$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft File: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft (raw, json) Hash identifier: zunzfEWELpuNujxOoRolpKDcaBjpjL+7casm5SzA//Y= Subject key identifier: 36:AE:F0:6D:5C:A9:BB:64:2A:B6:68:28:34:80:ED:95:20:16:81:EF Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Certificate issuer: /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Certificate serial: 010D0C9F4328584AE9F6391F29DE9AA961FB6980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft Manifest number: 010D0C9F4328584073A83450E63A56FB23244E55 Signing time: Wed 20 Aug 2025 01:00:08 +0000 Manifest this update: Wed 20 Aug 2025 01:00:08 +0000 Manifest next update: Fri 22 Aug 2025 01:00:00 +0000 Files and hashes: 1: 5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa (hash: 592M7qtYiDL0itfxwgvzCMCzyR9JkptX+5nDOl7k/l8=) 2: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl (hash: LoyVYE5Vp8umR+KYXj1QasypixEh1KW4SMvp0stcX8E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:39:1f:29:de:9a:a9:61:fb:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Validity Not Before: Aug 20 01:00:08 2025 GMT Not After : Aug 22 01:00:00 2025 GMT Subject: CN=c0f52aab-3b77-4b00-9747-8091bf3e2ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:87:c0:0b:60:6b:c2:75:60:49:75:fb:98: d1:0e:37:5e:42:66:0c:9f:da:6d:07:f2:0c:44:e3: b7:13:0c:b4:5a:ad:a8:6a:f7:6e:db:59:b0:cf:e3: 79:44:b8:51:3c:47:e8:23:9b:fe:68:8d:a5:1b:48: 5d:a7:43:14:68:00:1d:9b:0b:0f:71:9f:60:16:85: af:37:db:49:02:54:2d:fa:8a:6b:f3:33:fd:a7:3e: b2:81:dc:71:14:32:93:47:7a:41:b8:36:f9:06:11: 69:b1:89:2b:07:4f:97:c1:8b:ef:15:89:0f:a5:a7: ab:de:f5:c8:84:d7:da:88:ea:9f:78:67:25:a8:a9: 80:8a:c2:25:a2:b6:27:55:8c:dd:42:ea:31:a4:c3: 6d:00:14:a6:4b:bb:14:6c:04:53:9e:06:b4:5a:fa: 10:b5:44:35:96:8f:4f:36:01:b4:4d:6f:45:f0:28: 0f:9d:29:c4:d0:e2:bb:93:00:5e:26:20:a7:57:75: e4:f5:97:c6:ab:65:74:ad:95:cd:e0:1d:96:82:b0: cb:91:09:93:e7:ec:0d:1d:51:bb:f0:01:3e:a5:3d: 71:7a:c3:0e:23:a5:12:ab:57:c4:1d:9a:3e:31:6d: 0a:6d:a1:ff:1b:b1:eb:66:a5:89:59:4b:f7:6a:85: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AE:F0:6D:5C:A9:BB:64:2A:B6:68:28:34:80:ED:95:20:16:81:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl X509v3 Authority Key Identifier: keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e7:75:d4:3c:70:cb:47:b0:dc:b6:19:dd:2b:70:4b:a1:4a: cc:bd:5f:16:48:dc:2f:ae:6a:21:e5:28:a6:42:d5:9b:04:c1: 9a:fd:3c:19:7f:09:96:ab:ca:0d:fc:d7:ec:ec:4f:ff:25:08: 21:54:e5:ef:dc:7c:90:3a:3a:11:48:1c:f5:f2:31:48:46:c5: 3a:bb:f7:0f:06:54:35:53:a0:f4:d3:56:22:f8:17:69:e0:4d: 62:8d:5d:b5:05:27:19:92:20:f0:cb:ec:2d:0c:90:ef:18:3d: 11:40:26:db:c5:e3:9d:44:3a:e8:bb:d3:6f:41:54:d2:fc:09: 7c:c6:98:fc:ae:db:f4:25:23:b7:9c:0c:69:e2:d0:9b:4d:1a: b5:54:7f:e9:97:97:9e:23:f1:f2:58:f2:76:3e:2d:58:83:12: ba:08:71:20:c0:06:7f:af:85:ae:b7:c4:88:62:18:62:00:e7: e7:d4:78:52:dc:70:fb:9c:50:d3:dd:dd:7b:9e:91:80:a0:35: 73:22:a1:c2:3f:af:16:0e:3a:fe:c8:e3:6f:45:4e:8b:d5:f4: c0:9c:61:0c:c6:21:6b:de:ee:92:64:97:2c:2b:00:64:05:fc: 58:23:e7:0a:df:d2:7a:28:e8:19:4c:22:e9:09:0a:7b:f6:7b: d2:4b:c1:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErp9jkfKd6aqWH7aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMw ZDRjMB4XDTI1MDgyMDAxMDAwOFoXDTI1MDgyMjAxMDAwMFowLzEtMCsGA1UEAxMk YzBmNTJhYWItM2I3Ny00YjAwLTk3NDctODA5MWJmM2UyZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo86HwAtga8J1YEl1+5jRDjdeQmYMn9ptB/IM ROO3Ewy0Wq2oavdu21mwz+N5RLhRPEfoI5v+aI2lG0hdp0MUaAAdmwsPcZ9gFoWv N9tJAlQt+opr8zP9pz6ygdxxFDKTR3pBuDb5BhFpsYkrB0+XwYvvFYkPpaer3vXI hNfaiOqfeGclqKmAisIlorYnVYzdQuoxpMNtABSmS7sUbARTnga0WvoQtUQ1lo9P NgG0TW9F8CgPnSnE0OK7kwBeJiCnV3Xk9ZfGq2V0rZXN4B2WgrDLkQmT5+wNHVG7 8AE+pT1xesMOI6USq1fEHZo+MW0KbaH/G7HrZqWJWUv3aoXtfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDau8G1cqbtkKrZoKDSA7ZUgFoHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVh YzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvOGU1YWM1YmQtMjZjOC00 ZWNhLTlmMTUtZmQyMzI3NmMwZDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGU1YWM1YmQtMjZjOC00ZWNhLTlm MTUtZmQyMzI3NmMwZDRjLzhlNWFjNWJkLTI2YzgtNGVjYS05ZjE1LWZkMjMyNzZj MGQ0Yy5jcmwwHwYDVR0jBBgwFoAUsyfIbi8GrE6uYl00Q/S49eYKbJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIz Mjc2YzBkNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh53XUPHDLR7DcthndK3BL oUrMvV8WSNwvrmoh5SimQtWbBMGa/TwZfwmWq8oN/Nfs7E//JQghVOXv3HyQOjoR SBz18jFIRsU6u/cPBlQ1U6D001Yi+Bdp4E1ijV21BScZkiDwy+wtDJDvGD0RQCbb xeOdRDrou9NvQVTS/Al8xpj8rtv0JSO3nAxp4tCbTRq1VH/pl5eeI/HyWPJ2Pi1Y gxK6CHEgwAZ/r4Wut8SIYhhiAOfn1HhS3HD7nFDT3d17npGAoDVzIqHCP68WDjr+ yONvRU6L1fTAnGEMxiFr3u6SZJcsKwBkBfxYI+cK39J6KOgZTCLpCQp79nvSS8Fx -----END CERTIFICATE-----Generated at Wed Aug 20 13:46:01 2025 by rpki-client