$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: g6lBTP2gZ+Mxd+jRIVuAbz8rtC6XuqSoqe0qQ/KMkJI= Subject key identifier: DE:7A:99:3A:D0:DF:09:6D:5F:60:84:72:5A:65:5F:C0:74:B8:CF:E0 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584B945FAD2A40C41E8822387980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E862BA Signing time: Mon 20 Oct 2025 02:00:03 +0000 Manifest this update: Mon 20 Oct 2025 02:00:03 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 09762465-b2e6-360a-b0d4-36522e5d15ce.roa (hash: WIoPhCylMkwm1xIod4uKpMqxsTDB8m3bQ4AExI/DVzY=) 2: 67048364-819f-3191-853f-4269ffe18a99.roa (hash: kE2JsJn9dIcrutRZQ7oARLYUZDivF1Ie8tTj7ChrFl8=) 3: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: +j7Xx9qEGvZ9EVsMuN5y0DzHEGkA8eQaS1gHgL+7Pbo=) 4: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: XnlT85LG0knFQzv10+F3wCZBpQBmqqwhJV2yL69UCY8=) 5: e6d28505-b7fb-390f-8e44-e0df401bef2e.roa (hash: CYqci/hsr4c5NQ3V/osfajIVMDimjo93UjiIYEaXakk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:5f:ad:2a:40:c4:1e:88:22:38:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Oct 20 02:00:03 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=f0d6387b-9d24-4a4d-867f-d66ee1339c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:56:97:7b:53:3d:89:47:8e:fc:24:cd:d2: f9:e6:6d:68:be:ee:6a:0a:4c:7c:6b:3f:84:7e:9b: 76:4c:b4:dd:0f:a8:46:b9:0d:05:2f:22:d7:3d:1b: 32:79:a8:10:c7:73:15:5c:e8:55:d5:23:15:37:42: d9:47:ae:e8:b4:c6:0e:3b:10:48:2b:42:80:96:87: 4b:b3:b2:69:72:27:34:60:88:4a:c3:fd:6a:de:30: 7b:8e:f5:8f:9a:3e:5c:f6:28:b6:dd:2b:a7:4b:82: f1:ac:d7:cd:76:9a:1b:4b:4d:44:68:b8:9b:4a:39: 71:fd:0b:ae:da:06:e9:91:60:34:e6:5d:e1:d1:1b: 42:19:e5:31:e7:47:82:81:a1:58:b8:01:05:30:e9: 40:8b:22:27:16:f9:c5:ca:d7:bc:f2:94:ab:5d:46: 9b:40:1c:c4:ae:47:9e:ec:27:48:bb:04:59:29:81: f6:93:7b:40:2a:a7:55:0a:6f:33:f1:cd:0e:0e:84: ee:e3:0f:f2:16:2e:8d:48:e2:69:6c:21:55:1b:a4: e1:c7:bb:25:59:50:24:40:79:16:86:7e:50:27:2a: 08:b5:87:e4:60:e3:06:98:6e:b9:fb:6c:d1:a0:19: 91:7f:08:35:d2:f7:7d:b7:ee:28:9c:8d:50:03:8d: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:99:3A:D0:DF:09:6D:5F:60:84:72:5A:65:5F:C0:74:B8:CF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ea:b5:48:c8:34:72:d9:87:b4:16:aa:c8:bc:cc:f1:da:75: ad:3a:b6:27:7f:57:89:3b:b9:af:d3:0b:34:c5:60:c6:ad:74: b1:97:aa:b6:5d:5c:99:fb:88:3e:62:9f:c0:5c:20:aa:b8:0a: 35:ef:20:ae:4b:4c:50:2d:67:46:0e:78:38:84:92:e9:12:96: 48:74:c8:93:69:2d:21:d6:ae:91:81:49:ef:b0:dd:e6:17:ac: 05:67:03:ef:f3:d8:06:a8:fb:fd:a5:d3:ba:b4:4b:e0:ef:97: 28:20:cd:ba:60:de:6f:b5:fc:ce:3b:db:71:7a:b0:ff:5d:a3: 20:15:55:c5:9d:85:82:18:0c:7e:a4:f1:a0:fe:c7:60:0c:b4: 63:aa:db:0d:20:5e:cd:d7:87:75:42:af:48:96:07:ab:d3:65: 58:f5:8f:97:02:67:62:e0:29:68:1f:3e:24:7d:e5:93:2c:7b: 10:3a:cc:b4:97:c0:53:5a:e9:24:a1:8b:25:48:11:34:c8:47: ae:45:d6:ff:f8:03:d6:57:38:08:2a:38:22:b0:95:81:50:85: 94:79:c8:f4:cd:70:e6:6d:05:13:d9:9a:01:b1:98:7e:03:df: ee:97:24:b9:f6:0e:01:f9:68:ec:b5:20:30:a4:4f:99:c1:eb: df:f4:fc:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUX60qQMQeiCI4eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MTAyMDAyMDAwM1oXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk ZjBkNjM4N2ItOWQyNC00YTRkLTg2N2YtZDY2ZWUxMzM5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx41Wl3tTPYlHjvwkzdL55m1ovu5qCkx8az+E fpt2TLTdD6hGuQ0FLyLXPRsyeagQx3MVXOhV1SMVN0LZR67otMYOOxBIK0KAlodL s7Jpcic0YIhKw/1q3jB7jvWPmj5c9ii23SunS4LxrNfNdpobS01EaLibSjlx/Quu 2gbpkWA05l3h0RtCGeUx50eCgaFYuAEFMOlAiyInFvnFyte88pSrXUabQBzErkee 7CdIuwRZKYH2k3tAKqdVCm8z8c0ODoTu4w/yFi6NSOJpbCFVG6Thx7slWVAkQHkW hn5QJyoItYfkYOMGmG65+2zRoBmRfwg10vd9t+4onI1QA42/KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN56mTrQ3wltX2CEclplX8B0uM/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM6rVIyDRy2Ye0FqrIvMzx 2nWtOrYnf1eJO7mv0ws0xWDGrXSxl6q2XVyZ+4g+Yp/AXCCquAo17yCuS0xQLWdG Dng4hJLpEpZIdMiTaS0h1q6RgUnvsN3mF6wFZwPv89gGqPv9pdO6tEvg75coIM26 YN5vtfzOO9txerD/XaMgFVXFnYWCGAx+pPGg/sdgDLRjqtsNIF7N14d1Qq9Ilger 02VY9Y+XAmdi4CloHz4kfeWTLHsQOsy0l8BTWukkoYslSBE0yEeuRdb/+APWVzgI KjgisJWBUIWUecj0zXDmbQUT2ZoBsZh+A9/ulyS59g4B+WjstSAwpE+Zwevf9Pyf -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:19 2025 by rpki-client