$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: w2z5uL8V85yCt0NJC9QkKiHzRi0OtIZGG6bGWgnzK1Y= Subject key identifier: D3:DB:32:FA:70:51:EB:79:B1:9D:65:03:2E:42:BF:6C:EF:B4:A6:8D Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584AEB5B9092FB250A49F7263C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11B95 Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: v43p5DeWsz6071iNdEeUuRrpCRyfYBtfIW+duV/QZwY=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: pCTNrYPnPTZMtkqPwzreNj5k/rsfaY0ip8bbAEKL8Hw=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: m7M86f9NRdvqSG5xrL74J4O73stTf+b79zNKZiYPq2o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:90:92:fb:25:0a:49:f7:26:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=57ffd352-e792-4c7d-ae9a-d8a5fc34bd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:d3:7f:e6:e7:d1:e2:c7:75:3c:2d:40:ff: f3:9d:39:c0:0f:38:01:3a:7d:dd:1c:de:33:ab:89: ee:6f:61:51:d6:16:d7:c3:cf:46:6d:6d:0e:bd:3d: 44:ea:e1:a7:76:0b:d9:93:5e:a0:87:38:42:0c:ec: 6f:4b:87:6c:3a:25:41:3d:1c:44:ce:d0:69:35:e0: f8:b5:8d:71:10:6b:90:e0:c0:bb:e6:2e:b6:ad:52: 31:99:2e:9a:ff:2d:f0:f6:91:ac:42:17:34:3e:c5: ae:af:00:d8:01:56:0f:32:a3:7b:bd:16:57:81:e1: a9:8d:a1:c1:e6:da:f0:1d:e6:1e:ea:1e:43:2c:62: 3b:f7:de:26:01:60:1a:f5:20:94:93:ad:53:f7:1c: cf:f9:e2:3a:86:39:c6:88:c9:71:52:ce:87:2c:31: ee:89:30:92:b1:50:0f:c0:ec:c2:2b:37:59:20:11: 2a:d3:cf:0a:e7:2e:e5:c2:8b:97:fd:15:16:7b:85: b6:9f:24:37:87:e4:9c:d8:bf:d5:64:d2:f2:c1:34: 48:fd:9c:20:4d:0e:58:f7:1d:6c:2f:70:6d:8b:fa: d8:ed:a6:b3:ca:63:07:9b:8b:3e:40:fd:8f:30:2c: e4:53:98:b2:66:4a:3f:1f:16:82:b0:b3:f9:0a:a9: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:32:FA:70:51:EB:79:B1:9D:65:03:2E:42:BF:6C:EF:B4:A6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b1:e7:90:63:b7:b7:f7:e7:ba:9c:38:52:ce:43:4d:1d:c9: 72:ee:39:c0:b5:eb:8d:ad:d2:66:37:b6:82:30:48:2e:6c:32: 40:26:1b:e6:8e:b8:a0:c3:72:2a:08:dd:4c:9c:03:83:da:35: e3:20:ba:1e:78:c9:92:e8:e3:12:61:ab:19:07:39:f0:ea:4e: 7b:31:c1:09:72:93:c8:67:e3:69:e7:be:7e:3b:82:99:3c:4d: b7:5a:b9:30:07:6b:1a:5b:ed:6e:a1:33:99:6b:58:9a:e2:c3: 20:b5:f1:d4:1e:51:92:cc:28:6a:ea:71:03:6b:f9:11:7b:5f: 6a:e0:0c:cd:0f:47:16:68:5a:cf:7b:2b:3e:9b:cd:48:dc:fd: 86:78:8a:a0:47:c1:94:70:35:37:d8:29:fa:f4:8e:b4:3c:ac: ae:9d:ce:48:e8:21:6b:3e:2a:f1:9f:a1:c5:82:bc:fb:d5:ad: 2d:a1:73:49:1e:19:ab:00:42:db:86:02:f3:8b:87:31:22:f2: d9:9e:bb:58:d6:ed:58:b9:0b:5e:09:38:0b:06:54:0e:5b:99: c2:4a:a8:c4:18:77:9b:00:ca:6b:f1:1f:10:db:62:5b:24:3d: 65:18:e5:d1:3d:88:60:56:89:8f:9c:35:b2:f6:8e:04:a8:cf: 07:5e:7f:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW5CS+yUKSfcmPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk NTdmZmQzNTItZTc5Mi00YzdkLWFlOWEtZDhhNWZjMzRiZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUfTf+bn0eLHdTwtQP/znTnADzgBOn3dHN4z q4nub2FR1hbXw89GbW0OvT1E6uGndgvZk16ghzhCDOxvS4dsOiVBPRxEztBpNeD4 tY1xEGuQ4MC75i62rVIxmS6a/y3w9pGsQhc0PsWurwDYAVYPMqN7vRZXgeGpjaHB 5trwHeYe6h5DLGI7994mAWAa9SCUk61T9xzP+eI6hjnGiMlxUs6HLDHuiTCSsVAP wOzCKzdZIBEq088K5y7lwouX/RUWe4W2nyQ3h+Sc2L/VZNLywTRI/ZwgTQ5Y9x1s L3Bti/rY7aazymMHm4s+QP2PMCzkU5iyZko/HxaCsLP5CqlX4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNPbMvpwUet5sZ1lAy5Cv2zvtKaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoseeQY7e39+e6nDhSzkNN Hcly7jnAteuNrdJmN7aCMEgubDJAJhvmjrigw3IqCN1MnAOD2jXjILoeeMmS6OMS YasZBznw6k57McEJcpPIZ+Np575+O4KZPE23WrkwB2saW+1uoTOZa1ia4sMgtfHU HlGSzChq6nEDa/kRe19q4AzND0cWaFrPeys+m81I3P2GeIqgR8GUcDU32Cn69I60 PKyunc5I6CFrPirxn6HFgrz71a0toXNJHhmrAELbhgLzi4cxIvLZnrtY1u1YuQte CTgLBlQOW5nCSqjEGHebAMpr8R8Q22JbJD1lGOXRPYhgVomPnDWy9o4EqM8HXn+b -----END CERTIFICATE-----Generated at Wed Aug 20 18:17:49 2025 by rpki-client