:b0:2a:b7:7d:e1:c3:65:3e:46:1d:08: 9f:f7:3d:b8:a6:c4:92:b3:2f:c2:03:17:2a:c3:3f:ef:fe:50: 33:06:08:4b:f2:34:93:34:be:ef:98:84:1c:9e:65:3e:5e:a5: 2b:e7:25:ba:cf:6e:f1:59:ac:8e:26:39:fa:40:dc:62:6a:db: b3:c1:20:1a:a4:83:a5:dd:a5:18:6f:f1:0f:81:1a:1c:83:d4: 7f:a3:f7:d7:5b:73:c8:d4:d9:fa:54:51:2c:78:ae:4d:34:71: 23:66:a4:b6:0f:19:96:d4:cd:d7:8c:39:fb:53:ea:2d:37:04: 79:f6:87:ab:39:75:41:e2:cc:8d:dc:47:a5:89:9c:16:72:fa: f8:62:85:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp2KwaCUJ3eE4nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwODAyMDAwMFowLzEtMCsGA1UEAxMk MDg3MjRmMDctMWM5My00YTlmLTk1M2EtZjM3MTE3MDdhYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDCSMfqV865OPHm3viCvG5R2RvB7a4WstsAE VoE6QmxedbfZ4vKPFS36CwTWW79H5jVCA6RbwOknrd9XleOyYmKKMcB2CHQRmVjR JogFdhzSuI7dbIvAg2ARR2BMBQFZTTW8BkejmPqDpQH1l8ihuebX/zMCXJcUnQoH csBS/F3x5nF5h0SknoI3sunzBsgWX9HEGiNyUZdSJbPv1jk4drnhxcquLMXd8PYn jTGfufB69SFVDdlW1LPIiFYROMEKTp07wZubIvX7IdjEdvWwVtPSmY7679rdmjqr ENRGafZ4YSbLqNFMNbnFEUWSsdXChWH2Zg7GEWCKOaxNs7/UDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKv4V+lg9T/z/jbZTVZxe1nWQuAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC8o4MwFPzP8L+LuUiHCDbO +KnYG8XOz0uUVO65txYfF+kD6tc7f4TL65DNDhvhB4B+mqDVkcY8/sQNHaXnHUts s+83lr3v0T/eWDtWXf9pVk2Be53YrgBGJ2boMyI5XyKZuL95ZiokdeWwag8tNFjL TjT9sCq3feHDZT5GHQif9z24psSSsy/CAxcqwz/v/lAzBghL8jSTNL7vmIQcnmU+ XqUr5yW6z27xWayOJjn6QNxiatuzwSAapIOl3aUYb/EPgRocg9R/o/fXW3PI1Nn6 VFEseK5NNHEjZqS2DxmW1M3XjDn7U+otNwR59oerOXVB4syN3EeliZwWcvr4YoUK -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:58 2025 by rpki-client