$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft File: 0499e690-23fd-496a-a697-cd290d3127f5.mft (raw, json) Hash identifier: JD1GmbczAwMcSfUq7MpuviN6MA5hRnZ9K73wLAZtFd8= Subject key identifier: 84:CC:14:10:3F:F0:E5:6E:8F:6A:41:CF:AA:13:7F:E6:54:E6:D7:24 Authority key identifier: DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C Certificate issuer: /CN=0499e690-23fd-496a-a697-cd290d3127f5 Certificate serial: 010D0C9F4328584AEBB4DA4296BF4D1273443F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft Manifest number: 010D0C9F43285845F2A4FA22127B84E8C06B4F53 Signing time: Wed 20 Aug 2025 16:00:03 +0000 Manifest this update: Wed 20 Aug 2025 16:00:03 +0000 Manifest next update: Sat 23 Aug 2025 16:00:00 +0000 Files and hashes: 1: 0499e690-23fd-496a-a697-cd290d3127f5.crl (hash: r8bAQOQLnTz8Rnlq3SWJgZqTL35kmCQW+4m8mxM4wx8=) 2: 6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa (hash: UM8eCw25YFYib6c7oVjdNALvYT0xLBBsUEr+ZPLX1c0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:b4:da:42:96:bf:4d:12:73:44:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0499e690-23fd-496a-a697-cd290d3127f5 Validity Not Before: Aug 20 16:00:03 2025 GMT Not After : Aug 23 16:00:00 2025 GMT Subject: CN=cff46e3e-9002-4691-aee3-d003c05eebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:8a:57:f1:18:ae:fc:19:03:fb:1f:e2:13: 52:03:14:58:82:26:42:a6:b4:18:cb:7b:2b:d2:be: 15:5a:b5:8f:79:4b:90:b0:a8:ff:e5:da:8b:19:62: 16:b9:31:87:8c:07:b8:77:ce:b1:2a:53:f1:b1:6e: 18:f7:72:84:1f:e4:e5:fa:dc:2e:43:8e:86:11:e9: 27:84:45:03:d5:e6:70:85:74:3d:32:13:6b:3b:16: 76:c2:a5:59:b2:2b:9a:3b:aa:8a:10:85:14:0d:03: 07:de:0f:0d:6c:38:43:73:31:69:f4:72:73:d7:c3: 90:d3:4a:08:c9:25:3c:4e:51:d3:69:75:c0:a9:46: 43:f6:bc:96:e5:17:e8:d1:25:cc:8e:80:34:73:6c: 8a:4a:3f:0c:5a:5d:b6:83:e3:7a:55:ad:7a:d0:eb: 74:a7:e8:d7:60:9f:87:1a:15:a4:03:2e:cd:58:97: eb:c4:7b:73:ec:6c:2c:0c:a4:a7:82:d9:ca:3b:4f: 44:78:b5:ad:0b:2f:23:c4:85:35:c9:4a:37:3d:17: e5:9f:50:35:11:0a:90:8d:84:3f:c1:27:46:a5:04: 81:49:03:82:31:77:68:54:f9:77:60:66:a5:2f:d8: 73:3d:75:cc:ab:08:2e:5c:4b:b6:5f:0c:15:e9:59: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:14:10:3F:F0:E5:6E:8F:6A:41:CF:AA:13:7F:E6:54:E6:D7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl X509v3 Authority Key Identifier: keyid:DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4d:00:28:5f:12:cf:1d:84:b7:bd:c1:03:7b:72:5b:91:b0: 