$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: SZgDVqNvT4wu9ExeziFKKyGjtvAFrw3SUq75gC/kY3s= Subject key identifier: 0E:C9:98:16:51:48:56:4F:25:EE:B0:62:C2:46:01:30:28:D3:CA:53 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584A7585EC74FF57EC3745483980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D77B Signing time: Wed 09 Jul 2025 08:00:08 +0000 Manifest this update: Wed 09 Jul 2025 08:00:08 +0000 Manifest next update: Fri 11 Jul 2025 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: fvR/0gP6gW1Gjy+P09Py6aNqPHj/a4J4RPwRJLN+fLU=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: SwQgV5sZdlqEcqUHI+6AACRKTwMEtFLk7lrr7Hsxzso=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:85:ec:74:ff:57:ec:37:45:48:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Jul 9 08:00:08 2025 GMT Not After : Jul 11 08:00:00 2025 GMT Subject: CN=70aa751b-d3ea-41e7-8e52-f96b70146f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:e5:f3:4f:cf:f0:0c:7a:3a:2f:90:9f:3b: 95:2d:bd:78:cb:0a:23:c8:52:92:59:e2:50:7a:18: 7d:0a:e8:21:5e:1b:55:ec:4d:d6:48:3c:e0:44:1a: f8:e2:ff:21:a1:fc:af:14:47:41:84:a6:41:08:17: b4:46:0b:fd:ee:2e:08:16:ec:36:59:41:ce:ac:97: c3:cf:ef:65:65:54:af:65:d4:3e:5d:b7:b1:6c:25: 95:c4:0c:c5:6c:2b:3b:5b:c3:d5:ba:52:c1:6b:29: b0:12:89:54:85:a2:0e:7d:b5:a4:ba:42:f4:77:0f: fb:9d:98:29:7d:a7:5c:44:3d:e1:46:a2:f9:2c:6b: 35:29:ae:ed:0c:ca:29:62:65:f9:85:3e:dd:b3:f1: 83:23:71:fe:3c:89:e7:6e:96:1b:48:59:16:b2:80: 58:04:db:5d:7e:fc:c5:d9:59:e0:fd:86:0f:33:86: c4:c1:73:e0:b6:0f:0f:da:fe:b2:05:c7:7f:af:68: 05:25:b7:96:bc:3a:8f:aa:f6:7d:d6:04:6c:0e:54: 5e:14:92:f6:fe:b7:3d:82:34:d4:02:a7:14:6f:d3: 6e:e0:b9:9e:f8:03:99:bd:a5:e8:73:69:90:74:a2: 85:8c:ef:46:e5:d9:09:04:31:8f:db:3f:44:61:5d: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:98:16:51:48:56:4F:25:EE:B0:62:C2:46:01:30:28:D3:CA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1b:a8:00:05:07:b5:54:09:a5:c4:a4:d1:51:ae:67:d4:9f: 4d:ee:d9:40:9e:c9:36:c6:cc:b8:70:6c:4f:6d:70:c1:49:db: bb:3e:49:65:da:b1:e9:80:d4:4a:38:57:93:89:3c:13:a8:1d: 1b:5b:73:41:b9:e5:2b:b7:8b:bd:66:24:6f:12:04:51:28:c6: ae:56:e8:3d:d3:9c:b4:65:74:c2:63:b5:47:5e:4b:80:0d:d9: 33:25:9b:70:ab:61:df:0a:6a:21:79:8a:4b:4b:ee:d4:22:df: 08:56:bf:e1:2a:11:60:ce:a3:03:8e:48:08:11:36:4c:7a:3e: 39:6e:65:73:f4:30:25:3a:f2:51:8f:6a:04:cd:06:7d:20:2a: 20:fa:7c:5f:34:13:ed:d6:e6:65:28:bd:cc:2a:9f:a8:53:76: 3e:be:67:0b:5a:c6:63:3f:0b:74:98:a4:7f:23:e3:e8:f8:27: ab:9c:c7:a3:07:22:e0:a9:d1:f2:cf:66:47:a5:ef:d4:30:7b: 2a:b6:80:68:b8:4f:b1:c3:60:fe:cb:51:1d:0f:92:fc:18:0a: d3:3a:dd:1b:23:d3:3d:72:bf:de:e4:a9:bd:bd:09:34:8c:2a: 5f:66:79:3f:99:59:09:41:e6:d5:5e:f8:6f:6e:dc:aa:de:5e: 99:8f:dc:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1hex0/1fsN0VIOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI1MDcwOTA4MDAwOFoXDTI1MDcxMTA4MDAwMFowLzEtMCsGA1UEAxMk NzBhYTc1MWItZDNlYS00MWU3LThlNTItZjk2YjcwMTQ2ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlczl80/P8Ax6Oi+QnzuVLb14ywojyFKSWeJQ ehh9CughXhtV7E3WSDzgRBr44v8hofyvFEdBhKZBCBe0Rgv97i4IFuw2WUHOrJfD z+9lZVSvZdQ+XbexbCWVxAzFbCs7W8PVulLBaymwEolUhaIOfbWkukL0dw/7nZgp fadcRD3hRqL5LGs1Ka7tDMopYmX5hT7ds/GDI3H+PInnbpYbSFkWsoBYBNtdfvzF 2Vng/YYPM4bEwXPgtg8P2v6yBcd/r2gFJbeWvDqPqvZ91gRsDlReFJL2/rc9gjTU AqcUb9Nu4Lme+AOZvaXoc2mQdKKFjO9G5dkJBDGP2z9EYV3sowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA7JmBZRSFZPJe6wYsJGATAo08pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2G6gABQe1VAmlxKTRUa5n 1J9N7tlAnsk2xsy4cGxPbXDBSdu7Pkll2rHpgNRKOFeTiTwTqB0bW3NBueUrt4u9 ZiRvEgRRKMauVug905y0ZXTCY7VHXkuADdkzJZtwq2HfCmoheYpLS+7UIt8IVr/h KhFgzqMDjkgIETZMej45bmVz9DAlOvJRj2oEzQZ9ICog+nxfNBPt1uZlKL3MKp+o U3Y+vmcLWsZjPwt0mKR/I+Po+CernMejByLgqdHyz2ZHpe/UMHsqtoBouE+xw2D+ y1EdD5L8GArTOt0bI9M9cr/e5Km9vQk0jCpfZnk/mVkJQebVXvhvbtyq3l6Zj9xV -----END CERTIFICATE-----Generated at Wed Jul 9 22:24:17 2025 by rpki-client