$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft File: aa912e91-41d3-4894-893c-8de4f94175f9.mft (raw, json) Hash identifier: sH0BW2wvt9s0BSUg1jJrNFpn2nMD5GadzWskZimgVmk= Subject key identifier: 0F:D3:50:AB:ED:E0:5D:48:34:67:EA:C4:D6:B2:BB:05:B8:35:F6:85 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584BC075C3B5702A042EC50A3160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft Manifest number: 010D0C9F4328584073A82612B62F47807E021ED7 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (hash: ttJzKtqBlhGRh/vPM4ixL8/AvgkGxnBes0v7cNuYmPs=) 2: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (hash: DVKEH/EVs98wgQp/NcnsNfWYwZhmfSXWfw7uhbre2rA=) 3: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (hash: uBkTY1QJyKOb9tvgMcXQ5nnvMjduGi+XNG9K7ycnPuk=) 4: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (hash: K/xuSVvYbxj+Kp2abalZsnCm453fwysRwEAw9PGQTso=) 5: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (hash: W2llI/Nl5euPVmQRVQZ2ESqwO7EpsNcOJ3Lam3WhX0I=) 6: aa912e91-41d3-4894-893c-8de4f94175f9.crl (hash: NDfcnkvAUEONVvkZpSFkpAYMVYvRajMZBEaIAY2u5jA=) 7: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (hash: 3VdpklYVAixt+F7xIS4hgdi3jAFoptLVbWNIvUvR1OY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:b5:70:2a:04:2e:c5:0a:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=1c6c6753-909b-4f44-b1ad-73bc36708a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:fc:c3:4f:52:36:57:4c:45:67:09:8a:8e: 92:ef:ab:d0:9b:f4:90:dc:d8:0d:fd:7f:1e:a4:94: b5:cf:31:df:25:f4:a7:7d:f9:0b:21:ee:b3:23:0c: e4:28:3e:5f:42:1f:64:4c:2b:12:c0:4b:30:a8:31: b3:d0:d3:81:58:39:98:c3:53:e1:6a:32:07:a6:f5: cc:1f:dc:97:c0:61:63:1f:a7:a4:48:25:60:22:ee: 11:31:d9:ad:a4:b4:3b:e9:5c:21:05:47:d4:d4:db: e5:d8:bb:e1:58:88:d1:b1:41:39:d7:7f:fe:ec:d7: 8a:20:cc:c8:1f:87:5b:fb:05:ce:5d:8d:ab:04:65: 54:26:77:9a:fd:6e:a6:8b:fb:48:6c:77:42:25:a0: dd:a9:bf:14:d4:ae:d8:92:ea:de:fa:6a:a2:cf:03: 55:49:9b:e9:0d:09:b9:54:7c:f7:73:4d:e9:05:cb: 0f:f0:cb:9a:a7:ea:e3:bf:ad:4d:68:d0:b1:04:d0: 94:07:5b:98:c8:4b:ff:2f:5f:d0:a1:be:1e:73:1b: 3f:f9:aa:f2:34:19:01:76:7c:f1:8b:04:de:21:af: 73:57:93:9a:49:da:9d:0a:ef:be:de:78:fb:58:d9: 7c:7a:6e:e4:85:8f:6e:91:06:6d:2b:21:27:0c:86: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:50:AB:ED:E0:5D:48:34:67:EA:C4:D6:B2:BB:05:B8:35:F6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:da:f8:16:f6:e4:0e:26:4d:a2:d2:93:d5:a2:dd:cc:31:01: 0a:9e:b2:57:08:52:15:6a:b5:8e:93:9c:b4:1b:bc:f0:aa:0d: d5:5b:68:1a:99:11:72:bb:80:8f:23:f1:f5:38:94:75:5e:25: 7e:b6:40:8f:4c:18:ae:a2:9c:f8:83:ce:f7:f1:62:7f:f7:02: 24:d5:e7:34:83:b3:55:18:9e:d1:fb:e4:40:0d:67:90:05:3b: a6:8c:1d:7f:64:24:63:50:a9:2a:4d:61:8e:29:ad:d0:68:e1: 84:96:87:e1:6d:59:4c:f9:b1:7a:87:a5:53:42:0a:3f:3a:96: 32:42:35:50:3e:48:15:32:22:d6:84:ac:9b:c8:e4:f9:53:07: 1f:71:4e:5f:15:b0:87:2c:47:0c:79:20:bb:db:5b:77:e5:4a: e6:a7:75:66:d0:a6:d1:21:72:a8:69:6f:01:40:3f:c5:bf:60: 2a:d7:31:45:18:1d:6d:9e:cc:5c:df:50:01:ff:b5:d1:64:55: 04:2e:c4:58:38:72:ff:e8:dd:ca:02:65:0e:70:25:7e:66:4a: 4f:e6:cc:0e:d0:f7:11:9b:6d:28:25:b1:cc:53:f9:b2:a8:4b: 44:af:f0:57:4e:03:6d:30:4e:38:2e:6f:f5:75:59:e0:b8:34: 28:a5:7a:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcO1cCoELsUKMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk MWM2YzY3NTMtOTA5Yi00ZjQ0LWIxYWQtNzNiYzM2NzA4YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2n8w09SNldMRWcJio6S76vQm/SQ3NgN/X8e pJS1zzHfJfSnffkLIe6zIwzkKD5fQh9kTCsSwEswqDGz0NOBWDmYw1PhajIHpvXM H9yXwGFjH6ekSCVgIu4RMdmtpLQ76VwhBUfU1Nvl2LvhWIjRsUE513/+7NeKIMzI H4db+wXOXY2rBGVUJnea/W6mi/tIbHdCJaDdqb8U1K7Ykure+mqizwNVSZvpDQm5 VHz3c03pBcsP8Muap+rjv61NaNCxBNCUB1uYyEv/L1/Qob4ecxs/+aryNBkBdnzx iwTeIa9zV5OaSdqdCu++3nj7WNl8em7khY9ukQZtKyEnDIbPaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA/TUKvt4F1INGfqxNayuwW4NfaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvYWE5MTJlOTEtNDFkMy00 ODk0LTg5M2MtOGRlNGY5NDE3NWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG2vgW9uQOJk2i0pPVot3M MQEKnrJXCFIVarWOk5y0G7zwqg3VW2gamRFyu4CPI/H1OJR1XiV+tkCPTBiuopz4 g8738WJ/9wIk1ec0g7NVGJ7R++RADWeQBTumjB1/ZCRjUKkqTWGOKa3QaOGElofh bVlM+bF6h6VTQgo/OpYyQjVQPkgVMiLWhKybyOT5UwcfcU5fFbCHLEcMeSC721t3 5Urmp3Vm0KbRIXKoaW8BQD/Fv2Aq1zFFGB1tnsxc31AB/7XRZFUELsRYOHL/6N3K AmUOcCV+ZkpP5swO0PcRm20oJbHMU/myqEtEr/BXTgNtME44Lm/1dVnguDQopXo1 -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:35 2025 by rpki-client