$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: G0JCInEtL7MfeWKlhtCkmOqlYsUtHPjrvhz28AwUqg4= Subject key identifier: 29:2E:85:CA:43:32:83:CA:03:40:44:A1:17:8C:A1:14:F9:62:C9:C8 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584AE97F0F146F3B3C13034ED400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD0799B8 Signing time: Tue 19 Aug 2025 21:00:03 +0000 Manifest this update: Tue 19 Aug 2025 21:00:03 +0000 Manifest next update: Fri 22 Aug 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: Y2sDaxcPH7vGgVYiFFs+hosugjbk2s5/xOtOXSbBneE=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: WI8e2nk8CmtOD2iTCjbGWxoqULLTTD/cjGnFwu7W59A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:7f:0f:14:6f:3b:3c:13:03:4e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Aug 19 21:00:03 2025 GMT Not After : Aug 22 21:00:00 2025 GMT Subject: CN=ec0fdcab-a879-4508-b994-4d12b27460ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:4a:c0:12:2c:eb:82:be:1b:a1:a7:53:a0: 6d:2d:57:d4:47:ee:21:04:e6:b6:d1:3e:f8:22:8b: 9e:da:30:58:70:f2:65:61:21:10:27:0d:af:54:36: 32:00:cf:04:01:30:24:dc:34:72:29:fb:7d:91:83: 64:77:31:55:89:98:98:54:48:b2:8d:4a:66:40:2f: 44:fd:81:9f:ed:43:10:ce:70:2b:00:07:9e:0d:33: f3:97:40:48:4f:aa:fc:fc:a0:a5:6b:92:54:c5:ef: 00:a4:f2:24:48:b6:78:91:51:ee:7e:e7:2e:ae:cf: 1b:19:04:9b:6c:b4:b2:18:fc:0b:0e:f6:30:3a:80: 49:9e:ee:6a:78:b7:8c:85:9d:05:b3:5f:59:70:3f: 11:53:fe:c0:1d:14:d4:2d:2a:65:fc:cd:d3:b2:14: a4:2e:9e:53:a8:fa:39:a7:75:af:b0:7c:eb:12:23: 43:06:25:d6:2a:92:b6:aa:51:8f:02:f3:4b:4e:d2: 95:4f:6f:cf:74:4f:e1:4e:83:ec:32:e5:e3:80:5e: 6e:d7:97:3c:5c:33:ee:f7:a6:34:7b:48:2c:22:c2: 1b:43:7e:43:90:69:62:d9:b9:47:d7:97:69:c2:31: d1:ff:6b:e0:7e:12:a1:46:ed:6f:9a:66:87:1d:d6: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2E:85:CA:43:32:83:CA:03:40:44:A1:17:8C:A1:14:F9:62:C9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d2:38:ed:c7:d6:34:26:77:71:14:d7:e0:36:8a:3a:5c:20: 69:53:ae:8c:79:45:17:9d:af:90:74:69:7b:f9:e8:90:b8:73: 9a:47:45:e1:df:90:8a:aa:09:e4:8b:30:82:96:64:95:ff:9c: 6c:4a:fc:02:32:5b:f6:c8:d6:02:de:e0:24:a0:f7:f1:11:93: 33:f8:62:8d:b7:98:45:71:5e:8d:3c:7f:00:cc:74:67:1a:f5: 5b:ef:bb:61:32:06:16:13:cb:38:b0:67:57:7d:71:ab:ba:d5: 41:fb:1e:a8:03:e9:cb:60:b1:cb:e0:a4:78:fd:3e:7c:7e:da: bb:f3:04:28:92:31:2a:63:f5:a1:85:13:dc:20:5d:08:a6:10: a0:50:dd:26:47:51:6c:e6:0d:59:9f:50:23:17:36:76:2f:a8: b9:28:8c:4c:97:ec:33:59:90:fb:a9:cb:e6:b7:22:6c:67:35: e7:3b:59:33:e0:c7:54:37:7d:33:d1:b5:b2:b6:f1:e6:83:2c: 06:bb:6d:1e:f6:bf:56:1f:7f:b3:e6:3f:4a:49:4a:0a:47:27: 02:ca:b6:73:40:ca:17:0c:5a:59:27:b4:4b:1f:02:11:1a:1d: 70:ec:e4:76:92:d4:69:5b:17:b7:04:e8:06:ce:b8:2e:41:33: 50:e5:34:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpfw8Ubzs8EwNO1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MDgxOTIxMDAwM1oXDTI1MDgyMjIxMDAwMFowLzEtMCsGA1UEAxMk ZWMwZmRjYWItYTg3OS00NTA4LWI5OTQtNGQxMmIyNzQ2MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3hKwBIs64K+G6GnU6BtLVfUR+4hBOa20T74 Ioue2jBYcPJlYSEQJw2vVDYyAM8EATAk3DRyKft9kYNkdzFViZiYVEiyjUpmQC9E /YGf7UMQznArAAeeDTPzl0BIT6r8/KCla5JUxe8ApPIkSLZ4kVHufucurs8bGQSb bLSyGPwLDvYwOoBJnu5qeLeMhZ0Fs19ZcD8RU/7AHRTULSpl/M3TshSkLp5TqPo5 p3WvsHzrEiNDBiXWKpK2qlGPAvNLTtKVT2/PdE/hToPsMuXjgF5u15c8XDPu96Y0 e0gsIsIbQ35DkGli2blH15dpwjHR/2vgfhKhRu1vmmaHHdZEdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCkuhcpDMoPKA0BEoReMoRT5YsnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA40jjtx9Y0JndxFNfgNoo6 XCBpU66MeUUXna+QdGl7+eiQuHOaR0Xh35CKqgnkizCClmSV/5xsSvwCMlv2yNYC 3uAkoPfxEZMz+GKNt5hFcV6NPH8AzHRnGvVb77thMgYWE8s4sGdXfXGrutVB+x6o A+nLYLHL4KR4/T58ftq78wQokjEqY/WhhRPcIF0IphCgUN0mR1Fs5g1Zn1AjFzZ2 L6i5KIxMl+wzWZD7qcvmtyJsZzXnO1kz4MdUN30z0bWytvHmgywGu20e9r9WH3+z 5j9KSUoKRycCyrZzQMoXDFpZJ7RLHwIRGh1w7OR2ktRpWxe3BOgGzrguQTNQ5TST -----END CERTIFICATE-----Generated at Wed Aug 20 17:12:23 2025 by rpki-client