$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: Fh80Z1xjmwy/wPD1+ywd6nH7wZfq8PwrAzvUzgTYYQI= Subject key identifier: DE:1E:45:DF:37:E0:B9:86:87:4A:C1:8D:17:80:5C:96:0D:1B:78:D9 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584B92656FD14DB0AD3988FC13C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022493 Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Tue 21 Oct 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: TSbzuDDihCAVsQKihEYUcTQoxttdhedytreI/MzWaVo=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Yrb29edGHECK/Nyu95mBbhm/PTN2GjD/g+rc+aE3clE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:6f:d1:4d:b0:ad:39:88:fc:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 21 09:00:00 2025 GMT Subject: CN=e06494d2-86a2-4638-9e20-563079318ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:75:91:60:93:77:dd:6b:0d:6d:a9:be:14: f6:f1:dc:bd:4d:86:61:2e:ec:26:ac:03:cb:64:10: cf:6f:41:dd:97:70:80:75:07:53:9c:f5:bd:9d:ca: b2:06:f2:a6:29:15:d7:69:f3:68:f5:6c:7a:76:0f: ad:75:c3:a9:eb:94:f3:69:7c:2e:85:7d:7d:89:24: c8:14:ab:81:5c:83:06:aa:0b:4c:6a:90:ff:06:eb: 4d:b9:96:83:9d:4a:d8:01:a6:db:6e:5e:fb:ee:8b: aa:2a:d0:1b:10:2a:e1:db:b3:ee:80:f8:56:8b:cc: 97:9b:55:b4:ac:1d:dd:64:49:40:af:3b:26:91:eb: f6:1c:a0:b5:ec:57:13:f8:e2:82:1c:72:97:6d:da: ab:f2:41:02:4a:6f:a1:51:ae:70:f3:2a:08:1a:a8: 2f:db:7b:81:b0:7b:ed:1f:c2:12:58:e8:cf:bc:03: e7:78:da:54:15:93:a5:42:49:57:74:9c:aa:9a:03: 5a:5d:9c:d0:10:45:ca:7f:db:91:59:70:c3:82:d5: 4a:44:6a:0b:ff:dc:2b:75:85:2c:df:90:87:75:b8: 71:7a:fd:6a:79:48:00:04:05:92:76:b1:47:28:27: 09:a9:da:3e:12:38:ec:76:f4:6a:18:dd:69:48:1c: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:45:DF:37:E0:B9:86:87:4A:C1:8D:17:80:5C:96:0D:1B:78:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:25:92:16:56:e0:1c:60:a1:00:5f:07:39:c2:dd:e6:d8:d0: 7a:f6:70:6c:c2:45:79:c1:1c:fb:fd:2f:c6:58:87:f0:68:a7: 4d:7a:d8:83:a5:94:62:68:bf:61:0b:2e:67:40:99:05:ce:8b: 6b:c6:ea:19:9e:f5:83:23:a8:2c:cf:fb:85:07:91:e5:62:17: 43:8b:ab:86:8b:17:5a:f4:c7:cd:e7:a7:40:50:da:98:eb:f5: 1f:3a:61:c1:fe:1d:12:1c:af:25:97:87:f2:ec:72:07:4f:a5: a5:b0:b0:c5:b9:cc:bd:50:9b:a8:2a:2e:7e:08:1f:ca:1f:8b: 59:14:5c:c3:a1:fc:9b:92:0f:d5:9d:9e:51:5b:d3:64:d6:4c: 77:46:da:ec:4e:e4:00:09:8d:32:70:79:e2:1d:52:fe:2d:e1: 43:c9:68:e8:f5:4f:e4:ff:00:ad:06:ab:89:19:3f:39:b6:12: 1f:58:59:9d:52:9e:a9:ea:79:cb:21:d3:41:13:ba:0a:92:61: e2:fe:c6:c1:1e:c8:ff:18:8e:26:9d:ac:b6:ed:23:ba:7d:27: b8:8d:55:49:99:4b:48:f4:78:c6:02:42:95:4f:04:fb:b1:fe: d6:78:4d:ea:b7:6b:f9:3f:da:cc:31:66:be:94:18:30:f8:c8: bf:bd:59:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZW/RTbCtOYj8E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMTA5MDAwMFowLzEtMCsGA1UEAxMk ZTA2NDk0ZDItODZhMi00NjM4LTllMjAtNTYzMDc5MzE4Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFl1kWCTd91rDW2pvhT28dy9TYZhLuwmrAPL ZBDPb0Hdl3CAdQdTnPW9ncqyBvKmKRXXafNo9Wx6dg+tdcOp65TzaXwuhX19iSTI FKuBXIMGqgtMapD/ButNuZaDnUrYAabbbl777ouqKtAbECrh27PugPhWi8yXm1W0 rB3dZElArzsmkev2HKC17FcT+OKCHHKXbdqr8kECSm+hUa5w8yoIGqgv23uBsHvt H8ISWOjPvAPneNpUFZOlQklXdJyqmgNaXZzQEEXKf9uRWXDDgtVKRGoL/9wrdYUs 35CHdbhxev1qeUgABAWSdrFHKCcJqdo+EjjsdvRqGN1pSBxSEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN4eRd834LmGh0rBjReAXJYNG3jZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnJZIWVuAcYKEAXwc5wt3m 2NB69nBswkV5wRz7/S/GWIfwaKdNetiDpZRiaL9hCy5nQJkFzotrxuoZnvWDI6gs z/uFB5HlYhdDi6uGixda9MfN56dAUNqY6/UfOmHB/h0SHK8ll4fy7HIHT6WlsLDF ucy9UJuoKi5+CB/KH4tZFFzDofybkg/VnZ5RW9Nk1kx3RtrsTuQACY0ycHniHVL+ LeFDyWjo9U/k/wCtBquJGT85thIfWFmdUp6p6nnLIdNBE7oKkmHi/sbBHsj/GI4m nay27SO6fSe4jVVJmUtI9HjGAkKVTwT7sf7WeE3qt2v5P9rMMWa+lBgw+Mi/vVnn -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:07 2025 by rpki-client