$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: PIvNqXMOWNkhR03SisXCR9amCnKvR9VHYIHPAC6u1DU= Subject key identifier: 7B:4E:A0:BE:D1:C4:4A:63:AF:4E:C2:01:0B:67:6F:A6:D6:A1:72:BB Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584B960096ECBAC5B21EDDFC0AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87BC1 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Thu 23 Oct 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: 7pgpyZTTPBghkK1T8faSL1TMiZUAXN50xO1zrojgCWA=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: LI+nhJMmHTO7DTLu0ucgScs9s9W3AZe+f3njSgEn0Us=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:96:ec:ba:c5:b2:1e:dd:fc:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 23 16:00:00 2025 GMT Subject: CN=39425bb3-8cc7-4e0f-b093-51e076021cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:de:e2:6c:82:3a:f0:a4:ae:11:81:80:94: 79:79:df:6b:6d:36:05:d1:69:6b:3b:71:31:c3:62: ed:3a:a4:40:38:6b:59:6d:1f:37:1a:41:47:2b:c9: 6c:04:e6:17:db:d2:b0:83:de:b5:07:21:63:35:6d: 79:40:d8:8f:68:73:6e:d3:3c:65:f2:82:cf:07:04: ea:69:b1:f7:82:c6:3e:c0:40:da:00:02:17:54:38: c0:ca:31:20:8f:02:f6:1c:92:50:1b:52:5b:f2:05: 14:d5:2d:4e:b2:25:e9:24:36:68:5a:0b:f1:a9:ac: 0a:a5:33:23:6c:30:a6:64:39:2b:01:7f:e2:e4:42: a2:51:0e:64:a9:a6:1e:2e:56:39:2f:6e:d5:e7:99: ea:74:4e:09:c3:cc:b8:c5:45:a5:49:c4:66:0f:13: ad:21:7e:cd:9a:bc:f2:9d:ce:1a:62:80:4c:73:9d: ff:96:d5:35:40:bf:7d:b1:2a:49:69:04:f1:3f:46: d2:85:97:0c:03:56:ac:27:7d:4a:7c:cd:29:9f:54: ca:1c:52:8b:2b:07:fc:76:0e:af:71:ef:3b:97:9a: 88:3e:82:82:6d:96:f3:b8:86:3a:29:d7:d0:ff:db: 2a:8b:06:50:a5:23:62:e5:06:70:14:74:ac:d2:79: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:A0:BE:D1:C4:4A:63:AF:4E:C2:01:0B:67:6F:A6:D6:A1:72:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:3b:da:40:60:dd:98:70:91:31:34:07:58:d6:ad:65:36: 41:10:4a:4c:74:6d:e5:47:aa:7c:ec:3d:44:81:ab:20:de:32: 79:cf:96:a2:b8:e4:e6:0e:3d:89:15:46:6f:86:74:0b:09:77: 94:b5:60:8d:af:f2:d7:c4:60:de:5d:10:9e:09:21:5a:0e:f1: ce:eb:52:6e:40:c7:2f:86:5d:55:67:82:5d:47:32:82:7d:38: 7b:61:de:b8:84:f0:e8:54:21:c7:e3:ab:b7:e2:33:26:70:75: f5:98:5f:30:bb:fa:02:6d:11:31:1c:77:d2:3c:7a:e2:7b:e6: 6c:4d:f1:9b:d6:ab:37:90:e9:06:33:f3:35:69:4c:00:d0:d8: 23:da:d4:25:ab:80:7a:83:66:8c:10:22:d4:d9:b1:84:22:3b: 31:33:aa:08:80:4d:54:a2:a8:2a:82:4f:39:9d:5a:b2:e0:5b: a2:e0:27:d8:2c:c5:85:8a:26:f8:2f:8c:4c:4c:18:71:7b:0b: 49:92:67:2c:88:64:18:7d:5a:09:69:04:b4:09:c7:a1:3a:b7: 5a:d4:12:53:2e:96:fc:0f:31:61:01:7a:bf:a1:f5:d4:4a:46: 34:e2:3e:d8:6b:d9:11:88:91:9f:13:46:94:93:37:9c:57:64: a0:77:7e:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJbsusWyHt38CuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMzE2MDAwMFowLzEtMCsGA1UEAxMk Mzk0MjViYjMtOGNjNy00ZTBmLWIwOTMtNTFlMDc2MDIxY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp73e4myCOvCkrhGBgJR5ed9rbTYF0WlrO3Ex w2LtOqRAOGtZbR83GkFHK8lsBOYX29Kwg961ByFjNW15QNiPaHNu0zxl8oLPBwTq abH3gsY+wEDaAAIXVDjAyjEgjwL2HJJQG1Jb8gUU1S1OsiXpJDZoWgvxqawKpTMj bDCmZDkrAX/i5EKiUQ5kqaYeLlY5L27V55nqdE4Jw8y4xUWlScRmDxOtIX7Nmrzy nc4aYoBMc53/ltU1QL99sSpJaQTxP0bShZcMA1asJ31KfM0pn1TKHFKLKwf8dg6v ce87l5qIPoKCbZbzuIY6KdfQ/9sqiwZQpSNi5QZwFHSs0nl8cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHtOoL7RxEpjr07CAQtnb6bWoXK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnCzvaQGDdmHCRMTQHWNat ZTZBEEpMdG3lR6p87D1Egasg3jJ5z5aiuOTmDj2JFUZvhnQLCXeUtWCNr/LXxGDe XRCeCSFaDvHO61JuQMcvhl1VZ4JdRzKCfTh7Yd64hPDoVCHH46u34jMmcHX1mF8w u/oCbRExHHfSPHrie+ZsTfGb1qs3kOkGM/M1aUwA0Ngj2tQlq4B6g2aMECLU2bGE IjsxM6oIgE1Uoqgqgk85nVqy4Fui4CfYLMWFiib4L4xMTBhxewtJkmcsiGQYfVoJ aQS0CcehOrda1BJTLpb8DzFhAXq/ofXUSkY04j7Ya9kRiJGfE0aUkzecV2Sgd35+ -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:51 2025 by rpki-client