$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: 99R4N6QmvqHLkDCI1sQHFDglZS39PX9hTsUYfCMOfIk= Subject key identifier: 44:8E:06:C7:8C:37:F2:FD:BA:DB:67:BD:42:AF:44:1E:6E:90:3A:0F Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584AEB5B8F50F32F929B72580B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69CEB2 Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: exzqhmgA7Tk2ud13ad6rA1PDU8rhRUxm5eUGeOx+AFM=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: +FdN3s/LkaXoBQCP55FUkqFwGk875HCrJd/wAFV77Ms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:8f:50:f3:2f:92:9b:72:58:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=b77c4aeb-190a-4e84-884d-e8a181b775a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:4e:ce:89:38:49:f2:6d:c9:e3:ea:d1:09: 8e:fd:94:93:ec:d6:ec:92:cf:cd:e7:76:c6:ef:f4: d5:c6:0f:70:55:0a:22:71:67:98:71:76:b9:ac:61: 42:36:5c:93:84:9c:d8:f7:d2:db:87:88:e2:4a:41: 31:c7:af:d7:6b:71:fd:0a:6a:7d:80:29:87:0c:fd: 5c:75:29:b3:c4:a4:a4:f7:d7:35:67:0c:58:08:c2: a1:4e:52:72:f4:90:6c:a3:d1:3c:87:61:f2:d0:88: 12:09:4b:31:66:a5:c3:5b:19:c2:c4:a8:3f:a0:b7: 3a:d5:1a:a3:db:e3:09:93:cf:89:6d:63:3a:5f:a7: c2:13:9d:c2:2f:a2:36:24:31:69:d9:18:54:47:18: fa:92:01:89:6c:80:d8:a8:02:b7:11:f3:4f:87:05: dd:61:4b:1b:c4:0a:ce:56:1d:0b:de:08:51:5d:0b: fa:06:aa:25:15:96:9a:69:6a:1d:7f:d1:16:1d:c9: 61:b7:9b:6d:e9:a0:96:4c:37:16:b1:c1:c0:79:4f: 20:f4:1a:c3:ae:13:07:c7:71:52:0b:3f:53:7f:42: 5e:c6:1b:10:b2:62:e0:dd:97:db:dd:66:d3:d6:52: 76:65:e4:0e:0a:a8:de:b9:a0:eb:0a:e7:42:34:1c: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:06:C7:8C:37:F2:FD:BA:DB:67:BD:42:AF:44:1E:6E:90:3A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a8:76:e0:98:38:f1:1f:35:66:d6:52:19:b0:2b:2a:05:b3: 20:9f:62:7b:c2:92:cc:86:47:5f:33:30:b6:ae:d8:63:da:c2: e4:eb:74:9d:0b:c1:71:67:65:b5:2a:88:ff:db:05:eb:f9:c6: 15:e8:9f:20:49:e9:26:fb:0d:8f:10:df:1b:df:b3:6a:62:02: 16:a0:77:99:3a:24:9d:c5:24:12:d2:35:51:7d:89:f8:f5:a2: b1:53:79:a0:ee:a7:1c:68:03:6f:f6:2a:46:c6:6d:d8:d1:ad: 8e:a0:c5:44:80:ab:db:7b:f1:85:21:6c:c0:a9:f1:c3:b2:6a: 38:c0:71:07:d3:14:f9:4a:5b:d8:ad:aa:83:c3:60:00:7b:bf: ac:a6:41:d6:3d:ab:9c:03:0e:cf:08:ae:1a:9c:96:a8:76:c5: e2:46:86:25:af:2d:03:27:1b:f4:0c:af:8b:64:0f:16:d7:61: ea:fc:6b:8a:9b:d0:e0:0d:89:49:41:bb:28:c9:94:39:e9:cd: a6:b2:4d:e7:0c:b4:49:d4:e0:7b:a7:4d:42:f7:9f:e8:c6:d3: 24:32:fb:45:72:e3:bc:2f:92:3c:c8:58:d1:9b:c0:a1:32:68: b8:86:42:0d:1a:25:06:d8:18:6b:12:6a:c4:82:fe:39:d3:0f: ce:c8:bc:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW49Q8y+Sm3JYC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk Yjc3YzRhZWItMTkwYS00ZTg0LTg4NGQtZThhMTgxYjc3NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMZOzok4SfJtyePq0QmO/ZST7Nbsks/N53bG 7/TVxg9wVQoicWeYcXa5rGFCNlyThJzY99Lbh4jiSkExx6/Xa3H9Cmp9gCmHDP1c dSmzxKSk99c1ZwxYCMKhTlJy9JBso9E8h2Hy0IgSCUsxZqXDWxnCxKg/oLc61Rqj 2+MJk8+JbWM6X6fCE53CL6I2JDFp2RhURxj6kgGJbIDYqAK3EfNPhwXdYUsbxArO Vh0L3ghRXQv6BqolFZaaaWodf9EWHclht5tt6aCWTDcWscHAeU8g9BrDrhMHx3FS Cz9Tf0JexhsQsmLg3Zfb3WbT1lJ2ZeQOCqjeuaDrCudCNBxTpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFESOBseMN/L9uttnvUKvRB5ukDoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqqHbgmDjxHzVm1lIZsCsq BbMgn2J7wpLMhkdfMzC2rthj2sLk63SdC8FxZ2W1Koj/2wXr+cYV6J8gSekm+w2P EN8b37NqYgIWoHeZOiSdxSQS0jVRfYn49aKxU3mg7qccaANv9ipGxm3Y0a2OoMVE gKvbe/GFIWzAqfHDsmo4wHEH0xT5SlvYraqDw2AAe7+spkHWPaucAw7PCK4anJao dsXiRoYlry0DJxv0DK+LZA8W12Hq/GuKm9DgDYlJQbsoyZQ56c2msk3nDLRJ1OB7 p01C95/oxtMkMvtFcuO8L5I8yFjRm8ChMmi4hkINGiUG2BhrEmrEgv450w/OyLzw -----END CERTIFICATE-----Generated at Wed Aug 20 19:10:26 2025 by rpki-client