$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft File: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json) Hash identifier: s8wIIWaeRUZBvPrkqBEvU1JCVLU6SCXyFW3QCHnvZd4= Subject key identifier: BF:2D:BA:E6:23:D8:38:48:C9:A2:28:8E:3D:D1:06:73:3F:24:4C:DB Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584B9AC57FDE076BDFA94267ED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft Manifest number: 010D0C9F4328584073A8497872C4F36DBFDFA798 Signing time: Wed 22 Oct 2025 09:00:03 +0000 Manifest this update: Wed 22 Oct 2025 09:00:03 +0000 Manifest next update: Sat 25 Oct 2025 09:00:00 +0000 Files and hashes: 1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: k3mWjiWSizxKDt+WEjOh4yN+j99xsxYvgDBw3OFJark=) 2: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: 6vI3nIel7IUoQW/5u3ugGC17ZO2CP7pvt02Ib/lFWOE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:c5:7f:de:07:6b:df:a9:42:67:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Oct 22 09:00:03 2025 GMT Not After : Oct 25 09:00:00 2025 GMT Subject: CN=7f6b380e-151e-4fe7-8b93-db2061b00286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:38:f4:43:c7:8f:ff:d2:35:e8:c1:34:25: ee:60:08:d3:44:e0:37:7a:c5:e1:3f:30:8e:bd:00: 63:3f:5b:d5:e8:43:f4:dd:51:a4:56:86:0d:d0:28: 0a:87:83:7e:7a:19:50:0c:1f:9d:58:d7:b2:f3:ea: ee:00:84:3b:4d:0d:36:e7:60:8a:a3:79:66:2c:c4: 48:48:82:3b:3e:d2:23:0c:22:4a:0e:eb:93:0c:b4: 0a:1a:60:ae:dc:dd:e1:35:46:75:aa:fa:7b:11:f1: 8d:5b:f0:1b:03:e4:27:65:24:db:50:9e:60:03:16: 31:e2:92:bf:3f:a7:c0:cb:b8:3d:0f:a2:36:a3:33: ee:fe:6e:44:5e:38:5d:03:6a:6a:36:3b:31:03:e4: 85:3e:a5:b8:fd:14:85:78:c3:c3:d5:4a:e5:b4:b4: 6b:74:d0:0d:f5:1c:d0:71:51:1e:a9:e9:ab:46:28: bb:8f:6b:18:25:43:9e:48:97:72:5f:81:22:22:88: e6:2d:6f:f1:77:e5:48:f7:1e:c3:de:08:f6:23:6b: 2d:48:32:a8:54:d6:79:9d:99:fa:c3:53:ab:73:61: 0c:f3:10:d2:cf:0f:28:8b:78:25:f4:32:a9:43:1d: b7:df:f8:85:95:68:3d:eb:fe:6f:0f:5b:17:59:f0: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:BA:E6:23:D8:38:48:C9:A2:28:8E:3D:D1:06:73:3F:24:4C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:76:eb:a8:ce:49:05:e8:a2:bd:b0:bf:05:25:d5:78:f5:6d: 88:e1:1e:4c:f2:fa:3a:90:d1:00:46:4c:1a:57:fd:45:bd:76: b7:ff:2c:72:64:28:c3:e3:23:c6:5e:cd:be:1d:14:f5:52:2a: 2f:ce:98:c1:75:59:30:e0:12:71:9b:10:34:f9:5b:1a:9b:4e: 1a:4f:25:db:af:9d:a0:9c:22:9a:da:66:3c:d5:a1:13:b0:91: 9f:4f:92:de:f6:d9:05:92:6f:8a:49:9b:ec:96:3d:15:a9:3a: 43:4d:12:8c:cc:15:4a:42:d2:e3:e3:16:e3:5f:b1:6b:6b:16: 7f:ac:01:b1:3b:20:3a:c2:27:f3:db:30:fd:23:5d:56:fb:b7: 91:c2:70:2a:17:a0:fa:6e:e2:9d:e9:2e:76:10:65:4a:e1:53: d5:2b:89:4a:af:36:fc:ed:8e:44:48:3c:42:d5:8d:33:cf:65: ad:24:72:e8:3f:83:15:76:07:1b:20:ad:fe:44:23:15:4f:db: 0d:da:dd:3a:3c:15:d7:8f:4b:6d:a9:8d:86:c9:c9:bf:f6:32: 0f:4a:62:98:6a:ec:61:80:71:7b:4a:0f:f4:1a:1b:16:11:16: d2:76:8a:38:f6:01:1b:b3:26:4d:6d:2c:89:33:92:8f:58:9f: 09:11:04:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuaxX/eB2vfqUJn7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MTAyMjA5MDAwM1oXDTI1MTAyNTA5MDAwMFowLzEtMCsGA1UEAxMk N2Y2YjM4MGUtMTUxZS00ZmU3LThiOTMtZGIyMDYxYjAwMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1049EPHj//SNejBNCXuYAjTROA3esXhPzCO vQBjP1vV6EP03VGkVoYN0CgKh4N+ehlQDB+dWNey8+ruAIQ7TQ0252CKo3lmLMRI SII7PtIjDCJKDuuTDLQKGmCu3N3hNUZ1qvp7EfGNW/AbA+QnZSTbUJ5gAxYx4pK/ P6fAy7g9D6I2ozPu/m5EXjhdA2pqNjsxA+SFPqW4/RSFeMPD1UrltLRrdNAN9RzQ cVEeqemrRii7j2sYJUOeSJdyX4EiIojmLW/xd+VI9x7D3gj2I2stSDKoVNZ5nZn6 w1Orc2EM8xDSzw8oi3gl9DKpQx233/iFlWg96/5vD1sXWfBOVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL8tuuYj2DhIyaIojj3RBnM/JEzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvYWFmOWEzZmMtM2E4Yy00 N2U0LTkxZmEtZDc4MDhiMDZhZTg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoduuozkkF6KK9sL8FJdV4 9W2I4R5M8vo6kNEARkwaV/1FvXa3/yxyZCjD4yPGXs2+HRT1UiovzpjBdVkw4BJx mxA0+Vsam04aTyXbr52gnCKa2mY81aETsJGfT5Le9tkFkm+KSZvslj0VqTpDTRKM zBVKQtLj4xbjX7FraxZ/rAGxOyA6wifz2zD9I11W+7eRwnAqF6D6buKd6S52EGVK 4VPVK4lKrzb87Y5ESDxC1Y0zz2WtJHLoP4MVdgcbIK3+RCMVT9sN2t06PBXXj0tt qY2Gycm/9jIPSmKYauxhgHF7Sg/0GhsWERbSdoo49gEbsyZNbSyJM5KPWJ8JEQRw -----END CERTIFICATE-----Generated at Wed Oct 22 19:53:55 2025 by rpki-client