$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: OAqj+RqLH704AaG7yfdk+RRT1PGZJUqz8J+sx61r7xU= Subject key identifier: B4:A4:7A:53:86:AE:67:A9:13:EE:56:68:3A:3A:2D:A1:B3:DB:16:EA Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584B33D38F01825C1CAFB944A2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3E46 Signing time: Mon 15 Sep 2025 12:00:08 +0000 Manifest this update: Mon 15 Sep 2025 12:00:08 +0000 Manifest next update: Thu 18 Sep 2025 12:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: krlVPVKOC6kn50fBg1GN7q9NUBi7Ys6wI0ZG8Huwwos=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: KRGFTDAn2v5m/DuOAJmL/bHZFX0WXZ1pQdvU7//EU1k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:d3:8f:01:82:5c:1c:af:b9:44:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Sep 15 12:00:08 2025 GMT Not After : Sep 18 12:00:00 2025 GMT Subject: CN=705942ec-a71e-47ed-8e4e-f84184ad7192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:d7:70:38:8a:77:35:2b:1a:44:b2:52:bb: 06:33:7a:8e:12:a8:8a:78:f8:7d:32:64:fb:d6:8d: 1f:69:01:22:df:24:ed:c4:1c:79:85:eb:37:2f:87: b4:dc:7e:79:7f:85:ea:c1:0d:4d:33:93:82:50:60: 25:b1:b6:ae:83:48:5e:be:6c:60:7b:9a:d7:0e:d7: 5d:20:5f:e9:a8:ab:03:22:5d:ce:6a:fd:89:88:35: f4:83:a8:f9:be:30:79:f8:a2:e5:b8:13:0d:ab:6f: 44:6d:90:d0:56:9b:bf:b5:10:21:d4:2c:cc:cb:f3: c5:72:0f:66:d0:79:40:b6:f9:4a:3b:24:9b:01:38: 93:6d:65:ca:ff:db:6e:0f:f4:b9:7f:a6:44:46:d7: 5e:8c:35:9b:e1:6f:a4:dc:41:3a:21:0f:7d:21:b4: 8a:75:cb:b2:ab:46:d6:9e:41:d6:7d:ca:0e:58:94: f5:8a:51:76:b7:19:97:95:6d:0f:f7:d0:8d:39:59: 5c:5d:5b:31:c5:0b:41:09:48:90:4b:af:fc:c0:a6: be:1d:f8:e9:47:4b:ea:85:dc:bc:9d:50:34:0f:71: f6:36:aa:0f:e9:05:73:af:72:49:f7:51:e2:e9:2f: 51:6e:de:9d:21:dc:01:62:8e:24:fd:c7:e9:10:63: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A4:7A:53:86:AE:67:A9:13:EE:56:68:3A:3A:2D:A1:B3:DB:16:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4a:db:d3:32:be:41:e0:14:6b:79:6a:6c:82:1a:cf:ce:e1: 1e:46:47:3c:48:00:88:02:f8:b4:75:81:4b:af:1d:c1:be:f0: 43:45:3f:54:5d:8b:6f:47:21:0a:54:9a:bb:f6:e0:57:40:6a: 40:54:91:8a:72:09:c6:45:52:d2:4a:e3:74:7e:e8:43:d2:a4: ce:ab:7e:ab:10:54:f0:fa:42:88:65:f1:1a:08:17:fb:39:4a: e4:7b:8f:e6:7c:ec:3a:05:2f:f4:8b:ee:9b:95:81:6b:92:09: bd:d7:02:bf:eb:2f:34:b4:b3:74:08:53:80:9e:16:14:ea:4a: f0:32:e1:63:71:ba:50:42:63:9c:a6:21:6f:0a:77:77:78:9b: 9b:aa:f2:49:30:11:29:98:d4:83:ea:f6:c5:48:30:70:7d:b3: 2f:2d:77:6e:fb:ab:a5:b1:16:c1:6a:e3:87:a3:29:a0:a4:40: 9c:78:91:c4:a5:31:3d:37:3c:dc:a7:3f:fc:8b:57:86:6a:55: 9d:91:68:d6:5c:5e:19:e1:56:32:24:22:db:2a:eb:9c:bf:17: 27:d4:46:83:71:66:be:b7:58:a9:2e:d1:e0:3a:c5:b2:fa:a7: 3d:5f:d3:3a:84:4c:40:09:dd:10:3d:bb:0b:e3:72:8e:92:d9: fc:42:84:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsz048Bglwcr7lEosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MDkxNTEyMDAwOFoXDTI1MDkxODEyMDAwMFowLzEtMCsGA1UEAxMk NzA1OTQyZWMtYTcxZS00N2VkLThlNGUtZjg0MTg0YWQ3MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCfXcDiKdzUrGkSyUrsGM3qOEqiKePh9MmT7 1o0faQEi3yTtxBx5hes3L4e03H55f4XqwQ1NM5OCUGAlsbaug0hevmxge5rXDtdd IF/pqKsDIl3Oav2JiDX0g6j5vjB5+KLluBMNq29EbZDQVpu/tRAh1CzMy/PFcg9m 0HlAtvlKOySbATiTbWXK/9tuD/S5f6ZERtdejDWb4W+k3EE6IQ99IbSKdcuyq0bW nkHWfcoOWJT1ilF2txmXlW0P99CNOVlcXVsxxQtBCUiQS6/8wKa+HfjpR0vqhdy8 nVA0D3H2NqoP6QVzr3JJ91Hi6S9Rbt6dIdwBYo4k/cfpEGPOxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLSkelOGrmepE+5WaDo6LaGz2xbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEStvTMr5B4BRreWpsghrP zuEeRkc8SACIAvi0dYFLrx3BvvBDRT9UXYtvRyEKVJq79uBXQGpAVJGKcgnGRVLS SuN0fuhD0qTOq36rEFTw+kKIZfEaCBf7OUrke4/mfOw6BS/0i+6blYFrkgm91wK/ 6y80tLN0CFOAnhYU6krwMuFjcbpQQmOcpiFvCnd3eJubqvJJMBEpmNSD6vbFSDBw fbMvLXdu+6ulsRbBauOHoymgpECceJHEpTE9Nzzcpz/8i1eGalWdkWjWXF4Z4VYy JCLbKuucvxcn1EaDcWa+t1ipLtHgOsWy+qc9X9M6hExACd0QPbsL43KOktn8QoQ3 -----END CERTIFICATE-----Generated at Tue Sep 16 07:06:44 2025 by rpki-client