$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft File: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft (raw, json) Hash identifier: LTNXUMwub1mjHP09jH13uQ0cO4+M6Cii3E7m/ojj9Lk= Subject key identifier: 74:4E:34:17:AF:7C:E3:CF:1C:7B:E1:5E:6D:B2:3B:8C:0E:48:0C:6C Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584B1D4286806C622D8EB72D44C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft Manifest number: 010D0C9F4328584073A84E8087935899AC514F85 Signing time: Sun 07 Sep 2025 10:00:08 +0000 Manifest this update: Sun 07 Sep 2025 10:00:08 +0000 Manifest next update: Tue 09 Sep 2025 10:00:00 +0000 Files and hashes: 1: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (hash: mWsb2ofHvCzgm1R0lP7mTeY5iXtvDQCEYyGAnQxOjog=) 2: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (hash: YhUzLtOjAGsxSZ2ZkgnY/FO7Mgiaf+mI2nMDu0Wr3N8=) 3: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (hash: m9Afm8wSkFBN0xnMSzbrIIoPAHh8JKM+86sq0CWzTxg=) 4: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl (hash: ijLbGMM2g4xKujjNKfO2pQ+oqj3sprJmeKwOUKfMv2M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:42:86:80:6c:62:2d:8e:b7:2d:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Sep 7 10:00:08 2025 GMT Not After : Sep 9 10:00:00 2025 GMT Subject: CN=67d591ce-b1bc-42b0-808c-ece0ee6d5d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:35:74:8a:a8:34:2d:2e:7c:8b:93:9b:24: b1:e2:30:8c:bb:d4:a0:65:74:38:19:53:c2:a6:45: 2d:07:7c:af:4b:14:70:fb:35:d1:07:67:c7:ec:60: 4e:6f:4f:f9:a1:6d:7f:89:0b:df:19:11:50:01:b5: c4:8a:97:50:46:9c:e9:ef:9e:3c:81:2f:38:dc:d1: e6:e1:fc:9b:20:51:4f:a8:d5:bd:07:8f:48:26:5c: 3b:12:20:34:02:75:6c:56:91:e4:c2:29:d5:76:31: 3d:55:f9:15:f7:1a:a2:b1:a0:5e:b1:13:2d:a5:03: f8:9f:a3:3d:5f:c6:37:ab:69:d1:12:b4:ac:0f:b0: d3:63:cb:d0:ea:28:6f:b2:9d:b8:c9:46:a2:37:5c: 36:2d:50:71:fd:35:c2:c6:69:16:40:10:fa:5f:7b: df:66:bd:b4:90:96:d2:0d:68:e8:04:ee:96:8d:08: b4:21:d2:55:37:f0:70:b5:23:5a:2e:96:0f:9a:ce: 8a:dd:8c:76:2b:df:f4:d7:8f:1e:a0:ed:61:a1:7f: ca:b6:07:e3:ec:e8:63:a5:34:d8:dd:d4:dd:34:e2: f7:20:4a:c9:d6:af:0c:63:0b:82:de:99:47:5b:17: 51:3a:b1:f0:83:0b:ae:f4:42:e0:c0:77:1b:67:ef: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:34:17:AF:7C:E3:CF:1C:7B:E1:5E:6D:B2:3B:8C:0E:48:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:98:95:59:69:4b:3f:19:79:d0:b3:aa:36:17:dd:fb:f5: 67:14:e4:0b:f5:91:fd:79:00:ea:08:bf:1a:70:7c:e4:60:0b: c7:a4:ee:f8:c1:e5:dd:28:5e:e9:8f:2b:37:e8:93:dd:ca:dd: c1:91:1b:d9:74:cf:51:96:ec:4d:5e:64:17:24:77:f9:c1:79: df:a8:fd:68:25:ca:d7:60:ea:5e:3e:85:fe:4c:ad:2c:c5:49: 8a:58:90:b1:a2:77:46:2b:61:ad:ea:aa:4f:d2:a9:72:3d:26: 88:70:8e:c3:40:57:4d:9c:51:5c:b5:b4:d0:9d:ee:d8:33:9b: 37:17:15:01:f1:6d:6c:69:d9:be:4e:91:e2:8b:da:b6:54:8c: 1a:c9:64:c8:73:2e:aa:f7:8d:82:c9:20:1c:0a:9c:1c:2c:d4: 40:00:7c:6c:42:6a:23:da:7e:75:9e:de:8c:8d:c1:fd:35:65: 3b:e6:aa:5a:cd:23:f6:19:c4:f7:42:6a:80:a2:4b:83:d9:e6: f5:87:68:21:4b:14:19:f3:55:37:43:d1:65:bf:4d:8a:c5:75: a8:78:be:16:3f:65:22:fe:b2:a3:30:c7:7a:ce:c1:54:3e:a3: 35:8b:0e:97:be:9c:3c:27:32:4a:59:37:c0:14:85:24:b3:eb: 5d:34:64:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsdQoaAbGItjrctRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDkwNzEwMDAwOFoXDTI1MDkwOTEwMDAwMFowLzEtMCsGA1UEAxMk NjdkNTkxY2UtYjFiYy00MmIwLTgwOGMtZWNlMGVlNmQ1ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa41dIqoNC0ufIuTmySx4jCMu9SgZXQ4GVPC pkUtB3yvSxRw+zXRB2fH7GBOb0/5oW1/iQvfGRFQAbXEipdQRpzp7548gS843NHm 4fybIFFPqNW9B49IJlw7EiA0AnVsVpHkwinVdjE9VfkV9xqisaBesRMtpQP4n6M9 X8Y3q2nRErSsD7DTY8vQ6ihvsp24yUaiN1w2LVBx/TXCxmkWQBD6X3vfZr20kJbS DWjoBO6WjQi0IdJVN/BwtSNaLpYPms6K3Yx2K9/0148eoO1hoX/Ktgfj7OhjpTTY 3dTdNOL3IErJ1q8MYwuC3plHWxdROrHwgwuu9ELgwHcbZ+9a7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHRONBevfOPPHHvhXm2yO4wOSAxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvY2QxOThkYTQtZGJjYy00 YmVjLWExYTAtMzFkNjFkNWNjYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7Q5iVWWlLPxl50LOqNhfd +/VnFOQL9ZH9eQDqCL8acHzkYAvHpO74weXdKF7pjys36JPdyt3BkRvZdM9RluxN XmQXJHf5wXnfqP1oJcrXYOpePoX+TK0sxUmKWJCxondGK2Gt6qpP0qlyPSaIcI7D QFdNnFFctbTQne7YM5s3FxUB8W1sadm+TpHii9q2VIwayWTIcy6q942CySAcCpwc LNRAAHxsQmoj2n51nt6MjcH9NWU75qpazSP2GcT3QmqAokuD2eb1h2ghSxQZ81U3 Q9Flv02KxXWoeL4WP2Ui/rKjMMd6zsFUPqM1iw6Xvpw8JzJKWTfAFIUks+tdNGSG -----END CERTIFICATE-----Generated at Mon Sep 8 08:42:47 2025 by rpki-client