$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft File: af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft (raw, json) Hash identifier: MNr2WH/t4ME1t796QTJQ20jqtwzoVkP7fbzlcLtpZfc= Subject key identifier: 5A:25:32:3C:3F:5C:6B:82:7F:48:9E:8A:C6:FE:5F:5C:BF:02:88:F1 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584BBF69B727DF2B5A8FB13ED400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft Manifest number: 010D0C9F4328584AC6FBC451E29FED14340029DB Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa (hash: rUcwchFsDpe46ajfcW0mpf3RUq3Jb7UF07cte8epBPE=) 2: af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl (hash: TzxixrlzC+nSVYMVfI8nO4N0+c23BBm08IiZ480JTsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:27:df:2b:5a:8f:b1:3e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=91c655ef-f3a7-44a0-841d-e318b71f8b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:a2:58:76:5c:4a:1a:b5:e5:55:84:35:fd: 0c:b9:ef:ae:26:1c:dc:21:cf:f3:35:92:2b:d3:8f: 17:34:8f:fa:45:12:f2:7b:c6:8e:00:20:dd:8c:7a: d6:b1:db:70:28:63:e6:2e:33:d5:43:96:92:1b:93: 93:ac:a8:02:96:7e:f5:e5:25:bb:e3:81:d9:d6:dd: 7e:9e:f3:b2:57:0a:63:e9:95:6e:c8:81:8b:1c:23: 9a:83:8b:1a:a8:50:00:b7:a9:04:0e:92:7c:80:9a: b6:b7:83:7c:60:d9:d1:51:10:fc:23:d6:19:e7:69: 22:27:1f:fb:b5:7d:0d:1f:ec:6e:d6:14:64:b7:60: 6f:b4:92:0a:35:7a:3b:a6:5d:06:6e:59:3e:0b:79: fa:e1:33:09:30:49:e5:ca:e2:44:b6:9b:a2:09:87: 83:21:a3:30:d1:08:ea:42:4f:f9:68:16:bd:9e:68: 65:b9:bc:18:a1:30:e8:b9:f7:a8:90:cc:d5:da:b6: 53:ed:0d:73:29:6f:4a:17:09:ba:90:85:ae:db:ce: 0b:ce:22:bc:31:fa:a4:3c:87:30:43:57:78:56:54: 4f:db:57:b6:cf:5d:f8:7d:8b:17:50:0a:fa:32:82: 80:29:23:e6:07:48:cf:e1:92:9b:37:91:c0:40:b2: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:32:3C:3F:5C:6B:82:7F:48:9E:8A:C6:FE:5F:5C:BF:02:88:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ec:6c:dd:f0:5e:3d:b9:a9:59:e7:de:e0:b0:4f:4d:20:0c: 08:db:b0:7f:4a:37:e5:b9:15:eb:5a:84:3d:6a:b5:97:9c:ce: 29:cb:27:d0:c9:18:cf:a9:70:c9:45:30:27:3f:23:71:74:ac: 42:3b:a9:05:da:07:53:47:a6:6b:1c:51:13:ef:b3:b0:79:72: 86:66:a5:de:9f:6a:63:36:d5:d2:3a:19:76:fc:ad:d7:29:75: 8a:c9:c7:dc:9a:00:7b:52:77:3a:98:35:f0:48:9f:fb:d0:65: 9d:9c:b8:24:74:f1:1f:71:f3:9c:c1:b2:16:bb:f6:7d:76:9f: 92:74:7d:7b:ad:2a:c5:13:65:96:32:c3:46:55:d5:9d:20:82: bb:a1:75:f6:58:d2:7b:c5:be:65:7a:9c:43:a0:9b:b8:ec:b1: e9:12:31:ec:ad:b9:8e:13:e4:d7:ec:ae:d9:6e:99:96:83:9f: 4e:92:51:9e:69:62:53:83:7b:ea:70:45:42:ee:a6:bf:9d:02: d6:8e:de:04:e9:1d:e0:2d:1a:b5:e2:e4:31:e8:93:81:27:cb: 48:f7:ed:21:fb:b7:92:f9:59:8c:de:02:df:8c:73:5b:1d:68: df:12:97:4d:7a:58:4e:e5:1d:03:77:9c:92:c1:b8:1a:48:7f: 0a:c0:39:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abcn3ytaj7E+1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk OTFjNjU1ZWYtZjNhNy00NGEwLTg0MWQtZTMxOGI3MWY4YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKCiWHZcShq15VWENf0Mue+uJhzcIc/zNZIr 048XNI/6RRLye8aOACDdjHrWsdtwKGPmLjPVQ5aSG5OTrKgCln715SW744HZ1t1+ nvOyVwpj6ZVuyIGLHCOag4saqFAAt6kEDpJ8gJq2t4N8YNnRURD8I9YZ52kiJx/7 tX0NH+xu1hRkt2BvtJIKNXo7pl0Gblk+C3n64TMJMEnlyuJEtpuiCYeDIaMw0Qjq Qk/5aBa9nmhlubwYoTDoufeokMzV2rZT7Q1zKW9KFwm6kIWu284LziK8MfqkPIcw Q1d4VlRP21e2z134fYsXUAr6MoKAKSPmB0jP4ZKbN5HAQLL+JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFolMjw/XGuCf0ieisb+X1y/AojxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvYWYwMGRkOWMtYWM3ZC00 ZmQzLTg0YTEtZWE2ZjY2YmMwMDA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ7Gzd8F49ualZ597gsE9N IAwI27B/SjfluRXrWoQ9arWXnM4pyyfQyRjPqXDJRTAnPyNxdKxCO6kF2gdTR6Zr HFET77OweXKGZqXen2pjNtXSOhl2/K3XKXWKycfcmgB7Unc6mDXwSJ/70GWdnLgk dPEfcfOcwbIWu/Z9dp+SdH17rSrFE2WWMsNGVdWdIIK7oXX2WNJ7xb5lepxDoJu4 7LHpEjHsrbmOE+TX7K7ZbpmWg59OklGeaWJTg3vqcEVC7qa/nQLWjt4E6R3gLRq1 4uQx6JOBJ8tI9+0h+7eS+VmM3gLfjHNbHWjfEpdNelhO5R0Dd5ySwbgaSH8KwDm2 -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:03 2025 by rpki-client