$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft File: aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft (raw, json) Hash identifier: bPZMasIs+6SWO+EvmfkA3InsDTIh2HNNWjsMggoKVpQ= Subject key identifier: 00:C0:87:6F:CF:B6:E7:5C:F4:0B:A3:0C:B0:2B:53:76:DF:1B:69:2A Authority key identifier: A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 Certificate issuer: /CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Certificate serial: 010D0C9F4328584BBF877F14C07792CB99438B50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft Manifest number: 010D0C9F43285849DF6DB1397B9C565E01C73972 Signing time: Tue 04 Nov 2025 13:00:03 +0000 Manifest this update: Tue 04 Nov 2025 13:00:03 +0000 Manifest next update: Fri 07 Nov 2025 13:00:00 +0000 Files and hashes: 1: aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl (hash: FdADmZ3Yg9jJoshlu5KdqMC64T9YTB+pVjrA7/80A7k=) 2: c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa (hash: MV7RZ0aX7AqPpc/11xOT+JK+vs7kNUSUI2b9ydk+bV8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:87:7f:14:c0:77:92:cb:99:43:8b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Validity Not Before: Nov 4 13:00:03 2025 GMT Not After : Nov 7 13:00:00 2025 GMT Subject: CN=603e3435-8dff-4c7b-87be-29dd73ddcfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:fd:4a:ae:3e:70:23:33:96:7d:c6:70:eb: f9:12:94:31:34:0d:d5:04:57:d7:07:ab:28:3e:e0: 94:0d:5f:7d:13:55:66:99:45:3d:70:62:84:ec:6c: 49:ad:b8:dd:01:cd:89:1d:fa:90:69:67:70:d7:fa: 94:aa:01:cd:4e:9b:8f:97:1a:ad:de:dd:26:f5:1c: 97:e2:7f:a3:cb:6a:33:f0:e6:bd:d7:d6:d0:44:27: e1:22:0a:1b:f5:75:84:cf:82:2f:4a:2a:dd:0f:82: 41:84:7d:ec:ed:b0:66:87:0e:c7:50:8e:03:21:4f: 98:14:22:dc:5a:ed:dd:d1:5a:88:64:97:d2:95:b3: 80:c9:b4:bc:07:d1:e5:fa:ff:a0:54:3c:07:c9:01: 60:85:d7:e2:a0:97:4d:2e:b5:66:45:dd:e0:d7:d1: a8:98:a0:eb:5d:8b:4b:14:e0:ee:2a:e8:ab:ef:5d: 7a:cc:a3:31:ab:a3:31:cb:5d:d6:33:6c:a4:96:2a: 33:b4:42:f2:1b:ac:64:d5:c8:87:5f:e4:62:7d:17: ba:4f:48:27:e1:e4:a8:6e:4f:92:51:4b:9c:fb:73: 58:f6:1c:d7:30:b0:df:75:ed:38:a5:89:99:88:5b: ed:e2:b7:e3:4a:80:10:6b:0f:41:a8:13:e4:3f:07: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:87:6F:CF:B6:E7:5C:F4:0B:A3:0C:B0:2B:53:76:DF:1B:69:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl X509v3 Authority Key Identifier: keyid:A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:56:5b:9e:63:8d:af:64:5e:1c:70:73:8b:55:e5:fe:7b:3b: a3:8d:c8:fa:f5:85:b3:b2:c8:c3:89:d9:01:d4:79:56:d4:bc: f1:5f:45:0b:01:a8:1a:e0:f7:67:4e:16:48:70:9b:fa:0f:93: 5e:18:7f:f9:ef:b8:a5:48:2e:75:0e:7c:b0:6a:f8:11:09:52: a6:ca:0a:4f:fb:5d:74:fb:40:ec:4d:e0:9b:88:9c:87:f5:17: 5b:65:77:c1:51:b1:da:69:fa:0d:4b:95:cb:b0:10:46:c8:9b: 23:ef:ff:de:b4:a4:53:66:87:bf:40:bb:a6:eb:5b:d4:47:3a: 47:be:45:0c:27:c2:cc:e4:01:0d:80:a0:6e:26:07:c5:d4:5e: 4f:67:5a:6e:d8:e9:76:41:82:58:54:64:61:24:e5:11:f8:a0: 52:0c:6b:53:c0:4d:83:8a:b8:9f:6a:69:16:5d:06:87:2d:9f: c2:97:e5:e2:1f:fe:21:ce:be:8e:18:25:25:ff:0d:43:a2:e0: 83:81:65:88:50:84:ab:d7:84:76:b2:4d:8d:0f:29:82:33:67: 1e:03:1a:54:b8:9e:0e:f2:38:6d:bc:f3:9c:a8:83:9c:bf:a4: cc:4a:cc:59:52:4c:3f:e6:fb:e8:9d:2b:e9:89:8a:6e:77:7a: 06:95:82:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/h38UwHeSy5lDi1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2OTZiNWUtZjgzYi00ZWU4LWIxYzgtODQ2MjE1Y2Q1 ZTRkMB4XDTI1MTEwNDEzMDAwM1oXDTI1MTEwNzEzMDAwMFowLzEtMCsGA1UEAxMk NjAzZTM0MzUtOGRmZi00YzdiLTg3YmUtMjlkZDczZGRjZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr79Sq4+cCMzln3GcOv5EpQxNA3VBFfXB6so PuCUDV99E1VmmUU9cGKE7GxJrbjdAc2JHfqQaWdw1/qUqgHNTpuPlxqt3t0m9RyX 4n+jy2oz8Oa919bQRCfhIgob9XWEz4IvSirdD4JBhH3s7bBmhw7HUI4DIU+YFCLc Wu3d0VqIZJfSlbOAybS8B9Hl+v+gVDwHyQFghdfioJdNLrVmRd3g19GomKDrXYtL FODuKuir7116zKMxq6Mxy13WM2yklioztELyG6xk1ciHX+RifRe6T0gn4eSobk+S UUuc+3NY9hzXMLDfde04pYmZiFvt4rfjSoAQaw9BqBPkPwfeAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFADAh2/Ptudc9AujDLArU3bfG2kqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5 NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYyMTVjZDVlNGQvYWE2OTZiNWUtZjgzYi00 ZWU4LWIxYzgtODQ2MjE1Y2Q1ZTRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE2OTZiNWUtZjgzYi00ZWU4LWIx YzgtODQ2MjE1Y2Q1ZTRkL2FhNjk2YjVlLWY4M2ItNGVlOC1iMWM4LTg0NjIxNWNk NWU0ZC5jcmwwHwYDVR0jBBgwFoAUqWA2m6XgUTVL+E/eDKAgdd6bZEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYy MTVjZDVlNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeVlueY42vZF4ccHOLVeX+ ezujjcj69YWzssjDidkB1HlW1LzxX0ULAaga4PdnThZIcJv6D5NeGH/577ilSC51 DnywavgRCVKmygpP+110+0DsTeCbiJyH9RdbZXfBUbHaafoNS5XLsBBGyJsj7//e tKRTZoe/QLum61vURzpHvkUMJ8LM5AENgKBuJgfF1F5PZ1pu2Ol2QYJYVGRhJOUR +KBSDGtTwE2DirifamkWXQaHLZ/Cl+XiH/4hzr6OGCUl/w1DouCDgWWIUISr14R2 sk2NDymCM2ceAxpUuJ4O8jhtvPOcqIOcv6TMSsxZUkw/5vvonSvpiYpud3oGlYIF -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:19 2025 by rpki-client