$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: IPdrV48MRqN29PAPgPkTmvj8nskg2WrjX6v7Vmj+uMg= Subject key identifier: EC:18:A4:B1:90:B1:6A:6D:85:AB:11:89:62:EE:B3:54:AC:DE:4E:F2 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584BBF10603964CEBDB1290564E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0224A3 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: VODDrLHVHwhXxdvcPqpZXQjVTLZH6ljicRLy9OTPwwc=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Yrb29edGHECK/Nyu95mBbhm/PTN2GjD/g+rc+aE3clE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:60:39:64:ce:bd:b1:29:05:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=de99cb1b-2c61-4039-a2d0-6a401d5a6ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:c4:e9:83:ff:8c:9f:75:f5:9e:90:22:92: e1:0b:ba:34:e6:ee:8a:72:21:98:68:d0:06:7d:a1: 24:9d:f7:3a:92:34:fa:5d:5f:dc:0e:49:e9:44:7e: 5e:68:71:3c:18:31:c3:7a:a5:1d:82:53:38:7b:54: c1:cd:b0:a2:1f:d7:69:3b:24:f6:54:00:2a:c4:66: 2f:9f:00:5c:b6:0f:e0:ed:c2:50:d4:2d:e1:72:58: 55:b0:a5:97:1b:9c:9d:c8:fc:36:22:74:89:3a:d8: 4c:24:13:67:83:ea:96:80:64:c0:48:2f:77:5f:6f: 2d:95:08:3b:4a:85:f2:7f:1e:9d:62:07:c8:ae:85: 1d:7f:c3:6d:9a:1a:85:ef:68:cc:81:59:6b:26:63: 6c:dd:22:6c:1d:2d:3c:b7:f5:c2:61:da:c9:c5:f6: 81:fd:71:98:a7:44:e6:5b:51:5c:79:4a:da:81:35: 66:80:84:b3:bf:e5:57:82:5b:0f:2f:8b:d7:03:8e: a3:9b:11:c6:0a:72:e1:50:3d:cc:ad:06:64:f6:64: 05:56:ba:dc:74:d5:a5:e9:51:9a:12:f6:ab:5f:e0: 08:ff:9c:2f:71:00:94:8d:c9:09:d3:50:94:82:f8: 39:c5:93:6f:39:7d:73:08:25:56:95:b4:d6:65:3e: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:18:A4:B1:90:B1:6A:6D:85:AB:11:89:62:EE:B3:54:AC:DE:4E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0b:2f:33:d0:eb:22:9a:29:d3:1f:ea:f4:ca:04:5b:5d:a1: b5:8f:46:93:2a:e3:1b:4d:13:03:d5:65:3f:3b:aa:6c:cf:e8: 16:09:90:5b:7b:a5:cf:60:8e:d0:28:c9:24:14:45:03:ee:58: 8f:a8:83:c0:fa:4e:12:33:8f:50:ab:2c:8d:9a:13:29:c6:ac: 10:6b:3f:cc:de:ac:ad:0c:bb:a4:2f:7b:51:47:76:b0:3b:42: 83:6d:28:00:d5:a0:b7:76:7c:06:a2:cf:cf:1b:a3:00:7d:4a: cd:81:bc:d6:d6:0e:c0:a7:14:07:58:34:c4:1f:76:87:2c:87: da:2e:7f:d5:3e:e8:e2:b1:37:69:64:d4:ec:8d:52:9c:54:4e: 5a:95:5e:80:00:9c:26:1f:e0:6c:4e:2f:b3:33:ff:b0:3d:3e: 42:38:72:d3:65:0a:d4:9a:04:7e:6c:b0:75:d9:07:cd:f0:87: b9:bd:c7:8b:c1:17:c7:88:03:fb:67:94:aa:c4:e4:1c:5b:fa: ac:28:99:36:a0:e0:e5:4d:9e:66:bb:fd:a2:0f:0e:7f:a4:1a: 43:27:c8:f7:bb:dd:48:ff:6e:54:88:74:25:bd:ee:78:48:0c: 35:55:f3:74:69:13:21:b1:bf:94:e2:2d:9d:90:07:d7:ea:4c: 44:2a:22:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGA5ZM69sSkFZOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk ZGU5OWNiMWItMmM2MS00MDM5LWEyZDAtNmE0MDFkNWE2ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CzE6YP/jJ919Z6QIpLhC7o05u6KciGYaNAG faEknfc6kjT6XV/cDknpRH5eaHE8GDHDeqUdglM4e1TBzbCiH9dpOyT2VAAqxGYv nwBctg/g7cJQ1C3hclhVsKWXG5ydyPw2InSJOthMJBNng+qWgGTASC93X28tlQg7 SoXyfx6dYgfIroUdf8NtmhqF72jMgVlrJmNs3SJsHS08t/XCYdrJxfaB/XGYp0Tm W1FceUragTVmgISzv+VXglsPL4vXA46jmxHGCnLhUD3MrQZk9mQFVrrcdNWl6VGa EvarX+AI/5wvcQCUjckJ01CUgvg5xZNvOX1zCCVWlbTWZT7qpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOwYpLGQsWpthasRiWLus1Ss3k7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9Cy8z0OsiminTH+r0ygRb XaG1j0aTKuMbTRMD1WU/O6psz+gWCZBbe6XPYI7QKMkkFEUD7liPqIPA+k4SM49Q qyyNmhMpxqwQaz/M3qytDLukL3tRR3awO0KDbSgA1aC3dnwGos/PG6MAfUrNgbzW 1g7ApxQHWDTEH3aHLIfaLn/VPujisTdpZNTsjVKcVE5alV6AAJwmH+BsTi+zM/+w PT5COHLTZQrUmgR+bLB12QfN8Ie5vceLwRfHiAP7Z5SqxOQcW/qsKJk2oODlTZ5m u/2iDw5/pBpDJ8j3u91I/25UiHQlve54SAw1VfN0aRMhsb+U4i2dkAfX6kxEKiLJ -----END CERTIFICATE-----Generated at Wed Nov 5 01:27:58 2025 by rpki-client