$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft File: add35f11-0294-4be9-94b7-49cac2bcb001.mft (raw, json) Hash identifier: qlHzjMEKKee4L5GOuEagzyJNlQjFRNfXOJJI2j6n1Cg= Subject key identifier: EB:09:59:AE:9C:38:99:72:94:52:53:42:A2:8B:C2:C8:59:A6:AC:FF Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584A9D89B99D5A4FF105E4F96300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft Manifest number: 010D0C9F4328584073A81AE12C42C5F2542C31E5 Signing time: Wed 23 Jul 2025 16:00:08 +0000 Manifest this update: Wed 23 Jul 2025 16:00:08 +0000 Manifest next update: Sat 26 Jul 2025 16:00:00 +0000 Files and hashes: 1: 724dc813-9136-3075-bcba-f77834af4133.roa (hash: +tVPEridEm00A1Oo2yVAqXWozh2lYw8Hf84UEeMxYW0=) 2: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (hash: p/qhd0zwqHGw/V/yInRgdElsashdiSBhE68mTPxSsvg=) 3: add35f11-0294-4be9-94b7-49cac2bcb001.crl (hash: FenA/GbvQTqDsJQ6ETo/vFSg+bCjaUF9I1Bc7T0wwt8=) 4: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (hash: I8jJkpYCnpcNExBx/uesZZHb2FVa8LudPC8q7tk9IrI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:89:b9:9d:5a:4f:f1:05:e4:f9:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Jul 23 16:00:08 2025 GMT Not After : Jul 26 16:00:00 2025 GMT Subject: CN=5a43adbb-20d6-4bae-811a-dfd1fafaa503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:a4:a6:98:f9:87:3b:94:9c:29:1a:e5:51: 41:3e:92:f2:fb:3b:1b:2e:64:cf:7e:c6:e1:d1:e4: 93:8d:a3:fa:b9:56:19:17:8a:39:25:ad:7c:42:da: 7b:37:05:5b:53:90:48:b6:3f:0e:98:af:75:be:d2: 1b:03:07:b4:c9:ae:26:03:e0:ad:97:ad:88:f0:bb: 0a:a2:82:fc:32:d0:b7:c2:f6:fe:85:49:b3:2e:a8: f6:db:ed:d1:a6:a9:e6:ad:43:19:11:7e:97:a4:6a: 1d:79:ab:2f:84:6a:ab:7f:ff:2b:4b:38:d4:2d:ad: 40:d1:b5:d3:a5:fb:e7:46:56:00:d0:ae:a2:ec:55: 80:b8:38:87:ae:c4:54:7b:3b:13:ee:7d:f7:e4:c4: 58:8c:0b:82:b1:cf:f4:1e:07:ca:14:4e:42:db:04: 15:69:a5:76:e9:ed:94:f8:64:f2:33:6e:d0:2e:26: 91:37:19:e5:16:0c:38:81:b2:6a:d1:a0:c2:87:5d: 25:6c:82:bd:47:f7:83:db:ed:11:56:3b:6a:4a:9e: 64:ed:50:75:fc:2a:b8:e3:11:c4:04:ac:d8:7c:c4: a1:f4:bd:c7:76:17:7b:88:14:fa:03:07:6a:f3:52: ba:c7:45:84:f3:fd:a5:29:f5:1b:58:4f:29:fa:81: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:09:59:AE:9C:38:99:72:94:52:53:42:A2:8B:C2:C8:59:A6:AC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6d:c0:b1:e6:da:f9:8f:0b:67:61:be:6e:7d:10:54:17:53: bc:b1:e7:10:be:fa:37:ed:ec:0e:b3:dd:b9:4b:91:c2:97:c6: 20:9a:20:eb:d4:d7:13:e4:78:7b:77:30:c0:30:00:2c:d3:a6: df:61:af:50:fb:cd:51:9c:b2:de:1e:95:ef:48:bf:ac:be:c4: 2f:f5:64:93:49:ce:f0:0e:08:c0:8c:a9:4a:be:f7:39:3d:7f: b4:aa:a1:0c:f9:28:f8:d4:8b:cd:38:82:c8:57:f6:cd:10:39: 3a:b7:17:c7:b8:57:b8:70:b3:ed:9f:be:c4:39:c6:07:e6:46: 25:9e:70:39:7f:87:11:39:cb:c1:df:92:f9:8b:40:09:51:e6: 57:8c:81:95:a6:fd:01:42:63:3d:12:ba:b3:06:eb:7a:4a:55: 5b:a7:14:76:bb:08:a5:b1:d9:c0:38:e3:b1:2a:6f:f7:f2:aa: 2e:2b:89:e2:bb:1b:49:98:58:d9:8a:59:d5:60:5a:e6:f4:59: 9f:aa:e1:09:50:c3:a2:cb:36:99:ef:3f:a5:45:1c:3d:d7:b3: 4d:59:fc:f7:1d:93:bb:68:5f:dc:f6:42:95:52:15:d0:bc:72: 6b:f5:b8:db:e0:3e:a7:35:30:f9:8f:b3:79:06:81:fc:5c:a0: 9a:de:1e:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqdibmdWk/xBeT5YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDcyMzE2MDAwOFoXDTI1MDcyNjE2MDAwMFowLzEtMCsGA1UEAxMk NWE0M2FkYmItMjBkNi00YmFlLTgxMWEtZGZkMWZhZmFhNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUWkppj5hzuUnCka5VFBPpLy+zsbLmTPfsbh 0eSTjaP6uVYZF4o5Ja18Qtp7NwVbU5BItj8OmK91vtIbAwe0ya4mA+Ctl62I8LsK ooL8MtC3wvb+hUmzLqj22+3RpqnmrUMZEX6XpGodeasvhGqrf/8rSzjULa1A0bXT pfvnRlYA0K6i7FWAuDiHrsRUezsT7n335MRYjAuCsc/0HgfKFE5C2wQVaaV26e2U +GTyM27QLiaRNxnlFgw4gbJq0aDCh10lbIK9R/eD2+0RVjtqSp5k7VB1/Cq44xHE BKzYfMSh9L3Hdhd7iBT6Awdq81K6x0WE8/2lKfUbWE8p+oH/WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOsJWa6cOJlylFJTQqKLwshZpqz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYWRkMzVmMTEtMDI5NC00 YmU5LTk0YjctNDljYWMyYmNiMDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8bcCx5tr5jwtnYb5ufRBU F1O8secQvvo37ewOs925S5HCl8YgmiDr1NcT5Hh7dzDAMAAs06bfYa9Q+81RnLLe HpXvSL+svsQv9WSTSc7wDgjAjKlKvvc5PX+0qqEM+Sj41IvNOILIV/bNEDk6txfH uFe4cLPtn77EOcYH5kYlnnA5f4cROcvB35L5i0AJUeZXjIGVpv0BQmM9ErqzBut6 SlVbpxR2uwilsdnAOOOxKm/38qouK4niuxtJmFjZilnVYFrm9FmfquEJUMOiyzaZ 7z+lRRw917NNWfz3HZO7aF/c9kKVUhXQvHJr9bjb4D6nNTD5j7N5BoH8XKCa3h5o -----END CERTIFICATE-----Generated at Wed Jul 23 23:30:56 2025 by rpki-client