$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: emGb3jekpOsgnZA668nMyeYvBTu/ffMinNHAy656CLs= Subject key identifier: A7:9E:23:71:D3:35:73:B7:DE:86:33:23:55:CE:B1:70:A8:A5:02:0C Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F4328584BC1DB13A5553C93C85256BB58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C905D Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: x6QfDYsWCJyG23FKYPGroS81LbnWZaafEG30yoLbEMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:13:a5:55:3c:93:c8:52:56:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=301a9ba5-dbb7-46c9-b6f4-b563a379768b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:b4:ab:9a:98:13:e1:00:bc:15:fe:f7:ab: 70:4d:bc:72:c1:ef:89:2a:ae:d2:74:6f:45:f7:92: 5e:67:e9:4e:01:08:6e:d6:87:e0:9f:39:e3:70:72: 2e:fa:df:d7:42:04:63:91:7e:bb:7f:af:63:c5:6a: b7:94:58:6d:4e:c2:b5:ea:d5:16:ed:25:1f:eb:f0: 6e:26:64:8d:d6:ae:13:08:e1:de:63:58:52:16:17: 68:06:5a:19:be:05:b6:c8:d3:a3:d1:58:b2:d4:0d: e9:8e:61:a6:a9:9b:11:a4:1c:fb:90:30:73:4b:6b: f7:48:00:59:02:70:90:69:f4:28:93:47:be:13:e8: 38:ad:c0:89:e1:7b:57:5a:51:e5:2b:d3:6e:63:da: ca:99:c4:0d:a7:25:b9:58:89:c0:6f:89:ff:59:8e: 0b:59:de:77:5a:6b:dd:08:9b:26:20:17:54:e6:0f: d4:3a:ad:1f:b8:2e:23:9c:76:fa:fe:2e:5e:37:67: 2d:1e:05:b9:97:41:d5:20:3a:83:1e:5e:4c:6a:80: d6:de:16:d3:16:01:bd:8f:ae:e4:50:15:c8:f8:e5: cf:8f:be:35:68:2b:b9:a8:7b:aa:72:1c:0b:20:73: 43:a8:b1:58:0d:06:4d:28:8b:b7:ed:82:a8:6d:f0: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9E:23:71:D3:35:73:B7:DE:86:33:23:55:CE:B1:70:A8:A5:02:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c8:03:f1:68:56:18:7f:22:75:1d:f5:f0:7f:fc:86:06:73: 97:4b:eb:84:2f:1c:0f:30:a6:59:37:c7:80:27:76:1b:68:95: e7:d3:4e:31:91:63:f3:5a:4f:1a:7b:87:73:1f:cb:a1:51:bd: e3:ff:cc:7f:41:35:54:d1:e3:93:c3:d9:0f:9d:55:4e:0c:8a: 0a:94:94:e4:13:26:56:97:91:c7:01:3c:93:69:a6:f3:22:55: 68:54:f4:8d:5f:7b:20:a6:9e:66:82:f2:85:50:f1:9d:19:a3: 1e:c7:52:1a:d6:cb:69:1d:32:1c:d1:cc:2d:93:9d:75:47:92: 44:78:dd:68:59:e2:96:78:16:0e:dc:e4:c9:9a:6b:bc:2d:93: e7:b3:0d:c7:1b:0d:5b:f0:bf:1f:f2:ec:ef:6a:2f:b2:ec:e4: e1:6d:c3:b4:39:99:87:8c:75:65:08:b3:3a:7b:10:f4:72:72: a3:3a:94:a6:7c:5c:30:be:a0:b1:e9:14:ad:9e:92:93:97:f1: a1:a1:aa:bd:23:38:eb:4b:7a:b5:59:29:a0:48:d4:6e:b3:86: ba:4a:19:21:8a:b4:dc:79:5c:76:94:b4:14:31:8d:26:89:53: 21:8f:0d:57:e4:e7:f5:f1:bd:3b:3a:e5:99:a3:31:d3:a1:ce: 15:b6:cb:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xOlVTyTyFJWu1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk MzAxYTliYTUtZGJiNy00NmM5LWI2ZjQtYjU2M2EzNzk3NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyC0q5qYE+EAvBX+96twTbxywe+JKq7SdG9F 95JeZ+lOAQhu1ofgnznjcHIu+t/XQgRjkX67f69jxWq3lFhtTsK16tUW7SUf6/Bu JmSN1q4TCOHeY1hSFhdoBloZvgW2yNOj0Viy1A3pjmGmqZsRpBz7kDBzS2v3SABZ AnCQafQok0e+E+g4rcCJ4XtXWlHlK9NuY9rKmcQNpyW5WInAb4n/WY4LWd53Wmvd CJsmIBdU5g/UOq0fuC4jnHb6/i5eN2ctHgW5l0HVIDqDHl5MaoDW3hbTFgG9j67k UBXI+OXPj741aCu5qHuqchwLIHNDqLFYDQZNKIu37YKobfCFzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKeeI3HTNXO33oYzI1XOsXCopQIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLyAPxaFYYfyJ1HfXwf/yG BnOXS+uELxwPMKZZN8eAJ3YbaJXn004xkWPzWk8ae4dzH8uhUb3j/8x/QTVU0eOT w9kPnVVODIoKlJTkEyZWl5HHATyTaabzIlVoVPSNX3sgpp5mgvKFUPGdGaMex1Ia 1stpHTIc0cwtk511R5JEeN1oWeKWeBYO3OTJmmu8LZPnsw3HGw1b8L8f8uzvai+y 7OThbcO0OZmHjHVlCLM6exD0cnKjOpSmfFwwvqCx6RStnpKTl/Ghoaq9IzjrS3q1 WSmgSNRus4a6ShkhirTceVx2lLQUMY0miVMhjw1X5Of18b07OuWZozHToc4Vtsvs -----END CERTIFICATE-----Generated at Wed Nov 5 19:11:18 2025 by rpki-client