$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: FN8ZNPxcOQKWlTtYCHOeQfaikRgW4SDnckoeBs7IuaU= Subject key identifier: 01:BB:E6:9A:A3:A8:31:A1:B0:13:24:AB:54:9F:92:02:F3:9F:C8:AF Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584AEAE4667BC112B10D8754E9E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B1F Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Fri 22 Aug 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: DNxgqSiCn9qAfH8sBiFATlvzCTPKXEnGqjWHD1SR0Jc=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: umCrpaPooP2I8OnVYCI9fF1E7yoRbRDtLKIDMameL14=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: 7pFAb7Rgz2EPy2A6y0bci4TfTl3wFcAuIZV6sVou32o=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: s+k8z9n6eteYbtRjCfmuwomHzGEDHxBXCA5obF1/6H4=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: AD/o2YykghE/u9uFH7opd2V/rUpjZ1q70in9euV8ze4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:66:7b:c1:12:b1:0d:87:54:e9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 22 09:00:00 2025 GMT Subject: CN=db197e9c-f771-4b3e-bd4d-e7cf680a0b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:91:d7:d2:10:98:30:cb:7b:85:39:fa:0d: 8d:98:f1:ca:b9:67:3b:93:ff:5f:c8:a3:24:74:26: 7f:ac:1d:78:de:fe:68:76:9d:c5:37:7e:4b:35:b4: 33:b9:70:2d:17:6f:0e:cb:ab:5b:f5:7d:2c:3b:6f: 3d:31:36:e7:d5:17:78:35:ab:ce:e0:d0:6d:b9:c3: 37:48:fe:90:9c:57:0a:9d:c7:1d:85:1e:b6:80:c3: 82:fe:06:df:8e:0a:68:28:50:0f:a3:d8:70:05:3e: 50:36:5b:10:2f:1b:f9:7f:44:9f:6e:6e:66:7c:05: 8b:54:5a:3f:0f:91:08:24:16:87:a5:b3:d7:a5:a9: a9:e5:a7:49:2f:60:b1:6d:bc:f8:1b:3a:16:82:b1: be:1a:68:c0:79:2f:08:79:43:5c:0c:da:d5:0d:ef: 07:5d:92:93:17:4e:da:86:99:30:b9:ac:96:3e:42: d2:4a:d0:51:51:13:4c:76:7c:41:21:44:84:eb:91: a2:c9:7b:73:c4:de:4a:f4:f9:18:ff:25:df:72:0d: 7d:83:83:60:c3:be:73:29:a5:13:1a:29:c2:01:11: 5e:25:9c:f4:d5:76:16:d1:67:d7:77:5b:0f:62:94: d6:83:80:44:95:b1:3e:8d:36:a0:3a:93:29:8f:fe: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BB:E6:9A:A3:A8:31:A1:B0:13:24:AB:54:9F:92:02:F3:9F:C8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:cc:6e:3a:43:74:73:84:d5:74:b8:0d:69:89:7f:2a:0a:9d: c2:42:61:96:01:40:be:f5:1e:a8:86:99:c2:4c:5e:70:15:b5: 39:e5:97:89:20:c3:f9:19:55:7a:d7:1c:b1:25:0f:71:2b:e5: b3:bd:b6:6b:78:69:6f:6a:18:da:4d:5f:2a:77:70:d8:49:9f: ed:84:c1:f6:80:e0:14:65:8d:ae:df:44:9e:bd:45:1f:07:bd: 66:eb:ce:13:98:55:2e:a2:58:3a:ad:cf:b2:97:53:ad:53:0d: 4e:e2:fb:ed:49:d0:25:30:39:f8:ef:76:1b:82:44:cd:76:d9: 5a:32:af:77:61:0f:89:dd:de:66:39:77:ce:eb:3a:00:74:6c: 64:f1:26:ac:d0:23:bd:05:18:87:d8:38:82:0c:c9:e8:bb:26: be:05:ba:50:bb:da:4f:40:d3:99:ec:12:00:59:15:9c:e4:19: d9:e2:cb:79:6b:cd:6a:4b:06:9e:27:39:06:2a:c1:d6:f8:2e: a0:1e:96:80:7e:35:29:82:cb:c2:10:ad:08:51:22:be:56:3f: 39:88:92:cc:e4:a9:a0:20:00:02:ec:8c:c0:4d:35:86:61:59: 74:97:a2:8c:d6:a1:83:4e:ad:63:77:71:eb:f4:eb:a9:f4:50: 08:9e:13:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5GZ7wRKxDYdU6eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMjA5MDAwMFowLzEtMCsGA1UEAxMk ZGIxOTdlOWMtZjc3MS00YjNlLWJkNGQtZTdjZjY4MGEwYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjqR19IQmDDLe4U5+g2NmPHKuWc7k/9fyKMk dCZ/rB143v5odp3FN35LNbQzuXAtF28Oy6tb9X0sO289MTbn1Rd4NavO4NBtucM3 SP6QnFcKnccdhR62gMOC/gbfjgpoKFAPo9hwBT5QNlsQLxv5f0Sfbm5mfAWLVFo/ D5EIJBaHpbPXpamp5adJL2Cxbbz4GzoWgrG+GmjAeS8IeUNcDNrVDe8HXZKTF07a hpkwuayWPkLSStBRURNMdnxBIUSE65GiyXtzxN5K9PkY/yXfcg19g4Ngw75zKaUT GinCARFeJZz01XYW0WfXd1sPYpTWg4BElbE+jTagOpMpj/5gAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAG75pqjqDGhsBMkq1SfkgLzn8ivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzzG46Q3RzhNV0uA1piX8q Cp3CQmGWAUC+9R6ohpnCTF5wFbU55ZeJIMP5GVV61xyxJQ9xK+WzvbZreGlvahja TV8qd3DYSZ/thMH2gOAUZY2u30SevUUfB71m684TmFUuolg6rc+yl1OtUw1O4vvt SdAlMDn473YbgkTNdtlaMq93YQ+J3d5mOXfO6zoAdGxk8Sas0CO9BRiH2DiCDMno uya+BbpQu9pPQNOZ7BIAWRWc5BnZ4st5a81qSwaeJzkGKsHW+C6gHpaAfjUpgsvC EK0IUSK+Vj85iJLM5KmgIAAC7IzATTWGYVl0l6KM1qGDTq1jd3Hr9Oup9FAInhON -----END CERTIFICATE-----Generated at Wed Aug 20 17:12:26 2025 by rpki-client