$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft File: 12a9b198-d23d-4f41-8397-cc467b398bc3.mft (raw, json) Hash identifier: IU6c8LK1W/OEydFKda7Fo1Npn0aN/MP3SeOtaN68TPg= Subject key identifier: 01:E2:AD:AD:74:65:1D:52:8F:FE:36:91:E4:83:08:10:54:29:0F:75 Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 Certificate issuer: /CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Certificate serial: 010D0C9F4328584AF8D9DD547C28B231577ECB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft Manifest number: 010D0C9F4328584073A8494E35EF9969DC5DD4DD Signing time: Mon 25 Aug 2025 09:00:08 +0000 Manifest this update: Mon 25 Aug 2025 09:00:08 +0000 Manifest next update: Thu 28 Aug 2025 09:00:00 +0000 Files and hashes: 1: 12a9b198-d23d-4f41-8397-cc467b398bc3.crl (hash: y9pgtBZOyXleXvUPEw501j38fnwCBtk7C36jG38RcQE=) 2: 20b12159-fae1-324b-856e-4ffaaa0299f4.roa (hash: 9V11kKFQsdP54zlf3uZlzol7ZPju2PrNuuh1lVV0gMg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:d9:dd:54:7c:28:b2:31:57:7e:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Validity Not Before: Aug 25 09:00:08 2025 GMT Not After : Aug 28 09:00:00 2025 GMT Subject: CN=d7b6f8d9-5ae5-4ed2-9c9a-0cd6a4210798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:9e:af:a9:d8:51:fe:38:f3:df:da:7b:79: 6b:15:7a:8f:6d:be:de:ee:38:76:c1:d2:78:12:4f: 87:ec:11:7c:5b:a4:c2:08:78:6d:72:30:04:cb:a9: f4:72:55:23:20:f7:f0:71:8c:3d:57:89:77:dd:f5: 24:c0:03:69:c7:f3:b7:97:71:47:18:69:97:da:e5: 50:05:67:13:a2:7a:72:69:27:e6:64:92:08:d5:5e: 27:c9:33:2b:de:b0:64:8a:dd:d7:c7:f0:9f:04:b9: 19:4e:fa:8c:59:dc:bc:a5:9a:43:42:1f:56:b4:6a: a5:48:b3:26:27:13:51:63:56:3d:84:6e:0b:4f:fb: 00:77:89:cf:45:f0:29:0c:cf:bb:5d:85:f0:2a:e3: 4e:a3:ae:7e:a2:0c:6e:ec:3c:06:2b:b8:e6:0e:4b: 7a:10:23:08:65:01:0f:b2:d0:0b:51:ca:ea:e6:b3: 55:08:e4:1a:5e:6c:57:22:f1:77:7a:43:af:35:70: a5:9c:88:3b:19:1f:2b:74:81:09:a7:5e:7b:00:72: b5:41:f7:51:c8:8e:e3:d7:93:d7:29:08:ce:9a:ed: 12:fa:48:c9:08:bd:dd:b9:3a:0a:db:d0:a8:e5:05: b3:c5:8a:ed:73:d3:4f:d4:b2:d9:85:8e:10:45:b8: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:AD:AD:74:65:1D:52:8F:FE:36:91:E4:83:08:10:54:29:0F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl X509v3 Authority Key Identifier: keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a0:da:4f:9c:37:08:65:4f:b9:15:21:da:af:52:c4:b7:84: 28:76:f8:7b:02:65:b8:42:58:f6:44:b9:49:7f:3f:bd:22:bb: 