$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft File: add35f11-0294-4be9-94b7-49cac2bcb001.mft (raw, json) Hash identifier: eFez4XYUo+SlKVfG2AOnnQ3s+Nxwrblt4sXMQVy5n0c= Subject key identifier: B2:A0:DA:F4:D7:45:DE:DF:FF:AB:23:FA:66:6D:89:FF:38:EE:F3:AE Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584B238A9318F339A360EE00A660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft Manifest number: 010D0C9F4328584073A81AE12C42C5F2542C321C Signing time: Tue 09 Sep 2025 16:00:08 +0000 Manifest this update: Tue 09 Sep 2025 16:00:08 +0000 Manifest next update: Fri 12 Sep 2025 16:00:00 +0000 Files and hashes: 1: 724dc813-9136-3075-bcba-f77834af4133.roa (hash: 2MPZ+uswH/7wCyr4ExKb6mEY9xtqEY/mbCJ6+0r5N+E=) 2: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (hash: +aCcnr9W/ixklQeET9D+NHMCxjr0/osN40r/XroJR0k=) 3: add35f11-0294-4be9-94b7-49cac2bcb001.crl (hash: 6a37338+V8k9Kdg1QJO8NL8lrDCahouzqyNQ/AGzhcQ=) 4: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (hash: eRfaUHal7xan818A/oAVxYJLUwaB2VQu4o3Ayd+5wOY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:8a:93:18:f3:39:a3:60:ee:00:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Sep 9 16:00:08 2025 GMT Not After : Sep 12 16:00:00 2025 GMT Subject: CN=3d1451cc-3c03-4bc1-8986-16d386e5d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:f2:a4:43:25:58:a0:e8:78:49:f1:80:67: 70:c9:a7:bf:45:e0:0d:c5:e5:94:e9:fe:55:81:2d: f4:5e:57:2c:9e:93:21:ab:73:11:67:9b:de:a0:2f: 24:2c:c2:dc:dc:f2:77:d9:2a:b8:e9:6e:4b:1b:63: d1:3e:ca:10:cc:f1:56:74:57:eb:81:2a:a4:7a:16: a4:ad:e2:a0:8f:ea:53:82:ef:d8:09:5c:43:5f:b7: a7:f4:bb:8a:31:78:84:39:58:a8:87:1a:9e:ad:87: 13:50:6f:b9:47:13:da:63:0d:60:9b:23:af:25:37: 03:44:26:ad:48:2d:60:9e:6d:20:17:d6:17:0d:ba: 4d:23:06:39:6b:4e:93:be:a8:c8:9f:e3:44:3c:4b: 4a:4c:90:2f:d6:27:0e:98:f4:82:38:cb:e9:2a:47: da:b5:16:1c:d8:d8:ba:9a:67:14:dc:61:81:85:1c: c0:56:9e:1f:d5:59:94:6d:10:59:5c:c1:f9:f4:42: 6b:a7:6a:3a:dc:34:fe:96:7b:80:e5:23:f6:d7:39: ce:33:f7:f7:d5:13:57:fd:a6:94:3c:9a:37:09:67: 60:64:59:80:95:5b:01:08:d3:bd:e1:12:f4:25:ea: 03:c0:ed:8f:2a:3c:75:2e:b8:b0:62:df:64:89:a7: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:DA:F4:D7:45:DE:DF:FF:AB:23:FA:66:6D:89:FF:38:EE:F3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:30:5e:19:0c:1a:55:36:60:1e:fd:b0:5c:6d:45:51:d9:7d: e5:b2:f4:b5:3d:3b:77:0c:5b:95:43:4c:da:63:06:06:ce:2b: f2:75:27:48:93:25:16:9a:b7:37:b1:68:aa:1d:35:61:88:8d: fa:37:8d:14:6a:84:b2:8d:83:73:a4:cb:60:5e:4a:25:a2:b1: 92:40:31:47:f1:07:e6:4c:9a:8d:ca:8c:5b:07:3e:a7:4d:c2: 51:67:d6:49:15:39:cf:4f:f0:1b:fa:dc:e7:94:95:aa:c5:d3: ca:e9:55:76:e1:3e:b0:ed:32:5a:6e:03:cf:1f:3b:05:e8:d5: 13:4e:f9:5c:c4:ca:72:cd:fe:7d:04:f4:cf:6f:08:03:73:a5: ec:fe:9f:2f:f0:95:c3:7b:f8:4b:09:0f:be:8b:19:d6:c4:6f: a5:63:9d:8b:7c:70:66:ea:c5:ae:8c:37:29:55:1e:3f:2a:3b: 57:3e:48:b9:f6:32:4a:ea:23:89:f4:74:97:2e:30:31:dc:49: 07:3a:14:50:2c:0d:d4:7d:1c:fe:5c:25:d0:b5:d2:d4:57:e5: ab:09:98:62:2c:4d:ec:4a:78:7d:6e:a8:3e:8b:fe:7d:f5:ff: 08:22:28:e1:0c:e1:4d:0d:76:4b:0e:c3:32:c6:90:99:83:bc: 96:da:2a:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsjipMY8zmjYO4ApmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDkwOTE2MDAwOFoXDTI1MDkxMjE2MDAwMFowLzEtMCsGA1UEAxMk M2QxNDUxY2MtM2MwMy00YmMxLTg5ODYtMTZkMzg2ZTVkMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubjypEMlWKDoeEnxgGdwyae/ReANxeWU6f5V gS30XlcsnpMhq3MRZ5veoC8kLMLc3PJ32Sq46W5LG2PRPsoQzPFWdFfrgSqkehak reKgj+pTgu/YCVxDX7en9LuKMXiEOViohxqerYcTUG+5RxPaYw1gmyOvJTcDRCat SC1gnm0gF9YXDbpNIwY5a06TvqjIn+NEPEtKTJAv1icOmPSCOMvpKkfatRYc2Ni6 mmcU3GGBhRzAVp4f1VmUbRBZXMH59EJrp2o63DT+lnuA5SP21znOM/f31RNX/aaU PJo3CWdgZFmAlVsBCNO94RL0JeoDwO2PKjx1LriwYt9kiafhDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKg2vTXRd7f/6sj+mZtif847vOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYWRkMzVmMTEtMDI5NC00 YmU5LTk0YjctNDljYWMyYmNiMDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByMF4ZDBpVNmAe/bBcbUVR 2X3lsvS1PTt3DFuVQ0zaYwYGzivydSdIkyUWmrc3sWiqHTVhiI36N40UaoSyjYNz pMtgXkolorGSQDFH8QfmTJqNyoxbBz6nTcJRZ9ZJFTnPT/Ab+tznlJWqxdPK6VV2 4T6w7TJabgPPHzsF6NUTTvlcxMpyzf59BPTPbwgDc6Xs/p8v8JXDe/hLCQ++ixnW xG+lY52LfHBm6sWujDcpVR4/KjtXPki59jJK6iOJ9HSXLjAx3EkHOhRQLA3UfRz+ XCXQtdLUV+WrCZhiLE3sSnh9bqg+i/599f8IIijhDOFNDXZLDsMyxpCZg7yW2ips -----END CERTIFICATE-----Generated at Tue Sep 9 22:08:32 2025 by rpki-client