$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft File: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft (raw, json) Hash identifier: 4f5g7pCtINrhb7pSn+r1DkUR3tX2FiTInjqdBtygdOA= Subject key identifier: D4:DC:BB:FA:9A:F1:02:A5:A2:50:E4:97:01:D9:BD:15:F7:FD:69:58 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584AF71B2D36C706598DB5A63180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft Manifest number: 010D0C9F4328584733F8223248709F44DB2106E2 Signing time: Sun 24 Aug 2025 18:00:08 +0000 Manifest this update: Sun 24 Aug 2025 18:00:08 +0000 Manifest next update: Tue 26 Aug 2025 18:00:00 +0000 Files and hashes: 1: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (hash: PnedNOMYbm56SgCg4MBvk893lckGBWVUcgXOTm7cMQM=) 2: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl (hash: aQJFBKOl09zc3NbV31JyeX+o/EeHJ6DazwfC5LOmdRU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:1b:2d:36:c7:06:59:8d:b5:a6:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Aug 24 18:00:08 2025 GMT Not After : Aug 26 18:00:00 2025 GMT Subject: CN=a91f9cd5-7bd9-4b63-9328-5090be7fda3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:ef:25:29:72:bc:78:91:00:a9:41:d5:03: 93:1c:93:db:0e:2e:e6:41:1e:f8:36:55:99:14:13: 8d:ce:cc:c3:e7:00:1c:8e:b9:ba:ca:1a:ea:2b:f3: 3d:fc:b0:16:91:e2:87:86:f6:5f:7f:43:b7:14:e3: 96:15:0a:22:96:98:88:3c:d5:35:ab:67:6e:93:d3: a6:74:c0:9e:cb:b7:93:2d:52:fb:83:c7:f7:45:d2: 09:4f:21:1e:e9:98:a0:b2:2d:e1:2b:cb:4b:c2:9f: 41:d6:79:2c:70:8d:6d:44:39:17:81:5e:7d:05:3e: 09:e2:e7:91:10:40:2a:cf:b7:98:db:3b:a6:67:c4: 6b:de:dd:a4:38:26:3a:51:8b:f1:cd:29:a9:69:34: de:2f:20:3b:35:20:11:13:00:dc:61:51:fe:10:df: 17:48:d5:89:a6:73:27:39:de:a9:eb:b8:e9:4f:77: 09:26:35:a8:04:ae:a3:e0:de:b6:96:4b:a9:32:cd: d0:8c:bc:9e:cd:cd:79:20:d2:3f:ea:ef:8c:a9:d5: 42:f3:79:ec:3e:82:3f:37:5a:54:0f:66:91:01:2e: a1:f9:aa:59:76:c8:4f:0d:e8:b7:f6:cc:e1:46:7a: 33:46:97:0f:5d:11:9a:20:39:bf:14:44:01:8f:b2: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:BB:FA:9A:F1:02:A5:A2:50:E4:97:01:D9:BD:15:F7:FD:69:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2e:43:b6:cf:aa:11:2d:d1:b5:81:22:6b:04:b2:c0:1e:d9: 1c:59:e0:68:1c:4f:d9:54:28:c3:05:64:ea:20:d7:75:d9:cd: 38:e0:00:da:d8:db:64:db:cc:6a:83:af:08:bc:85:6d:ba:3c: 45:0b:72:dc:a8:31:21:4c:65:be:7b:2b:ce:c0:28:e9:fc:80: 1a:43:cd:dd:48:ea:e2:eb:19:9c:7b:17:a4:51:15:cf:b1:33: dc:6d:31:33:25:6f:39:85:f2:fb:00:b0:ac:cb:2f:44:0c:b8: 93:df:02:b1:a7:6a:95:69:b3:03:6c:46:ce:88:01:73:ee:80: 65:07:13:42:e2:b9:b3:eb:bc:c8:cc:fe:aa:f6:38:eb:11:da: 3e:bc:da:a0:ae:6d:04:1b:c1:2d:2f:27:de:7c:9f:ea:78:b1: 99:03:ac:14:cb:a3:c2:24:88:dc:f8:9b:40:e5:ea:ae:6f:0b: 8f:6d:dd:5d:10:b8:2c:a2:85:26:09:1b:67:65:ee:25:30:92: be:a0:f4:64:41:d0:2f:c9:e4:69:3a:1a:f2:49:ad:a8:8c:61: 9b:69:9f:05:43:ed:61:38:dd:e7:0a:9c:cd:fd:50:f5:e2:55: c0:6d:fb:d9:5e:3d:01:d9:dd:69:ab:ba:68:aa:03:24:1c:a2: b7:21:4f:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3Gy02xwZZjbWmMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDgyNDE4MDAwOFoXDTI1MDgyNjE4MDAwMFowLzEtMCsGA1UEAxMk YTkxZjljZDUtN2JkOS00YjYzLTkzMjgtNTA5MGJlN2ZkYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8DvJSlyvHiRAKlB1QOTHJPbDi7mQR74NlWZ FBONzszD5wAcjrm6yhrqK/M9/LAWkeKHhvZff0O3FOOWFQoilpiIPNU1q2duk9Om dMCey7eTLVL7g8f3RdIJTyEe6Zigsi3hK8tLwp9B1nkscI1tRDkXgV59BT4J4ueR EEAqz7eY2zumZ8Rr3t2kOCY6UYvxzSmpaTTeLyA7NSAREwDcYVH+EN8XSNWJpnMn Od6p67jpT3cJJjWoBK6j4N62lkupMs3QjLyezc15INI/6u+MqdVC83nsPoI/N1pU D2aRAS6h+apZdshPDei39szhRnozRpcPXRGaIDm/FEQBj7II1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNTcu/qa8QKlolDklwHZvRX3/WlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMWNmOWU1NmEtNWNjMy00 N2EyLWE5NmQtMzY1MGM0ZGU0NWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0LkO2z6oRLdG1gSJrBLLA HtkcWeBoHE/ZVCjDBWTqINd12c044ADa2Ntk28xqg68IvIVtujxFC3LcqDEhTGW+ eyvOwCjp/IAaQ83dSOri6xmcexekURXPsTPcbTEzJW85hfL7ALCsyy9EDLiT3wKx p2qVabMDbEbOiAFz7oBlBxNC4rmz67zIzP6q9jjrEdo+vNqgrm0EG8EtLyfefJ/q eLGZA6wUy6PCJIjc+JtA5equbwuPbd1dELgsooUmCRtnZe4lMJK+oPRkQdAvyeRp OhrySa2ojGGbaZ8FQ+1hON3nCpzN/VD14lXAbfvZXj0B2d1pq7poqgMkHKK3IU+h -----END CERTIFICATE-----Generated at Mon Aug 25 09:23:36 2025 by rpki-client