$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: 95YGjzZppXuKrcx2AsKHaOVN1P4MlDpD53m7l3d/RTo= Subject key identifier: 8E:ED:CE:CD:00:A1:9C:EB:C3:2D:20:83:CB:01:39:DE:C3:BC:B9:EC Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584B9600931D843A4D5B76210880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A56039C Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Thu 23 Oct 2025 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: ORho2zmESNBP14ImZcuA0qj19/nzM0PVXrKM/zLpCb8=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: ebVzusDdgZ3HT2WFvlhyzYjPIiaEcKOiCHY1tsGwhEE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:93:1d:84:3a:4d:5b:76:21:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 23 16:00:00 2025 GMT Subject: CN=1cf348f4-92c4-4c58-a686-a6416c752bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:70:ef:a7:18:22:28:86:70:7b:f8:dc:fb: f8:08:8f:53:30:c5:9f:af:28:59:49:94:af:87:bb: c5:0d:1b:05:b4:0e:30:09:c7:de:2e:b1:43:21:cc: 37:a5:0d:32:49:36:ef:44:d4:5c:bc:92:2b:f2:23: 18:ae:67:30:d9:48:7e:b8:33:80:31:c3:16:60:2b: bc:95:86:63:3d:72:a2:e6:f7:1b:d0:fe:22:ad:7e: 7f:d2:d9:a3:49:12:3f:88:4d:bb:60:65:d8:d1:a4: 9b:fb:f5:54:1a:16:f6:79:5b:7e:5c:a6:fa:b7:3b: 21:5b:12:3b:60:0c:f7:b3:62:ed:5e:d7:2b:79:5a: 3e:62:41:64:02:2d:52:4c:f3:a1:49:81:57:79:d4: 06:2d:02:e1:f3:a5:ee:66:04:72:e0:66:01:b5:44: 44:81:31:44:42:db:57:43:7c:ce:06:61:43:8f:84: c5:44:04:ba:54:2b:18:9d:14:fa:be:e7:25:5b:e1: 99:d9:83:66:f9:0a:b6:aa:c6:5e:b0:9e:e9:a5:94: fd:5d:32:25:6d:73:a8:52:29:14:02:e0:06:da:28: 92:6a:2c:e6:53:c9:b8:35:b1:fd:50:a0:16:23:ee: ed:8d:35:18:5c:91:83:3c:1e:6d:04:10:1e:e5:78: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:CE:CD:00:A1:9C:EB:C3:2D:20:83:CB:01:39:DE:C3:BC:B9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6a:32:24:cd:06:6b:9d:aa:cc:a3:43:f7:26:db:bc:24:20: 73:f9:76:1e:b6:cf:92:6d:9e:f4:0e:f7:99:79:0a:ad:a9:7c: ac:58:43:39:a2:56:c3:f3:4d:9b:83:b7:82:75:cd:b4:81:2a: 09:c5:d6:f2:5c:d5:9f:5c:4a:72:ad:62:bf:ab:b8:6c:54:42: de:4a:76:3b:87:fa:15:cb:fe:dd:81:29:98:5b:ae:92:ca:f9: aa:6c:db:58:7a:ff:d5:05:cd:34:3c:af:87:c1:8c:fd:c3:58: 46:83:95:2a:37:95:4b:b3:14:b3:e7:f1:5e:94:dc:fe:72:1c: 98:f8:f3:9e:e5:91:23:65:78:d4:99:29:28:b8:f8:15:e0:b8: 48:67:57:4e:26:8c:48:46:6e:4c:8b:d4:95:5d:97:b1:c3:bc: 52:3c:31:9b:22:18:05:fd:cf:9e:87:bd:64:69:1f:11:d7:b8: de:f0:33:e8:bf:78:fb:00:cb:33:15:4f:17:35:fb:d3:93:18: 0b:11:57:6b:fb:bf:b9:00:95:af:01:76:9c:10:18:f3:db:a8: 2f:ac:d4:ea:ee:cb:f4:88:ae:08:38:a9:63:64:9e:8a:13:1f: 12:d6:0b:fb:f1:50:74:08:7c:97:6e:17:bd:54:9b:d3:a9:88: 5a:96:cb:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJMdhDpNW3YhCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMzE2MDAwMFowLzEtMCsGA1UEAxMk MWNmMzQ4ZjQtOTJjNC00YzU4LWE2ODYtYTY0MTZjNzUyYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYZw76cYIiiGcHv43Pv4CI9TMMWfryhZSZSv h7vFDRsFtA4wCcfeLrFDIcw3pQ0ySTbvRNRcvJIr8iMYrmcw2Uh+uDOAMcMWYCu8 lYZjPXKi5vcb0P4irX5/0tmjSRI/iE27YGXY0aSb+/VUGhb2eVt+XKb6tzshWxI7 YAz3s2LtXtcreVo+YkFkAi1STPOhSYFXedQGLQLh86XuZgRy4GYBtUREgTFEQttX Q3zOBmFDj4TFRAS6VCsYnRT6vuclW+GZ2YNm+Qq2qsZesJ7ppZT9XTIlbXOoUikU AuAG2iiSaizmU8m4NbH9UKAWI+7tjTUYXJGDPB5tBBAe5XgqvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI7tzs0AoZzrwy0gg8sBOd7DvLnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByajIkzQZrnarMo0P3Jtu8 JCBz+XYets+SbZ70DveZeQqtqXysWEM5olbD802bg7eCdc20gSoJxdbyXNWfXEpy rWK/q7hsVELeSnY7h/oVy/7dgSmYW66SyvmqbNtYev/VBc00PK+HwYz9w1hGg5Uq N5VLsxSz5/FelNz+chyY+POe5ZEjZXjUmSkouPgV4LhIZ1dOJoxIRm5Mi9SVXZex w7xSPDGbIhgF/c+eh71kaR8R17je8DPov3j7AMszFU8XNfvTkxgLEVdr+7+5AJWv AXacEBjz26gvrNTq7sv0iK4IOKljZJ6KEx8S1gv78VB0CHyXbhe9VJvTqYhalstt -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:54 2025 by rpki-client