$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft File: afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft (raw, json) Hash identifier: qaG8xiQlxOGPOu70dyI1hAj0FuQvM4A5TL3nSPbJvdQ= Subject key identifier: C1:8D:8B:8A:1F:1C:DC:64:47:99:62:4E:AC:2B:CA:14:88:00:9D:BF Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Certificate serial: 010D0C9F4328584BC01C64FD2A7E5F320579B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft Manifest number: 010D0C9F43285847181F2931D6E2125A72B14D36 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (hash: yo2Hhl5xKwV8367v9NmjBD0su/OUAQSsbVZbIZEahfM=) 2: afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl (hash: VIDoMLKsPGUqysc9oKt/HR5aZRDtYwKNgH94WhucGQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:fd:2a:7e:5f:32:05:79:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=fbe7d34e-fb74-470f-9a9e-0798cef103c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:c8:45:ae:86:de:b7:5b:14:79:5f:bb:a5: 62:1e:92:a7:94:c3:01:34:d9:cf:5e:77:36:1a:2e: 79:23:6d:9e:05:0f:72:f1:ee:71:4f:55:5d:47:bb: ff:8e:19:68:c8:fb:6e:73:0a:8a:5e:6e:ca:b5:6d: 58:78:3f:f3:24:fe:62:f4:73:12:66:4d:a3:bb:52: d3:45:1c:f6:fe:a8:b3:87:c5:8f:33:d6:c6:b8:7c: cf:cc:ba:7a:a0:26:b4:30:0e:15:e0:14:a1:7d:0f: aa:73:5b:e2:ce:14:cd:dc:a1:ec:53:b4:8f:02:3a: 09:26:4e:a1:f0:3b:03:8d:80:80:80:ae:36:5c:c6: 6b:d2:6e:9b:24:2c:4e:8c:33:fd:a4:cf:0f:0e:21: a7:c4:8e:fa:96:03:36:b1:c3:64:62:42:e5:a3:51: da:f6:d2:2c:c6:fa:0e:b5:83:4c:b7:e6:51:5f:e2: 48:dc:6d:d4:54:43:bb:ae:a8:fe:60:d6:cb:9e:08: b5:d3:36:63:01:19:af:7d:4f:6f:91:df:b8:f0:e4: 38:db:12:1a:51:13:db:68:94:cb:d9:51:98:23:45: 1f:8e:5c:f0:09:0b:19:2d:85:d4:8e:d8:1c:f7:a0: 25:2f:c1:86:ed:3f:96:d1:df:fc:0c:e2:23:53:70: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:8B:8A:1F:1C:DC:64:47:99:62:4E:AC:2B:CA:14:88:00:9D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl X509v3 Authority Key Identifier: keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f8:7b:d3:fb:c5:97:59:12:c7:b1:1b:4d:a1:8b:ca:37:c5: 3a:c6:53:a0:56:25:77:03:7d:0e:03:cb:76:7f:b7:c5:3a:64: 1d:65:46:d6:7f:04:81:79:e1:f2:88:19:38:f6:4e:44:4c:fd: 3a:99:0c:f4:f7:b3:56:3e:76:53:81:95:e5:91:69:75:de:e9: d3:79:df:a7:c0:5b:2b:1a:08:b5:71:0c:b5:e1:de:a2:40:0a: 16:34:98:e3:39:59:c3:4c:73:ae:fa:68:04:b1:d6:19:7a:4b: b4:32:2b:58:d7:02:52:ab:c1:29:13:40:6b:de:26:0c:7f:c6: 79:31:63:4b:4a:ae:a2:4c:d9:84:e9:82:72:76:34:86:63:2a: 0a:42:3b:7a:87:20:51:bf:ab:2c:d2:91:2e:7c:46:18:c2:75: b3:74:bb:6e:2d:44:78:51:6e:74:3d:fd:1e:b1:8d:b8:d5:51: d2:3e:9f:f2:47:46:48:1c:0d:ab:90:e1:11:04:3e:bc:6b:e3: c9:0f:dd:03:b2:f4:52:56:d3:68:7c:1e:c0:12:96:cf:1b:92: 78:75:1c:42:7b:83:a7:fd:ba:aa:5b:ef:d2:91:88:42:45:83: a3:a8:a9:3f:65:9c:a6:42:d0:b5:a4:82:f8:e4:fa:4c:58:0d: 5e:02:10:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGT9Kn5fMgV5t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2 OTIyMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZmJlN2QzNGUtZmI3NC00NzBmLTlhOWUtMDc5OGNlZjEwM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCvIRa6G3rdbFHlfu6ViHpKnlMMBNNnPXnc2 Gi55I22eBQ9y8e5xT1VdR7v/jhloyPtucwqKXm7KtW1YeD/zJP5i9HMSZk2ju1LT RRz2/qizh8WPM9bGuHzPzLp6oCa0MA4V4BShfQ+qc1vizhTN3KHsU7SPAjoJJk6h 8DsDjYCAgK42XMZr0m6bJCxOjDP9pM8PDiGnxI76lgM2scNkYkLlo1Ha9tIsxvoO tYNMt+ZRX+JI3G3UVEO7rqj+YNbLngi10zZjARmvfU9vkd+48OQ42xIaURPbaJTL 2VGYI0UfjlzwCQsZLYXUjtgc96AlL8GG7T+W0d/8DOIjU3B+7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMGNi4ofHNxkR5liTqwryhSIAJ2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvYWZkMWZlM2ItN2UyNC00 ZDI3LWJiMTAtYmViOWNlMmQ2OTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5 Y2UyZDY5MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp+HvT+8WXWRLHsRtNoYvK N8U6xlOgViV3A30OA8t2f7fFOmQdZUbWfwSBeeHyiBk49k5ETP06mQz097NWPnZT gZXlkWl13unTed+nwFsrGgi1cQy14d6iQAoWNJjjOVnDTHOu+mgEsdYZeku0MitY 1wJSq8EpE0Br3iYMf8Z5MWNLSq6iTNmE6YJydjSGYyoKQjt6hyBRv6ss0pEufEYY wnWzdLtuLUR4UW50Pf0esY241VHSPp/yR0ZIHA2rkOERBD68a+PJD90DsvRSVtNo fB7AEpbPG5J4dRxCe4On/bqqW+/SkYhCRYOjqKk/ZZymQtC1pIL45PpMWA1eAhDu -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:37 2025 by rpki-client