$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.mft File: aef48fa2-d8c0-4397-b35d-275703760a6c.mft (raw, json) Hash identifier: aMDbi8jqtDdzPfRvMTi+t7sGx0cg6TVL5eSpPR5Pp7E= Subject key identifier: 5C:11:5E:AF:F6:A9:FC:2E:7B:AE:D1:96:04:CE:67:F2:CB:1D:10:95 Authority key identifier: 05:36:0D:57:63:17:9E:9A:87:E0:04:83:AC:79:65:A5:A6:76:7A:3F Certificate issuer: /CN=aef48fa2-d8c0-4397-b35d-275703760a6c Certificate serial: 010D0C9F4328584BC075C3D459998BA279DEF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.mft Manifest number: 010D0C9F4328584073A829092174AE29C3E11D10 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 2e34c7aa-1720-30ac-964f-e2958715b880.roa (hash: s/4mB6yugcCBmXWOANTxXIs+0T+nyTg4S2NQ/RClhcE=) 2: aef48fa2-d8c0-4397-b35d-275703760a6c.crl (hash: PuHE/0d2ACPwQ2iz/wTasikCvmgTfmYt9LKFvNNxyA0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:d4:59:99:8b:a2:79:de:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef48fa2-d8c0-4397-b35d-275703760a6c Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=f04744b3-ca7b-453f-933b-c6233797611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:96:0f:fa:09:9a:ce:02:50:d3:13:67:20: c0:b9:97:85:9d:2a:8c:b0:9d:5c:37:03:60:7a:17: 67:ba:da:e0:ba:5f:2b:e8:7b:13:c6:34:e8:00:f2: 6a:5e:f5:48:52:1e:85:28:c3:f8:45:10:42:05:0d: f8:45:75:c2:9d:47:d6:bf:ba:3c:91:67:d3:29:52: c2:83:86:fc:cb:21:c6:e5:a9:d4:4a:a8:34:b9:09: 15:bd:c2:d4:6b:fb:de:03:c6:a2:a2:dd:02:6e:0d: f2:c7:3c:85:7d:35:ff:a9:ca:a9:9e:86:ce:23:0c: d0:e5:f1:27:6a:1b:c2:13:0b:13:b6:b9:03:47:ba: 87:4f:a1:cf:97:c1:44:1b:59:16:7b:e0:09:c7:36: 25:f4:67:5f:0a:2b:44:23:a9:90:87:38:75:a3:25: ab:90:40:ca:72:61:1a:72:27:92:5a:3f:3f:27:c2: e4:58:e5:7e:00:58:33:ef:ac:2d:1b:34:e2:e0:2c: fc:6f:f7:32:15:f2:45:13:b6:17:cf:f1:b8:5c:3b: 81:ec:62:07:45:3b:c3:6e:4c:b2:82:9a:d1:e6:89: 40:8c:a8:c6:89:72:f9:05:79:9a:99:8f:a1:dc:81: a8:16:be:66:fc:f7:13:cb:4c:6b:60:65:3a:f8:95: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:11:5E:AF:F6:A9:FC:2E:7B:AE:D1:96:04:CE:67:F2:CB:1D:10:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.crl X509v3 Authority Key Identifier: keyid:05:36:0D:57:63:17:9E:9A:87:E0:04:83:AC:79:65:A5:A6:76:7A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9b:05:77:63:00:74:c5:70:dd:b6:56:fc:8d:55:cf:29:ec: 60:3f:04:74:e1:8b:a9:88:a0:7a:95:de:9b:5a:c1:f4:c9:2d: