$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: gQa8lEdSTzigHrSo5WAn5zYxc5Ns2lDjeE+HneZbJAE= Subject key identifier: C4:A4:66:87:CE:FF:B7:00:08:3A:8B:70:1A:51:AA:AC:30:0C:25:02 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584AE925C08682842FFB8B274400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB3184240 Signing time: Tue 19 Aug 2025 18:00:08 +0000 Manifest this update: Tue 19 Aug 2025 18:00:08 +0000 Manifest next update: Fri 22 Aug 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: Q2Q3RAMRAav8qwro5mOZRMVlB+4301IKRVLIlRpyXok=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: fAW+YC/2dWFz+7m+UhlVb0Eh35WT08PNMmBiD24CZDU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:25:c0:86:82:84:2f:fb:8b:27:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Aug 19 18:00:08 2025 GMT Not After : Aug 22 18:00:00 2025 GMT Subject: CN=96e48a38-3cd4-4ab0-850f-c28077ddf201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:db:83:b1:4c:b5:a9:d8:2e:31:db:37:48: 67:d4:5d:78:04:a4:9d:02:11:33:1e:f0:d6:c1:99: 1d:54:f1:1d:47:66:d8:37:91:94:14:83:28:fc:a3: 00:49:1f:09:da:c7:77:79:80:51:5a:8e:ac:26:fa: b1:3f:31:af:2e:cd:eb:05:ed:fd:40:2a:2a:73:bc: 66:8c:71:73:a3:a7:29:d1:4f:0b:38:d7:a1:a2:12: 33:75:d8:0e:4c:04:7a:46:e1:bf:1c:99:16:ee:bb: a8:e2:69:b0:1f:48:eb:18:7d:d9:47:c8:b6:f4:96: 89:36:fc:ba:6f:4a:17:d3:7c:78:3a:92:43:2d:ad: 6b:9a:18:c2:0b:48:4b:4e:44:50:c1:97:97:9f:68: bd:4b:9c:da:31:c9:22:3b:5f:da:27:91:84:d0:e8: d8:08:fe:74:eb:82:65:65:5e:16:09:ca:08:da:bd: 3d:3e:ac:d3:57:a6:f9:35:f1:f9:d4:05:bc:ee:08: 53:77:e0:c7:8d:d4:ba:e3:ef:f3:db:43:33:68:1c: 22:bb:f0:67:d7:43:33:89:b8:68:0d:90:3d:e5:a5: 33:e5:0e:05:91:ac:5f:74:dd:a0:67:31:3e:4c:93: 48:0a:ab:ff:93:b6:99:ae:7e:d8:9f:dc:7f:e3:d2: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A4:66:87:CE:FF:B7:00:08:3A:8B:70:1A:51:AA:AC:30:0C:25:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9d:4a:52:4e:48:ab:39:94:f1:f5:f0:e7:d3:00:28:b9:99: 9f:01:e3:b0:0f:95:d5:1e:c1:79:6c:7c:7f:d6:bc:89:12:21: f0:8f:bf:91:c9:89:24:bb:58:36:58:81:9e:f0:7a:44:83:f2: da:e6:b0:f2:db:3b:4d:1b:fc:25:8b:6d:78:d6:e6:f5:a0:51: 2e:98:aa:b2:ec:3d:9f:f4:bc:e2:f6:69:5e:2d:11:1f:65:a6: 25:e3:c8:34:a7:a8:f9:28:47:31:c4:ef:2d:60:84:a3:d9:b4: f9:17:4c:a1:e1:fb:78:b1:ce:46:2a:4f:d9:0d:ac:b3:e6:39: 53:71:88:e0:09:89:34:5b:8a:37:06:ec:bf:12:10:85:2c:e1: e9:93:65:ac:2d:93:f2:9b:f0:0e:df:a1:10:70:07:4c:73:d8: 07:d5:c8:5c:51:20:36:80:cb:f1:bf:04:18:df:89:68:16:7b: 2d:3f:90:8d:db:a6:42:57:39:a9:0c:12:ce:19:39:41:ca:a8: 0f:a9:8a:01:43:18:93:5a:68:0d:ef:66:76:c8:37:09:11:81: 32:83:5e:cb:4d:b4:95:bf:1f:dc:2a:67:c0:df:aa:c7:4f:96: cf:e2:25:7a:93:57:76:62:1b:fb:76:48:ed:3e:d1:4d:93:52: 77:a5:fb:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpJcCGgoQv+4snRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MDgxOTE4MDAwOFoXDTI1MDgyMjE4MDAwMFowLzEtMCsGA1UEAxMk OTZlNDhhMzgtM2NkNC00YWIwLTg1MGYtYzI4MDc3ZGRmMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQbbg7FMtanYLjHbN0hn1F14BKSdAhEzHvDW wZkdVPEdR2bYN5GUFIMo/KMASR8J2sd3eYBRWo6sJvqxPzGvLs3rBe39QCoqc7xm jHFzo6cp0U8LONehohIzddgOTAR6RuG/HJkW7ruo4mmwH0jrGH3ZR8i29JaJNvy6 b0oX03x4OpJDLa1rmhjCC0hLTkRQwZeXn2i9S5zaMckiO1/aJ5GE0OjYCP5064Jl ZV4WCcoI2r09PqzTV6b5NfH51AW87ghTd+DHjdS64+/z20MzaBwiu/Bn10Mzibho DZA95aUz5Q4FkaxfdN2gZzE+TJNICqv/k7aZrn7Yn9x/49LwhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMSkZofO/7cACDqLcBpRqqwwDCUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAanUpSTkirOZTx9fDn0wAo uZmfAeOwD5XVHsF5bHx/1ryJEiHwj7+RyYkku1g2WIGe8HpEg/La5rDy2ztNG/wl i2141ub1oFEumKqy7D2f9Lzi9mleLREfZaYl48g0p6j5KEcxxO8tYISj2bT5F0yh 4ft4sc5GKk/ZDayz5jlTcYjgCYk0W4o3Buy/EhCFLOHpk2WsLZPym/AO36EQcAdM c9gH1chcUSA2gMvxvwQY34loFnstP5CN26ZCVzmpDBLOGTlByqgPqYoBQxiTWmgN 72Z2yDcJEYEyg17LTbSVvx/cKmfA36rHT5bP4iV6k1d2Yhv7dkjtPtFNk1J3pfsA -----END CERTIFICATE-----Generated at Wed Aug 20 13:18:39 2025 by rpki-client