$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft File: 0afa673e-ceeb-4048-b2ab-93cad45814ac.mft (raw, json) Hash identifier: YkSiDiXnRykIY5E9MjpyICLrL5G4e9aE4EcdQe4eS/A= Subject key identifier: B1:EF:C3:41:C7:07:FC:A0:16:75:F6:1F:2C:8F:5A:7F:AF:A6:B7:53 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584BBFC30EA1162F1EBF65DE8600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft Manifest number: 010D0C9F432858408445775F932E1F42E10077A0 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 0afa673e-ceeb-4048-b2ab-93cad45814ac.crl (hash: VA6YU4LqsitKIrdtxNQunnJ6b+ttNS5xvu9tUiQXlFk=) 2: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (hash: ccFZOr86NAXBjzOtn0uVHBOCZOUaUqlV+cXxcs0FqKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:a1:16:2f:1e:bf:65:de:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=f132a44a-c241-4f7b-9915-9570a7eac587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:7f:d2:00:5a:03:6a:33:37:e1:bf:72:e7: 45:8a:22:c1:96:1a:20:1e:00:56:c6:1f:42:a3:45: 75:77:24:6e:b6:f0:ed:08:0d:55:dc:b5:e8:f4:80: d7:5a:79:31:f3:46:bf:17:10:10:85:ad:b4:f5:e9: c4:a6:ee:32:ab:04:40:66:a0:8d:df:e7:4f:48:79: 44:85:97:cf:98:2a:03:52:fe:55:72:53:29:5b:8a: a3:62:c1:12:b0:98:9c:36:8d:85:1b:cc:f6:5f:b1: e8:89:eb:92:28:46:3b:45:34:ee:e1:5e:1f:aa:b3: 80:db:11:76:30:a9:e4:f2:07:61:07:00:5b:78:e3: b0:a8:05:b2:e5:4f:ae:77:09:31:a1:41:66:01:3f: 68:d0:db:72:3c:cf:a4:ec:3c:c9:95:40:3f:b6:a1: 93:45:91:93:4a:39:2d:68:0f:a9:76:07:b8:f2:18: 5e:d4:1b:f3:c7:86:8a:1a:37:cb:be:1f:8b:b0:9e: 51:40:49:6b:76:20:2d:47:8d:ce:df:70:5b:6e:f4: d5:a2:89:9f:d9:c8:0b:bd:47:09:99:38:ec:4f:36: fc:83:76:d8:0b:33:5f:c3:6e:f6:0d:92:60:80:a0: 99:3f:95:de:62:0a:68:07:b0:c0:ee:a7:2f:6c:6d: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:C3:41:C7:07:FC:A0:16:75:F6:1F:2C:8F:5A:7F:AF:A6:B7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a8:3a:e9:94:5c:3d:49:81:ce:86:c8:16:1b:30:fe:89:ad: 25:59:29:d7:f5:fd:ad:f1:fd:c9:13:66:03:11:bb:b5:af:57: 7f:20:20:fa:61:49:9f:8b:1d:57:d9:e9:8e:6f:fe:9f:e1:74: 10:45:55:ec:d3:42:ff:05:88:c8:80:95:73:c4:47:02:c2:bf: f8:40:cf:1e:6e:97:8d:27:8c:b6:ad:3e:61:d3:bf:41:ed:55: 6b:a2:55:0e:55:1b:90:26:b1:bc:ae:f4:18:ef:65:3d:bc:60: 2d:91:85:19:99:39:43:6a:ae:b6:ca:b1:45:ee:46:b6:41:4f: 6b:bb:c0:96:2d:5c:9c:ae:bc:29:b7:80:ed:9d:0e:ea:b6:ed: 9d:b2:77:c5:3e:8d:2e:24:92:a3:2e:95:3b:f4:6f:b2:11:d2: f7:78:d0:f7:d4:65:2a:b0:3c:19:0b:c7:a9:c4:5d:19:32:e5: eb:ba:a3:9a:a5:17:c0:4a:f0:45:73:f1:b7:9d:c2:5c:18:b7: a9:35:b3:39:34:8d:dd:12:18:7d:9e:6c:29:4b:17:e0:33:ab: f2:45:3e:a3:50:96:30:2e:3b:da:6f:f9:bb:c5:4d:20:98:a1: ce:89:b5:5b:1c:25:53:7a:6a:14:a0:f1:bb:f1:da:8d:63:dd: 5f:31:e2:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww6hFi8ev2XehgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk ZjEzMmE0NGEtYzI0MS00ZjdiLTk5MTUtOTU3MGE3ZWFjNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKl/0gBaA2ozN+G/cudFiiLBlhogHgBWxh9C o0V1dyRutvDtCA1V3LXo9IDXWnkx80a/FxAQha209enEpu4yqwRAZqCN3+dPSHlE hZfPmCoDUv5VclMpW4qjYsESsJicNo2FG8z2X7HoieuSKEY7RTTu4V4fqrOA2xF2 MKnk8gdhBwBbeOOwqAWy5U+udwkxoUFmAT9o0NtyPM+k7DzJlUA/tqGTRZGTSjkt aA+pdge48hhe1Bvzx4aKGjfLvh+LsJ5RQElrdiAtR43O33BbbvTVoomf2cgLvUcJ mTjsTzb8g3bYCzNfw272DZJggKCZP5XeYgpoB7DA7qcvbG2BnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHvw0HHB/ygFnX2HyyPWn+vprdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGFmYTY3M2UtY2VlYi00 MDQ4LWIyYWItOTNjYWQ0NTgxNGFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoqDrplFw9SYHOhsgWGzD+ ia0lWSnX9f2t8f3JE2YDEbu1r1d/ICD6YUmfix1X2emOb/6f4XQQRVXs00L/BYjI gJVzxEcCwr/4QM8ebpeNJ4y2rT5h079B7VVrolUOVRuQJrG8rvQY72U9vGAtkYUZ mTlDaq62yrFF7ka2QU9ru8CWLVycrrwpt4DtnQ7qtu2dsnfFPo0uJJKjLpU79G+y EdL3eND31GUqsDwZC8epxF0ZMuXruqOapRfASvBFc/G3ncJcGLepNbM5NI3dEhh9 nmwpSxfgM6vyRT6jUJYwLjvab/m7xU0gmKHOibVbHCVTemoUoPG78dqNY91fMeLz -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:19 2025 by rpki-client