$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft File: ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft (raw, json) Hash identifier: cI9zAb7sIVVtSaDi0maqh+HN5ZgGo0CFnCo6UwLUWvY= Subject key identifier: 27:4B:94:D7:71:B1:DA:86:CC:84:19:91:9D:3E:78:E4:BC:6D:80:88 Authority key identifier: 7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB Certificate issuer: /CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Certificate serial: 010D0C9F4328584BBFA55044498DD10EBBDC76C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft Manifest number: 010D0C9F4328584ABED25002CD85F530472FFA5F Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Fri 07 Nov 2025 14:00:00 +0000 Files and hashes: 1: 1a7be265-c5e9-32a9-9677-b65701a82f31.roa (hash: n7RFlhZPucWcJj+a0SZbdeg5mqTjaaYG+p4BBUyJj68=) 2: ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl (hash: d6G2TRXzj5RIzcZQQ+iSB0eolGDEITvB/mJd9HmFBlA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:44:49:8d:d1:0e:bb:dc:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 7 14:00:00 2025 GMT Subject: CN=8bf34a69-a2a9-45e2-a5cf-06de7e58dcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:3c:7e:72:3a:5d:2b:af:58:e4:a8:7d:26: 39:36:9c:9f:6d:35:b3:0d:eb:4d:8e:4f:74:2a:94: 77:83:28:35:bc:e8:d3:b8:93:f4:f6:42:4e:6b:a1: 13:24:16:5d:a9:3b:33:34:5c:9e:70:a0:84:e5:8a: aa:60:9b:be:f1:e2:fa:3d:de:4b:f4:c6:49:28:a5: 08:18:88:e5:2b:3f:0c:a4:8a:cd:20:6a:5d:67:8a: 8b:1e:7d:8c:52:01:f9:ef:d2:7f:1e:d0:35:f7:c9: 22:2b:1c:5b:67:47:64:f3:03:2d:19:49:9c:21:1b: 06:e0:81:c5:c8:c5:e9:94:9c:df:e9:7f:c6:68:45: 0d:1c:c3:0d:bc:46:de:82:7f:a5:5d:c3:66:cc:1e: df:96:c6:bd:13:0d:19:df:55:84:77:d8:60:1e:48: e4:d1:ab:d0:0b:bc:eb:f0:c8:36:60:9b:0b:26:a0: a9:ea:05:76:86:70:e5:8e:f9:0b:b4:fb:29:86:b1: 52:4a:d2:ef:4e:8a:9e:9a:63:6c:e0:e4:e7:bf:df: 1e:c0:eb:b0:d4:c8:91:b8:01:79:4b:b4:0e:51:a2: 55:81:9b:d7:88:b0:e2:17:28:e1:49:33:84:be:16: 70:39:21:f2:2e:4e:89:29:69:a9:26:1e:e4:03:9b: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:94:D7:71:B1:DA:86:CC:84:19:91:9D:3E:78:E4:BC:6D:80:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl X509v3 Authority Key Identifier: keyid:7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8b:9f:c2:e3:58:10:ed:c3:a1:b0:8d:e3:43:dc:d1:20:4e: 90:8f:aa:78:3a:2d:b6:1f:88:9f:a1:03:c3:26:16:7d:38:dc: 8e:f1:d1:d1:57:96:52:e6:6c:95:ab:a4:7f:46:35:60:86:64: 95:1f:42:29:9e:3b:77:7b:26:21:14:99:e4:02:f3:51:70:9d: d7:6c:56:cb:b1:3d:64:d5:78:2d:2d:89:3b:94:fd:1d:61:fd: ec:c7:bc:6b:53:23:57:d7:70:2b:64:17:df:50:99:48:2c:aa: 36:59:38:7e:27:fa:25:b2:74:aa:c7:39:8c:74:fe:24:8e:fa: eb:d0:6e:d8:b7:e0:e2:3e:c4:0e:b6:05:0d:89:a0:89:e4:12: bf:01:0d:93:7c:e1:07:4f:43:a0:8a:62:de:76:d8:1c:ce:6d: 92:46:01:9c:c1:5f:31:e4:eb:ec:1f:6a:86:6b:88:ea:85:39: 18:bb:7e:8a:1c:c8:71:e0:40:c3:0d:e7:93:10:ca:cd:b7:aa: 49:f3:11:ae:08:74:a7:2e:b3:6e:41:7a:55:14:4e:13:22:50: bb:4f:13:19:be:2d:f9:db:17:29:29:cc:ee:0b:c0:51:0e:98: b7:8a:ec:d6:2c:c7:c8:b5:e3:95:2e:e5:86:b2:d6:ba:a0:de: a6:99:d0:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVBESY3RDrvcdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0ZDc5YWEtZjlkZC00ZGQyLTk4ODYtNjY3NjcyNGU5 NjFmMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk OGJmMzRhNjktYTJhOS00NWUyLWE1Y2YtMDZkZTdlNThkY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdE8fnI6XSuvWOSofSY5NpyfbTWzDetNjk90 KpR3gyg1vOjTuJP09kJOa6ETJBZdqTszNFyecKCE5YqqYJu+8eL6Pd5L9MZJKKUI GIjlKz8MpIrNIGpdZ4qLHn2MUgH579J/HtA198kiKxxbZ0dk8wMtGUmcIRsG4IHF yMXplJzf6X/GaEUNHMMNvEbegn+lXcNmzB7flsa9Ew0Z31WEd9hgHkjk0avQC7zr 8Mg2YJsLJqCp6gV2hnDljvkLtPsphrFSStLvToqemmNs4OTnv98ewOuw1MiRuAF5 S7QOUaJVgZvXiLDiFyjhSTOEvhZwOSHyLk6JKWmpJh7kA5vSOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCdLlNdxsdqGzIQZkZ0+eOS8bYCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRk NzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2NzI0ZTk2MWYvYWU0ZDc5YWEtZjlkZC00 ZGQyLTk4ODYtNjY3NjcyNGU5NjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWU0ZDc5YWEtZjlkZC00ZGQyLTk4 ODYtNjY3NjcyNGU5NjFmL2FlNGQ3OWFhLWY5ZGQtNGRkMi05ODg2LTY2NzY3MjRl OTYxZi5jcmwwHwYDVR0jBBgwFoAUeyt4m/mZhAAH/S4imKCjAK1u6cswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRkNzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2 NzI0ZTk2MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdi5/C41gQ7cOhsI3jQ9zR IE6Qj6p4Oi22H4ifoQPDJhZ9ONyO8dHRV5ZS5myVq6R/RjVghmSVH0Ipnjt3eyYh FJnkAvNRcJ3XbFbLsT1k1XgtLYk7lP0dYf3sx7xrUyNX13ArZBffUJlILKo2WTh+ J/olsnSqxzmMdP4kjvrr0G7Yt+DiPsQOtgUNiaCJ5BK/AQ2TfOEHT0OgimLedtgc zm2SRgGcwV8x5OvsH2qGa4jqhTkYu36KHMhx4EDDDeeTEMrNt6pJ8xGuCHSnLrNu QXpVFE4TIlC7TxMZvi352xcpKczuC8BRDpi3iuzWLMfIteOVLuWGsta6oN6mmdCb -----END CERTIFICATE-----Generated at Wed Nov 5 04:50:51 2025 by rpki-client