$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: Ol+KEFLBJ+UtXZ/Z5uN+CytLXYVIIm65X0wrUCwZ66A= Subject key identifier: AD:DA:C1:C6:D1:E0:C3:2A:30:50:B2:24:55:84:D8:98:96:40:AC:F6 Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F4328584B961E66EDBF8CA82AEEF6F208 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AEC7 Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: FsVJGnUd0tr7a3Li2xY1E87Pm3cIuxZgwyrXWHGhdGo=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: AJGULEmvURCY3dYBzg+/qTRCcMtJfFBXY2beAxHyILA=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: eXpR8T3Ea2iC5g/xvaz9k7aqAWFYfKxQWfUmk1B5Ujc=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: aSjx6yfR6K6b7Et3vDqsOFrOjKpxv49wheHX1hxIYj8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:66:ed:bf:8c:a8:2a:ee:f6:f2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=1b71a3b6-1488-463f-b752-7b6e886d62f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:a3:b7:25:41:d9:1a:95:78:9b:b0:70:2c: 9a:1b:5d:e0:bf:25:be:c7:34:29:6c:4d:2a:33:9a: af:02:5c:6c:70:d1:33:66:ea:21:a7:0b:4e:17:b6: 41:78:2f:06:34:e3:33:d8:6b:2c:5a:1e:eb:24:aa: 00:5a:56:dd:01:13:da:df:52:eb:d3:cb:0c:fc:45: b6:c2:4c:96:bd:dc:fb:4c:e1:02:37:5a:b4:bb:d4: b5:9e:0a:07:44:7b:37:a8:db:24:ba:ed:b5:18:e3: 0b:90:c9:38:af:fc:46:16:d8:39:2c:88:f8:a7:4c: a1:89:22:01:64:2e:67:fb:94:9a:13:0e:a6:e4:7a: a8:82:9a:45:cc:30:8b:c8:0f:2a:68:0f:ca:a9:eb: 7e:c1:6f:69:d4:60:f0:b5:27:e8:a2:1e:03:b4:32: f6:2e:07:b2:bb:86:79:bd:eb:ff:1f:aa:e2:55:f3: 66:30:b1:8d:7d:9b:2a:2c:54:bd:91:c4:53:e8:36: 17:fd:3e:41:8e:43:a2:4a:21:5b:c6:31:a3:1c:6b: 32:c1:13:2c:7e:94:33:5f:db:8e:dc:6e:81:4c:c7: 73:b7:2e:c9:ed:65:66:6f:9d:c4:52:89:0a:ee:79: 4c:ff:86:94:6c:54:d7:ef:d9:ac:fa:cd:0f:b1:50: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:C1:C6:D1:E0:C3:2A:30:50:B2:24:55:84:D8:98:96:40:AC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:40:11:29:d7:ff:d3:3e:55:3c:47:0c:91:dc:2b:26:ce:35: be:d1:06:c8:2d:77:40:dc:6a:93:97:4d:36:fa:3c:01:eb:92: b7:13:30:55:31:35:66:73:68:ad:e7:e7:c4:62:1d:03:1a:92: 01:db:c0:89:3e:c5:69:2c:e4:6f:23:9c:9b:21:6a:32:1a:32: 8f:91:33:04:db:fd:3b:67:34:f5:bf:0b:5c:1e:d5:77:dd:94: cc:da:0d:9d:9a:3a:d0:12:a7:44:20:92:36:ac:02:af:6c:0e: a4:cf:1f:3f:06:4f:d7:4f:79:1e:f6:a4:d8:00:ac:0e:80:1e: a5:1d:aa:4f:9e:7b:9d:87:53:1e:2b:2a:12:35:97:ee:0e:eb: ac:e1:e6:c2:cd:87:6b:a4:b9:85:60:7f:cb:a0:2b:27:d6:88: 3f:1c:6d:0f:cd:66:99:0a:8a:87:5e:49:a5:f9:c7:26:2b:71: 48:16:ad:54:2d:65:20:dc:9e:07:f7:d8:27:c3:e5:54:24:9c: 64:41:99:be:b5:33:ee:89:33:13:62:ac:8e:03:7c:ff:b1:03: a4:60:57:9b:b5:9b:e7:10:01:48:46:84:cf:a3:43:f2:2e:3a: ec:2d:6c:1f:08:48:c9:db:40:b6:1e:93:14:e1:43:24:10:5a: b6:01:41:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmbtv4yoKu728ggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk MWI3MWEzYjYtMTQ4OC00NjNmLWI3NTItN2I2ZTg4NmQ2MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0najtyVB2RqVeJuwcCyaG13gvyW+xzQpbE0q M5qvAlxscNEzZuohpwtOF7ZBeC8GNOMz2GssWh7rJKoAWlbdARPa31Lr08sM/EW2 wkyWvdz7TOECN1q0u9S1ngoHRHs3qNskuu21GOMLkMk4r/xGFtg5LIj4p0yhiSIB ZC5n+5SaEw6m5HqogppFzDCLyA8qaA/Kqet+wW9p1GDwtSfooh4DtDL2Lgeyu4Z5 vev/H6riVfNmMLGNfZsqLFS9kcRT6DYX/T5BjkOiSiFbxjGjHGsywRMsfpQzX9uO 3G6BTMdzty7J7WVmb53EUokK7nlM/4aUbFTX79ms+s0PsVCZ+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK3awcbR4MMqMFCyJFWE2JiWQKz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmQBEp1//TPlU8RwyR3Csm zjW+0QbILXdA3GqTl002+jwB65K3EzBVMTVmc2it5+fEYh0DGpIB28CJPsVpLORv I5ybIWoyGjKPkTME2/07ZzT1vwtcHtV33ZTM2g2dmjrQEqdEIJI2rAKvbA6kzx8/ Bk/XT3ke9qTYAKwOgB6lHapPnnudh1MeKyoSNZfuDuus4ebCzYdrpLmFYH/LoCsn 1og/HG0PzWaZCoqHXkml+ccmK3FIFq1ULWUg3J4H99gnw+VUJJxkQZm+tTPuiTMT YqyOA3z/sQOkYFebtZvnEAFIRoTPo0PyLjrsLWwfCEjJ20C2HpMU4UMkEFq2AUGp -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:48 2025 by rpki-client