$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft File: aa90ea59-501e-46c9-884b-8efb5caec147.mft (raw, json) Hash identifier: 3Y7/K6np2Za9QMKiFQ7DXQy/+xEHlKvWQECaaQPOH/M= Subject key identifier: 2A:2D:DA:02:AC:7D:F7:DC:B3:6D:F3:DE:4E:D3:C3:13:FE:D0:A2:3D Authority key identifier: 81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B Certificate issuer: /CN=aa90ea59-501e-46c9-884b-8efb5caec147 Certificate serial: 010D0C9F4328584BBF4BF0685EA93A997EA8E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft Manifest number: 010D0C9F43285848637C34552B282F6283CE5ECC Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Fri 07 Nov 2025 11:00:00 +0000 Files and hashes: 1: aa90ea59-501e-46c9-884b-8efb5caec147.crl (hash: s/nRXPIG+amEbNR7hwtssJu3FwsHQDzdcYzgY6ASUuA=) 2: c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa (hash: CDaGI1fhJgbWFMLrk7VAm23LPWWdTg6UBQ7JZxcyeWo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f0:68:5e:a9:3a:99:7e:a8:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa90ea59-501e-46c9-884b-8efb5caec147 Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 7 11:00:00 2025 GMT Subject: CN=8659b5fa-22ec-47e6-8e7e-40a1b0f3873c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:d5:50:f0:49:72:57:6c:37:fb:1e:c7:1d: 00:b3:3d:26:69:b7:d0:20:11:20:97:ea:ec:8a:95: a5:e4:c0:2a:cd:f5:09:b3:51:8a:9b:11:9d:8f:65: a9:52:aa:51:69:12:43:c8:9e:40:b6:e6:d1:79:64: f2:99:bd:7f:a6:1e:47:2c:6e:3e:81:33:f7:07:b6: a6:3f:89:bf:d9:a4:20:e8:49:0d:78:e3:20:08:8b: 28:15:95:39:48:88:14:1a:1c:ce:f6:7c:9f:ed:5a: b0:c3:53:f3:c7:86:6f:7e:4f:31:cf:2c:7e:31:fa: 26:84:d0:32:6b:d3:87:cc:94:37:28:7b:25:d9:fb: a4:2f:aa:d3:01:39:4d:a0:c8:0e:fc:f1:24:85:82: 0a:a9:5a:39:d4:49:57:0c:9a:5d:b9:26:1a:23:0e: 55:25:e1:9a:db:cb:16:f6:9b:fe:81:34:57:70:f7: a5:99:68:1a:8e:6c:f9:da:a0:04:e3:84:10:bf:74: cc:3e:e5:4c:7c:b3:ad:bd:86:4f:c5:fd:ca:85:ee: c6:11:6e:11:ee:39:17:ea:25:3f:70:f8:49:9a:63: bb:6f:cc:bf:ae:f3:a2:dc:e1:af:7b:6d:e3:4e:cc: 1e:b8:42:f1:b0:b8:6a:1c:95:bb:e5:26:39:53:67: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:DA:02:AC:7D:F7:DC:B3:6D:F3:DE:4E:D3:C3:13:FE:D0:A2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl X509v3 Authority Key Identifier: keyid:81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e4:2b:b9:c3:90:0e:ca:2d:e4:a3:05:a5:81:4b:36:99:10: e0:4d:38:19:e6:de:22:76:55:1e:1b:25:1e:4f:73:0e:6d:ac: 81:e3:f2:a6:04:09:0a:af:0e:d5:29:d9:63:3a:95:21:42:4f: c0:2b:99:b4:63:15:2b:9d:2e:39:e3:c8:7d:ae:5f:e8:32:f3: 5c:8a:dc:55:5a:03:5d:db:79:38:3f:0c:23:e2:f5:b0:db:bc: 49:ba:01:07:bd:00:a8:b9:dd:47:95:a0:04:de:8a:35:95:5c: 8c:19:13:21:ca:9f:db:bd:92:1f:c3:c5:c5:b6:32:50:bd:02: 99:f0:d6:da:9c:cb:f9:ce:75:aa:0a:3a:75:b6:22:f0:77:35: 18:42:0a:df:e7:31:0d:77:ae:7e:92:03:6c:67:95:66:53:63: 2f:16:ed:64:f8:64:7b:11:1f:fa:62:12:77:bb:67:37:3e:b7: 76:fe:b6:c3:d0:b1:25:d7:f2:65:ea:a4:f4:df:d5:de:d3:7e: 7d:dd:db:3b:58:18:ba:51:15:71:4c:e5:33:e5:a8:aa:30:17: 72:09:08:2f:37:2f:e2:7e:cb:23:c0:75:82:d3:6d:e6:e1:7a: 36:fa:01:d0:61:28:6f:2b:4b:44:98:f0:cc:62:39:9c:05:ae: bd:a6:08:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/BoXqk6mX6o4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MGVhNTktNTAxZS00NmM5LTg4NGItOGVmYjVjYWVj MTQ3MB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNzExMDAwMFowLzEtMCsGA1UEAxMk ODY1OWI1ZmEtMjJlYy00N2U2LThlN2UtNDBhMWIwZjM4NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yzVUPBJcldsN/sexx0Asz0mabfQIBEgl+rs ipWl5MAqzfUJs1GKmxGdj2WpUqpRaRJDyJ5AtubReWTymb1/ph5HLG4+gTP3B7am P4m/2aQg6EkNeOMgCIsoFZU5SIgUGhzO9nyf7Vqww1Pzx4Zvfk8xzyx+MfomhNAy a9OHzJQ3KHsl2fukL6rTATlNoMgO/PEkhYIKqVo51ElXDJpduSYaIw5VJeGa28sW 9pv+gTRXcPelmWgajmz52qAE44QQv3TMPuVMfLOtvYZPxf3Khe7GEW4R7jkX6iU/ cPhJmmO7b8y/rvOi3OGve23jTsweuELxsLhqHJW75SY5U2ej6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCot2gKsfffcs23z3k7TwxP+0KI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTkw ZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZiNWNhZWMxNDcvYWE5MGVhNTktNTAxZS00 NmM5LTg4NGItOGVmYjVjYWVjMTQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWE5MGVhNTktNTAxZS00NmM5LTg4 NGItOGVmYjVjYWVjMTQ3L2FhOTBlYTU5LTUwMWUtNDZjOS04ODRiLThlZmI1Y2Fl YzE0Ny5jcmwwHwYDVR0jBBgwFoAUgYUNw46E27WwU3bxuGMy3R40e0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTkwZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZi NWNhZWMxNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw5Cu5w5AOyi3kowWlgUs2 mRDgTTgZ5t4idlUeGyUeT3MObayB4/KmBAkKrw7VKdljOpUhQk/AK5m0YxUrnS45 48h9rl/oMvNcitxVWgNd23k4Pwwj4vWw27xJugEHvQCoud1HlaAE3oo1lVyMGRMh yp/bvZIfw8XFtjJQvQKZ8NbanMv5znWqCjp1tiLwdzUYQgrf5zENd65+kgNsZ5Vm U2MvFu1k+GR7ER/6YhJ3u2c3Prd2/rbD0LEl1/Jl6qT039Xe03593ds7WBi6URVx TOUz5aiqMBdyCQgvNy/ifssjwHWC023m4Xo2+gHQYShvK0tEmPDMYjmcBa69pggh -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:15 2025 by rpki-client