$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: M5TO8FZYHwZgq29d/mIm/LHZG3k7KCNTLWcq2dJ/qLw= Subject key identifier: F7:C7:14:6C:4F:38:66:45:9C:55:92:81:D5:84:98:F4:B0:90:57:C2 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584B73AFF57583E21A962D064B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B50 Signing time: Wed 08 Oct 2025 09:00:08 +0000 Manifest this update: Wed 08 Oct 2025 09:00:08 +0000 Manifest next update: Sat 11 Oct 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: DNxgqSiCn9qAfH8sBiFATlvzCTPKXEnGqjWHD1SR0Jc=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: umCrpaPooP2I8OnVYCI9fF1E7yoRbRDtLKIDMameL14=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: 7pFAb7Rgz2EPy2A6y0bci4TfTl3wFcAuIZV6sVou32o=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: t+df9jdT8oy481NmtZwpy+w/kZdd5gAJT7mNY+EwP2Y=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: AD/o2YykghE/u9uFH7opd2V/rUpjZ1q70in9euV8ze4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:af:f5:75:83:e2:1a:96:2d:06:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Oct 8 09:00:08 2025 GMT Not After : Oct 11 09:00:00 2025 GMT Subject: CN=6b02d8aa-9d3a-4341-9b0c-3c6bf10f0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:ea:34:b1:5d:47:02:66:fe:62:cf:53:51: de:0c:5e:36:c7:48:a4:2d:70:8c:23:e9:7d:8b:9b: a6:84:de:c8:e2:86:b4:07:64:a2:7b:c7:52:39:f4: 2a:44:85:a3:43:ae:1a:d8:52:df:12:ef:ff:ed:0d: 71:db:bc:32:86:60:e1:d2:e9:71:cd:bc:f6:c9:dc: de:15:4d:57:32:48:cb:c9:43:ca:9b:4a:8a:36:09: 3c:3d:0e:57:c2:a7:8b:3a:88:fb:10:51:e1:8c:7b: 13:31:3b:d4:b8:76:96:ee:17:db:3c:61:f6:07:28: 17:4a:30:a6:09:1f:09:6d:a1:8d:f3:22:20:0e:b6: 0c:88:48:b1:2a:90:70:34:57:e7:09:72:3d:e0:8f: 40:2d:fd:b2:e8:6a:7b:45:95:5e:28:d4:52:65:0e: 7c:83:c5:8d:d5:fb:8c:d7:93:cf:a3:ac:6e:25:6c: 59:3a:75:b7:be:5a:61:22:bf:e9:d5:40:61:d0:af: 04:1b:a4:74:b4:a8:cb:95:6c:5b:95:71:79:92:e7: a7:09:ad:bb:35:c3:10:bf:5e:c6:96:0b:7e:65:76: 6a:06:95:fe:f0:28:2e:93:fd:8d:53:29:b4:7f:4a: 1c:28:f5:23:40:f8:b1:a1:be:1f:2f:da:aa:cf:bd: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:14:6C:4F:38:66:45:9C:55:92:81:D5:84:98:F4:B0:90:57:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5b:be:c7:11:67:39:6c:13:1a:eb:33:b9:17:e8:82:68:e2: e7:d6:43:19:d0:39:28:ba:d7:30:91:9c:11:ae:77:ef:65:a5: c7:a8:f1:a9:1d:d2:af:05:22:fc:a5:0a:80:ce:dd:93:c1:b8: 17:27:07:bd:05:cb:b4:dc:7e:76:42:1c:c0:87:99:c8:70:79: 87:76:f8:c1:d3:88:35:5c:1a:17:0a:a2:fb:c7:b0:2b:b7:82: ea:db:5f:17:1e:2a:de:32:cb:38:5c:27:5e:49:c7:9f:16:35: 14:9b:fe:c2:20:1e:cb:8c:0a:50:35:2b:22:f3:05:e5:59:3d: 76:70:cc:59:68:58:e4:03:d3:25:c4:59:5a:7f:66:7c:4f:39: 1d:26:48:47:33:93:59:a0:d8:b0:63:14:61:38:2e:ae:8a:d7: b8:71:83:15:94:2b:2d:fa:5c:ed:6d:50:76:67:34:9d:ea:b1: c0:3c:3c:22:b2:a6:86:ea:62:72:6a:a8:e0:15:ab:fb:a9:5d: 5d:0e:95:71:47:ab:d9:f4:4d:7c:88:3e:d5:2f:a2:02:42:34: 68:f0:d0:98:ef:02:5e:71:e8:04:08:b7:1a:d7:d8:df:55:ee: e9:c8:2c:20:3a:97:7c:fc:2b:25:dc:31:21:ff:29:6e:be:74: 3b:00:29:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtzr/V1g+Iali0GSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTAwODA5MDAwOFoXDTI1MTAxMTA5MDAwMFowLzEtMCsGA1UEAxMk NmIwMmQ4YWEtOWQzYS00MzQxLTliMGMtM2M2YmYxMGYwNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZzqNLFdRwJm/mLPU1HeDF42x0ikLXCMI+l9 i5umhN7I4oa0B2Sie8dSOfQqRIWjQ64a2FLfEu//7Q1x27wyhmDh0ulxzbz2ydze FU1XMkjLyUPKm0qKNgk8PQ5XwqeLOoj7EFHhjHsTMTvUuHaW7hfbPGH2BygXSjCm CR8JbaGN8yIgDrYMiEixKpBwNFfnCXI94I9ALf2y6Gp7RZVeKNRSZQ58g8WN1fuM 15PPo6xuJWxZOnW3vlphIr/p1UBh0K8EG6R0tKjLlWxblXF5kuenCa27NcMQv17G lgt+ZXZqBpX+8Cguk/2NUym0f0ocKPUjQPixob4fL9qqz70KVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPfHFGxPOGZFnFWSgdWEmPSwkFfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLW77HEWc5bBMa6zO5F+iC aOLn1kMZ0DkoutcwkZwRrnfvZaXHqPGpHdKvBSL8pQqAzt2TwbgXJwe9Bcu03H52 QhzAh5nIcHmHdvjB04g1XBoXCqL7x7Art4Lq218XHireMss4XCdeScefFjUUm/7C IB7LjApQNSsi8wXlWT12cMxZaFjkA9MlxFlaf2Z8TzkdJkhHM5NZoNiwYxRhOC6u ite4cYMVlCst+lztbVB2ZzSd6rHAPDwisqaG6mJyaqjgFav7qV1dDpVxR6vZ9E18 iD7VL6ICQjRo8NCY7wJecegECLca19jfVe7pyCwgOpd8/Csl3DEh/yluvnQ7ACkm -----END CERTIFICATE-----Generated at Wed Oct 8 15:48:26 2025 by rpki-client