7d:b4:88:23:f1:90:11:bf:a2:0b:ba:3d:d2:f0:fa:f9:08:7a: d9:5e:7c:24:f2:d0:fe:d6:a9:d2:3d:dc:cb:06:e4:56:a1:f4: 7f:29:99:f9:d2:0f:48:73:4e:c9:d6:70:43:f6:02:55:93:65: 78:9a:72:dd:f0:a8:5b:05:ec:28:d5:3a:0b:c4:ab:63:4e:9a: 19:83:a1:a4:e7:d1:3c:bf:20:ca:42:ee:59:fb:a5:1b:ac:14: 45:49:34:a8:d3:8a:50:ec:74:7e:bb:4f:c6:d9:10:1e:51:49: 0f:4a:11:06:06:13:d4:3e:26:67:44:f6:24:1e:9c:b2:19:95: 58:03:02:af:7e:b4:1a:82:03:04:b9:d8:c1:e2:45:94:a9:e9: e5:3d:de:a4:0e:c7:18:a0:a5:26:6e:8d:14:aa:3e:f6:32:d6: 3b:d2:8d:b0:dc:59:93:7d:fa:bc:83:9d:48:a6:04:d5:97:b9: e7:26:75:3d:d8:25:6f:d3:0c:6e:cf:c4:32:d3:f9:8b:21:0b: 1f:dc:92:dc:ef:79:7a:bf:6b:65:56:16:70:7e:69:69:6c:1f: 3f:ff:85:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr42d1UfCiyMVd+ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJhOWIxOTgtZDIzZC00ZjQxLTgzOTctY2M0NjdiMzk4 YmMzMB4XDTI1MDgyNTA5MDAwOFoXDTI1MDgyODA5MDAwMFowLzEtMCsGA1UEAxMk ZDdiNmY4ZDktNWFlNS00ZWQyLTljOWEtMGNkNmE0MjEwNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2eer6nYUf4489/ae3lrFXqPbb7e7jh2wdJ4 Ek+H7BF8W6TCCHhtcjAEy6n0clUjIPfwcYw9V4l33fUkwANpx/O3l3FHGGmX2uVQ BWcTonpyaSfmZJII1V4nyTMr3rBkit3Xx/CfBLkZTvqMWdy8pZpDQh9WtGqlSLMm JxNRY1Y9hG4LT/sAd4nPRfApDM+7XYXwKuNOo65+ogxu7DwGK7jmDkt6ECMIZQEP stALUcrq5rNVCOQaXmxXIvF3ekOvNXClnIg7GR8rdIEJp157AHK1QfdRyI7j15PX KQjOmu0S+kjJCL3duToK29Co5QWzxYrtc9NP1LLZhY4QRbjjFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAHira10ZR1Sj/42keSDCBBUKQ91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5 YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2N2IzOThiYzMvMTJhOWIxOTgtZDIzZC00 ZjQxLTgzOTctY2M0NjdiMzk4YmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTJhOWIxOTgtZDIzZC00ZjQxLTgz OTctY2M0NjdiMzk4YmMzLzEyYTliMTk4LWQyM2QtNGY0MS04Mzk3LWNjNDY3YjM5 OGJjMy5jcmwwHwYDVR0jBBgwFoAUcoQNQ2lvKkNnIu1rRiCjgpxFRzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2 N2IzOThiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKoNpPnDcIZU+5FSHar1LE t4Qodvh7AmW4Qlj2RLlJfz+9Irt9tIgj8ZARv6ILuj3S8Pr5CHrZXnwk8tD+1qnS PdzLBuRWofR/KZn50g9Ic07J1nBD9gJVk2V4mnLd8KhbBewo1ToLxKtjTpoZg6Gk 59E8vyDKQu5Z+6UbrBRFSTSo04pQ7HR+u0/G2RAeUUkPShEGBhPUPiZnRPYkHpyy GZVYAwKvfrQaggMEudjB4kWUqenlPd6kDscYoKUmbo0Uqj72MtY70o2w3FmTffq8 g51IpgTVl7nnJnU92CVv0wxuz8Qy0/mLIQsf3JLc73l6v2tlVhZwfmlpbB8//4Xo -----END CERTIFICATE-----Generated at Tue Aug 26 06:27:54 2025 by rpki-client