$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft File: 2cdca715-b3ad-4985-b6fd-0bd7308257df.mft (raw, json) Hash identifier: 3AVnDrYbWzHfyt7H/N1LwDWHhi6b8YuajijXPgueRYs= Subject key identifier: 78:70:96:33:5F:79:D7:3A:E0:90:67:C6:9D:F1:38:E0:0E:62:C7:4F Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584AEA4F812CC7D01A67103718C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft Manifest number: 010D0C9F4328584073A83CBBBB841FE107909155 Signing time: Wed 20 Aug 2025 04:00:03 +0000 Manifest this update: Wed 20 Aug 2025 04:00:03 +0000 Manifest next update: Fri 22 Aug 2025 04:00:00 +0000 Files and hashes: 1: 2cdca715-b3ad-4985-b6fd-0bd7308257df.crl (hash: M9i/hkzwPptyvjGcDtOKPRStxef/OpaHgeVMUXPhCSg=) 2: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (hash: cSv15OGPt89he3NJ5aCpK4qpxcghlrxkdhZGu9zxr+w=) 3: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (hash: bIr4UqsHqXk/vFX/gTauPVRqD/wZPqNgRZKOppEKrig=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:4f:81:2c:c7:d0:1a:67:10:37:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Aug 20 04:00:03 2025 GMT Not After : Aug 22 04:00:00 2025 GMT Subject: CN=3fc25bb2-a613-4d8e-aed4-75187867b5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:33:64:8e:25:7f:b9:e2:1f:c8:fb:66:72: db:ca:f4:cb:2a:c8:4b:9c:9b:5a:30:5d:a3:47:f6: b3:a5:3b:ab:c1:de:ba:0c:28:31:cf:40:35:51:66: 6c:57:a8:c2:9f:10:f7:7d:e3:d9:bc:ee:35:70:54: 5b:c0:1c:3c:c1:f3:66:e2:6b:31:23:62:7d:e6:43: d4:00:3e:35:af:ea:1c:df:42:bb:78:20:4e:a7:8b: 5f:6f:56:bf:30:f5:0b:8f:b9:a6:ce:59:5d:8f:91: 74:42:3e:ec:f4:ba:ce:17:43:dd:1b:99:fb:1e:3b: 9e:90:43:03:5c:af:94:11:91:d1:4f:0c:03:fa:36: 33:1b:00:c0:ee:08:f9:c5:7a:c5:6f:30:9d:49:95: 6f:40:9b:72:97:df:7b:d1:35:9e:b7:f7:3e:70:3d: 49:af:b7:c5:38:f3:34:64:92:f7:9f:80:62:ab:21: 82:1a:b2:0f:1f:8f:30:05:13:b8:31:90:bc:48:a1: 1a:e0:a4:d9:cd:ac:17:c4:15:64:04:d6:d2:9b:02: d1:24:eb:95:d4:91:1e:63:ec:c5:f8:c9:c2:8a:42: d0:06:d4:ac:41:ae:0a:c7:28:e1:a9:13:0e:cf:7e: 9d:1a:63:d8:06:1d:7e:64:6d:11:0c:01:e8:e8:db: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:70:96:33:5F:79:D7:3A:E0:90:67:C6:9D:F1:38:E0:0E:62:C7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d4:14:8a:35:7f:ea:78:ef:81:74:d4:64:e6:69:0d:1a:39: 41:e6:91:cf:2d:9f:4a:39:80:4f:be:13:e9:5b:9a:de:2c:bd: 6a:f0:45:f8:94:74:94:47:af:e8:ae:9c:27:f4:8b:7c:8f:29: 52:37:c9:36:e4:c3:9f:c3:59:87:15:e0:07:19:b1:75:7e:b0: 0b:1d:d0:ab:6b:05:02:7a:38:a0:c1:7c:62:8f:5b:5d:a9:03: 07:25:dc:69:b4:dc:f6:a9:c2:8f:ed:2d:f0:5a:af:36:8b:09: 2c:04:09:d2:b5:fb:60:98:80:64:d0:1e:35:ee:09:ac:96:ba: 1d:6d:48:1e:cf:ba:ea:d9:64:12:3c:a2:2e:4b:e2:b9:f1:57: 9b:59:38:2f:43:df:08:7d:e3:22:83:e4:29:0b:4b:37:09:d7: 65:3f:1f:d6:2e:5d:72:9a:d1:47:f4:30:d7:b4:48:50:0a:be: 18:f4:3c:36:d8:73:88:64:ad:1a:87:7a:9e:28:48:2c:c8:88: aa:07:9f:43:ee:78:4b:95:17:0f:09:4c:fb:7d:81:13:f1:a5: 7d:24:d2:d8:e6:16:f4:32:be:7d:89:8b:19:2e:fb:e9:d8:0c: d2:54:e9:fb:58:5c:56:b5:f9:8b:8d:63:53:68:f7:d0:6a:76: c2:a6:df:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqT4Esx9AaZxA3GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI1MDgyMDA0MDAwM1oXDTI1MDgyMjA0MDAwMFowLzEtMCsGA1UEAxMk M2ZjMjViYjItYTYxMy00ZDhlLWFlZDQtNzUxODc4NjdiNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh8zZI4lf7niH8j7ZnLbyvTLKshLnJtaMF2j R/azpTurwd66DCgxz0A1UWZsV6jCnxD3fePZvO41cFRbwBw8wfNm4msxI2J95kPU AD41r+oc30K7eCBOp4tfb1a/MPULj7mmzlldj5F0Qj7s9LrOF0PdG5n7HjuekEMD XK+UEZHRTwwD+jYzGwDA7gj5xXrFbzCdSZVvQJtyl9970TWet/c+cD1Jr7fFOPM0 ZJL3n4BiqyGCGrIPH48wBRO4MZC8SKEa4KTZzawXxBVkBNbSmwLRJOuV1JEeY+zF +MnCikLQBtSsQa4KxyjhqRMOz36dGmPYBh1+ZG0RDAHo6Nsu+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHhwljNfedc64JBnxp3xOOAOYsdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvMmNkY2E3MTUtYjNhZC00 OTg1LWI2ZmQtMGJkNzMwODI1N2RmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi1BSKNX/qeO+BdNRk5mkN GjlB5pHPLZ9KOYBPvhPpW5reLL1q8EX4lHSUR6/orpwn9It8jylSN8k25MOfw1mH FeAHGbF1frALHdCrawUCejigwXxij1tdqQMHJdxptNz2qcKP7S3wWq82iwksBAnS tftgmIBk0B417gmslrodbUgez7rq2WQSPKIuS+K58VebWTgvQ98IfeMig+QpC0s3 CddlPx/WLl1ymtFH9DDXtEhQCr4Y9Dw22HOIZK0ah3qeKEgsyIiqB59D7nhLlRcP CUz7fYET8aV9JNLY5hb0Mr59iYsZLvvp2AzSVOn7WFxWtfmLjWNTaPfQanbCpt8h -----END CERTIFICATE-----Generated at Wed Aug 20 19:08:18 2025 by rpki-client