$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: 9MYrReCtPsirKx4FbzJazL+lDZWQEKOWOyCfSbVYirM= Subject key identifier: BC:6C:8C:5C:E0:1D:B9:5D:34:86:2F:83:E3:54:CF:7C:B7:37:54:33 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584BBF10606BD9373D2061A08A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B6C Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: zLZ4dGXhKCFMXZ9YD8MYUNFahYFknPVfQ3lO3W2OMZM=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: QI+7cwgQYexvHpym/GQqpTN6ZMbclj03kusUcfQrRKs=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: /mnDuNq1hK4Cr3fi7kAAadRSX/bYKw/XBVrJVT8XTD4=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: FOHlL6sArGYpIoYbFkaBLknah8Pt//O7r5qfraMNCFY=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: KebL9jylRxBbE+y7rAXJQcXHePCz+t/4LzLE9ysAe58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:60:6b:d9:37:3d:20:61:a0:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=ab0c0cfa-c61e-4798-a776-17b7917f7dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:35:8e:92:69:65:2c:b1:c3:03:6d:a2:33: cd:06:6c:02:07:f8:85:b0:be:c4:7b:8a:bc:2c:74: ae:b8:36:14:15:6d:8e:70:c7:9a:df:f5:d7:19:df: 31:20:3e:4b:fa:1a:7e:62:e6:24:28:63:75:7d:a8: a9:38:cb:b0:5f:65:a5:55:bc:cd:9d:a9:e3:25:38: 2c:3d:bb:40:57:7b:63:54:0a:7e:79:b0:de:9e:b6: 57:70:31:b5:03:31:3e:f9:21:60:40:79:4d:7f:df: 94:a7:57:20:91:44:5e:af:08:f9:5a:4f:87:e9:46: a1:f9:a0:1e:86:a3:07:47:57:b0:40:77:e3:42:64: 98:b3:27:30:a7:29:19:d5:ea:25:3a:06:d2:c5:ea: a4:58:ab:24:25:f3:78:62:ac:1b:57:8c:b0:36:d7: 30:64:32:f8:68:e9:43:96:3b:48:5d:48:83:45:63: 61:61:10:4d:94:a0:03:2c:33:9a:85:ca:e5:36:96: 72:20:db:ff:8c:fa:10:e3:a9:1d:5d:fd:d3:45:76: d6:b4:c5:89:27:be:24:ab:7a:60:df:5d:cc:ed:ca: db:04:32:58:60:4c:c0:1c:1f:35:56:49:6a:a9:b7: f9:38:61:6e:64:b7:2f:52:4f:6d:ee:6d:33:02:ba: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:8C:5C:E0:1D:B9:5D:34:86:2F:83:E3:54:CF:7C:B7:37:54:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:31:01:08:53:ae:e2:f8:10:16:a7:2d:e5:06:9f:83:43:a1: 07:87:92:48:a3:ef:e8:f3:1f:84:72:44:ee:9b:e3:86:f1:65: 36:34:9a:16:09:05:d3:46:d8:46:04:12:93:5e:e0:f7:77:01: 48:47:71:6e:88:fa:cd:33:08:93:81:a9:ea:7e:7a:0d:fe:2c: c0:61:49:ff:f4:43:8c:5b:4f:05:14:62:0d:c4:2b:cd:d1:92: ec:5f:f3:0e:99:ef:11:a9:b8:30:aa:b3:b0:21:1e:4a:f2:58: 81:1c:ce:9c:d6:42:05:2f:6b:53:35:f1:07:cf:fa:20:58:48: c9:ad:68:7f:25:86:36:17:f3:b4:63:7a:19:f7:ee:a0:ea:15: 29:5d:27:b0:37:51:ac:f0:c0:02:60:1a:da:e8:ed:66:20:6c: ea:15:e2:23:72:49:22:8d:5d:83:62:b7:86:23:e1:be:9b:9a: b2:33:92:4a:de:a7:66:f6:5f:62:85:dd:b7:df:8d:5d:75:bb: 84:ff:d4:30:21:30:2c:96:af:79:92:64:e1:fa:26:bc:58:56: b3:ee:cb:67:48:fd:62:28:6f:02:06:33:09:cd:ac:36:f2:0d: 89:e0:d7:48:e4:f0:5e:bb:9b:76:a6:68:df:a3:e3:b1:e2:ea: c6:17:4c:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGBr2Tc9IGGgigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk YWIwYzBjZmEtYzYxZS00Nzk4LWE3NzYtMTdiNzkxN2Y3ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh01jpJpZSyxwwNtojPNBmwCB/iFsL7Ee4q8 LHSuuDYUFW2OcMea3/XXGd8xID5L+hp+YuYkKGN1faipOMuwX2WlVbzNnanjJTgs PbtAV3tjVAp+ebDenrZXcDG1AzE++SFgQHlNf9+Up1cgkURerwj5Wk+H6Uah+aAe hqMHR1ewQHfjQmSYsycwpykZ1eolOgbSxeqkWKskJfN4YqwbV4ywNtcwZDL4aOlD ljtIXUiDRWNhYRBNlKADLDOahcrlNpZyINv/jPoQ46kdXf3TRXbWtMWJJ74kq3pg 313M7crbBDJYYEzAHB81Vklqqbf5OGFuZLcvUk9t7m0zAroO5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLxsjFzgHbldNIYvg+NUz3y3N1QzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkMQEIU67i+BAWpy3lBp+D Q6EHh5JIo+/o8x+EckTum+OG8WU2NJoWCQXTRthGBBKTXuD3dwFIR3FuiPrNMwiT ganqfnoN/izAYUn/9EOMW08FFGINxCvN0ZLsX/MOme8RqbgwqrOwIR5K8liBHM6c 1kIFL2tTNfEHz/ogWEjJrWh/JYY2F/O0Y3oZ9+6g6hUpXSewN1Gs8MACYBra6O1m IGzqFeIjckkijV2DYreGI+G+m5qyM5JK3qdm9l9ihd23341ddbuE/9QwITAslq95 kmTh+ia8WFaz7stnSP1iKG8CBjMJzaw28g2J4NdI5PBeu5t2pmjfo+Ox4urGF0xv -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:11 2025 by rpki-client