eb:e4:65:53:de:5a:78:89:44:f2:33:af:06:13:7a:d4:fc:cc: af:b7:58:43:d8:c9:8c:3d:56:90:53:4d:5f:f8:9e:7e:bf:2c: 75:1c:fd:10:4e:d8:12:46:cf:36:43:f2:65:a9:f3:6e:2d:30: 8e:c6:42:4e:53:5e:17:47:64:64:43:63:0b:d0:19:eb:6f:64: 98:e3:51:44:07:10:82:27:b6:c7:b2:29:6e:55:73:0f:16:bb: c7:a2:9e:9c:a7:b8:4a:a6:92:d6:b0:0c:9e:55:ac:b4:42:d1: e3:45:95:56:75:b3:34:ed:e7:cf:fa:e7:8e:a1:d5:6a:f8:2f: a0:79:9e:28:18:87:6a:d9:cc:07:91:c7:54:0a:59:e6:57:7d: eb:d2:7c:d1:04:68:a0:3b:3b:d8:53:62:dd:db:3b:46:7b:56: 40:32:5c:43:60:12:fc:98:ba:2a:31:b1:06:82:35:9f:87:0b: eb:5d:bf:ac:91:22:4a:65:5f:9e:41:c1:60:14:ba:4b:f6:f4: f5:2e:8f:4e:39:7f:9d:90:d5:e4:9e:d3:94:41:a1:17:59:90: 6e:c8:08:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcPUWZmLonne84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVmNDhmYTItZDhjMC00Mzk3LWIzNWQtMjc1NzAzNzYw YTZjMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk ZjA0NzQ0YjMtY2E3Yi00NTNmLTkzM2ItYzYyMzM3OTc2MTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArluWD/oJms4CUNMTZyDAuZeFnSqMsJ1cNwNg ehdnutrgul8r6HsTxjToAPJqXvVIUh6FKMP4RRBCBQ34RXXCnUfWv7o8kWfTKVLC g4b8yyHG5anUSqg0uQkVvcLUa/veA8aiot0Cbg3yxzyFfTX/qcqpnobOIwzQ5fEn ahvCEwsTtrkDR7qHT6HPl8FEG1kWe+AJxzYl9GdfCitEI6mQhzh1oyWrkEDKcmEa cieSWj8/J8LkWOV+AFgz76wtGzTi4Cz8b/cyFfJFE7YXz/G4XDuB7GIHRTvDbkyy gprR5olAjKjGiXL5BXmamY+h3IGoFr5m/PcTy0xrYGU6+JVMLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwRXq/2qfwue67RlgTOZ/LLHRCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZWY0 OGZhMi1kOGMwLTQzOTctYjM1ZC0yNzU3MDM3NjBhNmMvYWVmNDhmYTItZDhjMC00 Mzk3LWIzNWQtMjc1NzAzNzYwYTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWVmNDhmYTItZDhjMC00Mzk3LWIz NWQtMjc1NzAzNzYwYTZjL2FlZjQ4ZmEyLWQ4YzAtNDM5Ny1iMzVkLTI3NTcwMzc2 MGE2Yy5jcmwwHwYDVR0jBBgwFoAUBTYNV2MXnpqH4ASDrHllpaZ2ej8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZWY0OGZhMi1kOGMwLTQzOTctYjM1ZC0yNzU3 MDM3NjBhNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5mwV3YwB0xXDdtlb8jVXP KexgPwR04YupiKB6ld6bWsH0yS3r5GVT3lp4iUTyM68GE3rU/Myvt1hD2MmMPVaQ U01f+J5+vyx1HP0QTtgSRs82Q/JlqfNuLTCOxkJOU14XR2RkQ2ML0Bnrb2SY41FE BxCCJ7bHsiluVXMPFrvHop6cp7hKppLWsAyeVay0QtHjRZVWdbM07efP+ueOodVq +C+geZ4oGIdq2cwHkcdUClnmV33r0nzRBGigOzvYU2Ld2ztGe1ZAMlxDYBL8mLoq MbEGgjWfhwvrXb+skSJKZV+eQcFgFLpL9vT1Lo9OOX+dkNXkntOUQaEXWZBuyAhm -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:11 2025 by rpki-client