73:4b:7f:87:7e:f8:95:29:b2:1d:8c:08:44:c9:a2:43:f8:bd: 89:80:3d:5a:7e:d4:fd:0b:da:41:b9:7e:ac:88:fc:aa:e1:1d: 3b:7f:43:2a:cb:30:b7:9a:38:7e:25:14:e5:04:08:0d:19:7f: 68:5b:92:b1:d7:95:57:05:fd:8c:ad:64:51:11:d9:6d:13:77: d9:6d:f7:76:35:68:0a:73:a8:81:24:8c:e3:10:bb:74:ca:5d: 40:9f:78:48:f7:0c:e1:2c:0c:a3:1a:eb:41:63:8d:ce:97:8e: 5b:c3:9d:f9:11:44:9a:22:08:96:74:46:c5:e5:68:40:e4:68: 85:f1:4c:4a:5e:3e:d4:ce:b7:9d:3f:3b:a8:c9:aa:8f:c4:63: 13:c2:1b:a4:32:d7:17:4f:cd:68:16:20:7a:d7:d5:96:ce:d8: 3c:85:77:98:49:aa:0a:91:f0:22:d7:48:10:e2:5a:d2:a6:63: e2:0d:e7:64:68:57:14:fb:9f:9c:6c:68:e1:5e:86:d7:91:93: b4:1c:cf:e7:5d:1a:f8:3d:0f:74:51:77:07:c6:18:36:89:ec: af:4d:7d:a7:63:ba:9a:bd:4d:0c:b4:d4:26:7a:a5:4f:82:8e: 3d:c8:ba:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrtNpClr9NEnNEPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ5OWU2OTAtMjNmZC00OTZhLWE2OTctY2QyOTBkMzEy N2Y1MB4XDTI1MDgyMDE2MDAwM1oXDTI1MDgyMzE2MDAwMFowLzEtMCsGA1UEAxMk Y2ZmNDZlM2UtOTAwMi00NjkxLWFlZTMtZDAwM2MwNWVlYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmaKV/EYrvwZA/sf4hNSAxRYgiZCprQYy3sr 0r4VWrWPeUuQsKj/5dqLGWIWuTGHjAe4d86xKlPxsW4Y93KEH+Tl+twuQ46GEekn hEUD1eZwhXQ9MhNrOxZ2wqVZsiuaO6qKEIUUDQMH3g8NbDhDczFp9HJz18OQ00oI ySU8TlHTaXXAqUZD9ryW5Rfo0SXMjoA0c2yKSj8MWl22g+N6Va160Ot0p+jXYJ+H GhWkAy7NWJfrxHtz7GwsDKSngtnKO09EeLWtCy8jxIU1yUo3PRfln1A1EQqQjYQ/ wSdGpQSBSQOCMXdoVPl3YGalL9hzPXXMqwguXEu2XwwV6VkSwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFITMFBA/8OVuj2pBz6oTf+ZU5tckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5 ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5MGQzMTI3ZjUvMDQ5OWU2OTAtMjNmZC00 OTZhLWE2OTctY2QyOTBkMzEyN2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDQ5OWU2OTAtMjNmZC00OTZhLWE2 OTctY2QyOTBkMzEyN2Y1LzA0OTllNjkwLTIzZmQtNDk2YS1hNjk3LWNkMjkwZDMx MjdmNS5jcmwwHwYDVR0jBBgwFoAU2l8J0mVwJfrYhNuhc0YSUhBV3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5 MGQzMTI3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhTQAoXxLPHYS3vcEDe3Jb kbBzS3+HfviVKbIdjAhEyaJD+L2JgD1aftT9C9pBuX6siPyq4R07f0MqyzC3mjh+ JRTlBAgNGX9oW5Kx15VXBf2MrWRREdltE3fZbfd2NWgKc6iBJIzjELt0yl1An3hI 9wzhLAyjGutBY43Ol45bw535EUSaIgiWdEbF5WhA5GiF8UxKXj7UzredPzuoyaqP xGMTwhukMtcXT81oFiB619WWztg8hXeYSaoKkfAi10gQ4lrSpmPiDedkaFcU+5+c bGjhXobXkZO0HM/nXRr4PQ90UXcHxhg2ieyvTX2nY7qavU0MtNQmeqVPgo49yLrK -----END CERTIFICATE-----Generated at Wed Aug 20 21:29:12 2025 by rpki-client