$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft File: c9f645ac-84aa-42e3-b85a-7af9688898a6.mft (raw, json) Hash identifier: fSrzDG7frfTC5vQyAyL4XM9bqMJtKJqW1NZY31LHjXQ= Subject key identifier: 88:B5:F6:7E:CE:D7:2D:A7:35:83:F7:80:D7:30:11:74:5A:0A:4F:DD Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F4328584B378C7C464F26B50231761D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft Manifest number: 010D0C9F43285844C004D6D7C16ABFA97D8A7860 Signing time: Tue 16 Sep 2025 20:00:08 +0000 Manifest this update: Tue 16 Sep 2025 20:00:08 +0000 Manifest next update: Thu 18 Sep 2025 20:00:00 +0000 Files and hashes: 1: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (hash: sMQiXF60jTVx6puYS1XYX1i6xR0+Ewp7nypxZwuwhFg=) 2: c9f645ac-84aa-42e3-b85a-7af9688898a6.crl (hash: xc1v1usDishoc1mnpU8DeYPm3PeBO9LnAmnubfFCvW0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:8c:7c:46:4f:26:b5:02:31:76:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Sep 16 20:00:08 2025 GMT Not After : Sep 18 20:00:00 2025 GMT Subject: CN=9b2f6a1d-b1c8-4738-afbc-477397efb9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:b8:9c:32:13:bb:db:01:cc:b2:cd:d4:f6: c1:47:a8:52:1e:3c:f5:b6:be:d7:dd:8b:eb:e9:19: 85:c6:11:be:48:f2:21:7a:b0:2b:4e:6e:69:c2:12: 8b:ca:84:e2:eb:e3:a7:8c:49:ed:de:06:ae:aa:54: 43:1b:4f:3b:d3:24:ce:76:d1:d7:7e:4d:60:d7:41: b2:37:ef:b0:50:61:c4:9c:03:0d:73:52:3d:97:13: 00:4b:21:79:8c:05:de:f5:6e:06:a8:c4:b9:b8:d6: 3c:23:ce:be:b6:e2:92:94:9e:d1:89:c0:65:14:65: 17:cc:02:c9:20:20:19:9f:f7:32:76:56:d3:2e:f9: ef:33:17:a9:08:ce:bc:f4:c1:8f:39:4a:e8:18:ed: e1:0a:e9:1b:fa:00:e9:c3:14:b5:96:ce:4a:19:c0: cb:ee:11:bd:6e:7d:41:a7:f3:23:c6:26:6e:05:33: 63:fa:16:0c:09:a8:d6:eb:1b:68:b9:aa:b7:43:40: ad:31:c0:f6:ee:b1:7d:07:3d:8c:7f:10:1c:c5:bc: 7c:d8:96:c7:84:4c:df:eb:a8:27:f6:4b:06:0a:b5: b2:1a:78:07:7c:a4:e1:7c:78:82:eb:2c:94:54:eb: fe:bf:63:2e:6a:c9:90:be:4f:ff:37:cb:6c:e9:c9: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:F6:7E:CE:D7:2D:A7:35:83:F7:80:D7:30:11:74:5A:0A:4F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c2:09:c1:b1:48:ba:23:66:fc:61:d0:67:b6:0f:61:74:34: b1:73:34:73:98:f5:26:6e:7b:f4:5d:ee:e8:63:61:ff:81:b3: 7f:ba:13:4a:6e:4d:29:30:bf:37:88:d3:71:ed:a1:cf:24:9a: d2:ce:69:66:1a:55:9a:b5:03:b6:5b:31:e4:ad:31:f2:d2:1b: 64:ec:08:45:a4:99:20:61:5c:04:5b:cf:f9:54:11:0a:2d:e9: dd:37:ff:09:16:33:6f:ba:91:94:00:78:73:4a:4d:57:5b:09: 70:6d:ca:3b:71:7b:70:d8:eb:30:3d:52:3e:ec:57:75:25:fc: 0a:3a:f1:7c:26:29:de:b4:73:32:03:fa:5e:63:6c:9f:13:f4: 37:45:5e:a4:c3:4d:4f:1f:e3:17:15:87:0c:70:0f:e6:1f:8e: 43:67:fe:ab:2d:e7:af:63:fe:aa:db:7f:07:51:9d:a7:6a:2f: 6e:4d:05:ed:b4:8f:63:34:20:9d:88:f9:86:bb:eb:63:1c:b6: e4:79:3e:7b:e1:18:d1:0c:ec:70:01:22:34:e9:a0:bf:35:c1: 19:8e:c0:53:01:a1:db:94:cd:85:93:fb:29:83:a1:35:2c:fe: 61:1e:bf:a7:4e:a9:28:c3:e3:10:10:40:9c:51:b2:fc:ee:21: b4:bf:78:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs3jHxGTya1AjF2HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MDkxNjIwMDAwOFoXDTI1MDkxODIwMDAwMFowLzEtMCsGA1UEAxMk OWIyZjZhMWQtYjFjOC00NzM4LWFmYmMtNDc3Mzk3ZWZiOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAO4nDITu9sBzLLN1PbBR6hSHjz1tr7X3Yvr 6RmFxhG+SPIherArTm5pwhKLyoTi6+OnjEnt3gauqlRDG0870yTOdtHXfk1g10Gy N++wUGHEnAMNc1I9lxMASyF5jAXe9W4GqMS5uNY8I86+tuKSlJ7RicBlFGUXzALJ ICAZn/cydlbTLvnvMxepCM689MGPOUroGO3hCukb+gDpwxS1ls5KGcDL7hG9bn1B p/MjxiZuBTNj+hYMCajW6xtouaq3Q0CtMcD27rF9Bz2MfxAcxbx82JbHhEzf66gn 9ksGCrWyGngHfKThfHiC6yyUVOv+v2MuasmQvk//N8ts6cmi6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIi19n7O1y2nNYP3gNcwEXRaCk/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvYzlmNjQ1YWMtODRhYS00 MmUzLWI4NWEtN2FmOTY4ODg5OGE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNwgnBsUi6I2b8YdBntg9h dDSxczRzmPUmbnv0Xe7oY2H/gbN/uhNKbk0pML83iNNx7aHPJJrSzmlmGlWatQO2 WzHkrTHy0htk7AhFpJkgYVwEW8/5VBEKLendN/8JFjNvupGUAHhzSk1XWwlwbco7 cXtw2OswPVI+7Fd1JfwKOvF8JinetHMyA/peY2yfE/Q3RV6kw01PH+MXFYcMcA/m H45DZ/6rLeevY/6q238HUZ2nai9uTQXttI9jNCCdiPmGu+tjHLbkeT574RjRDOxw ASI06aC/NcEZjsBTAaHblM2Fk/spg6E1LP5hHr+nTqkow+MQEECcUbL87iG0v3j2 -----END CERTIFICATE-----Generated at Wed Sep 17 00:50:33 2025 by rpki-client