$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft File: 160e8d7e-7f7a-49e5-8735-610371a70131.mft (raw, json) Hash identifier: p3+9FAdf3xgL7rWLurQU239R7hAOQ2Yqk7fFARKkpfs= Subject key identifier: 25:85:67:1B:EB:89:87:17:2D:A9:D2:7E:90:0F:57:42:28:6B:BD:25 Authority key identifier: D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9 Certificate issuer: /CN=160e8d7e-7f7a-49e5-8735-610371a70131 Certificate serial: 010D0C9F4328584AE94389D11C841462CA990280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft Manifest number: 010D0C9F4328584073A821D33E92517389A45794 Signing time: Tue 19 Aug 2025 19:00:08 +0000 Manifest this update: Tue 19 Aug 2025 19:00:08 +0000 Manifest next update: Thu 21 Aug 2025 19:00:00 +0000 Files and hashes: 1: 160e8d7e-7f7a-49e5-8735-610371a70131.crl (hash: 9h1n1uhfBuSQ57tim8Lys7i+XmbqDgnpf7qwsbVA7IA=) 2: 7170fe55-be4b-3134-bb67-0735883846ef.roa (hash: NdxVmDEz5jowlbIoeGOXVJoYZuby+OkW0NAIxhBluG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:43:89:d1:1c:84:14:62:ca:99:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=160e8d7e-7f7a-49e5-8735-610371a70131 Validity Not Before: Aug 19 19:00:08 2025 GMT Not After : Aug 21 19:00:00 2025 GMT Subject: CN=ac633e63-7aaa-4413-b364-a8e6b7dc8798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:83:32:f5:90:d1:f8:72:c9:df:26:11:5d: 7e:af:96:62:bf:e3:96:27:fa:2f:15:04:d6:cb:e3: 55:04:b4:68:0a:07:52:ef:f7:57:6c:22:7f:60:7d: 47:52:69:5e:19:dd:99:ba:33:e2:89:f9:92:a7:6c: 83:1d:fa:a2:52:20:a9:69:07:4a:60:fe:e6:aa:d5: 56:ef:a2:c7:50:23:15:cb:8f:a0:e1:f9:ed:d1:cb: c6:b4:74:6b:ce:76:76:1f:e5:76:f7:9f:3b:28:7c: b6:ca:65:9c:4e:8d:15:be:c3:c6:5d:97:22:6f:b9: cb:ae:5b:fc:f9:5d:36:da:45:c0:c5:a6:bc:15:b9: 1c:af:ab:5a:8c:87:29:f9:d1:51:f7:1d:7f:a7:b3: da:49:cd:f9:8d:49:86:60:18:41:93:7e:a9:b8:ad: 64:79:f3:a6:df:8f:20:ab:c8:e5:27:1a:07:a7:03: 5e:88:7c:15:20:e1:27:6f:28:05:3f:2f:4c:53:5b: 7f:e6:86:b9:c3:57:e9:49:21:50:11:8b:aa:a5:af: 2f:87:6d:1c:81:77:1d:43:84:cf:b0:28:62:a8:cf: 88:aa:65:84:54:ae:0b:89:93:8d:82:db:e7:27:25: a5:43:ca:d9:41:1e:c9:25:2e:06:54:7b:0e:31:28: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:85:67:1B:EB:89:87:17:2D:A9:D2:7E:90:0F:57:42:28:6B:BD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl X509v3 Authority Key Identifier: keyid:D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b6:2b:38:7d:6c:74:f2:52:87:f9:f5:cc:a8:80:8a:9e:60: