$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft File: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json) Hash identifier: hwduAQ4ehD6IPHmqvFhsxzHJeOuMvt5Lr+MUlH65fPQ= Subject key identifier: 4D:B9:4C:B6:A0:81:0B:3F:51:F6:6D:1D:77:C3:05:BC:B5:07:0C:58 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584B953021B32397483F77F78E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft Manifest number: 010D0C9F4328584073A8497872C4F36DBFDFA796 Signing time: Mon 20 Oct 2025 09:00:03 +0000 Manifest this update: Mon 20 Oct 2025 09:00:03 +0000 Manifest next update: Thu 23 Oct 2025 09:00:00 +0000 Files and hashes: 1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: k3mWjiWSizxKDt+WEjOh4yN+j99xsxYvgDBw3OFJark=) 2: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: G/sIAfaluwJX2x1cAmMU0bUzU6+eve1aIx05nTNN2AA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:30:21:b3:23:97:48:3f:77:f7:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Oct 20 09:00:03 2025 GMT Not After : Oct 23 09:00:00 2025 GMT Subject: CN=60a8505f-63fe-418c-a9aa-ddc4aa77ec80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:f2:4b:92:08:36:c5:05:ea:fd:09:99:9c: b1:f7:36:12:a9:9b:75:2f:81:86:8e:6e:a0:68:df: ae:39:10:31:2a:d5:b2:b0:34:80:84:7c:ec:6b:41: fb:65:fe:d3:b0:ee:44:68:10:cb:c7:60:5d:a2:48: 5f:da:eb:a7:ae:77:3b:a8:e4:5b:bd:87:7f:40:2a: bd:91:2c:24:80:db:c5:f9:23:7d:96:77:10:f7:6d: e2:ac:66:d9:35:b5:6d:65:da:17:9e:af:6f:c7:fc: 93:ca:3f:0c:8a:16:f3:9e:42:cd:f5:bf:10:8c:6d: f5:b4:54:7e:74:95:1c:f6:83:f7:25:6c:76:ec:d8: b0:23:06:8e:25:34:19:ae:a1:11:97:38:30:c0:81: 66:60:fa:1b:d8:3a:2c:75:2f:79:fb:e7:44:e9:a5: da:59:b6:51:bb:eb:5f:8b:aa:ec:88:dc:57:53:6c: 08:ba:70:18:c8:dd:9e:b3:8a:06:f0:6d:c4:c5:ac: 43:ee:12:0c:d2:ae:03:0c:fa:63:51:01:5f:2e:16: a5:26:e1:4c:b0:1f:af:04:7b:8d:05:a1:4e:25:a8: 17:a2:19:04:65:29:f5:17:db:39:19:b7:15:4c:2c: 76:12:b0:25:b9:38:07:1d:2d:60:4b:fe:90:68:28: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:4C:B6:A0:81:0B:3F:51:F6:6D:1D:77:C3:05:BC:B5:07:0C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:37:3d:46:0b:d7:59:5d:e7:5a:9e:08:e6:cf:d9:56:f6:9e: f5:7d:2b:ed:42:fd:1d:d7:a5:fc:e2:2f:0d:94:00:72:ff:ea: 42:03:9c:c5:55:f2:c8:97:67:59:f2:26:3b:63:fa:b6:f7:c5: 39:a2:84:85:a6:81:93:b1:9a:9d:5e:49:59:be:60:35:42:a8: 3b:c1:8a:ba:ac:47:7b:8b:4f:d1:8c:c1:09:87:fb:1a:33:6b: 9c:fe:d0:24:32:ff:86:79:d6:5f:4b:4b:56:2c:46:60:7c:44: 7e:db:c4:70:90:3e:11:3c:fd:d8:cc:31:0c:bf:50:8e:d2:2c: ae:02:9a:87:eb:7b:bf:f2:95:21:56:90:93:07:10:1c:f3:50: 5d:8e:f7:3a:16:d6:69:7b:05:34:e4:90:67:23:ff:11:97:6e: 85:6f:9e:27:66:51:16:75:54:62:2a:92:6e:21:e7:f4:44:84: 47:e0:1b:f8:d4:ea:2b:96:11:87:a4:79:3f:1d:c3:e3:ce:f5: d1:fc:46:51:e3:0e:e6:54:e0:13:04:00:34:ed:5a:82:5a:93: 77:64:c1:db:7f:47:da:71:d3:a3:eb:a2:1a:ef:59:4f:0c:3d: 3f:e2:94:ca:c7:52:d1:0e:0b:c5:c3:e5:15:d7:57:55:37:e9: 6e:21:5a:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVMCGzI5dIP3f3jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MTAyMDA5MDAwM1oXDTI1MTAyMzA5MDAwMFowLzEtMCsGA1UEAxMk NjBhODUwNWYtNjNmZS00MThjLWE5YWEtZGRjNGFhNzdlYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziLyS5IINsUF6v0JmZyx9zYSqZt1L4GGjm6g aN+uORAxKtWysDSAhHzsa0H7Zf7TsO5EaBDLx2Bdokhf2uunrnc7qORbvYd/QCq9 kSwkgNvF+SN9lncQ923irGbZNbVtZdoXnq9vx/yTyj8MihbznkLN9b8QjG31tFR+ dJUc9oP3JWx27NiwIwaOJTQZrqERlzgwwIFmYPob2DosdS95++dE6aXaWbZRu+tf i6rsiNxXU2wIunAYyN2es4oG8G3ExaxD7hIM0q4DDPpjUQFfLhalJuFMsB+vBHuN BaFOJagXohkEZSn1F9s5GbcVTCx2ErAluTgHHS1gS/6QaCjG0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE25TLaggQs/UfZtHXfDBby1BwxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvYWFmOWEzZmMtM2E4Yy00 N2U0LTkxZmEtZDc4MDhiMDZhZTg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuNz1GC9dZXedangjmz9lW 9p71fSvtQv0d16X84i8NlABy/+pCA5zFVfLIl2dZ8iY7Y/q298U5ooSFpoGTsZqd XklZvmA1Qqg7wYq6rEd7i0/RjMEJh/saM2uc/tAkMv+GedZfS0tWLEZgfER+28Rw kD4RPP3YzDEMv1CO0iyuApqH63u/8pUhVpCTBxAc81Bdjvc6FtZpewU05JBnI/8R l26Fb54nZlEWdVRiKpJuIef0RIRH4Bv41OorlhGHpHk/HcPjzvXR/EZR4w7mVOAT BAA07VqCWpN3ZMHbf0facdOj66Ia71lPDD0/4pTKx1LRDgvFw+UV11dVN+luIVog -----END CERTIFICATE-----Generated at Mon Oct 20 13:15:02 2025 by rpki-client