$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft File: 4c7bb7c9-9462-45de-9a96-5887b6042f79.mft (raw, json) Hash identifier: hTUAKsBpo5Uet8LpCChhf6eLE3ikB2oWO9hWs9W3q8k= Subject key identifier: 71:43:95:E6:F7:82:22:25:1F:2B:82:63:83:A1:9B:EB:D4:18:BA:AB Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F4328584AF950F0374D9FA35C7D1E2120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft Manifest number: 010D0C9F4328584073A8552C1E7F02A5CF81D69A Signing time: Mon 25 Aug 2025 13:00:03 +0000 Manifest this update: Mon 25 Aug 2025 13:00:03 +0000 Manifest next update: Thu 28 Aug 2025 13:00:00 +0000 Files and hashes: 1: 4c7bb7c9-9462-45de-9a96-5887b6042f79.crl (hash: j8WTdpXPuMsAYjtT8Xm6EPnrdodfI1HmMD/3rDsTT3k=) 2: dc37949b-fd68-31d3-8530-d51a972e599a.roa (hash: dkAc8/h9bBfbeMnb29r+Xfee8RF1m9rNacEpHs1WZ4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:50:f0:37:4d:9f:a3:5c:7d:1e:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: Aug 25 13:00:03 2025 GMT Not After : Aug 28 13:00:00 2025 GMT Subject: CN=0a4e84bc-0903-4611-9459-56e42c5fc4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:f3:da:bf:7f:49:50:7c:26:e8:a3:35:ae: dd:5f:50:b5:b2:c4:74:1c:e8:ef:73:86:88:23:e5: 7a:c9:b8:46:bb:f7:50:71:7c:39:b8:cf:80:3b:ae: 5b:e3:4c:7f:61:51:6e:82:90:a1:b3:93:a3:f0:bc: 85:63:91:da:19:15:b7:cf:54:8d:2e:e5:f3:fd:4d: 3f:d1:e5:35:9d:d7:44:2d:10:32:16:0a:d2:6e:ad: 74:c0:d3:ab:f9:ae:ef:65:56:98:76:d9:4d:bf:5d: c2:b6:42:0a:92:1a:f9:8e:03:06:4a:16:d6:1a:03: e4:db:44:6d:17:24:1c:af:9d:72:4e:6a:e8:eb:4e: c0:fd:fb:6d:34:4e:89:3c:1f:57:09:98:9e:5a:6a: 67:c7:c2:9f:67:0e:43:4b:48:0f:91:c7:32:f9:9d: 03:ed:3c:78:e0:d8:a3:86:35:e9:c0:84:d5:f4:f5: a1:95:db:bf:9f:f1:cd:90:e4:35:e8:0e:e9:e0:e7: ac:2e:61:5c:6e:b9:d0:21:18:53:a6:a8:cb:4f:b2: 55:7e:6d:ed:29:bb:29:57:a9:94:93:26:d3:18:95: 77:ea:9c:3a:c5:f6:10:e2:69:1d:6f:d4:ba:14:40: 16:6c:6a:34:ce:5d:c5:8e:c3:79:90:c5:1d:2f:13: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:95:E6:F7:82:22:25:1F:2B:82:63:83:A1:9B:EB:D4:18:BA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:80:4a:63:fb:31:eb:81:e5:7c:5e:b7:ea:eb:ba:b8:62:b5: dd:a1:dc:d9:93:ef:03:fe:52:05:e1:39:75:b1:81:3c:38:f2: 9f:d8:7c:0c:97:9c:77:66:73:47:6e:52:49:ea:c4:f6:55:93: 3d:ac:b0:0f:d8:12:7e:37:95:ae:8b:14:b2:57:36:e1:39:99: 32:f6:10:38:02:da:0c:a9:60:81:5f:dc:72:cf:1a:81:e2:6c: 2b:68:52:f9:db:45:5a:8f:76:7a:9a:61:48:7d:a8:1c:a8:df: a1:91:eb:cc:cd:f2:c3:1f:1e:ea:97:09:35:ec:0d:7c:96:c9: 29:b7:93:6f:43:ae:f0:99:fc:b2:e2:e6:91:0d:8d:b6:3a:89: 6e:d9:02:af:44:0c:83:94:b6:16:d4:27:5d:ad:78:02:e7:0e: 1e:e7:3d:2a:d5:55:57:d7:6d:49:81:e8:a7:d5:9a:7c:ac:db: a0:53:65:b8:2b:20:ba:7d:62:88:9b:38:a0:4f:03:4d:d8:bc: 56:b7:6e:15:17:5b:88:2e:89:52:46:b3:74:fc:7f:b3:85:75: db:bc:6a:6f:61:e4:46:59:4f:b2:f2:94:7d:fb:ed:ad:19:a5: 06:b5:d6:11:e3:ec:0d:03:26:4d:84:3f:74:b7:44:4e:a4:9d: 38:23:09:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr5UPA3TZ+jXH0eISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI1MDgyNTEzMDAwM1oXDTI1MDgyODEzMDAwMFowLzEtMCsGA1UEAxMk MGE0ZTg0YmMtMDkwMy00NjExLTk0NTktNTZlNDJjNWZjNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnTz2r9/SVB8JuijNa7dX1C1ssR0HOjvc4aI I+V6ybhGu/dQcXw5uM+AO65b40x/YVFugpChs5Oj8LyFY5HaGRW3z1SNLuXz/U0/ 0eU1nddELRAyFgrSbq10wNOr+a7vZVaYdtlNv13CtkIKkhr5jgMGShbWGgPk20Rt FyQcr51yTmro607A/fttNE6JPB9XCZieWmpnx8KfZw5DS0gPkccy+Z0D7Tx44Nij hjXpwITV9PWhldu/n/HNkOQ16A7p4OesLmFcbrnQIRhTpqjLT7JVfm3tKbspV6mU kybTGJV36pw6xfYQ4mkdb9S6FEAWbGo0zl3FjsN5kMUdLxPVPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFDleb3giIlHyuCY4Ohm+vUGLqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvNGM3YmI3YzktOTQ2Mi00 NWRlLTlhOTYtNTg4N2I2MDQyZjc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKgEpj+zHrgeV8Xrfq67q4 YrXdodzZk+8D/lIF4Tl1sYE8OPKf2HwMl5x3ZnNHblJJ6sT2VZM9rLAP2BJ+N5Wu ixSyVzbhOZky9hA4AtoMqWCBX9xyzxqB4mwraFL520Vaj3Z6mmFIfagcqN+hkevM zfLDHx7qlwk17A18lskpt5NvQ67wmfyy4uaRDY22Oolu2QKvRAyDlLYW1CddrXgC 5w4e5z0q1VVX121Jgein1Zp8rNugU2W4KyC6fWKImzigTwNN2LxWt24VF1uILolS RrN0/H+zhXXbvGpvYeRGWU+y8pR9++2tGaUGtdYR4+wNAyZNhD90t0ROpJ04IwmE -----END CERTIFICATE-----Generated at Tue Aug 26 06:27:53 2025 by rpki-client