$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft File: af82acc4-55f5-4fe2-af73-92362e40bbaa.mft (raw, json) Hash identifier: zDgCWdoo2e9y55u6CFwncHElAzN2AFWIdNf4y9ywZkI= Subject key identifier: E9:9F:38:D5:81:35:78:A8:B0:A3:62:2B:BF:36:C4:86:24:C0:90:6D Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584BC1DB13ACEEFE734C2BD8CC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft Manifest number: 010D0C9F4328584B953B0A8031491D2994CC3391 Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Sat 08 Nov 2025 09:00:00 +0000 Files and hashes: 1: af82acc4-55f5-4fe2-af73-92362e40bbaa.crl (hash: UU/aXEbJwZ/hwP6V5KrN1fs+NGSgmuykjzD39jPjN+c=) 2: ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa (hash: +zXc2mJqt4w/ZIrYgaSBcRCYmYzTOP1oxxsAtGee8OE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:13:ac:ee:fe:73:4c:2b:d8:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 8 09:00:00 2025 GMT Subject: CN=ca82dfa5-dd33-4fe1-8890-1727c966eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:5e:49:f8:72:e4:96:46:df:99:d2:58:2e: 1b:7f:f6:49:45:56:c9:af:41:0f:2e:33:14:ed:6d: 32:bf:c3:af:05:bf:7e:75:82:ea:e2:5b:87:2d:21: 67:3b:b0:c0:ec:2f:a2:e4:e6:82:43:c5:17:91:b3: 00:1f:e9:4f:99:79:88:6f:73:6b:30:97:2a:9b:d9: be:69:1b:8a:bf:e4:d6:b6:b6:eb:80:1a:28:8c:b6: 70:3b:31:cc:88:bf:be:02:e9:83:25:14:f4:6b:17: 47:ac:c4:c2:46:70:b1:01:cc:38:14:22:03:04:86: 84:38:6e:72:66:cd:a1:ab:ab:16:39:76:87:41:ca: f4:1a:37:4b:a8:b2:42:e0:1f:6d:90:bf:5a:38:01: 1b:e6:5c:1f:78:d0:52:1c:aa:c3:1f:0f:bd:a0:f6: e6:36:31:c6:2d:69:e5:92:b1:74:0d:11:d1:e2:2e: d3:85:b4:30:28:84:9e:2e:0b:1f:1d:ce:27:a3:c4: 36:15:dd:0a:53:6d:4d:15:0c:5b:a1:69:4c:aa:03: 73:be:21:17:c4:9f:b9:97:77:74:fb:61:af:d7:05: 79:1a:ca:3e:ae:06:0a:3e:a8:87:e0:36:0d:3f:26: 75:29:fa:9d:97:ab:97:73:5f:65:38:c8:26:86:4d: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9F:38:D5:81:35:78:A8:B0:A3:62:2B:BF:36:C4:86:24:C0:90:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:49:65:e0:8c:4c:0a:44:14:bd:f3:b1:f9:d5:56:fa:a3:84: 31:49:98:1b:50:4d:1a:63:ab:20:98:02:be:45:a0:be:8d:32: e7:da:af:bf:1f:8a:69:8f:82:86:75:82:67:37:48:7a:e0:a8: ca:d6:ee:15:32:47:4b:81:ed:97:41:16:f2:95:43:7c:b6:ea: 5a:9c:00:f4:9e:2a:66:4f:52:6f:fe:c4:d9:20:82:e9:0a:22: 47:61:d6:d7:dd:f0:73:49:dd:82:1c:5e:e6:e1:60:06:bd:86: 24:a2:61:67:d6:b5:09:16:40:1a:a5:b4:90:52:4b:eb:3c:3c: 81:d1:69:68:7b:1b:c8:25:06:28:ef:2f:62:a9:16:48:9f:4e: f0:29:74:86:06:81:7e:83:23:f2:48:25:c4:4e:04:b7:f2:8c: 78:5d:af:f1:78:3b:fc:7b:ba:8f:cd:ee:48:5e:03:75:ed:8c: 9c:39:a8:9d:5b:24:2f:74:46:9b:23:f9:f6:f3:af:47:87:35: 55:51:b4:1d:02:05:2c:b5:98:6c:f7:2f:ae:d1:79:57:42:b5: 5f:5f:50:83:b7:41:5a:02:1e:7d:45:0a:9b:c2:aa:64:0a:2f: 26:06:d1:f7:05:ea:0a:c1:11:dc:ef:eb:92:e1:0e:53:9d:ad: 9e:3b:c6:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xOs7v5zTCvYzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwODA5MDAwMFowLzEtMCsGA1UEAxMk Y2E4MmRmYTUtZGQzMy00ZmUxLTg4OTAtMTcyN2M5NjZlYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIdeSfhy5JZG35nSWC4bf/ZJRVbJr0EPLjMU 7W0yv8OvBb9+dYLq4luHLSFnO7DA7C+i5OaCQ8UXkbMAH+lPmXmIb3NrMJcqm9m+ aRuKv+TWtrbrgBoojLZwOzHMiL++AumDJRT0axdHrMTCRnCxAcw4FCIDBIaEOG5y Zs2hq6sWOXaHQcr0GjdLqLJC4B9tkL9aOAEb5lwfeNBSHKrDHw+9oPbmNjHGLWnl krF0DRHR4i7ThbQwKISeLgsfHc4no8Q2Fd0KU21NFQxboWlMqgNzviEXxJ+5l3d0 +2Gv1wV5Gso+rgYKPqiH4DYNPyZ1Kfqdl6uXc19lOMgmhk3aPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOmfONWBNXiosKNiK782xIYkwJBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvYWY4MmFjYzQtNTVmNS00 ZmUyLWFmNzMtOTIzNjJlNDBiYmFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0SWXgjEwKRBS987H51Vb6 o4QxSZgbUE0aY6sgmAK+RaC+jTLn2q+/H4ppj4KGdYJnN0h64KjK1u4VMkdLge2X QRbylUN8tupanAD0nipmT1Jv/sTZIILpCiJHYdbX3fBzSd2CHF7m4WAGvYYkomFn 1rUJFkAapbSQUkvrPDyB0WloexvIJQYo7y9iqRZIn07wKXSGBoF+gyPySCXETgS3 8ox4Xa/xeDv8e7qPze5IXgN17YycOaidWyQvdEabI/n2869HhzVVUbQdAgUstZhs 9y+u0XlXQrVfX1CDt0FaAh59RQqbwqpkCi8mBtH3BeoKwRHc7+uS4Q5Tna2eO8ZO -----END CERTIFICATE-----Generated at Wed Nov 5 11:41:17 2025 by rpki-client