$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft File: a4aa20f3-940b-4178-8460-6af30ac20ab8.mft (raw, json) Hash identifier: ol3WMiry4Tk8+SWyx67hxXiyn5G6o7FGbps7xjsWXCc= Subject key identifier: 62:04:39:BF:F8:35:97:D7:1E:58:F7:C5:2A:15:B2:FA:05:C9:1B:CC Authority key identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 Certificate issuer: /CN=a4aa20f3-940b-4178-8460-6af30ac20ab8 Certificate serial: 010D0C9F4328584BC10A9D2E18A13C56CF017B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft Manifest number: 010D0C9F43285848E2E19D0431924C981F3ABB4E Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Fri 07 Nov 2025 02:00:00 +0000 Files and hashes: 1: 814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa (hash: eSIubP8+J3nSMxvCF9biOMzWIjAaGoBMcEWTAwB9aWQ=) 2: a4aa20f3-940b-4178-8460-6af30ac20ab8.crl (hash: 6ruydHMgGPFNVJ/Yu15tinAu84JsaA/cvgy22xIz2ws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9d:2e:18:a1:3c:56:cf:01:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4aa20f3-940b-4178-8460-6af30ac20ab8 Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 7 02:00:00 2025 GMT Subject: CN=3bf780f5-e69f-40ab-9cfa-ff31b0fd57a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:89:91:e1:bb:b7:6f:01:a0:7c:34:d4:89: bc:d6:82:28:f6:22:06:a7:05:a4:51:df:63:14:be: 05:cf:5d:30:44:d8:f6:9d:e5:3b:cb:95:30:ed:64: bc:10:17:8b:ee:8a:c4:d3:63:90:34:51:3e:81:43: 9c:e2:51:4b:34:31:50:52:92:d1:06:8e:1f:15:fe: 6c:b6:ed:94:83:40:89:71:87:1d:5c:50:62:7e:f2: 65:29:de:73:61:f0:9c:ac:3d:fa:e1:8e:c7:e7:5a: 1c:5b:02:85:02:2e:d9:8c:69:c6:7c:81:ee:8f:2c: 88:0d:df:4e:09:95:fb:c1:14:3e:4a:53:55:73:99: 64:5e:be:f0:1b:a8:16:3a:9d:9b:77:18:57:50:e3: 9c:b0:0f:b6:76:2e:c8:50:df:d2:9b:b2:4f:a1:23: b7:ac:32:22:38:fc:70:b7:c6:42:76:e4:06:63:34: 03:90:db:8d:ea:04:f1:69:f7:a5:bf:dc:83:58:d6: 83:7f:b5:64:bf:74:02:eb:c0:73:3d:c3:a6:7c:d4: b6:b5:57:6d:12:52:98:b3:bd:7b:a9:b0:b5:2a:18: 9e:70:41:ae:2c:68:64:4a:64:27:0c:5d:9c:a8:66: b5:0a:0c:c5:4d:d8:92:7b:52:c5:04:a3:c7:18:20: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:04:39:BF:F8:35:97:D7:1E:58:F7:C5:2A:15:B2:FA:05:C9:1B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl X509v3 Authority Key Identifier: keyid:8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5b:b7:2f:f0:2b:a6:1b:e6:c2:82:5d:f2:b7:11:90:74:d6: 33:35:e6:e6:5e:3d:95:2a:c8:0a:9d:3d:34:ab:04:99:e6:ab: 4c:7c:62:e2:de:17:cc:a5:0d:36:a7:ea:4a:e3:a7:fd:7e:03: e5:35:5f:66:94:12:d6:21:1e:61:95:b8:ed:3d:72:0c:7f:70: 1c:ee:f0:74:13:12:3d:cb:ca:f0:81:df:c0:45:97:fa:88:8a: 22:e4:d4:75:fb:b3:38:cc:5b:ec:a9:cc:80:83:f0:6f:5d:8e: bc:9f:fd:0b:d0:68:b0:be:f1:95:22:70:5e:d7:3d:70:73:e7: ea:34:6f:a7:0d:eb:ff:6d:9b:01:e2:1a:ad:e2:7e:cc:4f:0d: e6:a0:fd:37:09:99:c4:0a:cb:d5:f0:33:cf:48:80:b6:74:39: 08:50:2a:bf:5a:e7:22:5c:c8:b9:c5:cb:5e:bc:7c:3c:a6:e5: 33:bc:f7:71:8d:b6:94:11:92:47:c9:4b:70:1b:4b:68:71:01: d7:83:03:9f:67:ca:91:2f:be:b5:1a:36:32:fa:69:63:b1:0d: 48:98:46:e1:b9:f0:07:91:4e:85:89:8d:53:17:7e:7a:fb:19: 79:ad:12:62:09:0a:d5:69:95:59:c8:31:98:29:1f:36:ac:c9: a3:11:3b:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp0uGKE8Vs8Be4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRhYTIwZjMtOTQwYi00MTc4LTg0NjAtNmFmMzBhYzIw YWI4MB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwNzAyMDAwMFowLzEtMCsGA1UEAxMk M2JmNzgwZjUtZTY5Zi00MGFiLTljZmEtZmYzMWIwZmQ1N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozqJkeG7t28BoHw01Im81oIo9iIGpwWkUd9j FL4Fz10wRNj2neU7y5Uw7WS8EBeL7orE02OQNFE+gUOc4lFLNDFQUpLRBo4fFf5s tu2Ug0CJcYcdXFBifvJlKd5zYfCcrD364Y7H51ocWwKFAi7ZjGnGfIHujyyIDd9O CZX7wRQ+SlNVc5lkXr7wG6gWOp2bdxhXUOOcsA+2di7IUN/Sm7JPoSO3rDIiOPxw t8ZCduQGYzQDkNuN6gTxafelv9yDWNaDf7Vkv3QC68BzPcOmfNS2tVdtElKYs717 qbC1KhiecEGuLGhkSmQnDF2cqGa1CgzFTdiSe1LFBKPHGCDxzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGIEOb/4NZfXHlj3xSoVsvoFyRvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGFh MjBmMy05NDBiLTQxNzgtODQ2MC02YWYzMGFjMjBhYjgvYTRhYTIwZjMtOTQwYi00 MTc4LTg0NjAtNmFmMzBhYzIwYWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRhYTIwZjMtOTQwYi00MTc4LTg0 NjAtNmFmMzBhYzIwYWI4L2E0YWEyMGYzLTk0MGItNDE3OC04NDYwLTZhZjMwYWMy MGFiOC5jcmwwHwYDVR0jBBgwFoAUiumv2n4ikIrU0JM2fY/NmEqvwmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGFhMjBmMy05NDBiLTQxNzgtODQ2MC02YWYz MGFjMjBhYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3W7cv8CumG+bCgl3ytxGQ dNYzNebmXj2VKsgKnT00qwSZ5qtMfGLi3hfMpQ02p+pK46f9fgPlNV9mlBLWIR5h lbjtPXIMf3Ac7vB0ExI9y8rwgd/ARZf6iIoi5NR1+7M4zFvsqcyAg/BvXY68n/0L 0GiwvvGVInBe1z1wc+fqNG+nDev/bZsB4hqt4n7MTw3moP03CZnECsvV8DPPSIC2 dDkIUCq/WuciXMi5xctevHw8puUzvPdxjbaUEZJHyUtwG0tocQHXgwOfZ8qRL761 GjYy+mljsQ1ImEbhufAHkU6FiY1TF356+xl5rRJiCQrVaZVZyDGYKR82rMmjETuh -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:27 2025 by rpki-client