$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: NU2QIGNOWGeIM2ankZiRdZvCwilqKK0/JYr/jols1Vc= Subject key identifier: 0E:29:76:E1:D1:BC:E6:FB:11:20:7B:62:F4:EE:1C:0E:6D:F4:54:75 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584BA98B5D700CBAEDA94F8FA900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87BC8 Signing time: Mon 27 Oct 2025 16:00:03 +0000 Manifest this update: Mon 27 Oct 2025 16:00:03 +0000 Manifest next update: Wed 29 Oct 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: BatwIkSKShPBkamiwdeRUxESP9+r/m7uasVZxsBGuIo=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: LI+nhJMmHTO7DTLu0ucgScs9s9W3AZe+f3njSgEn0Us=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:8b:5d:70:0c:ba:ed:a9:4f:8f:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Oct 27 16:00:03 2025 GMT Not After : Oct 29 16:00:00 2025 GMT Subject: CN=f6b65071-5925-45a6-92bb-45eb43f630d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:fa:91:14:38:ad:16:0a:cd:6f:29:df:01: 82:4f:50:a6:13:49:19:a1:03:76:1d:17:b4:55:70: 15:d9:88:5e:ce:87:ad:1a:f5:04:3e:fe:95:e6:18: f5:a1:a9:0f:59:1b:75:43:a8:a3:60:0d:a2:f1:1a: 91:84:e5:de:75:46:42:41:58:0a:ec:c2:7a:38:4c: fa:0d:42:64:8f:1d:bd:92:8c:5f:e0:45:17:3d:6f: e2:e3:71:f8:d8:6f:5e:68:a4:fb:7f:b8:a1:98:68: 92:7b:3e:29:c8:b9:a6:e7:4c:ff:fb:26:71:e8:70: b5:4d:8f:f4:ee:f1:33:2d:73:08:a5:98:9e:13:3d: 0c:3c:3a:2d:ab:57:4d:74:8d:c9:74:04:b7:0e:97: 38:83:d5:2b:2e:00:ab:9b:f0:16:8d:55:a0:89:0e: d1:0d:95:36:95:8f:89:c5:d0:f2:b4:bb:b2:76:0d: c6:8a:7c:d4:ed:4d:65:07:00:69:97:dc:b2:a7:71: ec:2b:31:fe:9a:d3:75:0c:da:f7:c7:cb:1d:c2:96: 59:3a:47:f5:fc:bf:1d:80:78:b7:ab:6b:b4:ec:8b: 39:27:0f:b6:e3:a7:07:22:59:27:3c:61:34:33:a4: 1f:86:24:19:af:71:7c:fa:fc:4c:53:57:65:23:88: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:76:E1:D1:BC:E6:FB:11:20:7B:62:F4:EE:1C:0E:6D:F4:54:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:67:55:b9:c6:a2:d7:f4:67:e9:7c:a6:41:bc:a8:54:5c:b8: 49:c2:57:b4:c4:76:32:1c:32:25:d2:77:52:53:97:a0:79:f8: 8a:a5:10:70:6d:ef:be:e9:c9:b4:fb:b1:aa:a1:17:3c:a5:a2: 8c:89:8f:69:86:c0:14:c8:18:9b:9d:7f:3c:4a:d9:58:ae:8e: f3:b4:35:7a:92:60:35:79:e1:6c:37:98:c3:68:4f:4f:88:de: 5a:51:9e:47:97:bc:d8:a7:3d:2f:5b:73:64:3c:c9:7f:38:97: bb:8f:20:2b:5c:27:47:7b:e3:53:3f:56:d1:f1:43:ec:b4:66: 9b:39:62:1c:0a:6b:bb:7e:2b:94:a8:81:73:40:fb:98:71:14: ce:ca:e5:96:38:52:fb:38:51:2f:65:31:d0:55:e6:cc:19:a3: 96:5e:4b:e6:48:9a:96:c6:da:bf:8e:f8:a0:73:56:23:6d:14: 49:2e:3c:56:c7:ae:76:5f:7b:17:23:88:2a:a0:89:b2:84:b8: 13:d3:de:54:11:db:1c:ff:5e:be:6b:a6:5d:cf:c9:5c:76:d6: 80:92:60:85:5a:ea:bd:06:4d:dd:de:4f:21:01:d5:78:2d:09: ba:e0:c6:ad:ae:b9:e9:9d:55:ec:9c:8d:df:ce:7c:67:5d:27: dd:89:56:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupi11wDLrtqU+PqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MTAyNzE2MDAwM1oXDTI1MTAyOTE2MDAwMFowLzEtMCsGA1UEAxMk ZjZiNjUwNzEtNTkyNS00NWE2LTkyYmItNDVlYjQzZjYzMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT/6kRQ4rRYKzW8p3wGCT1CmE0kZoQN2HRe0 VXAV2YhezoetGvUEPv6V5hj1oakPWRt1Q6ijYA2i8RqRhOXedUZCQVgK7MJ6OEz6 DUJkjx29koxf4EUXPW/i43H42G9eaKT7f7ihmGiSez4pyLmm50z/+yZx6HC1TY/0 7vEzLXMIpZieEz0MPDotq1dNdI3JdAS3Dpc4g9UrLgCrm/AWjVWgiQ7RDZU2lY+J xdDytLuydg3GinzU7U1lBwBpl9yyp3HsKzH+mtN1DNr3x8sdwpZZOkf1/L8dgHi3 q2u07Is5Jw+246cHIlknPGE0M6QfhiQZr3F8+vxMU1dlI4i0tQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4pduHRvOb7ESB7YvTuHA5t9FR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEZ1W5xqLX9GfpfKZBvKhU XLhJwle0xHYyHDIl0ndSU5egefiKpRBwbe++6cm0+7GqoRc8paKMiY9phsAUyBib nX88StlYro7ztDV6kmA1eeFsN5jDaE9PiN5aUZ5Hl7zYpz0vW3NkPMl/OJe7jyAr XCdHe+NTP1bR8UPstGabOWIcCmu7fiuUqIFzQPuYcRTOyuWWOFL7OFEvZTHQVebM GaOWXkvmSJqWxtq/jvigc1YjbRRJLjxWx652X3sXI4gqoImyhLgT095UEdsc/16+ a6Zdz8lcdtaAkmCFWuq9Bk3d3k8hAdV4LQm64MatrrnpnVXsnI3fznxnXSfdiVbi -----END CERTIFICATE-----Generated at Tue Oct 28 03:13:07 2025 by rpki-client