$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: 7jrbmi1hSioWW1JWiEpievalrrMSSOGwOa2GH0im0c8= Subject key identifier: 9E:82:8D:AD:91:28:55:49:40:6B:9D:E5:B5:28:DD:3E:C6:38:CD:B2 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584AEB5B8DA997F8E36D094A3B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060C41 Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: HYxekcJry+bakMlS9vNQ8u0ooowiE963b8kYQvVbJUs=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: wUyXG0YnVgiACqxctTwbZfmIEH5jQcFlmLtFBwl/LX4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:8d:a9:97:f8:e3:6d:09:4a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=383dba77-ccd7-4fb5-9951-de36c421a981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:e4:f8:27:77:0b:b4:cb:00:d4:3f:90:e9: 7a:2b:f6:cd:c4:be:3e:86:3c:11:f2:0b:12:3d:95: 19:50:ca:93:9b:82:40:d4:c6:e7:0b:fb:01:80:7f: 5c:8a:c9:b4:a9:9d:c8:ba:5d:7d:72:4e:a4:1f:da: 2e:d1:2b:3b:f3:da:29:46:a4:c0:2f:92:2e:a3:38: 40:9e:4d:54:8d:42:bd:0f:36:74:9c:1a:4f:a5:ad: c3:7b:b1:25:60:99:0b:a2:2a:28:bc:83:4d:3b:27: 06:55:91:ad:bd:8c:46:29:f5:c3:11:83:11:e5:19: 58:93:9c:7d:96:dc:af:5d:48:c0:2a:a2:a9:50:3c: 5b:4c:2d:a0:5c:9c:66:72:43:5c:e8:f3:e3:6b:bd: 63:67:c2:84:9f:8b:af:58:13:bf:da:ad:33:7e:d6: 2b:b8:49:a4:cc:64:bb:72:cd:3d:de:92:0e:61:85: aa:5f:8b:4a:2a:f5:60:53:17:e5:d9:5b:67:e5:9e: 91:91:5c:18:8a:6f:3f:ac:7b:e3:73:00:27:9b:d0: 7b:3c:a6:05:89:d8:38:b6:38:0c:84:c7:ef:e4:23: 96:c2:06:76:ee:c2:ee:3b:f6:50:73:96:70:b9:3a: 59:b8:a2:45:cc:5b:4b:2d:e6:b0:12:8c:04:85:a9: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:8D:AD:91:28:55:49:40:6B:9D:E5:B5:28:DD:3E:C6:38:CD:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:11:06:ea:de:73:ff:67:bb:ae:f6:47:26:54:bf:9b:c5:e3: 52:8b:2d:56:fb:c9:be:15:a3:4f:48:56:5b:aa:16:f9:75:c0: 21:6d:93:1d:84:2b:83:65:55:b2:46:f4:8f:b3:65:8f:f8:72: 3e:18:8f:a3:9a:aa:5e:0d:2d:5e:91:ab:17:44:2e:7e:73:54: 60:7e:80:b8:4c:59:ea:be:4b:11:50:33:77:ef:14:5b:bf:f2: d4:b4:27:11:d7:10:38:ac:43:62:a0:db:23:aa:5e:f7:db:5f: 9d:db:cc:cf:c8:20:d9:ae:9b:8f:f7:3e:95:12:e8:40:d8:b0: f9:b7:54:b7:51:64:c3:71:87:06:31:ae:47:a4:5c:f1:a2:da: 63:08:35:26:3e:42:af:17:94:2a:c1:67:0f:ca:cf:75:e0:cb: 84:3e:a1:75:49:45:ef:70:f3:7a:a1:1d:6a:2f:07:e1:23:bd: 6f:ca:fd:a7:7c:3c:98:a2:d2:a5:71:e1:7c:5e:a5:8f:d4:fe: 68:aa:47:19:3f:cf:50:c0:83:11:c5:d8:ff:5f:56:25:b9:fc: 0a:84:99:5c:b9:7a:21:09:2e:8d:9a:fa:53:f0:a3:2d:97:51: 43:14:8d:4e:a2:80:fc:d0:e5:bf:4b:b8:34:08:d6:38:05:cb: 7f:93:d0:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW42pl/jjbQlKO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk MzgzZGJhNzctY2NkNy00ZmI1LTk5NTEtZGUzNmM0MjFhOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVXk+Cd3C7TLANQ/kOl6K/bNxL4+hjwR8gsS PZUZUMqTm4JA1MbnC/sBgH9cism0qZ3Iul19ck6kH9ou0Ss789opRqTAL5IuozhA nk1UjUK9DzZ0nBpPpa3De7ElYJkLoioovINNOycGVZGtvYxGKfXDEYMR5RlYk5x9 ltyvXUjAKqKpUDxbTC2gXJxmckNc6PPja71jZ8KEn4uvWBO/2q0zftYruEmkzGS7 cs093pIOYYWqX4tKKvVgUxfl2Vtn5Z6RkVwYim8/rHvjcwAnm9B7PKYFidg4tjgM hMfv5COWwgZ27sLuO/ZQc5ZwuTpZuKJFzFtLLeawEowEhanr0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ6Cja2RKFVJQGud5bUo3T7GOM2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5EQbq3nP/Z7uu9kcmVL+b xeNSiy1W+8m+FaNPSFZbqhb5dcAhbZMdhCuDZVWyRvSPs2WP+HI+GI+jmqpeDS1e kasXRC5+c1RgfoC4TFnqvksRUDN37xRbv/LUtCcR1xA4rENioNsjql7321+d28zP yCDZrpuP9z6VEuhA2LD5t1S3UWTDcYcGMa5HpFzxotpjCDUmPkKvF5QqwWcPys91 4MuEPqF1SUXvcPN6oR1qLwfhI71vyv2nfDyYotKlceF8XqWP1P5oqkcZP89QwIMR xdj/X1YlufwKhJlcuXohCS6NmvpT8KMtl1FDFI1OooD80OW/S7g0CNY4Bct/k9Cp -----END CERTIFICATE-----Generated at Wed Aug 20 21:16:44 2025 by rpki-client