$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft File: af93a26c-49ee-415a-bda7-07e781689339.mft (raw, json) Hash identifier: GKMCSAQg4MgnbaMgekyiRSHmkOtDZfWCYlFV4atSWws= Subject key identifier: AA:7D:1B:C7:1E:BD:A9:D9:68:22:D5:9F:53:9C:49:80:49:5C:2A:5D Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 Certificate issuer: /CN=af93a26c-49ee-415a-bda7-07e781689339 Certificate serial: 010D0C9F4328584BC03A2D122BA6AEAD6059CF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft Manifest number: 010D0C9F432858482F5F6F0F3EC87DA500CAFCCF Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Thu 06 Nov 2025 19:00:00 +0000 Files and hashes: 1: af93a26c-49ee-415a-bda7-07e781689339.crl (hash: y/qtRWTVSM7xizVebawRL06yT5vpH/CITJer8E40n6Y=) 2: cf9e080d-5220-3f48-8b51-39615620115f.roa (hash: 4LHNj4HtFCf44VcIq0TLb2/Vppiw7fvcy5sMxq3goZU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:12:2b:a6:ae:ad:60:59:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 6 19:00:00 2025 GMT Subject: CN=97ee32d0-17bb-41ff-ad1c-3c70e47df9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:86:4f:74:df:87:96:68:2e:9f:69:d1:49: a3:4a:6f:45:48:29:1d:58:f7:d5:5a:b9:fc:a9:00: 82:d4:1d:e7:28:0d:80:13:de:9c:cc:e2:a4:0d:e2: 63:99:8d:7e:18:fe:a1:78:73:8e:cf:d1:09:fe:bd: f2:f0:a0:4d:ac:39:34:87:9d:e5:a6:7b:e2:26:d3: 31:03:7e:56:11:a2:95:1e:b7:b4:d2:97:75:03:80: 08:d8:b4:1c:cb:35:da:0c:77:6f:a3:42:a4:d0:db: ac:f6:8d:0a:04:9d:4c:cf:a9:19:61:43:79:e4:eb: 68:f2:6b:cf:dc:c2:91:df:fa:fd:c9:5c:2f:43:3d: 93:4a:d0:56:96:c7:32:b1:9d:71:9d:0e:07:f2:36: a0:26:30:6c:cc:66:5a:55:e9:66:c1:ed:39:22:8c: f4:b8:29:55:82:07:8d:48:3d:72:1f:d3:92:4f:85: 42:92:4f:78:8f:b8:eb:4e:d6:7e:34:9f:d2:a9:6c: e1:27:98:88:c5:b0:51:f1:ae:4e:1b:a6:3a:50:b9: bf:e1:dd:39:93:b9:39:f8:cf:92:af:a5:fe:27:4d: c3:1e:02:9e:ee:01:91:61:6c:28:7d:62:70:e6:85: 55:87:14:d9:69:40:9f:5d:10:a3:81:61:08:a2:97: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:1B:C7:1E:BD:A9:D9:68:22:D5:9F:53:9C:49:80:49:5C:2A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl X509v3 Authority Key Identifier: keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:18:24:17:93:7d:eb:be:6d:8b:7e:8d:5f:ce:ba:e5:b1:6e: 2b:63:d4:da:31:27:dc:75:3a:0f:44:5c:0e:a4:e2:f5:43:8d: 35:0d:d1:9f:1f:cb:5f:84:96:0b:45:ec:16:14:48:53:36:91: f2:b5:17:10:3d:50:cb:bc:e1:8d:90:c7:99:1e:d9:77:ef:08: ca:1d:00:de:d8:b7:78:02:78:bf:5f:05:30:f1:f1:ba:62:01: 09:91:0f:bb:63:f7:03:a3:30:25:6d:d3:dc:67:7d:7a:a3:0e: 1b:28:a0:0e:98:41:c1:fc:73:17:2d:0d:62:c7:6a:fd:37:b9: 1f:3a:21:d6:67:7f:a9:53:44:1b:dc:cc:54:c3:6e:c8:62:c8: 57:07:07:38:78:30:58:cb:5e:b6:36:80:16:8e:7d:e4:44:ec: fe:bc:3c:95:0e:17:94:fd:51:6b:01:69:ae:79:cf:c6:19:f6: 4a:64:7b:91:30:b1:62:68:c2:17:aa:66:b7:3e:ce:ba:fa:9a: 7e:6e:08:41:1c:05:4c:e2:35:8a:a1:24:fe:59:b0:9e:4c:af: 0e:4b:0d:21:0d:5e:76:b5:9c:c1:95:8f:7f:c5:54:e3:02:00: b5:5d:4a:39:c8:07:35:e4:cb:89:6b:c4:85:00:27:4c:d4:ac: 94:25:c5:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi0SK6aurWBZz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY5M2EyNmMtNDllZS00MTVhLWJkYTctMDdlNzgxNjg5 MzM5MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk OTdlZTMyZDAtMTdiYi00MWZmLWFkMWMtM2M3MGU0N2RmOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxSGT3Tfh5ZoLp9p0UmjSm9FSCkdWPfVWrn8 qQCC1B3nKA2AE96czOKkDeJjmY1+GP6heHOOz9EJ/r3y8KBNrDk0h53lpnviJtMx A35WEaKVHre00pd1A4AI2LQcyzXaDHdvo0Kk0Nus9o0KBJ1Mz6kZYUN55Oto8mvP 3MKR3/r9yVwvQz2TStBWlscysZ1xnQ4H8jagJjBszGZaVelmwe05Ioz0uClVggeN SD1yH9OST4VCkk94j7jrTtZ+NJ/SqWzhJ5iIxbBR8a5OG6Y6ULm/4d05k7k5+M+S r6X+J03DHgKe7gGRYWwofWJw5oVVhxTZaUCfXRCjgWEIope9kwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKp9G8cevanZaCLVn1OcSYBJXCpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZjkz YTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3ODE2ODkzMzkvYWY5M2EyNmMtNDllZS00 MTVhLWJkYTctMDdlNzgxNjg5MzM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWY5M2EyNmMtNDllZS00MTVhLWJk YTctMDdlNzgxNjg5MzM5L2FmOTNhMjZjLTQ5ZWUtNDE1YS1iZGE3LTA3ZTc4MTY4 OTMzOS5jcmwwHwYDVR0jBBgwFoAUchiRnAE1sOqwtDdoL9a9M7GGnCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZjkzYTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3 ODE2ODkzMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMGCQXk33rvm2Lfo1fzrrl sW4rY9TaMSfcdToPRFwOpOL1Q401DdGfH8tfhJYLRewWFEhTNpHytRcQPVDLvOGN kMeZHtl37wjKHQDe2Ld4Ani/XwUw8fG6YgEJkQ+7Y/cDozAlbdPcZ316ow4bKKAO mEHB/HMXLQ1ix2r9N7kfOiHWZ3+pU0Qb3MxUw27IYshXBwc4eDBYy162NoAWjn3k ROz+vDyVDheU/VFrAWmuec/GGfZKZHuRMLFiaMIXqma3Ps66+pp+bghBHAVM4jWK oST+WbCeTK8OSw0hDV52tZzBlY9/xVTjAgC1XUo5yAc15MuJa8SFACdM1KyUJcUr -----END CERTIFICATE-----Generated at Wed Nov 5 10:47:24 2025 by rpki-client