$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: NBdpA+k8vJIwli5Cg68D3xLHI1OyQVS62ZdJtivXQ10= Subject key identifier: 2E:B9:EA:4E:2D:9D:62:3D:32:45:7B:13:DE:0C:72:B6:B1:F5:E2:09 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584B974823DFE5819B268D13C6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D588D Signing time: Tue 21 Oct 2025 03:00:03 +0000 Manifest this update: Tue 21 Oct 2025 03:00:03 +0000 Manifest next update: Thu 23 Oct 2025 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 2hxqpUuNq6fWEWYJ97c67HCbFgTF0gz9fNjCSTcNm8I=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: z42YEmr6VzxQ0PkWCIp9c0hFXaZE7mms2gWo3YZTSUI=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: n8XgLhhUj5ndimev2mC5f9xJvPH0sQ83CPttcRhwDYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:48:23:df:e5:81:9b:26:8d:13:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Oct 21 03:00:03 2025 GMT Not After : Oct 23 03:00:00 2025 GMT Subject: CN=b357f3fc-c540-4827-bf81-2c5e6198e087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:ee:c4:fe:61:3b:e6:d7:fb:f8:bb:0c:69: e3:d8:a5:9f:fc:50:00:29:8f:2e:fc:6e:35:06:9a: 41:69:cc:18:d2:aa:8c:d2:00:be:c0:6e:52:11:7a: 67:54:43:50:63:b2:89:c6:37:71:7b:c9:a4:40:0f: bd:e9:45:d5:c8:29:f5:1d:e4:9d:5e:68:f7:22:0a: 3b:a4:94:d5:85:47:dd:8f:73:4e:71:29:33:11:22: 75:61:0f:60:7f:5f:23:39:f0:46:45:b8:f3:46:7d: 69:10:3a:ad:05:c9:bf:9f:04:1a:65:5d:f3:72:79: 2c:88:16:94:f5:11:2c:03:5a:c3:44:eb:6f:4e:79: 35:ac:17:4f:df:e8:b6:7e:9d:63:23:8c:4c:87:c6: af:7b:95:11:0a:2f:cf:3d:d0:3e:f9:06:e5:0c:83: 9e:92:dc:bd:a9:83:32:44:08:17:52:f8:94:54:1d: 9f:c5:ed:0c:33:24:2c:21:4a:42:54:78:31:ce:7e: c1:73:5e:3c:83:be:c1:67:e6:68:11:ad:6a:31:25: d0:3d:f5:76:12:77:c8:16:dc:03:70:66:78:7b:3a: 2f:18:25:3a:11:bb:4d:2e:9a:14:6c:a1:e5:23:5d: 7a:35:d3:9f:65:5d:0f:8d:f2:c0:df:b6:0e:0c:12: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B9:EA:4E:2D:9D:62:3D:32:45:7B:13:DE:0C:72:B6:B1:F5:E2:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:44:72:bb:37:f4:19:42:03:2f:4e:ec:ca:8e:7a:ef:12:98: 3d:a8:94:bd:31:2c:06:3c:45:55:08:c0:4e:eb:36:ef:2c:c6: 76:09:36:ce:1a:45:0e:48:95:2f:94:1f:a5:80:c6:4b:dc:ba: d1:0a:65:e7:69:e7:6e:e8:bb:e2:12:c8:5d:b1:a7:96:53:5d: 04:bb:51:7f:2d:44:8b:99:9e:cd:a0:ec:84:2c:92:21:37:9d: 8b:45:b5:d5:77:ca:63:5a:c8:21:05:2b:69:fa:29:c5:91:11: 2d:22:bf:e1:50:60:2e:bd:6b:7e:68:f4:60:b7:e9:41:d8:6b: 95:35:7a:78:12:8b:ef:8e:a4:5f:6e:0b:2f:f3:3e:0d:36:d1: 47:4d:33:b7:95:9e:ce:bb:78:05:a8:af:4b:bf:85:00:e9:41: 40:25:af:35:12:67:0d:9b:8c:01:5b:2a:3a:dd:1e:c3:10:05: bf:5d:18:4f:15:7b:be:3e:8d:cb:d6:11:13:df:5c:53:79:a3: 81:7e:6a:ad:bd:98:ec:da:9d:92:eb:50:08:1f:5d:3c:c7:f6: 61:dd:7b:62:86:39:6a:e0:8d:dc:6e:64:a1:f5:b9:9e:2b:12: ee:a1:49:99:a0:54:81:7f:99:fc:85:a6:fe:a7:3d:25:bc:9a: d6:cd:bf:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXSCPf5YGbJo0TxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTAyMTAzMDAwM1oXDTI1MTAyMzAzMDAwMFowLzEtMCsGA1UEAxMk YjM1N2YzZmMtYzU0MC00ODI3LWJmODEtMmM1ZTYxOThlMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXuxP5hO+bX+/i7DGnj2KWf/FAAKY8u/G41 BppBacwY0qqM0gC+wG5SEXpnVENQY7KJxjdxe8mkQA+96UXVyCn1HeSdXmj3Igo7 pJTVhUfdj3NOcSkzESJ1YQ9gf18jOfBGRbjzRn1pEDqtBcm/nwQaZV3zcnksiBaU 9REsA1rDROtvTnk1rBdP3+i2fp1jI4xMh8ave5URCi/PPdA++QblDIOekty9qYMy RAgXUviUVB2fxe0MMyQsIUpCVHgxzn7Bc148g77BZ+ZoEa1qMSXQPfV2EnfIFtwD cGZ4ezovGCU6EbtNLpoUbKHlI116NdOfZV0PjfLA37YODBLQzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC656k4tnWI9MkV7E94Mcrax9eIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqRHK7N/QZQgMvTuzKjnrv Epg9qJS9MSwGPEVVCMBO6zbvLMZ2CTbOGkUOSJUvlB+lgMZL3LrRCmXnaedu6Lvi EshdsaeWU10Eu1F/LUSLmZ7NoOyELJIhN52LRbXVd8pjWsghBStp+inFkREtIr/h UGAuvWt+aPRgt+lB2GuVNXp4EovvjqRfbgsv8z4NNtFHTTO3lZ7Ou3gFqK9Lv4UA 6UFAJa81EmcNm4wBWyo63R7DEAW/XRhPFXu+Po3L1hET31xTeaOBfmqtvZjs2p2S 61AIH108x/Zh3Xtihjlq4I3cbmSh9bmeKxLuoUmZoFSBf5n8hab+pz0lvJrWzb+u -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:11 2025 by rpki-client