$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: XMvKJdiANqPHC3rCHpupavRpOSHWGgLgAlOJWKKFbt0= Subject key identifier: B1:C5:5C:44:2E:86:3B:2A:8D:CE:0B:B0:04:C4:CE:87:06:C1:FF:48 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584B96B349B352EC633C48EA2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160844 Signing time: Mon 20 Oct 2025 22:00:09 +0000 Manifest this update: Mon 20 Oct 2025 22:00:09 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: xjfRruVuGyOeLzlPXRKUpTGxjIaZQCXQ5L1Fn2X+/bA=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: RB2552h8F58vpW55Hq0Ov9Ctbm/zeZLBaHMWRdvktpo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:b3:49:b3:52:ec:63:3c:48:ea:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Oct 20 22:00:09 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=942b45f9-1c5f-426c-b3cb-45e269b536b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:b1:b1:46:dc:49:1c:1a:a1:7c:b1:39:d8: 97:28:a2:bd:f7:2c:b2:2b:b7:b4:c3:db:d2:20:99: 36:6e:b3:ae:75:51:f8:39:ee:5c:c5:cc:a8:29:e5: b6:07:20:bc:c3:54:4e:d6:97:1c:9e:e5:4b:ac:48: 7e:de:49:94:dc:89:7e:c5:8c:66:d6:e8:dc:bc:7d: dd:62:56:06:c4:bb:75:c1:6a:04:fd:8f:90:bb:4b: 06:ea:e5:66:10:e5:74:38:44:97:5f:38:1d:01:5a: ba:a7:35:52:04:ba:66:65:7c:29:c5:94:f6:27:9b: 59:9e:30:ea:91:60:8c:80:5c:40:31:b0:19:f1:e8: 7d:80:fa:4b:02:9e:46:9a:e4:0d:fb:26:3d:8b:6f: 7e:00:95:73:cc:73:2d:04:31:ac:14:a2:e8:db:d3: a8:ba:ca:68:fd:3d:bd:7f:ad:bf:6a:d8:6f:9e:1e: bc:91:32:9c:4a:c2:83:58:c4:ce:9c:48:52:ec:ed: cc:75:b3:83:65:41:04:66:a9:8c:23:1f:f1:81:4d: aa:ee:64:7a:cf:cf:a1:e5:ad:7f:f8:03:a1:04:7b: 5c:94:9b:13:15:36:d4:ce:66:3e:e2:89:47:54:22: cf:c1:21:60:76:8c:c2:ff:f4:b5:6e:5f:76:a8:89: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C5:5C:44:2E:86:3B:2A:8D:CE:0B:B0:04:C4:CE:87:06:C1:FF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:64:8f:79:bd:dc:02:84:45:40:0f:9f:cc:29:fd:c5:40:4b: 88:fe:fa:45:f1:a0:79:58:fa:cd:38:67:f0:ff:19:cc:78:5d: 18:6e:a5:a5:78:aa:4c:0b:37:7c:ae:a5:20:2e:91:51:2c:31: 87:ab:e9:5f:cd:57:0c:bc:16:64:19:3f:69:be:32:45:2d:b3: 2a:e0:de:3d:fb:a5:09:ae:92:26:2f:59:99:7e:2c:42:0f:ca: 18:3c:0e:c2:7b:3e:6c:9c:dc:5d:53:7b:df:26:c7:0b:11:eb: d2:15:22:45:61:d6:7f:58:29:a5:94:30:01:98:fd:32:6f:bb: 2f:00:f5:7b:34:3f:92:0a:26:7e:d6:f7:e4:55:be:0f:d3:36: 1f:2d:57:43:ec:ca:88:a1:56:a8:ea:e5:04:c5:f7:eb:c9:9a: 4c:58:47:bc:90:55:df:61:d5:ce:4c:1a:f9:33:63:74:b4:98: f2:cc:36:77:7c:cc:d0:7a:2a:78:59:1f:71:2a:6e:2f:de:49: c2:1e:a1:69:90:43:d4:c8:26:de:ea:b7:8d:4e:76:52:00:2e: 9d:11:a1:da:c0:26:6a:17:bd:88:39:f5:8e:e3:2d:88:89:13: e2:9b:6f:37:a6:4e:87:9b:00:db:13:be:6d:21:aa:07:1d:d0: 00:08:68:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWs0mzUuxjPEjqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTAyMDIyMDAwOVoXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk OTQyYjQ1ZjktMWM1Zi00MjZjLWIzY2ItNDVlMjY5YjUzNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x6xsUbcSRwaoXyxOdiXKKK99yyyK7e0w9vS IJk2brOudVH4Oe5cxcyoKeW2ByC8w1RO1pccnuVLrEh+3kmU3Il+xYxm1ujcvH3d YlYGxLt1wWoE/Y+Qu0sG6uVmEOV0OESXXzgdAVq6pzVSBLpmZXwpxZT2J5tZnjDq kWCMgFxAMbAZ8eh9gPpLAp5GmuQN+yY9i29+AJVzzHMtBDGsFKLo29Oouspo/T29 f62/athvnh68kTKcSsKDWMTOnEhS7O3MdbODZUEEZqmMIx/xgU2q7mR6z8+h5a1/ +AOhBHtclJsTFTbUzmY+4olHVCLPwSFgdozC//S1bl92qInePwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHFXEQuhjsqjc4LsATEzocGwf9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1ZI95vdwChEVAD5/MKf3F QEuI/vpF8aB5WPrNOGfw/xnMeF0YbqWleKpMCzd8rqUgLpFRLDGHq+lfzVcMvBZk GT9pvjJFLbMq4N49+6UJrpImL1mZfixCD8oYPA7Cez5snNxdU3vfJscLEevSFSJF YdZ/WCmllDABmP0yb7svAPV7ND+SCiZ+1vfkVb4P0zYfLVdD7MqIoVao6uUExffr yZpMWEe8kFXfYdXOTBr5M2N0tJjyzDZ3fMzQeip4WR9xKm4v3knCHqFpkEPUyCbe 6reNTnZSAC6dEaHawCZqF72IOfWO4y2IiRPim283pk6HmwDbE75tIaoHHdAACGhy -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:52 2025 by rpki-client