$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: 9XVzi/h+iWTnR8+/BMtRygd/gbqRCWteQHLU6KEwWlY= Subject key identifier: 47:3D:9D:B9:7B:7F:E6:62:71:5A:82:90:B4:6A:80:33:55:05:5A:CD Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584BBE5DC210C5CAB0ABC095F400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D589C Signing time: Tue 04 Nov 2025 03:00:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Thu 06 Nov 2025 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 5TkrB+NVI1RF83tXfMITdG6vN8CqwjWgkDhXjfyoj14=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: 0PiVi4ajVqPH5G9JorXFbvTflDUiaJMUIzFPIQpY9NA=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: n8XgLhhUj5ndimev2mC5f9xJvPH0sQ83CPttcRhwDYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:5d:c2:10:c5:ca:b0:ab:c0:95:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 6 03:00:00 2025 GMT Subject: CN=f3c64bf0-8571-47fe-8904-79b39b3bd658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:78:78:f0:59:ea:ae:0c:0b:7e:7f:ca:cc: 21:71:59:c1:1d:3b:b5:0c:91:f9:45:25:62:65:29: e6:e9:71:09:8a:1f:36:b9:79:9f:8b:89:51:37:90: 88:2d:50:96:c3:69:a8:89:27:53:80:d8:af:26:e7: 0c:ae:cd:0b:0e:2b:27:5d:c7:f5:e7:07:5e:5b:cd: b4:cf:03:e6:ae:01:cd:96:6c:cb:cf:92:53:a4:bd: 0d:38:43:c8:93:4d:82:a1:77:a9:df:7d:b3:97:54: e8:92:04:01:6f:9c:3a:e4:a6:5a:47:8a:d4:c6:87: 2c:ad:90:aa:39:b6:d4:80:f8:73:a6:b2:10:e4:71: 14:79:3c:e3:04:68:24:6d:bd:7c:00:c0:2c:07:29: c4:94:08:5d:61:1a:17:9b:e5:68:8c:09:52:71:4f: 4e:ae:1b:7a:83:b6:da:a4:a8:69:ee:c3:08:08:b1: c6:ff:15:72:c6:fb:d1:7b:f7:6c:73:f7:ab:a3:66: 5c:60:5d:a5:7a:42:dc:61:81:12:34:87:a7:79:da: b8:da:55:b0:d4:ed:6c:1e:57:3f:8c:0b:20:5b:e9: 27:4e:55:bb:33:70:d5:d6:92:40:8e:ba:8c:ec:c2: 94:56:35:c1:b5:19:a9:26:8d:d0:1c:4e:f7:9a:4f: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:9D:B9:7B:7F:E6:62:71:5A:82:90:B4:6A:80:33:55:05:5A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1f:f4:da:cb:5b:1b:59:fa:d5:02:bf:83:d7:5e:be:df:15: 7d:27:b2:bd:36:bc:f1:8b:55:65:7d:d2:d4:4f:83:89:3f:da: 94:a2:56:af:b2:34:d7:16:88:ce:da:6d:49:40:20:0a:66:ec: a3:2e:37:7c:bb:25:03:a1:a3:28:a5:53:7e:3c:f3:04:75:f5: f9:6a:6c:17:3b:9b:51:9a:52:f2:47:24:d1:39:93:27:4a:5c: d4:49:5a:d8:3a:a4:7a:50:bc:4d:d2:56:5b:d2:5f:7a:e4:07: 25:af:c6:9d:0d:f0:5c:6f:10:ce:42:c0:3d:cd:3b:98:62:fc: 85:70:7c:19:02:86:03:61:ae:2b:99:13:d4:9d:9d:eb:9b:e0: 06:26:e0:d6:1f:05:32:0b:f8:ba:c2:e6:5f:b3:d4:9f:2a:4b: 3a:08:d3:a2:ad:c2:d4:70:7a:0c:6e:1b:a2:e6:56:bf:d0:f8: d1:23:e5:79:c8:86:91:51:82:a2:e7:af:8a:bd:d5:65:b6:8d: 90:12:09:83:30:29:90:44:cd:6d:70:2b:64:17:af:2b:2e:18: c5:54:f2:16:fc:08:97:99:68:bf:2c:78:3c:ce:07:55:97:57: 4c:1e:6e:43:10:a0:7c:b1:89:7f:c9:78:6c:b1:3d:45:06:25: a9:43:c6:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+XcIQxcqwq8CV9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTEwNDAzMDAwOVoXDTI1MTEwNjAzMDAwMFowLzEtMCsGA1UEAxMk ZjNjNjRiZjAtODU3MS00N2ZlLTg5MDQtNzliMzliM2JkNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC14ePBZ6q4MC35/yswhcVnBHTu1DJH5RSVi ZSnm6XEJih82uXmfi4lRN5CILVCWw2moiSdTgNivJucMrs0LDisnXcf15wdeW820 zwPmrgHNlmzLz5JTpL0NOEPIk02CoXep332zl1TokgQBb5w65KZaR4rUxocsrZCq ObbUgPhzprIQ5HEUeTzjBGgkbb18AMAsBynElAhdYRoXm+VojAlScU9Orht6g7ba pKhp7sMICLHG/xVyxvvRe/dsc/ero2ZcYF2lekLcYYESNIenedq42lWw1O1sHlc/ jAsgW+knTlW7M3DV1pJAjrqM7MKUVjXBtRmpJo3QHE73mk9uwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEc9nbl7f+ZicVqCkLRqgDNVBVrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGH/Tay1sbWfrVAr+D116+ 3xV9J7K9Nrzxi1VlfdLUT4OJP9qUolavsjTXFojO2m1JQCAKZuyjLjd8uyUDoaMo pVN+PPMEdfX5amwXO5tRmlLyRyTROZMnSlzUSVrYOqR6ULxN0lZb0l965Aclr8ad DfBcbxDOQsA9zTuYYvyFcHwZAoYDYa4rmRPUnZ3rm+AGJuDWHwUyC/i6wuZfs9Sf Kks6CNOircLUcHoMbhui5la/0PjRI+V5yIaRUYKi56+KvdVlto2QEgmDMCmQRM1t cCtkF68rLhjFVPIW/AiXmWi/LHg8zgdVl1dMHm5DEKB8sYl/yXhssT1FBiWpQ8bd -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:02 2025 by rpki-client