$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft File: 1d25e0e4-3256-419b-9e99-0f045d2a1125.mft (raw, json) Hash identifier: CSTUAhIEDgpjqVsyasixVzj8JBAfExUb7tbSq1LI52M= Subject key identifier: 0A:7B:54:73:4E:35:86:25:BC:74:18:F3:42:96:AD:89:C3:13:B8:70 Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584AFAF1DE641C74FF4CA916A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft Manifest number: 010D0C9F4328584073A83978E201F31829BF93FB Signing time: Tue 26 Aug 2025 03:00:08 +0000 Manifest this update: Tue 26 Aug 2025 03:00:08 +0000 Manifest next update: Thu 28 Aug 2025 03:00:00 +0000 Files and hashes: 1: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (hash: oCQnZD2w884xo7Rsp6BWkm9+s2FGarr18FlFvGxrRRg=) 2: 1d25e0e4-3256-419b-9e99-0f045d2a1125.crl (hash: 6oL13DKgbLQYG5Eaf43L/H29dlA7fY371DAQJbqLkNo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:f1:de:64:1c:74:ff:4c:a9:16:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Aug 26 03:00:08 2025 GMT Not After : Aug 28 03:00:00 2025 GMT Subject: CN=9ecf6544-7ac0-412f-a47d-78201180bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:ef:26:aa:6e:64:af:1f:83:bc:03:6f:55: 08:03:04:70:89:76:fe:c8:0d:6a:8e:6f:c6:6b:5b: 82:c8:1d:03:ba:35:71:8e:ff:30:71:dc:40:b7:64: af:72:c1:c8:ee:21:f4:3d:06:e8:40:b5:86:bb:4e: 81:b0:cc:a9:bc:22:3a:4a:a1:55:29:86:5e:05:7e: b6:66:38:e8:58:ee:e1:a8:16:90:26:8b:25:1a:ae: f6:44:30:f1:d8:c9:e7:c8:4e:a0:51:75:5d:0a:ae: 23:d5:7b:a3:b6:7f:bd:d0:ea:47:ce:ea:70:73:ac: fd:3a:01:15:49:d3:6a:04:40:2a:3e:47:b8:da:66: ec:2f:40:8d:41:02:86:81:f7:25:16:c0:a3:fa:d0: 93:f6:34:7f:26:b8:34:c7:45:77:89:8f:e1:4f:7e: e0:5b:cc:e8:d2:14:8c:99:77:4b:41:a8:5f:06:dc: b1:09:bf:b4:6a:0b:dd:d6:c9:17:d7:8f:0d:4d:39: c3:ac:b6:79:8c:52:24:96:24:19:e8:2e:20:eb:9e: 86:cc:43:b9:36:92:1e:3e:75:6a:c9:26:82:ba:a6: fd:59:da:6a:8f:dc:6a:33:80:5a:bc:16:58:df:95: 67:f7:c1:87:1b:6f:c0:f5:04:98:d8:d6:36:c2:57: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7B:54:73:4E:35:86:25:BC:74:18:F3:42:96:AD:89:C3:13:B8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b9:ab:4f:01:c0:eb:b3:2d:cb:d3:09:77:ee:8b:aa:03:23: 61:87:ce:18:f1:55:7f:00:d9:6c:5d:88:97:68:85:90:33:03: bc:e1:77:73:cf:84:20:f7:57:b8:de:ed:2e:7b:36:ce:71:97: 65:31:32:10:e1:b7:3f:10:75:1c:3c:54:9e:7f:ab:14:87:7d: ba:80:08:62:c5:60:66:63:c5:9d:1b:99:10:a9:79:3c:14:14: 5e:94:5b:a4:51:e4:39:d6:d1:49:2f:36:b5:42:4e:f9:30:60: 55:e5:37:29:02:ff:d7:57:37:dd:90:a7:59:d4:6f:71:0c:f1: 48:8e:11:64:09:4f:e7:f0:47:b7:87:2c:6a:43:66:74:77:52: 1f:39:95:f7:9c:6e:c6:4e:f6:53:94:b1:00:f1:65:30:3d:ed: ac:0f:2b:e6:7b:2d:bf:38:f9:86:35:e4:00:ac:33:7a:4e:b4: dd:4e:75:e3:6c:51:bc:06:e8:cc:ff:c1:ea:04:ca:a5:9c:e7: 08:c7:a2:77:a5:ee:b0:7a:8e:4f:88:ed:ed:7f:82:b8:02:f3: e4:d1:f8:c3:5a:6e:1a:cc:dd:a9:53:e8:dc:c3:ac:95:9c:fa: f4:3f:42:e9:85:1c:7e:e5:67:4e:50:31:a6:30:58:c2:3b:b5: dc:8f:95:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr68d5kHHT/TKkWoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI1MDgyNjAzMDAwOFoXDTI1MDgyODAzMDAwMFowLzEtMCsGA1UEAxMk OWVjZjY1NDQtN2FjMC00MTJmLWE0N2QtNzgyMDExODBiZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJXvJqpuZK8fg7wDb1UIAwRwiXb+yA1qjm/G a1uCyB0DujVxjv8wcdxAt2SvcsHI7iH0PQboQLWGu06BsMypvCI6SqFVKYZeBX62 ZjjoWO7hqBaQJoslGq72RDDx2MnnyE6gUXVdCq4j1Xujtn+90OpHzupwc6z9OgEV SdNqBEAqPke42mbsL0CNQQKGgfclFsCj+tCT9jR/Jrg0x0V3iY/hT37gW8zo0hSM mXdLQahfBtyxCb+0agvd1skX148NTTnDrLZ5jFIkliQZ6C4g656GzEO5NpIePnVq ySaCuqb9Wdpqj9xqM4BavBZY35Vn98GHG2/A9QSY2NY2wldBqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAp7VHNONYYlvHQY80KWrYnDE7hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWQyNWUwZTQtMzI1Ni00 MTliLTllOTktMGYwNDVkMmExMTI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBguatPAcDrsy3L0wl37ouq AyNhh84Y8VV/ANlsXYiXaIWQMwO84Xdzz4Qg91e43u0uezbOcZdlMTIQ4bc/EHUc PFSef6sUh326gAhixWBmY8WdG5kQqXk8FBRelFukUeQ51tFJLza1Qk75MGBV5Tcp Av/XVzfdkKdZ1G9xDPFIjhFkCU/n8Ee3hyxqQ2Z0d1IfOZX3nG7GTvZTlLEA8WUw Pe2sDyvmey2/OPmGNeQArDN6TrTdTnXjbFG8BujM/8HqBMqlnOcIx6J3pe6weo5P iO3tf4K4AvPk0fjDWm4azN2pU+jcw6yVnPr0P0LphRx+5WdOUDGmMFjCO7Xcj5VE -----END CERTIFICATE-----Generated at Tue Aug 26 10:38:09 2025 by rpki-client