$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft File: af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft (raw, json) Hash identifier: GCBQyFxgri4pXTtMcYnh5nmyMIQuuGryfL9ZX/mCrGY= Subject key identifier: 31:3A:F7:EB:0C:01:3A:32:99:5D:7E:9C:AA:EE:BA:FA:9A:13:53:66 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584BB7F7F25F49B24E4A5DD74B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft Manifest number: 010D0C9F4328584073A827BBB999690E7E00A3CB Signing time: Sat 01 Nov 2025 20:00:08 +0000 Manifest this update: Sat 01 Nov 2025 20:00:08 +0000 Manifest next update: Mon 03 Nov 2025 20:00:00 +0000 Files and hashes: 1: 1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (hash: RS1yBEEkXgNFec56a6xAy4Twb0pLgX4vfiWlmpeoU5o=) 2: 51fde72b-c272-3d7a-83d9-5542508c0f35.roa (hash: ZOFBuf45D/jprxbz0ufRkL5Q4rjWpxaI2bGOTa3l5Gk=) 3: 897074be-6233-32df-a4ab-14bb263538b9.roa (hash: 31ZVGe2ROSQxZIsRE2RAxa3OL+cWFYDZSSeXOGlpaqY=) 4: af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl (hash: XAcgs4PmwW3LHyI652dXTAwbyZvpa1gZLZoO5py8d8Q=) 5: f9874a22-9a02-398f-86a6-217e95468149.roa (hash: N61TLzmhelYtg8du57aOzAO6UGDZnz5jZ8y8kKZykJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:f7:f2:5f:49:b2:4e:4a:5d:d7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Nov 1 20:00:08 2025 GMT Not After : Nov 3 20:00:00 2025 GMT Subject: CN=bf32b27c-4b9f-4b28-8e01-5af43226f7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:ed:9a:0d:f6:24:16:95:d5:01:08:3e:48: d8:1d:ed:03:82:cc:84:87:ad:ed:54:32:5d:b8:e5: f6:9c:a8:3d:4a:b5:49:7c:3e:e1:72:b8:85:b3:eb: 50:bd:99:ca:24:23:b0:a9:24:ed:40:c3:69:07:ae: c1:13:c1:9b:8c:8c:62:74:c7:ab:72:30:70:54:bc: 44:72:36:62:ae:ec:02:00:25:f9:6e:94:2e:b8:d6: 36:5f:52:ce:55:4b:b6:e0:40:b6:22:f2:4b:f8:1e: c1:98:3e:6a:a3:b4:84:d0:ab:d6:41:63:9e:47:af: 96:b3:b8:01:fe:bb:7f:68:27:b7:b3:17:27:0e:49: 11:83:b3:ea:4f:d7:a6:99:04:58:b8:d0:28:f7:90: a7:47:34:f9:a0:8c:04:36:69:44:18:71:dc:35:41: e6:5d:0a:88:95:32:07:94:3d:29:15:f9:99:44:3d: fe:f2:1e:53:9b:a4:61:ce:c6:c2:fd:e0:2d:8f:2c: f3:c3:1c:42:8d:dd:18:57:dc:7f:1e:27:2d:e4:5f: 8a:0e:82:fc:93:fb:b1:e0:21:90:81:6c:73:87:20: 77:82:ce:7f:37:8a:19:eb:2b:44:88:5e:86:39:7f: 5d:f2:e8:c8:e0:54:f4:24:4f:6d:88:1b:25:ec:1f: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:F7:EB:0C:01:3A:32:99:5D:7E:9C:AA:EE:BA:FA:9A:13:53:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:24:69:ab:84:a6:bf:48:e4:39:7e:b8:04:a6:6a:23:f3:7d: d5:18:26:97:a4:4b:70:7b:ec:d8:97:30:65:70:85:8c:b4:88: 72:1f:74:79:d2:5d:ea:ac:af:96:d9:92:6d:c9:5c:e6:c0:f6: a7:fc:50:0d:5d:43:ac:f9:bd:f9:84:b5:4e:ef:6a:39:a8:a8: 7d:52:c0:28:9c:93:6b:9c:7a:c8:a2:06:0e:f9:12:95:10:a4: bb:81:27:1c:90:18:3e:42:18:56:07:1d:08:8f:6a:0d:ca:5d: 8a:4f:ec:32:15:e6:0f:87:4e:2b:95:71:7e:c4:dc:46:2a:95: c3:a7:a1:38:3c:85:36:91:ce:31:62:19:97:ef:ac:4a:b1:fe: 13:df:b4:9a:b6:5f:f9:7d:ab:06:78:63:3b:ec:94:08:88:9c: b2:7d:57:58:b5:d5:ca:0e:27:7f:ac:6a:2c:df:48:f5:24:a6: 78:2c:d5:ae:ff:7b:f8:12:52:9b:b7:9a:e7:b8:97:5b:8b:50: f0:a2:50:79:6c:2d:c7:32:a9:64:1b:a3:4b:12:73:a2:09:87: c1:aa:18:16:80:c8:6b:77:e5:de:f4:4a:99:e5:1e:16:30:99: 87:e1:fd:df:d9:9e:1b:f3:93:64:3c:56:39:c9:a6:16:40:2d: e1:3c:7b:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu39/JfSbJOSl3XS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI1MTEwMTIwMDAwOFoXDTI1MTEwMzIwMDAwMFowLzEtMCsGA1UEAxMk YmYzMmIyN2MtNGI5Zi00YjI4LThlMDEtNWFmNDMyMjZmN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKPtmg32JBaV1QEIPkjYHe0DgsyEh63tVDJd uOX2nKg9SrVJfD7hcriFs+tQvZnKJCOwqSTtQMNpB67BE8GbjIxidMercjBwVLxE cjZiruwCACX5bpQuuNY2X1LOVUu24EC2IvJL+B7BmD5qo7SE0KvWQWOeR6+Ws7gB /rt/aCe3sxcnDkkRg7PqT9emmQRYuNAo95CnRzT5oIwENmlEGHHcNUHmXQqIlTIH lD0pFfmZRD3+8h5Tm6RhzsbC/eAtjyzzwxxCjd0YV9x/Hict5F+KDoL8k/ux4CGQ gWxzhyB3gs5/N4oZ6ytEiF6GOX9d8ujI4FT0JE9tiBsl7B+8PQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDE69+sMAToymV1+nKruuvqaE1NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvYWY0YmM1YzMtOWVmNC00 ZGEzLTlmY2YtNGVjNmRhYmJmYmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4JGmrhKa/SOQ5frgEpmoj 833VGCaXpEtwe+zYlzBlcIWMtIhyH3R50l3qrK+W2ZJtyVzmwPan/FANXUOs+b35 hLVO72o5qKh9UsAonJNrnHrIogYO+RKVEKS7gScckBg+QhhWBx0Ij2oNyl2KT+wy FeYPh04rlXF+xNxGKpXDp6E4PIU2kc4xYhmX76xKsf4T37Satl/5fasGeGM77JQI iJyyfVdYtdXKDid/rGos30j1JKZ4LNWu/3v4ElKbt5rnuJdbi1DwolB5bC3HMqlk G6NLEnOiCYfBqhgWgMhrd+Xe9EqZ5R4WMJmH4f3f2Z4b85NkPFY5yaYWQC3hPHvx -----END CERTIFICATE-----Generated at Sat Nov 1 21:43:07 2025 by rpki-client