$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft File: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft (raw, json) Hash identifier: 41dx2Kw2w8G0rXNhmsJqP94akUV+36TSBZ5pHaXuOuQ= Subject key identifier: D2:9C:91:58:48:67:5E:9E:A7:89:F0:7D:C0:31:E2:DB:1C:AD:FC:A6 Authority key identifier: ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 Certificate issuer: /CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Certificate serial: 010D0C9F4328584BBCDA96ED2D792EEDA7695180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft Manifest number: 010D0C9F432858496D107E71F8B7FEC54AB371D8 Signing time: Mon 03 Nov 2025 14:00:03 +0000 Manifest this update: Mon 03 Nov 2025 14:00:03 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl (hash: enDCeftfVNq3VJzzEbeQCx+/URlvYPqrPtFOQtnNKHM=) 2: ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa (hash: BvkRl/5/ltY4EicWIYM2VAdTkJm2j5CPjShZjYuHFF0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:96:ed:2d:79:2e:ed:a7:69:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Validity Not Before: Nov 3 14:00:03 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=98985ca4-101b-4aeb-8eb5-d8525570a40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:c6:15:30:a1:44:5c:d0:bb:88:83:54:71: 00:ee:66:2b:08:2c:1d:22:86:bd:ef:f5:65:d3:0e: 31:6f:5e:6e:39:b4:48:9a:a5:8a:e0:28:05:01:07: b7:30:a8:00:6d:14:9e:66:4c:da:13:41:d2:7e:df: ea:ca:b8:44:e2:76:13:2c:54:5e:de:d3:48:71:c6: 8a:2c:13:b6:6b:5b:1d:78:22:16:a5:3d:38:d2:e4: 82:91:88:e7:ed:8b:5d:d8:a9:4e:e8:63:6d:7d:ed: d6:78:bb:c2:72:25:d2:50:9d:03:d5:76:67:8e:9b: 8b:fa:ea:80:ef:49:cd:d0:9f:ab:80:1b:36:51:da: 33:7b:25:3c:2c:de:95:cf:f9:20:67:e2:d2:e4:5d: a0:03:90:a5:27:d6:ba:fc:55:88:11:99:2b:60:c6: ed:08:c4:04:55:9c:c8:4b:b2:42:12:cd:84:57:12: 49:c4:02:d8:b0:f1:4b:5a:43:da:53:e8:cc:ae:71: 35:e6:86:03:9b:45:a2:9e:3c:4e:77:c4:7e:0f:f7: 28:8e:5d:a5:54:51:f6:b0:0d:ab:f2:3a:e1:c8:c9: cf:51:12:e5:d3:c8:b7:f8:0a:0a:f1:1c:97:a7:2e: 71:8d:31:89:f0:cf:fb:52:6a:c4:76:44:1f:6d:a1: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:91:58:48:67:5E:9E:A7:89:F0:7D:C0:31:E2:DB:1C:AD:FC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl X509v3 Authority Key Identifier: keyid:ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9b:08:ff:41:f5:9e:9a:8e:a3:27:38:2d:5d:c7:ab:ea:d6: bf:76:a2:89:78:48:55:15:a5:86:33:66:87:d7:33:12:21:35: 00:48:63:39:79:2d:56:cc:83:1d:da:41:1d:2d:95:dc:cb:65: ec:31:4f:20:98:66:c8:17:36:65:ed:3c:ef:8c:c7:5c:a4:f6: ca:d2:1d:f1:67:dd:09:28:e4:5d:02:e6:52:90:fd:89:85:2e: 2c:ac:eb:85:c5:4e:f9:d7:25:6c:a4:43:cc:1d:0e:5a:54:9b: 79:5c:92:72:a2:4e:d5:eb:89:75:17:09:41:87:0f:3f:88:a5: 94:75:e8:27:93:6a:34:6b:e6:74:fe:7f:7e:a3:a1:31:62:b3: 54:3b:72:c3:9d:d8:ac:48:0f:5c:fd:d5:f1:99:ec:53:73:b1: 16:03:17:f2:06:cb:4b:f6:e5:e4:db:30:64:f5:89:54:1b:19: 0b:de:fc:ac:81:27:97:65:ec:67:52:b0:52:e1:e8:6a:31:40: 39:05:17:20:7c:97:00:bd:56:09:d0:0b:8c:32:b6:4b:61:ba: 99:42:70:a0:c7:d2:23:26:5f:9a:bc:92:86:69:b5:7c:00:51: df:e9:d3:4b:f0:a9:8b:92:83:4a:c2:b3:5a:f9:bf:75:02:18: 8b:d2:dc:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu82pbtLXku7adpUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmOWM2Y2ItODMwNy00MGNhLTk0ODEtM2UwZThjMDZk ZTMyMB4XDTI1MTEwMzE0MDAwM1oXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk OTg5ODVjYTQtMTAxYi00YWViLThlYjUtZDg1MjU1NzBhNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVrGFTChRFzQu4iDVHEA7mYrCCwdIoa97/Vl 0w4xb15uObRImqWK4CgFAQe3MKgAbRSeZkzaE0HSft/qyrhE4nYTLFRe3tNIccaK LBO2a1sdeCIWpT040uSCkYjn7Ytd2KlO6GNtfe3WeLvCciXSUJ0D1XZnjpuL+uqA 70nN0J+rgBs2UdozeyU8LN6Vz/kgZ+LS5F2gA5ClJ9a6/FWIEZkrYMbtCMQEVZzI S7JCEs2EVxJJxALYsPFLWkPaU+jMrnE15oYDm0WinjxOd8R+D/cojl2lVFH2sA2r 8jrhyMnPURLl08i3+AoK8RyXpy5xjTGJ8M/7UmrEdkQfbaGEdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNKckVhIZ16ep4nwfcAx4tscrfymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5 YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBlOGMwNmRlMzIvNGFmOWM2Y2ItODMwNy00 MGNhLTk0ODEtM2UwZThjMDZkZTMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFmOWM2Y2ItODMwNy00MGNhLTk0 ODEtM2UwZThjMDZkZTMyLzRhZjljNmNiLTgzMDctNDBjYS05NDgxLTNlMGU4YzA2 ZGUzMi5jcmwwHwYDVR0jBBgwFoAU7SlabvH8awBkSNZBHq5Xkv70uOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBl OGMwNmRlMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmmwj/QfWemo6jJzgtXcer 6ta/dqKJeEhVFaWGM2aH1zMSITUASGM5eS1WzIMd2kEdLZXcy2XsMU8gmGbIFzZl 7TzvjMdcpPbK0h3xZ90JKORdAuZSkP2JhS4srOuFxU751yVspEPMHQ5aVJt5XJJy ok7V64l1FwlBhw8/iKWUdegnk2o0a+Z0/n9+o6ExYrNUO3LDndisSA9c/dXxmexT c7EWAxfyBstL9uXk2zBk9YlUGxkL3vysgSeXZexnUrBS4ehqMUA5BRcgfJcAvVYJ 0AuMMrZLYbqZQnCgx9IjJl+avJKGabV8AFHf6dNL8KmLkoNKwrNa+b91AhiL0tz1 -----END CERTIFICATE-----Generated at Tue Nov 4 09:27:39 2025 by rpki-client