$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: T8rZb8+HhiWTWMZCBdj8aHFn214od9UEHlKiWuLYtLo= Subject key identifier: EE:8E:39:3A:E1:37:DF:9E:F8:3E:EC:04:1A:3E:B0:37:B3:C5:6A:CA Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584AA62560DA4774438014B64B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F8B1 Signing time: Sat 26 Jul 2025 18:00:08 +0000 Manifest this update: Sat 26 Jul 2025 18:00:08 +0000 Manifest next update: Tue 29 Jul 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: OlwW18JvC2hfItFNqXPOGIj9RlCyHogOjcKzYjWHrlg=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: uhA+fU2e310luZicPaPiECoeUMh+c3bq0HOrMrRnZQY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:25:60:da:47:74:43:80:14:b6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Jul 26 18:00:08 2025 GMT Not After : Jul 29 18:00:00 2025 GMT Subject: CN=8298f5df-486d-4ee8-906f-66a4c43da016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:cc:2b:b3:fc:ad:11:1b:58:58:be:1c:67: cc:b6:7e:48:db:31:69:ba:95:52:e5:05:8b:0b:7e: d7:2d:79:9a:6c:09:0c:9c:4c:78:3a:54:5d:d1:6a: f0:a2:7c:0e:ae:5f:d3:c3:02:89:ab:43:e9:47:46: 11:bc:0c:81:b2:87:9e:8e:32:bd:98:7a:a8:9a:8e: fc:80:4b:e7:42:54:a9:2a:40:76:77:41:50:3b:0b: cf:68:86:3b:6b:3c:a2:11:73:29:35:89:99:a5:33: 0a:39:b3:69:43:f9:45:c6:15:64:79:f6:c3:e9:88: c3:77:7e:4d:14:40:e4:89:0b:ff:8a:b1:61:75:34: 17:ef:87:92:92:37:e9:66:21:40:9b:61:bb:fb:c2: a8:11:76:47:4a:35:ad:a5:65:22:d7:9f:1d:8a:62: 1e:46:ac:ce:32:ec:7e:cc:1e:c0:2e:72:92:d7:f4: bd:c5:ae:b9:59:bb:d8:a9:10:b7:dc:c8:64:75:e7: 68:8c:c2:32:c3:3b:8b:31:92:53:27:5a:a0:48:5d: 75:8e:8b:1c:ae:ee:5f:4c:5d:b0:df:c3:a2:bc:9b: 72:ec:84:71:bf:0e:14:41:e4:10:6f:0d:13:71:2c: c4:97:ca:3e:fe:e3:a6:bf:8c:78:b1:b8:b3:23:cb: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:39:3A:E1:37:DF:9E:F8:3E:EC:04:1A:3E:B0:37:B3:C5:6A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:77:5c:c1:eb:06:2e:32:eb:58:fb:b9:c0:7f:38:8c:da:54: 2c:a5:69:fd:84:e9:dd:4a:fb:7d:6c:8a:b9:fd:19:6c:7f:b6: 36:5d:78:c7:cd:8a:d7:70:90:b5:2f:e7:36:12:f9:30:52:48: da:75:45:a9:dd:ff:e6:ec:a0:63:c5:2b:c4:7c:bc:d8:75:86: 45:b3:3a:a9:37:ee:a8:4a:09:cf:23:9f:f8:6b:68:ca:01:22: 4b:5a:47:76:af:ec:7e:33:bc:99:9c:e2:2d:62:f9:2d:5f:89: cc:5d:59:c7:89:59:f4:a3:0a:e5:81:5c:58:91:a9:20:b0:b5: df:a4:f5:56:bf:75:f2:b8:cc:a1:16:73:44:f7:57:0e:7e:5b: 7e:39:e4:a5:a1:51:45:4a:27:f2:35:4a:6b:ea:9c:16:87:da: b4:40:f7:ee:74:22:98:15:84:9a:72:77:38:af:8c:1d:e0:58: 2f:a3:08:a3:68:32:46:15:fb:af:ba:f8:64:67:6b:22:b1:58: 87:60:4d:d1:85:0c:75:ba:85:ac:6b:9a:c9:6a:3d:6b:2d:ee: c2:44:15:e2:9c:25:fb:7c:aa:4b:da:b3:89:0a:99:ed:9a:36: 44:fd:64:a6:e9:9b:f2:1a:04:16:57:28:25:9a:f3:c7:02:8a: 4e:9f:ad:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqmJWDaR3RDgBS2S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MDcyNjE4MDAwOFoXDTI1MDcyOTE4MDAwMFowLzEtMCsGA1UEAxMk ODI5OGY1ZGYtNDg2ZC00ZWU4LTkwNmYtNjZhNGM0M2RhMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDDMK7P8rREbWFi+HGfMtn5I2zFpupVS5QWL C37XLXmabAkMnEx4OlRd0WrwonwOrl/TwwKJq0PpR0YRvAyBsoeejjK9mHqomo78 gEvnQlSpKkB2d0FQOwvPaIY7azyiEXMpNYmZpTMKObNpQ/lFxhVkefbD6YjDd35N FEDkiQv/irFhdTQX74eSkjfpZiFAm2G7+8KoEXZHSjWtpWUi158dimIeRqzOMux+ zB7ALnKS1/S9xa65WbvYqRC33MhkdedojMIywzuLMZJTJ1qgSF11joscru5fTF2w 38OivJty7IRxvw4UQeQQbw0TcSzEl8o+/uOmv4x4sbizI8utzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6OOTrhN9+e+D7sBBo+sDezxWrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbd1zB6wYuMutY+7nAfziM 2lQspWn9hOndSvt9bIq5/Rlsf7Y2XXjHzYrXcJC1L+c2EvkwUkjadUWp3f/m7KBj xSvEfLzYdYZFszqpN+6oSgnPI5/4a2jKASJLWkd2r+x+M7yZnOItYvktX4nMXVnH iVn0owrlgVxYkakgsLXfpPVWv3XyuMyhFnNE91cOflt+OeSloVFFSifyNUpr6pwW h9q0QPfudCKYFYSacnc4r4wd4FgvowijaDJGFfuvuvhkZ2sisViHYE3RhQx1uoWs a5rJaj1rLe7CRBXinCX7fKpL2rOJCpntmjZE/WSm6ZvyGgQWVyglmvPHAopOn60I -----END CERTIFICATE-----Generated at Sun Jul 27 08:26:25 2025 by rpki-client