$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: oCG9Bmte2eksk+3zONQ2iOCwsvH/lzwEIX2utA98vM4= Subject key identifier: B9:96:17:45:5E:DA:77:64:DC:65:47:77:AB:F3:73:58:D7:39:01:6E Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584B92656DB2A6BD5F58C141A140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B5B Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Tue 21 Oct 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: DNxgqSiCn9qAfH8sBiFATlvzCTPKXEnGqjWHD1SR0Jc=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: umCrpaPooP2I8OnVYCI9fF1E7yoRbRDtLKIDMameL14=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: 7pFAb7Rgz2EPy2A6y0bci4TfTl3wFcAuIZV6sVou32o=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: iJrUEwHC2Um7qAogTqEQqqwzpzfLHIap9bcCknO5cXc=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: AD/o2YykghE/u9uFH7opd2V/rUpjZ1q70in9euV8ze4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:6d:b2:a6:bd:5f:58:c1:41:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 21 09:00:00 2025 GMT Subject: CN=49352352-3417-4903-a068-3f05b218b046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:b5:27:c6:ef:b8:a5:27:6b:b5:69:96:2d: 3a:15:1d:6f:db:fe:40:c7:e9:62:16:f8:b1:76:83: e2:ab:15:8b:e1:4a:bb:05:d5:90:34:fe:a8:c4:a7: ac:3e:fe:1a:ef:14:89:7b:41:f4:bb:9d:50:9c:4c: bd:19:71:2a:5b:66:c0:7b:d6:3e:07:ae:9e:2c:29: a6:48:0b:10:21:00:15:f9:98:2b:c9:95:20:0f:1d: 84:91:85:a2:2d:ba:ad:ff:59:7f:2a:d2:68:be:ba: 69:8d:59:71:72:e5:20:65:71:c7:d7:ba:0a:71:1c: 84:5f:f2:39:d4:1a:4a:25:fc:2e:68:57:1f:24:97: 4e:98:03:5d:39:27:15:7b:ca:ca:40:d2:f1:86:65: ab:99:5d:71:2c:cc:08:9e:dd:b7:92:06:03:ba:4f: 86:49:a0:97:80:3b:c2:12:9a:b3:74:b9:52:0e:80: 44:b5:6a:40:09:ba:c3:a4:59:46:ba:45:cf:30:c9: 52:82:25:ac:2b:1f:9c:1e:fc:36:b2:74:e9:9c:63: 1d:51:88:76:54:55:a4:0a:cb:75:5d:31:08:b2:cf: 1d:d7:5d:66:20:0a:83:33:61:b9:fd:02:b1:8e:7c: 2b:22:69:1f:ee:55:70:13:60:57:0c:73:4d:e3:e0: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:17:45:5E:DA:77:64:DC:65:47:77:AB:F3:73:58:D7:39:01:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:38:08:5e:ea:d7:35:4b:03:6f:70:e6:67:51:cc:a3:61:b8: 53:2c:b9:43:f8:8d:05:4d:22:ed:00:b0:c4:f2:57:11:18:fa: 4a:64:e3:08:1a:47:bc:ab:56:56:fe:00:81:23:39:b4:80:43: af:db:0a:78:bd:ce:3e:ff:6d:d5:fe:60:41:f5:cd:06:c5:67: 05:63:6b:6f:32:43:19:a9:2a:0b:77:e7:3e:e6:02:42:9b:62: af:77:e7:ac:39:8c:96:5e:81:e1:8c:64:4e:59:89:ea:ad:40: 0b:4f:f2:08:0b:9a:a1:1b:db:39:75:d6:2e:60:ad:00:db:95: 36:e9:5e:73:94:aa:91:84:d2:e9:51:06:af:f7:fe:c4:cb:5e: 68:12:0b:fa:62:81:a1:d1:bd:48:89:12:6f:43:0d:f5:3b:b6: 37:ff:b4:92:db:7b:38:1e:55:4f:de:90:e3:9b:52:4f:88:c3: 9c:31:d9:5f:90:31:7a:1e:01:b1:ab:c3:5c:9c:65:a5:56:0e: 1e:eb:3a:96:34:15:31:3e:4b:56:98:d2:1f:0d:fd:c3:f3:fa: 9f:db:35:18:63:c3:87:e0:98:08:c3:ec:62:74:0a:b1:44:46: 43:9e:1d:6d:b0:ac:1c:82:c4:df:ca:8b:50:8d:fb:52:99:d2: 73:33:58:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZW2ypr1fWMFBoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMTA5MDAwMFowLzEtMCsGA1UEAxMk NDkzNTIzNTItMzQxNy00OTAzLWEwNjgtM2YwNWIyMThiMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno61J8bvuKUna7Vpli06FR1v2/5Ax+liFvix doPiqxWL4Uq7BdWQNP6oxKesPv4a7xSJe0H0u51QnEy9GXEqW2bAe9Y+B66eLCmm SAsQIQAV+ZgryZUgDx2EkYWiLbqt/1l/KtJovrppjVlxcuUgZXHH17oKcRyEX/I5 1BpKJfwuaFcfJJdOmANdOScVe8rKQNLxhmWrmV1xLMwInt23kgYDuk+GSaCXgDvC EpqzdLlSDoBEtWpACbrDpFlGukXPMMlSgiWsKx+cHvw2snTpnGMdUYh2VFWkCst1 XTEIss8d111mIAqDM2G5/QKxjnwrImkf7lVwE2BXDHNN4+DrCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLmWF0Ve2ndk3GVHd6vzc1jXOQFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFOAhe6tc1SwNvcOZnUcyj YbhTLLlD+I0FTSLtALDE8lcRGPpKZOMIGke8q1ZW/gCBIzm0gEOv2wp4vc4+/23V /mBB9c0GxWcFY2tvMkMZqSoLd+c+5gJCm2Kvd+esOYyWXoHhjGROWYnqrUALT/II C5qhG9s5ddYuYK0A25U26V5zlKqRhNLpUQav9/7Ey15oEgv6YoGh0b1IiRJvQw31 O7Y3/7SS23s4HlVP3pDjm1JPiMOcMdlfkDF6HgGxq8NcnGWlVg4e6zqWNBUxPktW mNIfDf3D8/qf2zUYY8OH4JgIw+xidAqxREZDnh1tsKwcgsTfyotQjftSmdJzM1gR -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:14 2025 by rpki-client