$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft File: aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json) Hash identifier: q3VXiVCQeQxA+zN0+obMgdAEgWlSJUOiX+GXWCUb0bU= Subject key identifier: 76:90:25:98:51:EC:D2:E5:3A:72:93:9E:82:B5:5C:EB:AD:F7:8F:64 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F4328584B92DC8ED2101866D9243E20C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft Manifest number: 010D0C9F43285849B8591A0A2626962C4503E930 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Wed 22 Oct 2025 13:00:00 +0000 Files and hashes: 1: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: quYF1EVYmK6Y5Fm8XUXM6xgLXnflR6LuBd/wXl6ML9I=) 2: c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa (hash: DM60ccb6RE5CofJQ3v0vpE6r5XWrjeBGsIoaBU61dtY=) 3: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: qNcEBKfj15mncSGtvWyAHfTezgrG2+3nLDePwwA6+5k=) 4: fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (hash: g9HNrHm/7uyyMQWhJUSLd09BGNxqvjrtbWNHutWs+7s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8e:d2:10:18:66:d9:24:3e:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 22 13:00:00 2025 GMT Subject: CN=aed37012-6865-4fc0-8d16-8b131fe39e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2a:78:0f:42:eb:1e:6c:25:f4:13:60:98:dd: 7b:0e:57:ff:b4:4e:55:bd:19:28:3c:83:88:dd:1b: b3:ca:09:6c:5e:ff:4e:1f:92:df:54:7f:93:ac:5f: e8:6a:84:59:f6:75:81:27:57:60:1a:ad:f2:e1:29: 88:8c:e8:4f:5f:94:99:6f:0f:9a:6e:ca:6e:0d:24: 81:56:6d:40:fa:54:99:9a:4c:c2:d9:a1:60:d3:b4: f8:ca:85:84:2a:fd:95:81:a4:fa:ab:d4:f7:c1:3e: 92:a6:d7:1a:ed:58:40:97:c0:38:6d:fb:0b:17:7d: d2:6f:b3:6d:81:e5:c2:c6:7c:51:70:8a:58:eb:10: 88:c9:67:5a:d1:d5:a5:a0:76:cb:a1:15:de:f1:a4: f4:6b:d4:9e:88:9b:0c:dd:02:3b:13:9f:d8:d9:0b: e8:2c:d3:d6:20:89:66:f9:88:62:d9:a1:94:74:b8: 6d:8a:95:56:5f:38:e1:95:fb:e0:1b:56:1a:22:8c: 1d:d9:30:1c:bc:30:9f:0b:51:cc:ba:74:bc:f8:8e: c8:a7:89:d8:07:a8:46:22:83:6d:d6:16:67:df:89: e7:5c:3c:d9:7b:b0:49:4b:63:00:5a:85:3a:3b:89: f4:94:03:64:94:ef:f0:78:4b:a8:1b:b8:98:e5:79: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:25:98:51:EC:D2:E5:3A:72:93:9E:82:B5:5C:EB:AD:F7:8F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:20:73:2a:08:27:a1:ef:25:08:48:73:73:f8:4e:d9:3b:a1: 3e:6e:08:5b:f6:29:14:f2:1d:b7:70:91:2b:a5:7e:0d:26:e2: ed:b0:9f:cd:60:82:90:b6:f2:6b:ac:f6:23:59:0c:83:27:e9: d1:74:ad:87:9e:6c:fd:46:f3:cd:f5:a8:8b:0c:68:fa:8d:16: b3:78:42:24:cd:82:f6:e4:49:c6:af:00:ce:b1:53:c4:9c:4c: ce:d7:5b:ad:e2:7e:8d:d4:e9:ab:4c:a7:62:99:98:22:64:59: 0b:d9:12:8a:3c:d4:58:97:6c:f7:b0:b1:17:08:23:47:cd:6e: 99:0d:1e:10:b6:15:df:e9:30:0c:b4:d3:26:8f:33:e3:70:5c: 4d:d7:bf:67:93:46:3f:a3:ef:f7:42:22:0f:de:a6:35:0c:73: db:86:f1:ee:87:0e:c2:f8:88:ae:99:b7:fe:30:2a:98:e4:96: df:0c:2e:5d:f0:1e:a9:33:33:98:ba:74:a2:12:19:28:ab:a7: f6:60:df:9d:36:be:51:98:20:58:48:41:9a:e2:b6:88:7a:48: a7:50:03:bb:cb:d7:65:9d:70:0c:a6:ae:c5:b7:51:01:5f:59: cb:8a:c8:c5:02:32:85:fe:c0:0d:3c:93:ab:12:12:25:3f:88: e2:6e:3e:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3I7SEBhm2SQ+IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMjEzMDAwMFowLzEtMCsGA1UEAxMk YWVkMzcwMTItNjg2NS00ZmMwLThkMTYtOGIxMzFmZTM5ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlip4D0LrHmwl9BNgmN17Dlf/tE5VvRkoPIOI 3RuzyglsXv9OH5LfVH+TrF/oaoRZ9nWBJ1dgGq3y4SmIjOhPX5SZbw+abspuDSSB Vm1A+lSZmkzC2aFg07T4yoWEKv2VgaT6q9T3wT6Sptca7VhAl8A4bfsLF33Sb7Nt geXCxnxRcIpY6xCIyWda0dWloHbLoRXe8aT0a9SeiJsM3QI7E5/Y2QvoLNPWIIlm +Yhi2aGUdLhtipVWXzjhlfvgG1YaIowd2TAcvDCfC1HMunS8+I7Ip4nYB6hGIoNt 1hZn34nnXDzZe7BJS2MAWoU6O4n0lANklO/weEuoG7iY5Xli9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHaQJZhR7NLlOnKTnoK1XOut949kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvYWEzNDY0N2YtMzIyOS00 ODBjLTliMDUtM2NmMGIwMGZhMTczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByIHMqCCeh7yUISHNz+E7Z O6E+bghb9ikU8h23cJErpX4NJuLtsJ/NYIKQtvJrrPYjWQyDJ+nRdK2Hnmz9RvPN 9aiLDGj6jRazeEIkzYL25EnGrwDOsVPEnEzO11ut4n6N1OmrTKdimZgiZFkL2RKK PNRYl2z3sLEXCCNHzW6ZDR4QthXf6TAMtNMmjzPjcFxN179nk0Y/o+/3QiIP3qY1 DHPbhvHuhw7C+Iiumbf+MCqY5JbfDC5d8B6pMzOYunSiEhkoq6f2YN+dNr5RmCBY SEGa4raIekinUAO7y9dlnXAMpq7Ft1EBX1nLisjFAjKF/sANPJOrEhIlP4jibj6H -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:48 2025 by rpki-client