$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: seFnQsl77vjxNiM6DzEN4zNpFxO2Q3I5G8ZgUfeAwwY= Subject key identifier: 1C:3B:F5:67:D5:0C:66:AF:AB:D3:29:6A:90:7E:A7:BD:F5:3F:58:49 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584BC0938302F08DC346B004AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160854 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: BAh5nW+DbWmlrLoT1wIxCPy959/6q6VH0OAthbgy/eU=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: i5f+PQMcneKVzCLqj+o9qGquF3BnF9iknTY4YXBoBSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:83:02:f0:8d:c3:46:b0:04:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=888321d4-36a4-42e1-821f-5cf093849257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:5d:c6:9d:68:62:36:3e:4c:51:12:8f:4a: 6b:3c:95:4f:58:de:ea:6c:95:47:01:82:f8:ec:e2: df:6f:ad:a5:85:f2:79:21:5c:b7:c2:7d:2e:43:1d: e5:60:d7:88:b1:40:18:a3:8c:57:25:a5:97:17:47: 63:84:2a:84:d5:8b:ce:b2:88:3b:98:75:6f:81:bb: ea:5f:fb:b1:95:ec:93:03:42:68:14:1d:ba:44:45: 73:81:3a:4b:6e:cf:04:ea:6e:3d:f9:e5:f2:23:12: 67:00:d3:2f:c2:1b:0a:c8:6c:49:34:1c:9e:c5:50: 37:02:ce:b1:34:85:45:26:49:0b:0d:61:6e:fe:6f: f5:d6:7e:d4:38:ba:37:a4:04:86:cf:e4:6f:4b:46: ae:ce:8a:b4:df:4d:1d:b3:ce:2d:46:fb:51:88:81: ca:7f:9c:17:d7:0c:06:28:54:9d:7d:66:0b:90:09: 42:25:f5:32:00:6b:96:5f:da:5a:71:5a:63:45:9e: 59:5a:81:97:09:28:01:a9:f8:9d:87:16:ee:dd:92: f0:24:c1:be:5d:84:1e:60:3b:c9:a1:b4:30:65:8d: e6:19:07:db:35:5b:2f:37:65:69:1a:34:e5:14:e2: de:4f:ff:b2:76:a0:43:bb:2a:d5:d2:5c:d3:2a:9f: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3B:F5:67:D5:0C:66:AF:AB:D3:29:6A:90:7E:A7:BD:F5:3F:58:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:24:44:9e:5d:89:38:8f:22:5f:07:87:c9:fb:8e:cf:13:36: ae:37:57:6c:79:84:d9:5f:e6:f0:79:b6:0b:d7:20:9e:15:0e: ed:23:e1:49:72:06:8e:ae:07:66:00:15:2c:4b:4c:ae:8e:b3: 22:fc:99:2f:7f:4a:0b:8f:22:d7:79:df:c1:ca:aa:87:cf:10: e7:39:ea:d2:4c:b1:19:ce:8c:f9:58:5f:56:70:e7:de:1f:59: 9a:68:f1:ee:f0:43:9f:76:9e:8d:7f:29:56:38:d5:02:a0:27: 65:ff:b3:cf:78:12:2b:37:48:0a:9f:33:b1:1e:2e:7c:21:3f: 9a:b4:4e:db:76:3f:00:2d:35:9e:03:2b:4c:86:f8:c0:c9:81: 17:24:85:f8:cc:15:53:31:be:2e:16:5b:de:67:03:dc:43:56: 6c:e9:93:a3:3a:be:fb:e3:64:a8:62:6f:4b:d5:b0:db:02:41: 86:9f:5f:24:6b:94:b5:07:75:0b:ce:1d:16:3a:c4:d1:3c:2a: 10:a4:01:b9:c5:eb:e3:e5:be:2f:59:be:b6:9b:df:8f:7e:23: 6f:7b:10:db:f3:d5:ec:4e:37:3a:4c:ca:bf:62:fd:aa:a3:cf: a7:3c:d4:30:2c:39:e5:7b:73:eb:2f:e0:39:04:f2:35:dc:39: e5:87:37:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4MC8I3DRrAEroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk ODg4MzIxZDQtMzZhNC00MmUxLTgyMWYtNWNmMDkzODQ5MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp99dxp1oYjY+TFESj0prPJVPWN7qbJVHAYL4 7OLfb62lhfJ5IVy3wn0uQx3lYNeIsUAYo4xXJaWXF0djhCqE1YvOsog7mHVvgbvq X/uxleyTA0JoFB26REVzgTpLbs8E6m49+eXyIxJnANMvwhsKyGxJNByexVA3As6x NIVFJkkLDWFu/m/11n7UOLo3pASGz+RvS0auzoq0300ds84tRvtRiIHKf5wX1wwG KFSdfWYLkAlCJfUyAGuWX9pacVpjRZ5ZWoGXCSgBqfidhxbu3ZLwJMG+XYQeYDvJ obQwZY3mGQfbNVsvN2VpGjTlFOLeT/+ydqBDuyrV0lzTKp/BXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBw79WfVDGavq9MpapB+p731P1hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKJESeXYk4jyJfB4fJ+47P EzauN1dseYTZX+bwebYL1yCeFQ7tI+FJcgaOrgdmABUsS0yujrMi/Jkvf0oLjyLX ed/ByqqHzxDnOerSTLEZzoz5WF9WcOfeH1maaPHu8EOfdp6NfylWONUCoCdl/7PP eBIrN0gKnzOxHi58IT+atE7bdj8ALTWeAytMhvjAyYEXJIX4zBVTMb4uFlveZwPc Q1Zs6ZOjOr7742SoYm9L1bDbAkGGn18ka5S1B3ULzh0WOsTRPCoQpAG5xevj5b4v Wb62m9+PfiNvexDb89XsTjc6TMq/Yv2qo8+nPNQwLDnle3PrL+A5BPI13Dnlhzf7 -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:32 2025 by rpki-client