$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft File: ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft (raw, json) Hash identifier: 23QVk9i7y2aKP/8y53sVgVHtUup7i38QZWfQwJvDF+c= Subject key identifier: 7B:BF:16:47:53:4C:6A:A4:9D:02:33:04:8B:CF:DF:8A:82:D2:FD:26 Authority key identifier: C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46 Certificate issuer: /CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac Certificate serial: 010D0C9F4328584BBF69B8731BF4206C002DC280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft Manifest number: 010D0C9F4328584B3C457933F1E71D4942791330 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 8df264b1-40cf-3ac2-9486-ae088c2c3173.roa (hash: vMMjt3lKDvBlsQJgKzAKuOB7UGnXmDDyGBMysGLssNQ=) 2: ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl (hash: vwpGmvmIa1yiPwPtgB1yrsdjm9sbqniiDoR7M9VOviA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b8:73:1b:f4:20:6c:00:2d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=a7589a62-b6d5-43a2-9aa6-e40fe0704312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e6:76:01:2a:9d:dd:91:b8:6d:14:34:0e:0f: 82:a6:2e:72:e2:b3:78:b8:02:43:e5:aa:7b:97:15: b1:6f:38:55:4a:d6:67:d3:1e:8b:5c:3c:cb:21:74: 29:e2:c5:cc:50:a8:5b:44:d0:ec:38:55:f8:17:62: ff:0e:d9:cf:d3:a9:77:40:d1:66:3d:0f:1e:30:e3: cd:c2:02:14:f9:3f:fd:be:dd:f2:da:e3:51:e9:32: d1:87:79:c6:ea:b9:c9:13:27:9d:82:4f:50:12:88: b6:2a:70:8c:c4:81:da:e0:d3:2c:06:b5:f0:8f:aa: de:70:10:6d:9f:62:f9:81:0a:fe:cb:ff:a0:c9:07: d0:d2:9d:b1:56:85:18:08:49:4e:5f:8f:ea:79:3b: 71:1e:1d:45:1a:1b:76:ca:64:12:69:44:e9:39:cb: 13:d1:1b:39:51:82:68:ff:3e:d3:cb:8f:19:58:37: 8a:c1:e4:be:63:23:81:93:5a:7b:e3:c6:db:53:ba: 15:fc:21:9c:3b:fc:0f:6b:2d:2c:9c:53:e4:a4:25: 9e:9c:41:34:03:f8:1a:4b:b5:e5:0b:8f:48:cd:f6: ae:62:dc:e3:55:a3:aa:ce:88:9f:a4:e0:9d:0d:3f: b5:b2:9a:1f:cc:c8:ff:4a:32:3e:a6:5b:ff:0f:13: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BF:16:47:53:4C:6A:A4:9D:02:33:04:8B:CF:DF:8A:82:D2:FD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl X509v3 Authority Key Identifier: keyid:C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ed:a6:a0:3a:ac:c8:61:a7:43:7f:f0:74:07:78:f4:ac:7d: 43:d4:09:ad:28:0c:ae:60:83:87:0a:e7:47:12:a7:ce:c0:75: 1e:95:b6:8b:47:56:cb:a1:e4:5e:9f:e8:64:e8:32:27:c8:e9: 9d:c1:11:e6:2d:c2:f7:17:66:2b:32:d9:69:cb:31:4b:f0:89: c0:3a:0b:f8:60:6c:4c:43:6e:d2:ef:43:e6:5d:9c:a6:cd:48: a3:0a:9e:60:26:dc:ba:26:77:4b:e7:6b:15:c7:55:74:52:df: dc:91:e9:d2:e9:ab:5c:ef:21:5a:a7:33:5d:23:54:ac:52:2e: 15:0d:a7:cc:a0:f4:e8:76:7f:db:e2:c2:fb:29:a2:6b:54:fe: 6c:6e:0b:cd:41:c3:2c:f3:d9:98:7f:c0:b3:d9:b1:d3:88:2d: 34:10:56:39:b6:03:87:4d:87:ba:b0:1f:03:32:38:1a:2f:28: 87:c1:d9:c9:13:56:ab:3b:bc:16:0e:c3:ec:a4:97:de:82:c6: 98:15:8d:ff:49:2e:9c:d9:76:7a:ff:ce:f6:bb:de:96:55:96: 00:07:ee:03:eb:b1:a8:af:80:b2:4d:f6:24:c2:8b:f2:17:3c: 62:bf:0d:e0:77:25:af:0c:e3:66:2f:21:ef:53:d1:a7:f4:2f: 60:d1:7e:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abhzG/QgbAAtwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyOGVlYzgtYWZkYy00MWEzLThhZjktN2ZkNmM0MGU2 OGFjMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk YTc1ODlhNjItYjZkNS00M2EyLTlhYTYtZTQwZmUwNzA0MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeZ2ASqd3ZG4bRQ0Dg+Cpi5y4rN4uAJD5ap7 lxWxbzhVStZn0x6LXDzLIXQp4sXMUKhbRNDsOFX4F2L/DtnP06l3QNFmPQ8eMOPN wgIU+T/9vt3y2uNR6TLRh3nG6rnJEyedgk9QEoi2KnCMxIHa4NMsBrXwj6recBBt n2L5gQr+y/+gyQfQ0p2xVoUYCElOX4/qeTtxHh1FGht2ymQSaUTpOcsT0Rs5UYJo /z7Ty48ZWDeKweS+YyOBk1p748bbU7oV/CGcO/wPay0snFPkpCWenEE0A/gaS7Xl C49IzfauYtzjVaOqzoifpOCdDT+1spofzMj/SjI+plv/DxPKIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHu/FkdTTGqknQIzBIvP34qC0v0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTI4 ZWVjOC1hZmRjLTQxYTMtOGFmOS03ZmQ2YzQwZTY4YWMvYWUyOGVlYzgtYWZkYy00 MWEzLThhZjktN2ZkNmM0MGU2OGFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWUyOGVlYzgtYWZkYy00MWEzLThh ZjktN2ZkNmM0MGU2OGFjL2FlMjhlZWM4LWFmZGMtNDFhMy04YWY5LTdmZDZjNDBl NjhhYy5jcmwwHwYDVR0jBBgwFoAUxNHr5qRpsK4EZm92qJXC3ZpOTkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTI4ZWVjOC1hZmRjLTQxYTMtOGFmOS03ZmQ2 YzQwZTY4YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR7aagOqzIYadDf/B0B3j0 rH1D1AmtKAyuYIOHCudHEqfOwHUelbaLR1bLoeRen+hk6DInyOmdwRHmLcL3F2Yr MtlpyzFL8InAOgv4YGxMQ27S70PmXZymzUijCp5gJty6JndL52sVx1V0Ut/ckenS 6atc7yFapzNdI1SsUi4VDafMoPTodn/b4sL7KaJrVP5sbgvNQcMs89mYf8Cz2bHT iC00EFY5tgOHTYe6sB8DMjgaLyiHwdnJE1arO7wWDsPspJfegsaYFY3/SS6c2XZ6 /872u96WVZYAB+4D67Gor4CyTfYkwovyFzxivw3gdyWvDONmLyHvU9Gn9C9g0X6f -----END CERTIFICATE-----Generated at Wed Nov 5 08:11:57 2025 by rpki-client