$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft File: af7885f2-5b14-4ded-b2dd-7befe215db07.mft (raw, json) Hash identifier: WEJdpv9fH6+jpYQ29BcpTcH4YO0HdE5GzBwa1+8GqCE= Subject key identifier: 6D:7F:A3:B5:CB:00:D6:53:56:C8:D7:FA:FE:56:16:B5:A5:67:8F:63 Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584BC0580032CC0DEABCF0C08370 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft Manifest number: 010D0C9F432858481BF95EFA8661C57E4B230197 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (hash: wrLZMg0HvXOBhCDfSZZ45dojZD/EJ096GYzGbzPbS3M=) 2: af7885f2-5b14-4ded-b2dd-7befe215db07.crl (hash: hXGfGBSPQ06dd5qAz0Cph7NmA0cxWa5lsA9d/Qy1CmA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:32:cc:0d:ea:bc:f0:c0:83:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=e654db74-709a-4f11-b35a-74b33ba77f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:ca:b4:b2:50:bc:21:4a:b9:aa:8e:97:ba: e0:e1:9b:a4:c0:91:39:b2:a3:ee:92:09:e4:ed:bf: 53:09:49:bc:8c:7e:a4:07:ae:02:b1:83:37:b0:5d: b4:63:e8:86:36:4e:5b:63:e7:bc:2a:be:c1:36:4f: f7:31:19:56:b5:0c:d8:20:46:e1:a7:89:65:22:19: e3:0f:e4:66:f0:59:3e:25:b6:9f:f9:79:c5:35:13: 3a:22:fe:c8:a7:5d:7c:31:65:08:b0:cb:7f:9d:29: 01:62:82:9d:f1:fd:74:af:5f:22:8a:21:0a:dc:b8: e0:88:c8:d2:6a:ed:1f:b2:cc:32:f1:f1:4d:b9:dc: 49:f6:45:aa:f6:98:1e:0f:41:f5:89:51:6f:1f:aa: 8c:a9:5b:3b:f7:62:02:db:4a:49:30:59:5f:cc:0e: 04:2d:51:2f:0d:ea:0d:48:4a:dc:18:38:70:72:94: ca:02:c5:25:3d:e5:0f:f5:ac:1b:16:2a:58:77:f9: 40:20:b7:d3:dc:25:94:41:82:67:8f:71:e7:f7:a0: a2:4f:f4:a9:93:cb:82:a2:56:8f:6f:e9:6a:a5:be: ff:f5:89:39:4f:d8:45:0e:94:59:9a:a7:33:19:43: 08:33:fe:c6:19:ca:9d:da:54:a8:24:45:98:5b:25: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7F:A3:B5:CB:00:D6:53:56:C8:D7:FA:FE:56:16:B5:A5:67:8F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:05:ac:ac:d4:dc:9a:8b:63:d3:6c:e6:d5:92:4e:8e:a8:49: 82:e6:92:cf:25:f8:89:bb:df:47:46:9b:05:9e:ec:15:18:c0: 4b:12:2f:75:be:4b:60:c9:56:1b:9a:ee:af:6c:d0:a9:bf:53: ae:2d:a9:f6:61:35:22:bb:74:a9:06:07:6f:97:e6:d0:93:2f: e8:bd:31:63:3c:e4:c3:d4:ee:92:bb:a5:25:df:95:ea:be:27: cf:44:be:32:a1:06:4e:26:00:0c:0d:1f:1a:8d:74:66:e6:95: f6:c7:ca:4f:26:37:19:34:38:93:ab:90:84:26:a4:2a:30:9e: 9b:29:05:63:64:2c:90:30:e3:f5:e8:3f:3e:71:ab:c9:7f:15: 7e:c5:8e:6d:d3:ff:27:de:b4:38:b7:1e:0e:39:ce:61:da:da: 7b:1f:d7:af:19:a9:35:b6:07:a5:d7:1b:1b:de:d6:a5:55:b8: 06:02:1b:3d:0e:76:b8:72:98:10:3b:39:f5:f2:58:5d:c4:ea: 82:45:dd:2b:6e:a1:a3:fe:25:ca:c6:e8:79:ee:dc:96:3e:f3: 8e:15:4f:97:84:27:07:3b:c3:82:02:6c:d5:17:81:29:b9:78: 36:aa:45:b2:44:c9:ab:e0:08:5d:0a:56:5f:71:3c:82:43:53: 6c:74:df:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAAyzA3qvPDAg3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ZTY1NGRiNzQtNzA5YS00ZjExLWIzNWEtNzRiMzNiYTc3ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAXKtLJQvCFKuaqOl7rg4ZukwJE5sqPukgnk 7b9TCUm8jH6kB64CsYM3sF20Y+iGNk5bY+e8Kr7BNk/3MRlWtQzYIEbhp4llIhnj D+Rm8Fk+Jbaf+XnFNRM6Iv7Ip118MWUIsMt/nSkBYoKd8f10r18iiiEK3LjgiMjS au0fsswy8fFNudxJ9kWq9pgeD0H1iVFvH6qMqVs792IC20pJMFlfzA4ELVEvDeoN SErcGDhwcpTKAsUlPeUP9awbFipYd/lAILfT3CWUQYJnj3Hn96CiT/Spk8uColaP b+lqpb7/9Yk5T9hFDpRZmqczGUMIM/7GGcqd2lSoJEWYWyXHrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG1/o7XLANZTVsjX+v5WFrWlZ49jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvYWY3ODg1ZjItNWIxNC00 ZGVkLWIyZGQtN2JlZmUyMTVkYjA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUBays1Nyai2PTbObVkk6O qEmC5pLPJfiJu99HRpsFnuwVGMBLEi91vktgyVYbmu6vbNCpv1OuLan2YTUiu3Sp Bgdvl+bQky/ovTFjPOTD1O6Su6Ul35XqvifPRL4yoQZOJgAMDR8ajXRm5pX2x8pP JjcZNDiTq5CEJqQqMJ6bKQVjZCyQMOP16D8+cavJfxV+xY5t0/8n3rQ4tx4OOc5h 2tp7H9evGak1tgel1xsb3talVbgGAhs9Dna4cpgQOzn18lhdxOqCRd0rbqGj/iXK xuh57tyWPvOOFU+XhCcHO8OCAmzVF4EpuXg2qkWyRMmr4AhdClZfcTyCQ1NsdN8b -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:48 2025 by rpki-client