$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: U/cwaetXUdDqQ1X7sYJPDjv4e9bGt4CZVD+4CA9aUXg= Subject key identifier: BE:AD:C0:16:B7:CB:3B:67:1E:50:E4:12:D9:08:E2:56:80:38:B6:E1 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584AEAE4642A2CA62B68F1E9CF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022455 Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Fri 22 Aug 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: Xy2lsGawscLFqsdPuOrzdpykXynHqn6IjQ50E62txks=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: NoEz5lOOZlDcTBR3IcR10wZOoc5q/ZXVMu/eaxgB2GU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:64:2a:2c:a6:2b:68:f1:e9:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 22 09:00:00 2025 GMT Subject: CN=fe241f01-0206-45ff-a3f5-65d3fd853f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:0d:58:ad:8d:a3:5c:93:8b:70:f2:e9:6f: 41:2b:20:aa:06:69:19:f8:96:45:92:34:08:9c:c4: 65:8d:db:e6:5d:23:01:5c:9b:4a:16:89:64:38:ba: ba:49:db:5e:85:a9:26:03:70:64:a1:dd:63:b8:8e: 6b:e5:e2:36:85:17:dd:12:ae:2c:6a:e9:80:f4:ae: 52:b3:3e:7b:a5:68:ac:9b:d9:a1:de:fe:73:ca:30: 97:e4:40:91:f0:85:60:cc:60:ab:f2:79:4c:22:e4: 2e:4d:f0:5d:45:70:f5:50:80:41:0e:e3:a1:4f:25: f9:a1:70:01:66:b2:7d:f1:16:1f:b5:40:30:10:59: 2b:d2:e7:db:64:34:ee:ef:b5:20:96:96:5d:39:27: 5b:8f:2e:fb:0f:41:5a:b5:df:e4:2d:3c:93:78:35: 9a:62:24:e5:9d:1b:e6:11:fc:26:5b:01:02:e2:70: ee:38:ec:5c:bd:cf:41:87:b8:21:7d:78:63:53:45: 53:bc:6b:e0:dd:c1:d2:4b:e9:87:43:82:50:56:33: 3d:35:cb:e0:b3:15:06:fb:6c:33:af:29:db:d7:fe: fa:25:6c:ed:22:56:bc:de:8c:28:80:f1:3e:ee:3d: 52:50:cd:e9:6b:ae:93:ef:b7:3f:4a:01:38:87:31: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:C0:16:B7:CB:3B:67:1E:50:E4:12:D9:08:E2:56:80:38:B6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f9:8c:e0:5a:84:72:65:86:99:93:62:00:7e:d2:7d:48:42: 92:c0:93:5e:1d:c9:f3:a1:59:67:8a:d2:cf:b7:e1:f8:8b:2e: ee:6b:95:61:ad:ff:be:c8:e8:f9:1b:cb:0b:82:ad:ca:19:13: 4d:f8:84:ce:36:5f:f8:93:75:28:7a:0d:64:76:48:82:af:cd: 08:be:f3:a7:0c:02:38:26:f5:0d:cb:92:bc:be:be:9a:cf:8d: 75:0a:20:0b:21:a6:40:37:94:52:1e:0d:42:b9:d2:98:c6:5d: 18:0a:62:16:ea:83:fb:03:7a:29:54:71:f5:9f:3b:f2:1b:eb: 0a:89:6b:b6:a6:9a:f8:55:53:d1:d1:e6:f4:63:4a:93:08:5f: aa:d3:08:b9:eb:e2:fe:fe:f2:86:b6:b1:3c:a6:11:03:2e:57: 90:f7:ae:da:34:56:07:81:db:23:13:c2:98:29:49:22:8a:b5: dd:d6:60:6c:9b:fd:d9:74:6b:28:96:59:11:45:18:8a:fc:72: fc:fe:48:5c:ac:6b:db:32:54:37:0c:a5:39:59:82:92:ae:e0: 12:65:f5:9d:a3:12:8c:38:99:40:8c:50:be:d5:9b:7e:d7:cf: 74:9f:8a:53:1b:48:dd:bb:e0:fd:4e:1c:7c:c2:10:90:1a:99: ca:9c:11:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5GQqLKYraPHpzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMjA5MDAwMFowLzEtMCsGA1UEAxMk ZmUyNDFmMDEtMDIwNi00NWZmLWEzZjUtNjVkM2ZkODUzZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGoNWK2No1yTi3Dy6W9BKyCqBmkZ+JZFkjQI nMRljdvmXSMBXJtKFolkOLq6SdtehakmA3Bkod1juI5r5eI2hRfdEq4saumA9K5S sz57pWism9mh3v5zyjCX5ECR8IVgzGCr8nlMIuQuTfBdRXD1UIBBDuOhTyX5oXAB ZrJ98RYftUAwEFkr0ufbZDTu77UglpZdOSdbjy77D0Fatd/kLTyTeDWaYiTlnRvm EfwmWwEC4nDuOOxcvc9Bh7ghfXhjU0VTvGvg3cHSS+mHQ4JQVjM9NcvgsxUG+2wz rynb1/76JWztIla83owogPE+7j1SUM3pa66T77c/SgE4hzExEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL6twBa3yztnHlDkEtkI4laAOLbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt+YzgWoRyZYaZk2IAftJ9 SEKSwJNeHcnzoVlnitLPt+H4iy7ua5Vhrf++yOj5G8sLgq3KGRNN+ITONl/4k3Uo eg1kdkiCr80IvvOnDAI4JvUNy5K8vr6az411CiALIaZAN5RSHg1CudKYxl0YCmIW 6oP7A3opVHH1nzvyG+sKiWu2ppr4VVPR0eb0Y0qTCF+q0wi56+L+/vKGtrE8phED LleQ967aNFYHgdsjE8KYKUkiirXd1mBsm/3ZdGsollkRRRiK/HL8/khcrGvbMlQ3 DKU5WYKSruASZfWdoxKMOJlAjFC+1Zt+1890n4pTG0jdu+D9Thx8whCQGpnKnBFy -----END CERTIFICATE-----Generated at Wed Aug 20 21:23:03 2025 by rpki-client