$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft File: 60853e5b-d7a9-4bc8-8250-635257ad49bd.mft (raw, json) Hash identifier: I+RaSMOTErspGTGcZMOoThS243tlwHeFU/pp7ryuk14= Subject key identifier: 25:A9:67:DE:16:28:43:3F:19:2D:96:63:59:3F:66:32:7C:40:0D:B3 Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Certificate issuer: /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Certificate serial: 010D0C9F4328584AEB02379C1D686847B16D3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft Manifest number: 010D0C9F4328584073A84E78ECEA632F1F498C55 Signing time: Wed 20 Aug 2025 10:00:08 +0000 Manifest this update: Wed 20 Aug 2025 10:00:08 +0000 Manifest next update: Fri 22 Aug 2025 10:00:00 +0000 Files and hashes: 1: 443219a0-efe0-327e-b60e-0844a2070c85.roa (hash: ZvYIOYbUDEGnE5BYbdKJSgu1iXpuBI9mmB+n5jVIkRc=) 2: 60853e5b-d7a9-4bc8-8250-635257ad49bd.crl (hash: fhR/DZWXkza5ia/ca5zW8KtTIo3WCzruQs8cspPex0o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:02:37:9c:1d:68:68:47:b1:6d:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Validity Not Before: Aug 20 10:00:08 2025 GMT Not After : Aug 22 10:00:00 2025 GMT Subject: CN=bae22511-e714-4f2d-ba20-13885d452abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:16:63:b0:bd:bb:11:2d:a2:32:c0:e2:fd: 24:f9:36:5e:bb:d5:dd:60:a0:29:c9:93:3e:b9:ce: 1f:23:67:51:4b:c5:46:1f:1d:47:9a:58:dc:ce:2f: b3:fa:73:01:73:9b:7b:31:3b:f5:81:14:4f:5b:c7: 42:b4:32:73:02:6b:37:14:30:2d:a8:63:b8:d2:2d: ca:22:6e:c8:d3:c9:47:64:0e:b6:58:a8:2d:00:e8: 17:22:95:2d:c5:82:3a:47:c3:97:94:fb:d9:7c:ad: 77:9d:20:d3:d9:c3:e8:79:3f:1d:b1:00:1c:9a:fc: 72:80:6c:c9:e4:97:9b:7d:ca:4d:8d:72:2d:73:bf: 4c:2b:b1:c0:e7:56:e2:bc:1f:e7:fb:a4:7c:d5:e9: c5:04:13:7e:b8:ac:30:55:21:37:17:3e:0c:8e:cc: 3a:b3:56:de:5a:6d:b6:9a:9d:59:a3:a2:f5:f9:9b: dc:33:95:4e:6f:ca:94:cc:67:ae:49:16:03:ef:f1: 4c:6d:0a:25:8c:b5:ef:67:d8:7e:08:3c:69:d5:ea: ad:17:f5:ff:a7:a5:50:48:8f:0f:af:87:18:d0:1a: 1a:cd:49:88:cf:22:1e:ad:6e:3a:ff:7b:de:9b:9c: e7:9c:67:9d:c8:86:b6:cb:0d:ce:5c:5c:e4:bd:0b: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:67:DE:16:28:43:3F:19:2D:96:63:59:3F:66:32:7C:40:0D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl X509v3 Authority Key Identifier: keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:8c:57:4b:09:10:72:e2:52:c6:39:28:c4:ed:1e:86:c6: 4e:89:6f:55:f4:f5:97:2e:a0:99:0e:8f:e7:ba:dc:78:7c:b7: 93:d6:f6:58:52:6c:74:5e:95:a5:14:cf:69:91:56:b6:4c:b0: 6f:1e:04:13:c0:05:43:5d:86:a4:ef:f9:94:e0:ab:8e:ee:fd: 59:04:36:e4:02:47:7d:9a:e1:9b:f6:04:f5:2c:b1:17:83:c8: 34:0d:ba:99:6d:0a:32:64:50:76:fd:e5:77:ed:44:17:79:47: 7c:27:9c:d0:6c:4f:13:d2:0b:48:d6:a4:83:59:24:92:ec:22: 69:dd:be:7d:c9:45:57:f5:aa:e6:fc:2d:7d:cc:f0:46:eb:52: f3:ef:76:06:4c:40:ca:d4:59:cb:cb:15:0a:ee:32:8c:7c:83: e8:f5:54:f2:4c:4c:99:d0:58:b1:06:e9:1b:16:7b:07:32:63: ad:12:19:3a:04:6d:b4:dc:9b:f1:7f:04:d6:4d:53:96:17:4d: 09:cd:89:f1:7e:aa:54:47:41:7d:0a:b2:15:18:d0:7a:6d:fd: b1:7d:43:c1:ed:18:bc:91:57:86:a7:b3:d4:fa:35:a0:1f:d3: 6c:a8:45:5d:9f:39:fa:8a:d9:25:b4:5d:30:35:3d:a5:70:bf: 5c:e9:5d:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrAjecHWhoR7FtM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0 OWJkMB4XDTI1MDgyMDEwMDAwOFoXDTI1MDgyMjEwMDAwMFowLzEtMCsGA1UEAxMk YmFlMjI1MTEtZTcxNC00ZjJkLWJhMjAtMTM4ODVkNDUyYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNMWY7C9uxEtojLA4v0k+TZeu9XdYKApyZM+ uc4fI2dRS8VGHx1Hmljczi+z+nMBc5t7MTv1gRRPW8dCtDJzAms3FDAtqGO40i3K Im7I08lHZA62WKgtAOgXIpUtxYI6R8OXlPvZfK13nSDT2cPoeT8dsQAcmvxygGzJ 5JebfcpNjXItc79MK7HA51bivB/n+6R81enFBBN+uKwwVSE3Fz4Mjsw6s1beWm22 mp1Zo6L1+ZvcM5VOb8qUzGeuSRYD7/FMbQoljLXvZ9h+CDxp1eqtF/X/p6VQSI8P r4cY0BoazUmIzyIerW46/3vem5znnGedyIa2yw3OXFzkvQsZ3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWpZ94WKEM/GS2WY1k/ZjJ8QA2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1 M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvNjA4NTNlNWItZDdhOS00 YmM4LTgyNTAtNjM1MjU3YWQ0OWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA4NTNlNWItZDdhOS00YmM4LTgy NTAtNjM1MjU3YWQ0OWJkLzYwODUzZTViLWQ3YTktNGJjOC04MjUwLTYzNTI1N2Fk NDliZC5jcmwwHwYDVR0jBBgwFoAUS6rgAPA5EjKMW8AEIsmsDzs1DygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUy NTdhZDQ5YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv6IxXSwkQcuJSxjkoxO0e hsZOiW9V9PWXLqCZDo/nutx4fLeT1vZYUmx0XpWlFM9pkVa2TLBvHgQTwAVDXYak 7/mU4KuO7v1ZBDbkAkd9muGb9gT1LLEXg8g0DbqZbQoyZFB2/eV37UQXeUd8J5zQ bE8T0gtI1qSDWSSS7CJp3b59yUVX9arm/C19zPBG61Lz73YGTEDK1FnLyxUK7jKM fIPo9VTyTEyZ0FixBukbFnsHMmOtEhk6BG203JvxfwTWTVOWF00JzYnxfqpUR0F9 CrIVGNB6bf2xfUPB7Ri8kVeGp7PU+jWgH9NsqEVdnzn6itkltF0wNT2lcL9c6V3X -----END CERTIFICATE-----Generated at Wed Aug 20 17:27:22 2025 by rpki-client