$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft File: aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft (raw, json) Hash identifier: MypYyZ98W+79ad3vqVTt+c0RWnwS0f5icEuysRiT5tA= Subject key identifier: 5A:14:11:19:81:4E:4A:8C:45:B0:16:98:52:97:92:9C:28:ED:35:97 Authority key identifier: 40:9C:47:03:2B:A0:59:A1:B5:01:C4:B1:1F:73:DD:C1:75:43:38:A8 Certificate issuer: /CN=aa7f8f98-bca3-4c8d-81b2-af03493ceeb1 Certificate serial: 010D0C9F4328584AF1DF291C0FD36F022B679D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft Manifest number: 010D0C9F4328584954C4C01E09280DD16DECF297 Signing time: Fri 22 Aug 2025 21:00:08 +0000 Manifest this update: Fri 22 Aug 2025 21:00:08 +0000 Manifest next update: Mon 25 Aug 2025 21:00:00 +0000 Files and hashes: 1: 758d2349-757c-3407-84a3-33ffc79bc172.roa (hash: Wycm9wuzA6y58KB0H3KlCsdStI3SrtMgE2plHVJkua4=) 2: aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.crl (hash: 4b8LTmbHWXHJM5dU3XhODSqO8Fq8jhbqegf7eAjE0KE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:df:29:1c:0f:d3:6f:02:2b:67:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7f8f98-bca3-4c8d-81b2-af03493ceeb1 Validity Not Before: Aug 22 21:00:08 2025 GMT Not After : Aug 25 21:00:00 2025 GMT Subject: CN=917fa37f-eb73-4b5f-8d9e-d7a9334f4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:58:4a:a5:9b:c8:15:6f:3d:31:c5:1b:4c: 85:42:a6:92:33:3d:5c:c1:32:a3:85:4d:68:6d:9c: 98:18:c7:e5:0d:90:c8:6b:7c:b3:47:a6:52:18:ea: 07:f5:ab:d6:f7:6e:33:38:b2:79:be:6e:cb:3f:fb: 7e:6f:2f:f5:f1:2c:37:cb:6b:52:cd:df:39:46:23: 51:f8:f5:95:7f:a7:9a:f8:ad:b7:54:b1:0e:cc:91: fe:d6:dd:21:92:c7:7b:92:3a:a6:31:4b:f4:16:32: e1:ad:08:e5:6a:d4:ad:dd:cc:8a:26:f1:e5:52:52: b2:6f:df:01:79:82:f1:40:dd:1c:b8:c1:1a:ba:f0: 40:99:82:cc:6c:7d:de:c9:48:12:a7:21:7b:97:1f: 12:c0:d1:4b:60:72:6d:c7:ea:93:ee:c3:e4:f9:fd: 54:2c:5d:0f:ba:11:4e:54:48:8c:07:fa:e5:03:d7: 43:78:bd:fc:80:3c:e4:94:85:e1:25:8d:70:51:ef: d2:c6:ab:be:73:55:7b:cd:42:02:c3:bd:17:90:0e: 7b:0f:aa:9b:4e:cf:2a:5d:81:7d:b2:37:aa:91:49: fd:b1:01:57:77:b3:32:cd:82:fe:1c:7b:68:24:67: b0:b6:1e:e1:6c:d2:87:31:da:2d:0e:39:53:22:55: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:11:19:81:4E:4A:8C:45:B0:16:98:52:97:92:9C:28:ED:35:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.crl X509v3 Authority Key Identifier: keyid:40:9C:47:03:2B:A0:59:A1:B5:01:C4:B1:1F:73:DD:C1:75:43:38:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d0:75:4d:86:b4:d6:fe:a9:1b:f6:40:e2:dd:25:fb:d4:dc: f3:48:f2:64:e9:e4:09:a7:63:50:f3:cf:3c:93:03:1e:94:fc: 5c:99:29:83:3e:7c:07:d7:00:d4:30:bb:1c:20:b0:08:34:3c: 55:4d:a9:1b:42:0a:6a:d9:b2:65:86:1b:57:ca:07:9b:68:c5: 79:b1:39:d8:23:eb:98:cd:35:74:e5:3f:d9:64:14:92:7b:88: 38:ce:2b:b3:cb:b1:e9:c1:8f:e2:7d:4f:51:9c:15:cc:94:5f: 8d:a1:3f:4e:94:30:1b:e6:52:fe:55:e4:a0:68:ac:59:cf:df: a3:f9:87:d5:54:99:2e:0b:a9:4d:d6:d1:99:23:38:fc:c7:06: 84:a0:36:27:d1:22:d5:06:c4:ae:07:6d:8c:be:74:b2:dc:01: 5f:10:42:f2:ef:04:c6:1d:47:d9:12:de:e1:52:19:8f:ce:d0: da:38:eb:c3:68:52:e0:e4:18:ec:03:60:07:86:be:b2:4e:e5: d5:48:38:ec:04:62:ac:fb:7f:b5:d9:1c:de:05:24:69:20:1e: ad:8e:4e:0a:f7:a9:0d:22:b6:f9:45:47:c1:07:14:37:10:31: a0:02:64:0c:e2:22:41:25:ab:ea:a7:dd:f1:3b:5b:bd:3b:fc: 95:bb:12:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx3ykcD9NvAitnnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE3ZjhmOTgtYmNhMy00YzhkLTgxYjItYWYwMzQ5M2Nl ZWIxMB4XDTI1MDgyMjIxMDAwOFoXDTI1MDgyNTIxMDAwMFowLzEtMCsGA1UEAxMk OTE3ZmEzN2YtZWI3My00YjVmLThkOWUtZDdhOTMzNGY0NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp79YSqWbyBVvPTHFG0yFQqaSMz1cwTKjhU1o bZyYGMflDZDIa3yzR6ZSGOoH9avW924zOLJ5vm7LP/t+by/18Sw3y2tSzd85RiNR +PWVf6ea+K23VLEOzJH+1t0hksd7kjqmMUv0FjLhrQjlatSt3cyKJvHlUlKyb98B eYLxQN0cuMEauvBAmYLMbH3eyUgSpyF7lx8SwNFLYHJtx+qT7sPk+f1ULF0PuhFO VEiMB/rlA9dDeL38gDzklIXhJY1wUe/Sxqu+c1V7zUICw70XkA57D6qbTs8qXYF9 sjeqkUn9sQFXd7MyzYL+HHtoJGewth7hbNKHMdotDjlTIlWt9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoUERmBTkqMRbAWmFKXkpwo7TWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTdm OGY5OC1iY2EzLTRjOGQtODFiMi1hZjAzNDkzY2VlYjEvYWE3ZjhmOTgtYmNhMy00 YzhkLTgxYjItYWYwMzQ5M2NlZWIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE3ZjhmOTgtYmNhMy00YzhkLTgx YjItYWYwMzQ5M2NlZWIxL2FhN2Y4Zjk4LWJjYTMtNGM4ZC04MWIyLWFmMDM0OTNj ZWViMS5jcmwwHwYDVR0jBBgwFoAUQJxHAyugWaG1AcSxH3PdwXVDOKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTdmOGY5OC1iY2EzLTRjOGQtODFiMi1hZjAz NDkzY2VlYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD0HVNhrTW/qkb9kDi3SX7 1NzzSPJk6eQJp2NQ8888kwMelPxcmSmDPnwH1wDUMLscILAINDxVTakbQgpq2bJl hhtXygebaMV5sTnYI+uYzTV05T/ZZBSSe4g4ziuzy7HpwY/ifU9RnBXMlF+NoT9O lDAb5lL+VeSgaKxZz9+j+YfVVJkuC6lN1tGZIzj8xwaEoDYn0SLVBsSuB22MvnSy 3AFfEELy7wTGHUfZEt7hUhmPztDaOOvDaFLg5BjsA2AHhr6yTuXVSDjsBGKs+3+1 2RzeBSRpIB6tjk4K96kNIrb5RUfBBxQ3EDGgAmQM4iJBJavqp93xO1u9O/yVuxLK -----END CERTIFICATE-----Generated at Sat Aug 23 18:47:09 2025 by rpki-client