$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft File: af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft (raw, json) Hash identifier: iKYfNudeKUGRx5hsvvufvdz8wGwSmwZys6bsdB/IrVs= Subject key identifier: 3F:B5:17:27:CD:F5:FB:D4:F0:A8:CB:2A:6A:A7:BE:70:01:AB:52:AC Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584B74093E99425E41CBAF1A0500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft Manifest number: 010D0C9F4328584AC6FBC451E29FED14340029BF Signing time: Wed 08 Oct 2025 12:00:03 +0000 Manifest this update: Wed 08 Oct 2025 12:00:03 +0000 Manifest next update: Sat 11 Oct 2025 12:00:00 +0000 Files and hashes: 1: 3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa (hash: f432cTFc+oVGQSi9lq0mbcLL/BwKERD0D54U9jQxbNk=) 2: af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl (hash: 0Uwl9uauALyRzTJ3lHsovi5QlWmL6RgyvBV7w278EFs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:09:3e:99:42:5e:41:cb:af:1a:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Oct 8 12:00:03 2025 GMT Not After : Oct 11 12:00:00 2025 GMT Subject: CN=67c951cf-d7c7-4cd2-8040-d674875cf839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:98:4e:79:8e:12:12:9c:f6:b6:55:2b:c8:5b: c6:e8:1e:48:73:e6:bf:64:09:e3:41:be:7f:f2:76: 5a:5d:01:92:14:0e:49:eb:92:39:cd:7d:4d:7f:ae: 14:54:48:5c:6c:9c:86:b8:67:ef:08:51:e1:3e:91: a1:d2:95:3c:32:56:f5:e3:48:ce:6d:71:f5:71:b8: 1d:58:43:b8:f9:76:16:55:59:fe:2c:6e:74:be:35: e9:da:4b:7b:00:0c:82:74:56:58:a8:76:9d:25:00: e4:04:25:ab:10:fb:7b:a2:af:75:ad:4c:e6:89:ec: 2f:6f:d1:a4:de:c1:11:d3:cb:81:de:50:24:a4:34: 24:de:bd:5e:1b:8e:19:cb:dc:8f:47:e6:ee:94:81: fb:0a:67:c7:69:25:79:d7:86:2e:b1:10:6f:74:c9: b2:89:77:c3:3e:5f:65:ee:f6:45:89:a8:71:0f:ff: a0:02:a3:41:91:f9:f0:c2:52:0d:27:39:55:a4:64: eb:7d:6b:df:40:d8:7f:ca:d7:0f:ce:37:8a:e9:c5: 3e:17:1d:f0:bb:2a:bd:8c:c3:3b:81:42:93:0a:f4: 98:21:82:4e:db:1d:80:b6:6f:0b:a1:20:20:9b:20: dd:18:ff:f7:ca:00:25:f6:00:58:43:d8:e9:d6:5f: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B5:17:27:CD:F5:FB:D4:F0:A8:CB:2A:6A:A7:BE:70:01:AB:52:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f9:5c:00:fc:74:2e:22:a2:ae:15:66:bb:5a:99:c9:b9:01: 6f:71:c4:74:7d:af:95:cc:56:51:a9:80:fa:e0:6c:41:7d:29: 75:de:81:4d:62:eb:b3:8c:6e:90:80:82:84:50:5c:d3:a6:1e: c2:29:61:7b:62:c2:a1:5b:37:74:db:d9:ed:d2:c4:7a:8d:a2: e6:b5:ce:99:5f:24:5a:96:22:3a:51:14:56:a4:d8:42:d6:60: d6:82:3e:b1:bd:8a:f0:b5:d2:ec:94:a8:72:ea:aa:ad:1e:a2: 70:2f:40:d4:f1:dd:a9:f0:15:e5:da:57:91:49:61:54:b8:96: a6:5a:e7:27:e6:9b:fd:0b:5b:97:e7:a1:c8:5f:87:8c:f9:e9: 9f:0b:6f:fb:04:18:21:47:de:e8:47:9d:b5:3d:72:e4:56:55: e3:af:ca:2c:03:fb:9a:f3:a4:d2:78:b8:a4:b8:fe:c5:a5:c1: fb:79:ae:d7:40:3a:c5:04:e2:54:68:16:c9:7a:2d:c7:05:40: aa:b5:4e:a4:5d:b1:b8:7f:01:89:b1:fd:87:59:66:4f:fb:8d: 28:ed:ee:6c:94:09:82:41:45:77:1a:d3:03:2d:41:7f:7d:a8: 29:c2:59:3e:54:82:db:8e:32:ea:31:fd:fc:78:4b:34:16:17: 52:47:7d:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0CT6ZQl5By68aBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI1MTAwODEyMDAwM1oXDTI1MTAxMTEyMDAwMFowLzEtMCsGA1UEAxMk NjdjOTUxY2YtZDdjNy00Y2QyLTgwNDAtZDY3NDg3NWNmODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05hOeY4SEpz2tlUryFvG6B5Ic+a/ZAnjQb5/ 8nZaXQGSFA5J65I5zX1Nf64UVEhcbJyGuGfvCFHhPpGh0pU8Mlb140jObXH1cbgd WEO4+XYWVVn+LG50vjXp2kt7AAyCdFZYqHadJQDkBCWrEPt7oq91rUzmiewvb9Gk 3sER08uB3lAkpDQk3r1eG44Zy9yPR+bulIH7CmfHaSV514YusRBvdMmyiXfDPl9l 7vZFiahxD/+gAqNBkfnwwlINJzlVpGTrfWvfQNh/ytcPzjeK6cU+Fx3wuyq9jMM7 gUKTCvSYIYJO2x2Atm8LoSAgmyDdGP/3ygAl9gBYQ9jp1l92ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+1FyfN9fvU8KjLKmqnvnABq1KsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvYWYwMGRkOWMtYWM3ZC00 ZmQzLTg0YTEtZWE2ZjY2YmMwMDA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh+VwA/HQuIqKuFWa7WpnJ uQFvccR0fa+VzFZRqYD64GxBfSl13oFNYuuzjG6QgIKEUFzTph7CKWF7YsKhWzd0 29nt0sR6jaLmtc6ZXyRaliI6URRWpNhC1mDWgj6xvYrwtdLslKhy6qqtHqJwL0DU 8d2p8BXl2leRSWFUuJamWucn5pv9C1uX56HIX4eM+emfC2/7BBghR97oR521PXLk VlXjr8osA/ua86TSeLikuP7FpcH7ea7XQDrFBOJUaBbJei3HBUCqtU6kXbG4fwGJ sf2HWWZP+40o7e5slAmCQUV3GtMDLUF/fagpwlk+VILbjjLqMf38eEs0FhdSR32x -----END CERTIFICATE-----Generated at Wed Oct 8 17:27:50 2025 by rpki-client