$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: LAxatihP56X/gaK6F1mcXxsCKBCL20vH4L8GjQaPgGU= Subject key identifier: 75:48:5E:D6:06:2F:1E:33:32:71:F1:41:72:37:24:F0:E2:24:29:FA Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584BBFE0D4F426B7E280151CBBE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87BD0 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: IK2XtQJ9aqAKgvuNgnZW3qWtpBl/Z6RJWpBAr+oSIgM=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: LI+nhJMmHTO7DTLu0ucgScs9s9W3AZe+f3njSgEn0Us=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d4:f4:26:b7:e2:80:15:1c:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=1169b241-bf02-4fb2-bc40-e10edb2c7269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:f5:8b:e5:a4:71:e3:f8:e1:8b:61:bf:7a: 1d:ef:6d:5d:15:8d:eb:15:ca:d5:91:e4:ca:74:d2: db:f5:b3:86:b2:e2:57:a4:32:ca:ff:06:61:f5:ad: 76:76:07:96:cc:08:cc:5f:23:bd:c7:cc:49:58:b5: 4e:a2:de:23:8a:b2:9b:04:e4:73:1b:a6:f6:9e:6f: 5c:71:5e:cb:49:d7:25:a8:9b:6b:7d:f1:7e:11:51: c1:aa:fd:d2:7d:b5:3d:78:12:49:03:3c:b8:b0:fb: 8d:af:5d:45:a4:9c:ba:82:0a:5f:0a:78:4f:c0:74: 78:37:8e:47:a7:00:1d:29:ea:eb:90:f5:5a:58:13: c2:18:59:d1:62:81:77:91:26:02:4e:46:4e:ee:c6: f7:e2:83:db:a0:4b:db:e5:52:04:23:15:c0:51:e4: 49:5b:29:e9:30:f4:34:f1:a1:3a:a0:9b:c0:13:26: a3:81:66:5b:70:de:f0:b1:d4:61:fc:9f:d1:cb:08: 08:7a:e7:d3:b7:64:06:54:96:c9:2e:f3:95:15:10: d0:4c:15:7c:fa:18:92:7d:de:78:91:5c:9f:c9:5c: 22:15:ab:af:66:25:0a:da:e2:99:be:26:1e:e8:30: 3f:3b:78:e3:aa:fa:b2:32:df:8a:8d:36:7e:fd:8f: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:5E:D6:06:2F:1E:33:32:71:F1:41:72:37:24:F0:E2:24:29:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:25:83:ec:2d:94:15:5a:17:43:5f:77:6e:48:27:5e:84:f0: a5:33:70:b4:3a:63:48:99:da:bf:2c:9f:91:48:3a:cb:1c:28: 1e:13:e4:b5:16:a7:d5:c2:5e:a5:dd:9c:8e:41:24:92:00:f8: 00:d8:66:91:50:5f:70:a8:00:a3:a7:4b:59:1a:f3:3f:1a:bc: 0a:80:83:ca:f0:e9:9e:91:af:99:6c:3f:97:b8:0e:b2:7d:ec: c1:f0:59:d8:95:a7:06:f3:66:8d:52:12:42:fa:17:3f:8b:9c: 42:04:42:ec:5e:5d:9c:e4:a9:ee:d4:94:3b:6a:3c:30:de:96: 7f:d2:e0:57:96:3d:c2:57:00:91:bb:92:62:6b:9f:16:2e:29: 3a:d3:6b:63:c6:8b:da:85:f9:bd:cc:a3:97:24:4c:24:24:5c: 87:a9:c7:25:53:30:a5:ec:b1:54:b0:8d:a3:55:dc:14:86:e7: 29:5b:d4:ee:4d:90:cf:cd:2f:0e:7c:ae:d6:05:a4:95:bd:9d: b2:e6:67:81:36:e3:94:08:f4:6a:9c:a9:32:d8:8d:e4:45:a1: 65:1c:c8:89:f0:17:75:07:7f:fc:8a:03:0e:68:15:86:6f:e9: f2:8e:a1:d6:06:1b:25:db:ea:82:3d:2f:fb:7f:50:a9:7a:64: 5b:d7:21:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NT0JrfigBUcu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk MTE2OWIyNDEtYmYwMi00ZmIyLWJjNDAtZTEwZWRiMmM3MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOH1i+WkceP44Ythv3od721dFY3rFcrVkeTK dNLb9bOGsuJXpDLK/wZh9a12dgeWzAjMXyO9x8xJWLVOot4jirKbBORzG6b2nm9c cV7LSdclqJtrffF+EVHBqv3SfbU9eBJJAzy4sPuNr11FpJy6ggpfCnhPwHR4N45H pwAdKerrkPVaWBPCGFnRYoF3kSYCTkZO7sb34oPboEvb5VIEIxXAUeRJWynpMPQ0 8aE6oJvAEyajgWZbcN7wsdRh/J/RywgIeufTt2QGVJbJLvOVFRDQTBV8+hiSfd54 kVyfyVwiFauvZiUK2uKZviYe6DA/O3jjqvqyMt+KjTZ+/Y9tEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHVIXtYGLx4zMnHxQXI3JPDiJCn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrJYPsLZQVWhdDX3duSCde hPClM3C0OmNImdq/LJ+RSDrLHCgeE+S1FqfVwl6l3ZyOQSSSAPgA2GaRUF9wqACj p0tZGvM/GrwKgIPK8Omeka+ZbD+XuA6yfezB8FnYlacG82aNUhJC+hc/i5xCBELs Xl2c5Knu1JQ7ajww3pZ/0uBXlj3CVwCRu5Jia58WLik602tjxovahfm9zKOXJEwk JFyHqcclUzCl7LFUsI2jVdwUhucpW9TuTZDPzS8OfK7WBaSVvZ2y5meBNuOUCPRq nKky2I3kRaFlHMiJ8Bd1B3/8igMOaBWGb+nyjqHWBhsl2+qCPS/7f1CpemRb1yHz -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:15 2025 by rpki-client