$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft File: ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft (raw, json) Hash identifier: 3cn2qDwobvHarNSsbdkOQs7A1ZA1i0f75WBMyhmR+rc= Subject key identifier: 17:6D:81:DC:C9:56:61:62:6D:2B:CE:B3:5F:A1:92:F4:04:0D:D6:C3 Authority key identifier: 7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB Certificate issuer: /CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Certificate serial: 010D0C9F4328584B7444D087706019C0FAFC0100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft Manifest number: 010D0C9F4328584ABED25002CD85F530472FFA42 Signing time: Wed 08 Oct 2025 14:00:03 +0000 Manifest this update: Wed 08 Oct 2025 14:00:03 +0000 Manifest next update: Fri 10 Oct 2025 14:00:00 +0000 Files and hashes: 1: 1a7be265-c5e9-32a9-9677-b65701a82f31.roa (hash: MrQXet+FmyQVy6kFhio6h2WE5hbqPb2Q9tOncXTDZm0=) 2: ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl (hash: 6v1VBdj7u8wiXk4RVzma6oKq8M0LndmqMz2CQfi45QY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:44:d0:87:70:60:19:c0:fa:fc:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Validity Not Before: Oct 8 14:00:03 2025 GMT Not After : Oct 10 14:00:00 2025 GMT Subject: CN=89f12aef-eda2-4bcf-af1e-660e3bd0287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:00:40:5f:d5:8f:fc:28:77:f7:9f:cf:7f: c0:1f:0b:9a:6a:47:ca:a5:8f:21:2c:a5:b9:11:d2: ef:7e:ef:b6:68:74:09:ae:73:a9:df:23:48:d3:b8: 89:11:b4:33:64:9d:27:4c:50:d5:16:c4:36:10:36: 4c:e7:70:e1:ce:67:d2:7f:c1:7a:c5:ad:de:bf:ba: d0:83:9a:d5:8e:c2:b5:6d:af:d8:f5:be:b7:51:e9: 56:af:d9:55:46:a9:1a:eb:10:9a:90:d0:40:0b:ba: c5:75:78:91:34:79:a8:00:15:2c:f5:bb:cd:18:31: 9a:27:03:5f:df:45:07:54:ad:73:3b:9b:2f:c6:5d: 69:4c:7e:09:6c:13:9d:3e:66:c8:eb:13:c3:9e:fb: a0:ba:41:1f:bb:61:b9:ff:d2:3f:b8:00:a2:c5:20: 88:9d:0e:af:f2:a0:2a:f2:9b:d0:bf:db:8a:10:94: cf:98:9c:67:2b:18:2e:61:56:63:e9:5a:92:5e:a0: 72:27:9f:ad:56:a5:5c:ce:00:2d:15:ad:8d:84:8c: d8:73:50:37:74:b5:4b:03:58:2c:0d:11:86:d3:1a: a9:5f:2f:1d:05:a9:51:86:20:a6:59:7d:c1:dc:a8: bc:bb:a8:82:88:63:22:29:ca:5f:83:18:97:44:1b: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6D:81:DC:C9:56:61:62:6D:2B:CE:B3:5F:A1:92:F4:04:0D:D6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl X509v3 Authority Key Identifier: keyid:7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1d:5a:cf:55:af:07:ce:50:0e:19:1f:5a:de:97:6d:04:4b: 5e:c4:d9:db:e3:2a:1a:f8:7b:8d:e4:e1:c5:a2:9f:00:8f:08: 99:8e:3f:dd:f3:e1:85:02:d9:7b:0e:56:5a:66:83:a2:90:c5: 61:fe:86:00:09:0b:1d:b1:86:7d:3b:a8:71:77:61:3e:2b:54: 44:16:c8:97:01:56:e1:36:af:a2:77:ec:6a:56:9a:25:7d:64: 5e:0b:88:a9:2a:20:f5:fb:9b:91:a9:a5:90:f6:bf:f7:2e:df: 3b:ff:40:5b:7c:39:83:1a:41:66:40:96:ee:75:de:23:25:0f: c3:95:c9:1a:92:e9:8d:d3:a1:f5:64:4f:29:34:d3:6f:01:26: 9f:45:cc:7a:4d:00:1c:56:9e:a7:ae:f9:34:a5:d1:f0:2d:a4: 27:4c:20:fa:e9:6e:63:98:79:3c:72:5c:28:88:c0:e4:05:30: b9:50:28:41:cd:d2:50:5a:bc:56:e1:32:fb:f9:81:6d:95:c0: 66:e4:24:ba:45:ea:8c:ae:f0:d8:4c:fe:97:1b:d9:3e:e1:6e: 81:2c:7c:df:48:92:fe:c5:95:27:54:38:d3:d3:d9:ca:38:e5: d4:73:54:2f:2b:42:20:10:4e:cf:2c:10:03:00:60:d3:9b:18: c8:a4:c2:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0RNCHcGAZwPr8AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0ZDc5YWEtZjlkZC00ZGQyLTk4ODYtNjY3NjcyNGU5 NjFmMB4XDTI1MTAwODE0MDAwM1oXDTI1MTAxMDE0MDAwMFowLzEtMCsGA1UEAxMk ODlmMTJhZWYtZWRhMi00YmNmLWFmMWUtNjYwZTNiZDAyODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusIAQF/Vj/wod/efz3/AHwuaakfKpY8hLKW5 EdLvfu+2aHQJrnOp3yNI07iJEbQzZJ0nTFDVFsQ2EDZM53DhzmfSf8F6xa3ev7rQ g5rVjsK1ba/Y9b63UelWr9lVRqka6xCakNBAC7rFdXiRNHmoABUs9bvNGDGaJwNf 30UHVK1zO5svxl1pTH4JbBOdPmbI6xPDnvugukEfu2G5/9I/uACixSCInQ6v8qAq 8pvQv9uKEJTPmJxnKxguYVZj6VqSXqByJ5+tVqVczgAtFa2NhIzYc1A3dLVLA1gs DRGG0xqpXy8dBalRhiCmWX3B3Ki8u6iCiGMiKcpfgxiXRBtc6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBdtgdzJVmFibSvOs1+hkvQEDdbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRk NzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2NzI0ZTk2MWYvYWU0ZDc5YWEtZjlkZC00 ZGQyLTk4ODYtNjY3NjcyNGU5NjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWU0ZDc5YWEtZjlkZC00ZGQyLTk4 ODYtNjY3NjcyNGU5NjFmL2FlNGQ3OWFhLWY5ZGQtNGRkMi05ODg2LTY2NzY3MjRl OTYxZi5jcmwwHwYDVR0jBBgwFoAUeyt4m/mZhAAH/S4imKCjAK1u6cswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRkNzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2 NzI0ZTk2MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdHVrPVa8HzlAOGR9a3pdt BEtexNnb4yoa+HuN5OHFop8AjwiZjj/d8+GFAtl7DlZaZoOikMVh/oYACQsdsYZ9 O6hxd2E+K1REFsiXAVbhNq+id+xqVpolfWReC4ipKiD1+5uRqaWQ9r/3Lt87/0Bb fDmDGkFmQJbudd4jJQ/DlckakumN06H1ZE8pNNNvASafRcx6TQAcVp6nrvk0pdHw LaQnTCD66W5jmHk8clwoiMDkBTC5UChBzdJQWrxW4TL7+YFtlcBm5CS6ReqMrvDY TP6XG9k+4W6BLHzfSJL+xZUnVDjT09nKOOXUc1QvK0IgEE7PLBADAGDTmxjIpMJI -----END CERTIFICATE-----Generated at Wed Oct 8 17:25:55 2025 by rpki-client