$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft File: 204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft (raw, json) Hash identifier: 3CyehcsVICV401PJonexR3R4dPFW5tUO5U6DVtXQn0E= Subject key identifier: 23:C0:CD:22:45:7F:33:92:9D:52:93:BF:06:2D:43:37:A0:D3:F0:C7 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584AE8730F1FCDBC84BDFF397700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft Manifest number: 010D0C9F4328584AD7C3CF1BD1E02DD3D82C1D47 Signing time: Tue 19 Aug 2025 12:00:04 +0000 Manifest this update: Tue 19 Aug 2025 12:00:04 +0000 Manifest next update: Fri 22 Aug 2025 12:00:00 +0000 Files and hashes: 1: 204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl (hash: M/iIj//pd7IaaeQ1yh4qTp0k7NFEvFt5a8aGl1S0mrs=) 2: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (hash: mx3nB1/FHIamRERiUjwAgSUGRk1EGoccE1HbyHcfQH8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:73:0f:1f:cd:bc:84:bd:ff:39:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Aug 19 12:00:04 2025 GMT Not After : Aug 22 12:00:00 2025 GMT Subject: CN=e77a1cf7-925a-49a5-a149-f09096102fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:b6:76:4d:8c:89:41:30:52:c5:1c:4c:79: dd:ae:1a:b6:3a:c0:4f:71:be:10:98:63:c2:5c:a7: d3:d5:7e:d1:75:f7:bd:98:30:e4:98:b8:13:06:20: ae:25:c4:94:44:fe:f6:20:43:79:87:e0:81:04:10: 14:da:47:04:ae:62:bb:c4:30:c5:3c:35:d6:d7:a2: 73:db:ae:c1:86:a7:d2:ad:1c:8d:24:18:a3:5d:b7: 6f:0e:5b:1b:62:4b:b8:5a:b3:e5:4f:60:d6:34:19: 21:0c:f0:45:32:40:86:02:2f:19:4a:f9:81:2e:da: f9:4f:18:90:7a:7f:86:69:cf:b5:1a:a4:47:26:5a: 3a:5b:aa:69:cc:00:84:b2:8c:40:77:bc:3f:7f:c6: 6f:91:2f:42:ff:45:83:86:df:8d:c9:54:fd:d3:e2: 62:05:45:4e:d3:ad:71:c7:33:4f:86:f6:16:8e:22: 19:be:ea:da:40:3a:5b:e0:76:43:9c:c0:ec:24:44: 49:d5:f9:18:f8:1c:85:ee:55:12:1b:65:6b:96:7d: 5e:71:69:cb:a8:a9:09:85:f7:a5:f8:33:29:ac:99: bb:bd:9a:27:17:89:f8:09:8b:e2:a7:be:6a:30:43: b5:0a:43:48:83:21:f6:ae:6e:5e:df:2f:ee:d7:e2: c7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:CD:22:45:7F:33:92:9D:52:93:BF:06:2D:43:37:A0:D3:F0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:14:d7:d8:3f:d3:1d:ea:3a:58:da:2e:71:c2:d1:6f:ea:c8: 76:a6:14:fd:91:75:c5:88:9d:f0:8f:2b:98:81:11:c2:6f:57: 8f:44:f8:1b:e1:0e:1d:70:82:a1:1a:8a:b3:72:c4:e2:1f:22: 80:db:37:80:a6:24:71:4f:43:7d:d5:a7:0d:e0:46:44:81:fa: 9d:ae:78:b6:86:11:c2:f3:8e:3a:a9:b8:39:dc:24:28:2a:e4: bc:fe:3d:d4:50:ad:82:44:3b:7b:7f:d6:ba:60:b1:19:48:eb: 0e:f9:a3:46:2b:34:b5:54:10:bb:cd:22:90:0c:2c:06:a0:55: de:77:d6:3c:94:13:54:02:43:06:00:f3:8f:85:89:34:24:84: 2a:41:00:e6:1e:0a:c5:72:01:56:b5:ba:cc:0a:c1:a2:4a:db: 2d:32:6f:55:14:0d:3b:4a:54:07:5d:04:a1:66:06:4e:77:de: 9d:f4:30:55:67:9b:ce:33:5a:28:08:4c:b0:7d:0c:9a:ec:5c: ea:73:5b:43:32:79:8c:d7:bc:c6:02:a8:a8:28:ba:91:97:fd: 9e:ca:02:7c:e1:8f:3b:8d:d5:8c:94:14:ed:39:d9:61:57:65: b5:d1:3c:f7:96:c3:e7:73:de:11:2a:65:b5:25:fd:88:a9:5b: ed:0f:83:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErocw8fzbyEvf85dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI1MDgxOTEyMDAwNFoXDTI1MDgyMjEyMDAwMFowLzEtMCsGA1UEAxMk ZTc3YTFjZjctOTI1YS00OWE1LWExNDktZjA5MDk2MTAyZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYS2dk2MiUEwUsUcTHndrhq2OsBPcb4QmGPC XKfT1X7Rdfe9mDDkmLgTBiCuJcSURP72IEN5h+CBBBAU2kcErmK7xDDFPDXW16Jz 267BhqfSrRyNJBijXbdvDlsbYku4WrPlT2DWNBkhDPBFMkCGAi8ZSvmBLtr5TxiQ en+Gac+1GqRHJlo6W6ppzACEsoxAd7w/f8ZvkS9C/0WDht+NyVT90+JiBUVO061x xzNPhvYWjiIZvuraQDpb4HZDnMDsJERJ1fkY+ByF7lUSG2Vrln1ecWnLqKkJhfel +DMprJm7vZonF4n4CYvip75qMEO1CkNIgyH2rm5e3y/u1+LHjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCPAzSJFfzOSnVKTvwYtQzeg0/DHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvMjA0YjZlMzUtYzJiNS00 MDg0LTljNzAtZGQ1ZTdjN2Q4Y2Y4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDFNfYP9Md6jpY2i5xwtFv 6sh2phT9kXXFiJ3wjyuYgRHCb1ePRPgb4Q4dcIKhGoqzcsTiHyKA2zeApiRxT0N9 1acN4EZEgfqdrni2hhHC8446qbg53CQoKuS8/j3UUK2CRDt7f9a6YLEZSOsO+aNG KzS1VBC7zSKQDCwGoFXed9Y8lBNUAkMGAPOPhYk0JIQqQQDmHgrFcgFWtbrMCsGi StstMm9VFA07SlQHXQShZgZOd96d9DBVZ5vOM1ooCEywfQya7Fzqc1tDMnmM17zG AqioKLqRl/2eygJ84Y87jdWMlBTtOdlhV2W10Tz3lsPnc94RKmW1Jf2IqVvtD4Pk -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:43 2025 by rpki-client