$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft File: ae9833c8-8b19-48ba-8b98-e74734094959.mft (raw, json) Hash identifier: NWTflto9x378ukDwu9ILasggKt9WpNFqc/1Icnoc1TE= Subject key identifier: 1F:52:C1:FC:9C:DD:FE:6E:14:3D:DF:4C:D8:E5:43:B0:95:B9:A6:8E Authority key identifier: A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 Certificate issuer: /CN=ae9833c8-8b19-48ba-8b98-e74734094959 Certificate serial: 010D0C9F4328584BBFC30E0F450A3B91E45D0400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft Manifest number: 010D0C9F43285847D2D1AA10DACFC0E3F2281371 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 41e19a7e-8f36-383d-904b-62952b216c8e.roa (hash: SmPgX6JkJ0flm6nAz4L2iev50NyVsXZvxoSFim+DuBo=) 2: ae9833c8-8b19-48ba-8b98-e74734094959.crl (hash: 5Qt5CbQyPA/YvA35v7Mjv0NZfE+H3ZlHa8DLDxCdO8M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:0f:45:0a:3b:91:e4:5d:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9833c8-8b19-48ba-8b98-e74734094959 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=84fbc5a4-231b-47f6-a8b1-4e2b078a8ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:01:94:9b:06:62:96:41:c9:cc:f8:8b:8f: 04:58:c7:c0:05:bf:f9:96:4c:5c:52:0b:47:82:9b: d3:2f:9d:3c:86:d7:38:44:5d:75:37:18:c3:f6:04: c0:f8:03:8a:29:f7:7d:06:f9:2d:83:43:ea:51:d7: 3c:ae:c9:cb:9d:78:ac:ce:ac:32:23:d0:66:19:17: 60:c8:05:86:d6:70:b7:d7:71:a4:a1:ee:c5:7c:c0: 75:34:88:88:39:8f:19:e7:9a:0a:85:7b:cd:fa:86: be:05:e4:f1:52:e0:b9:5c:d2:00:2c:84:e4:ac:7a: b9:c5:60:e1:72:33:f8:04:4c:20:51:5d:5a:34:a5: b7:9f:96:3f:b8:7c:42:a8:e9:9e:6c:d1:e4:20:e7: d2:b8:d1:6c:90:78:e1:eb:ec:47:29:51:1b:df:a0: 0a:63:e0:e2:d5:e5:21:8b:0e:fc:87:01:9a:14:02: 77:84:2e:98:b1:85:63:5c:6c:b3:1f:c5:fe:50:04: 02:e4:ea:09:4d:af:2e:9f:ca:0e:b1:91:d6:b6:fa: 34:e9:68:4c:3d:d0:b8:04:49:8b:f5:30:99:41:52: f3:15:38:37:2c:4f:ab:80:86:30:c3:22:ca:c9:e6: dd:47:c3:55:8c:e9:14:57:37:20:aa:22:49:23:88: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:52:C1:FC:9C:DD:FE:6E:14:3D:DF:4C:D8:E5:43:B0:95:B9:A6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl X509v3 Authority Key Identifier: keyid:A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:54:d2:0c:31:3d:e1:4e:3a:3e:5b:b6:62:dc:cb:53:53:e3: f9:07:31:16:de:03:35:d6:1e:77:a1:40:99:f8:62:3a:3a:b4: d4:a5:3b:b0:d0:a0:1b:61:5d:88:26:38:8c:9a:6b:68:00:a1: 0f:7f:27:03:a1:a1:72:1a:53:15:68:84:c9:80:7e:1c:b7:ba: d5:af:04:9c:7a:33:93:cc:08:8a:fb:55:62:af:8f:84:0c:e3: 9b:51:c1:ea:79:7f:ff:5c:1f:72:83:f9:da:90:6a:1a:2e:63: ba:e3:21:02:d8:33:b6:70:16:9c:e8:ac:23:30:50:9b:88:e9: e4:d3:a5:e9:4a:d0:90:94:a2:95:98:56:b7:62:5b:0d:68:fe: 4c:47:71:28:dc:28:f2:37:48:c1:e4:b6:ba:f7:b4:b1:87:cc: ab:ba:0d:eb:9c:c4:5b:fd:d0:f2:52:59:87:57:51:42:c1:fe: 5c:c7:f9:2b:79:cf:21:95:30:39:98:b5:29:78:0c:52:67:20: e9:bc:04:2a:71:9e:eb:8b:c7:a2:43:46:bf:dc:44:e4:c8:52: 03:3e:05:54:38:3c:34:77:19:5e:89:c0:82:5e:0c:c7:c2:51: 29:6b:8e:54:c4:cc:ee:53:f3:81:a1:97:4f:d4:b7:a5:17:e4: 0e:9a:d5:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww4PRQo7keRdBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU5ODMzYzgtOGIxOS00OGJhLThiOTgtZTc0NzM0MDk0 OTU5MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk ODRmYmM1YTQtMjMxYi00N2Y2LWE4YjEtNGUyYjA3OGE4Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQBlJsGYpZBycz4i48EWMfABb/5lkxcUgtH gpvTL508htc4RF11NxjD9gTA+AOKKfd9Bvktg0PqUdc8rsnLnXiszqwyI9BmGRdg yAWG1nC313Gkoe7FfMB1NIiIOY8Z55oKhXvN+oa+BeTxUuC5XNIALITkrHq5xWDh cjP4BEwgUV1aNKW3n5Y/uHxCqOmebNHkIOfSuNFskHjh6+xHKVEb36AKY+Di1eUh iw78hwGaFAJ3hC6YsYVjXGyzH8X+UAQC5OoJTa8un8oOsZHWtvo06WhMPdC4BEmL 9TCZQVLzFTg3LE+rgIYwwyLKyebdR8NVjOkUVzcgqiJJI4hp/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB9Swfyc3f5uFD3fTNjlQ7CVuaaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4 MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3MzQwOTQ5NTkvYWU5ODMzYzgtOGIxOS00 OGJhLThiOTgtZTc0NzM0MDk0OTU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU5ODMzYzgtOGIxOS00OGJhLThi OTgtZTc0NzM0MDk0OTU5L2FlOTgzM2M4LThiMTktNDhiYS04Yjk4LWU3NDczNDA5 NDk1OS5jcmwwHwYDVR0jBBgwFoAUqeNiGHAp+7ec17x8Iv7DVcdDUBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3 MzQwOTQ5NTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDKVNIMMT3hTjo+W7Zi3MtT U+P5BzEW3gM11h53oUCZ+GI6OrTUpTuw0KAbYV2IJjiMmmtoAKEPfycDoaFyGlMV aITJgH4ct7rVrwScejOTzAiK+1Vir4+EDOObUcHqeX//XB9yg/nakGoaLmO64yEC 2DO2cBac6KwjMFCbiOnk06XpStCQlKKVmFa3YlsNaP5MR3Eo3CjyN0jB5La697Sx h8yrug3rnMRb/dDyUlmHV1FCwf5cx/krec8hlTA5mLUpeAxSZyDpvAQqcZ7ri8ei Q0a/3ETkyFIDPgVUODw0dxleicCCXgzHwlEpa45UxMzuU/OBoZdP1LelF+QOmtU+ -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:18 2025 by rpki-client