e5:7a:4a:b2:c6:b4:94:5a:e1:78:63:03:5f:33:81:5c:32:f1: 1f:a8:09:00:ae:67:98:df:97:9f:50:0d:fa:8f:15:cf:e0:d9: 31:0d:e2:a8:89:80:cc:47:bb:19:c2:e2:80:9b:ae:45:3b:66: e5:e7:30:cc:e0:7a:20:32:38:a3:d2:e3:88:cb:d1:aa:35:a4: 7e:06:98:c9:a1:bf:ee:5c:e2:f8:d7:3c:6b:44:5b:ad:64:7f: 5b:40:94:a8:55:4e:de:77:07:ac:de:6c:30:6b:0d:0a:17:06: 9b:10:98:70:26:0c:f9:e4:2d:fa:98:c3:55:39:85:62:14:ab: 45:fd:1c:95:06:d9:79:3a:0d:58:88:f0:ca:8c:81:ae:12:fc: 4f:52:f0:e9:16:e8:34:b7:ec:ee:08:7c:6b:85:7f:d1:ab:27: 73:57:87:7a:ac:c5:4a:9e:02:e6:8c:c6:3e:a0:97:a4:5d:ef: 24:3f:0f:79:7b:2a:2c:bf:97:73:29:da:fb:1e:30:aa:6e:77: 96:59:91:ad:42:70:93:3f:b0:34:1a:6c:23:30:c1:65:b3:39: 76:d5:da:b9:fa:e9:87:bd:ce:7c:28:e3:f7:13:15:68:f4:56: 2e:9d:75:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpQ4nRHIQUYsqZAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYwZThkN2UtN2Y3YS00OWU1LTg3MzUtNjEwMzcxYTcw MTMxMB4XDTI1MDgxOTE5MDAwOFoXDTI1MDgyMTE5MDAwMFowLzEtMCsGA1UEAxMk YWM2MzNlNjMtN2FhYS00NDEzLWIzNjQtYThlNmI3ZGM4Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuaDMvWQ0fhyyd8mEV1+r5Ziv+OWJ/ovFQTW y+NVBLRoCgdS7/dXbCJ/YH1HUmleGd2ZujPiifmSp2yDHfqiUiCpaQdKYP7mqtVW 76LHUCMVy4+g4fnt0cvGtHRrznZ2H+V29587KHy2ymWcTo0VvsPGXZcib7nLrlv8 +V022kXAxaa8Fbkcr6tajIcp+dFR9x1/p7PaSc35jUmGYBhBk36puK1kefOm348g q8jlJxoHpwNeiHwVIOEnbygFPy9MU1t/5oa5w1fpSSFQEYuqpa8vh20cgXcdQ4TP sChiqM+IqmWEVK4LiZONgtvnJyWlQ8rZQR7JJS4GVHsOMSiVgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWFZxvriYcXLanSfpAPV0Ioa70lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNjBl OGQ3ZS03ZjdhLTQ5ZTUtODczNS02MTAzNzFhNzAxMzEvMTYwZThkN2UtN2Y3YS00 OWU1LTg3MzUtNjEwMzcxYTcwMTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTYwZThkN2UtN2Y3YS00OWU1LTg3 MzUtNjEwMzcxYTcwMTMxLzE2MGU4ZDdlLTdmN2EtNDllNS04NzM1LTYxMDM3MWE3 MDEzMS5jcmwwHwYDVR0jBBgwFoAU0C7QTjId4AMSvh2DRcfWa4VUXukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNjBlOGQ3ZS03ZjdhLTQ5ZTUtODczNS02MTAz NzFhNzAxMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwtis4fWx08lKH+fXMqICK nmDlekqyxrSUWuF4YwNfM4FcMvEfqAkArmeY35efUA36jxXP4NkxDeKoiYDMR7sZ wuKAm65FO2bl5zDM4HogMjij0uOIy9GqNaR+BpjJob/uXOL41zxrRFutZH9bQJSo VU7edwes3mwwaw0KFwabEJhwJgz55C36mMNVOYViFKtF/RyVBtl5Og1YiPDKjIGu EvxPUvDpFug0t+zuCHxrhX/RqydzV4d6rMVKngLmjMY+oJekXe8kPw95eyosv5dz Kdr7HjCqbneWWZGtQnCTP7A0GmwjMMFlszl21dq5+umHvc58KOP3ExVo9FYunXWE -----END CERTIFICATE-----Generated at Wed Aug 20 19:42:01 2025 by rpki-client