$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: isizRGrq+Xps9K7tUeMSxE9xivcGU/FtYJL9coN8aDo= Subject key identifier: 5C:AD:26:B3:36:FB:4E:56:45:BD:04:7F:F8:0B:DA:68:A8:B5:02:18 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584AEA13FC47C85EB02BE7927780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F37597 Signing time: Wed 20 Aug 2025 02:00:08 +0000 Manifest this update: Wed 20 Aug 2025 02:00:08 +0000 Manifest next update: Fri 22 Aug 2025 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: OtxfS7YGcUMY96ttIqMyzfeBH6ECEtVZL1K0mu1XnnE=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: HrKZAaPRXR1mC3Rz21juy1iMcvn14KIv0rkY0jdMXn0=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: u/GtGC2F4A/Ynk8lwbQhZWMaRSgTrsYT1OMfhrTgPao=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:13:fc:47:c8:5e:b0:2b:e7:92:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Aug 20 02:00:08 2025 GMT Not After : Aug 22 02:00:00 2025 GMT Subject: CN=d7191ee9-4fa4-40c9-82df-983a782ecac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:7f:76:3e:63:20:d6:b9:49:9b:8f:3b:e6: d5:44:b8:34:0a:3a:1c:9a:49:0e:4d:84:1e:d5:db: f5:6d:8b:85:a4:38:63:8b:46:c6:96:1e:c8:59:bb: cc:f9:e8:61:bb:2e:32:ef:fc:3a:84:ab:90:fd:4c: 24:6f:01:d5:47:8a:a8:b5:86:cd:79:0e:83:a2:39: 6f:f1:1b:7e:8a:12:1a:ce:bc:49:c3:17:bf:c0:08: 4b:0d:7d:b9:0f:44:84:6f:8c:a2:9a:7c:74:1e:b0: bd:49:c0:78:5b:30:86:66:f6:63:ba:d5:8c:45:88: 07:74:56:1c:aa:8f:85:b1:ea:b3:8a:e7:ac:c5:f0: c4:28:e6:9c:6e:dc:5d:27:96:0e:45:ff:ec:80:79: 89:05:ff:db:88:06:72:1f:fc:d1:ab:74:e7:9d:7b: eb:5f:b4:5d:9d:14:1f:fc:ac:02:a9:a2:ef:a8:96: 8c:69:0b:14:49:b9:13:e9:d9:98:a1:34:4f:7e:14: 7c:78:68:4f:52:d6:82:a8:63:d1:82:68:19:fe:f7: c0:21:be:41:cd:0a:c1:47:0a:cc:83:cc:03:12:02: 1a:3c:85:02:37:fe:90:1b:bb:52:d3:98:30:06:de: 68:4f:fe:1b:52:93:73:00:a7:7f:88:9c:d6:53:aa: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AD:26:B3:36:FB:4E:56:45:BD:04:7F:F8:0B:DA:68:A8:B5:02:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:26:30:52:f4:0e:ad:af:1b:d0:5f:ad:7d:90:3d:b2:7b:e9: c8:8b:00:04:99:0e:e8:b5:2a:d9:4d:35:bb:e3:56:b0:4b:af: 11:ae:c6:c8:d9:8f:de:a0:9d:e9:18:27:3e:13:e8:11:08:04: dd:57:b7:64:77:f6:ea:06:24:63:e4:63:92:04:7f:dd:50:d0: 4d:2a:ff:ba:de:10:62:7f:b3:c0:cc:71:f1:e4:4c:a5:d8:28: 45:01:4a:2e:9e:45:7d:2b:55:99:2f:e3:15:2a:19:ac:b3:d6: 16:83:bb:8c:ea:dc:b1:1a:e0:5f:18:99:70:b5:1f:be:41:46: 1d:fc:12:ef:0a:ee:7c:92:47:fd:37:34:ee:0d:37:df:12:7f: a2:02:be:a0:58:06:bc:ed:e8:d2:e2:8f:89:e2:7b:fa:73:4a: f0:84:bb:d7:c9:d9:12:b6:ff:b4:90:df:39:63:44:14:ee:78: 49:2b:40:28:c7:c9:f6:a6:71:a6:f0:c9:34:cf:02:2b:4e:e6: 45:58:ae:16:e4:61:1d:5f:0d:a2:fe:36:46:c3:dd:45:ac:d9: fe:36:45:20:33:dd:ec:fb:82:83:0d:05:f7:6d:30:f4:e7:09: 05:01:b0:87:c1:f4:79:f4:33:33:19:60:7e:ec:9e:84:0d:62: ff:77:f2:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqE/xHyF6wK+eSd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MDgyMDAyMDAwOFoXDTI1MDgyMjAyMDAwMFowLzEtMCsGA1UEAxMk ZDcxOTFlZTktNGZhNC00MGM5LTgyZGYtOTgzYTc4MmVjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr5/dj5jINa5SZuPO+bVRLg0CjocmkkOTYQe 1dv1bYuFpDhji0bGlh7IWbvM+ehhuy4y7/w6hKuQ/UwkbwHVR4qotYbNeQ6Dojlv 8Rt+ihIazrxJwxe/wAhLDX25D0SEb4yimnx0HrC9ScB4WzCGZvZjutWMRYgHdFYc qo+FseqziuesxfDEKOacbtxdJ5YORf/sgHmJBf/biAZyH/zRq3TnnXvrX7RdnRQf /KwCqaLvqJaMaQsUSbkT6dmYoTRPfhR8eGhPUtaCqGPRgmgZ/vfAIb5BzQrBRwrM g8wDEgIaPIUCN/6QG7tS05gwBt5oT/4bUpNzAKd/iJzWU6onVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFytJrM2+05WRb0Ef/gL2miotQIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQJjBS9A6trxvQX619kD2y e+nIiwAEmQ7otSrZTTW741awS68RrsbI2Y/eoJ3pGCc+E+gRCATdV7dkd/bqBiRj 5GOSBH/dUNBNKv+63hBif7PAzHHx5Eyl2ChFAUounkV9K1WZL+MVKhmss9YWg7uM 6tyxGuBfGJlwtR++QUYd/BLvCu58kkf9NzTuDTffEn+iAr6gWAa87ejS4o+J4nv6 c0rwhLvXydkStv+0kN85Y0QU7nhJK0Aox8n2pnGm8Mk0zwIrTuZFWK4W5GEdXw2i /jZGw91FrNn+NkUgM93s+4KDDQX3bTD05wkFAbCHwfR59DMzGWB+7J6EDWL/d/JB -----END CERTIFICATE-----Generated at Wed Aug 20 17:18:09 2025 by rpki-client