$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: gzLZTGzh8V8F9q7wqYS1Xfi4h4Xs+LdYZUW7nt6LcSg= Subject key identifier: 90:A6:3A:3B:BB:5E:9D:21:FB:FE:18:B0:63:43:DF:66:E2:D8:31:14 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584BBF2E27C43075E5280E2EBE30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E20B9 Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: DKF86IRYRd4KuLt3QwpLXryQ/+agnhugMtGZIG3PZbw=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: h0I5x+L39F1pMKrp8TbvsP4UJ0KECLUr3gq/x6fI6IA=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: MCocq1BYuE8KoabXn7l4sMnbkXyzwWTgqDKTL/OUgzE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:27:c4:30:75:e5:28:0e:2e:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=ca4e7027-f8f7-4448-b121-e238d36c69d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:62:0c:0c:33:50:38:28:7f:71:87:aa:f0: 1d:e6:f7:67:5d:e0:00:31:08:9e:1d:7e:6b:04:2b: ab:91:79:0d:12:c7:07:e0:a5:6f:ee:2d:fe:ad:ae: 9a:4d:43:b6:8e:34:ba:81:d7:f0:2f:10:4d:b2:e5: e4:f2:e7:2c:c8:b3:56:bc:5f:e4:fb:25:79:e7:41: ad:86:a4:91:c2:cd:d3:7d:42:a1:a7:c3:7c:d7:7c: 35:20:e0:a5:3c:44:20:b3:3b:3b:13:d7:7a:8c:36: a3:8d:b4:01:53:07:42:9b:c0:be:57:d8:b2:f1:91: 23:11:2f:1e:a8:b4:08:4b:90:3b:75:85:78:7a:d9: 42:df:c7:91:12:13:43:60:2c:ad:36:4d:d4:dc:00: 75:71:46:27:c0:89:c3:61:69:f8:aa:39:cd:40:08: 6c:f7:ca:d0:1b:5c:43:9e:02:38:22:7a:ad:5a:52: 91:01:bc:64:ae:d4:a0:5b:e8:a4:36:35:07:f3:7a: 66:a6:c0:1e:c8:99:24:2f:d8:3b:b8:eb:82:ca:c7: 53:f2:95:83:3e:0e:7b:76:d8:61:b2:c8:1f:38:0e: 19:d5:05:b3:f3:9b:01:61:b6:bb:f7:dc:4f:68:9a: 05:8e:29:ad:ef:c5:f5:55:53:49:5c:32:15:77:89: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:3A:3B:BB:5E:9D:21:FB:FE:18:B0:63:43:DF:66:E2:D8:31:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b2:b8:fe:87:ba:c9:5f:25:5c:c2:3e:3a:97:71:98:63:82: ef:db:ed:87:18:16:34:f6:f7:26:91:83:48:5c:0e:1c:c0:08: 4e:44:99:fd:06:98:7d:29:1e:2d:2b:40:af:74:72:37:b6:76: 63:b4:a4:fd:87:e6:29:19:39:e0:36:50:9c:c1:46:c1:e6:7e: 0f:ee:23:73:d4:cd:f8:54:aa:29:92:4f:f3:5d:12:2c:f5:aa: 7e:fb:c6:2b:aa:d2:87:f3:f2:53:7e:cb:46:18:0a:62:92:17: 6d:42:fb:09:f5:73:be:c7:70:a0:71:c4:56:93:4f:8c:45:72: da:36:9f:6f:37:72:69:54:11:3a:62:62:98:44:4b:8f:11:de: fa:f2:ec:d5:be:c6:35:ca:40:6d:ec:14:55:c4:db:c4:ae:7c: a2:1e:b4:ac:d1:04:9c:8d:f6:ac:cd:51:16:2e:af:22:5e:c8: 15:2d:8b:cd:55:9d:b8:9c:82:4f:d8:57:ee:42:49:17:46:94: 8a:a3:1d:19:78:b6:2d:9f:53:3d:f5:72:93:17:19:ce:f4:06: 24:5e:7c:ea:1e:45:32:9b:c9:9a:56:8d:ac:67:08:a1:9a:c5: 8f:da:55:c1:cc:b3:c1:1c:ec:44:53:a4:2c:47:4a:6f:56:59: 18:5f:09:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/LifEMHXlKA4uvjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk Y2E0ZTcwMjctZjhmNy00NDQ4LWIxMjEtZTIzOGQzNmM2OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6ViDAwzUDgof3GHqvAd5vdnXeAAMQieHX5r BCurkXkNEscH4KVv7i3+ra6aTUO2jjS6gdfwLxBNsuXk8ucsyLNWvF/k+yV550Gt hqSRws3TfUKhp8N813w1IOClPEQgszs7E9d6jDajjbQBUwdCm8C+V9iy8ZEjES8e qLQIS5A7dYV4etlC38eREhNDYCytNk3U3AB1cUYnwInDYWn4qjnNQAhs98rQG1xD ngI4InqtWlKRAbxkrtSgW+ikNjUH83pmpsAeyJkkL9g7uOuCysdT8pWDPg57dthh ssgfOA4Z1QWz85sBYba799xPaJoFjimt78X1VVNJXDIVd4nZWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJCmOju7Xp0h+/4YsGND32bi2DEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfsrj+h7rJXyVcwj46l3GY Y4Lv2+2HGBY09vcmkYNIXA4cwAhORJn9Bph9KR4tK0CvdHI3tnZjtKT9h+YpGTng NlCcwUbB5n4P7iNz1M34VKopkk/zXRIs9ap++8YrqtKH8/JTfstGGApikhdtQvsJ 9XO+x3CgccRWk0+MRXLaNp9vN3JpVBE6YmKYREuPEd768uzVvsY1ykBt7BRVxNvE rnyiHrSs0QScjfaszVEWLq8iXsgVLYvNVZ24nIJP2FfuQkkXRpSKox0ZeLYtn1M9 9XKTFxnO9AYkXnzqHkUym8maVo2sZwihmsWP2lXBzLPBHOxEU6QsR0pvVlkYXwn7 -----END CERTIFICATE-----Generated at Wed Nov 5 01:52:13 2025 by rpki-client