$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft File: 96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft (raw, json) Hash identifier: 9AZItHOaoY35JNEjmJKZlopVB4RwdJDvva4vXOzaNIk= Subject key identifier: AC:A2:95:0A:2D:F7:20:03:91:50:1F:D4:64:E9:42:25:DB:51:BB:A9 Authority key identifier: 09:C0:4C:C5:8B:0F:EA:FE:B4:5C:B4:FB:86:5B:28:9F:51:AA:88:26 Certificate issuer: /CN=96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4 Certificate serial: 010D0C9F4328584AF6C1D805E7AC5EF318FA8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft Manifest number: 010D0C9F43285846F378F6E28FEDDE8A7AF89278 Signing time: Sun 24 Aug 2025 15:00:08 +0000 Manifest this update: Sun 24 Aug 2025 15:00:08 +0000 Manifest next update: Wed 27 Aug 2025 15:00:00 +0000 Files and hashes: 1: 093003ba-90c6-36fb-816f-facad7584763.roa (hash: jhumcCO5ToBYV5HXKE8DcZEKIlfsJescrr41ZQHuarA=) 2: 96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.crl (hash: dponQGQlm6YW43hHe+3yfjcsgT30RhMjUuJDnHstoII=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:c1:d8:05:e7:ac:5e:f3:18:fa:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4 Validity Not Before: Aug 24 15:00:08 2025 GMT Not After : Aug 27 15:00:00 2025 GMT Subject: CN=cc5ddd02-759c-44b2-aedc-93c65e409232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:47:cb:8e:97:64:95:39:de:be:49:d2:cb: 7b:c3:66:20:2b:56:e7:81:c2:f6:16:74:02:c5:6b: 29:65:9f:ad:d4:43:ce:fb:52:ab:7a:8f:0f:8e:61: 0d:89:1b:16:47:18:3c:a4:6c:6a:fe:c8:b2:3c:5d: 02:10:ca:82:ae:9f:e5:03:23:3a:aa:f2:72:96:82: 1e:c3:be:95:dc:64:7b:b6:7c:05:da:91:d6:ee:50: 67:1d:58:e5:0e:45:08:a9:cc:5f:77:8b:3a:72:68: e3:45:2f:bb:86:02:e1:e6:76:a4:b2:0e:8d:60:72: 54:87:2c:77:3e:19:ed:6e:2a:0d:09:e6:f9:1d:96: 71:a1:68:c3:a6:72:34:3c:6e:aa:c1:bd:b6:9a:2b: 51:89:32:64:9e:d2:60:98:b4:c6:b9:e4:7d:e2:b7: f8:9f:b6:aa:36:8d:73:8e:46:22:d9:c5:a4:c5:67: 37:d1:5c:be:a5:7e:fc:df:b9:8c:65:cc:05:65:fc: 5e:9f:ec:94:fa:a2:7f:98:6b:51:85:37:b4:8c:f3: 5c:c3:4f:d4:74:c4:b8:62:09:64:f3:6b:54:bc:c0: 0a:a1:35:0d:75:98:2d:32:41:51:b3:7c:24:c4:9f: 07:cc:5e:a5:15:70:4a:e9:ee:9d:fa:3f:34:3a:85: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A2:95:0A:2D:F7:20:03:91:50:1F:D4:64:E9:42:25:DB:51:BB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.crl X509v3 Authority Key Identifier: keyid:09:C0:4C:C5:8B:0F:EA:FE:B4:5C:B4:FB:86:5B:28:9F:51:AA:88:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/96c1c86f-d64a-48ec-9cf1-99e5e2a55ed4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ce:43:42:79:67:ad:c0:3b:a0:55:65:1a:e1:d2:8a:ae:06: 46:33:36:78:51:3d:19:b9:7f:ec:54:b5:5a:20:87:56:25:4a: 1c:68:75:93:15:6e:b1:dc:17:20:96:db:b7:61:85:9a:42:b9: 35:6d:75:a0:12:d7:3c:e7:0b:7c:e5:c9:d9:2e:ab:25:ab:04: c1:a3:33:d2:22:fd:22:f1:75:cc:e9:0b:d8:d2:c5:07:38:1c: 74:91:f3:bc:ed:a6:4a:2a:c9:a7:a3:bc:3d:d4:e6:ba:31:02: 48:cf:c0:85:ae:11:a4:c8:fc:5d:c7:e5:57:9b:a0:46:86:64: 8a:82:e5:44:c6:76:2c:1b:ed:f9:66:dc:dc:f7:63:30:0b:70: 34:5a:2e:a2:bb:fe:98:08:77:6a:d8:00:20:af:c3:8a:2e:03: 06:4e:28:11:e3:6a:38:53:2d:cb:b4:5e:49:c4:16:96:40:28: 45:28:37:b9:a7:18:28:f9:6c:aa:39:27:cc:41:38:fa:56:5a: b8:d2:bf:28:51:d3:93:38:4d:83:6d:79:23:47:2b:41:50:af: 3c:eb:a4:e1:d7:97:c5:e1:20:11:3a:58:2c:f8:43:86:9e:a1: 09:11:c5:20:92:6c:2a:e0:1f:ef:64:25:f0:cb:b2:55:96:82: 66:01:59:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr2wdgF56xe8xj6joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZjMWM4NmYtZDY0YS00OGVjLTljZjEtOTllNWUyYTU1 ZWQ0MB4XDTI1MDgyNDE1MDAwOFoXDTI1MDgyNzE1MDAwMFowLzEtMCsGA1UEAxMk Y2M1ZGRkMDItNzU5Yy00NGIyLWFlZGMtOTNjNjVlNDA5MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlFHy46XZJU53r5J0st7w2YgK1bngcL2FnQC xWspZZ+t1EPO+1Kreo8PjmENiRsWRxg8pGxq/siyPF0CEMqCrp/lAyM6qvJyloIe w76V3GR7tnwF2pHW7lBnHVjlDkUIqcxfd4s6cmjjRS+7hgLh5naksg6NYHJUhyx3 PhntbioNCeb5HZZxoWjDpnI0PG6qwb22mitRiTJkntJgmLTGueR94rf4n7aqNo1z jkYi2cWkxWc30Vy+pX7837mMZcwFZfxen+yU+qJ/mGtRhTe0jPNcw0/UdMS4Yglk 82tUvMAKoTUNdZgtMkFRs3wkxJ8HzF6lFXBK6e6d+j80OoUd3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKyilQot9yADkVAf1GTpQiXbUbupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85NmMx Yzg2Zi1kNjRhLTQ4ZWMtOWNmMS05OWU1ZTJhNTVlZDQvOTZjMWM4NmYtZDY0YS00 OGVjLTljZjEtOTllNWUyYTU1ZWQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTZjMWM4NmYtZDY0YS00OGVjLTlj ZjEtOTllNWUyYTU1ZWQ0Lzk2YzFjODZmLWQ2NGEtNDhlYy05Y2YxLTk5ZTVlMmE1 NWVkNC5jcmwwHwYDVR0jBBgwFoAUCcBMxYsP6v60XLT7hlson1GqiCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85NmMxYzg2Zi1kNjRhLTQ4ZWMtOWNmMS05OWU1 ZTJhNTVlZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABzkNCeWetwDugVWUa4dKK rgZGMzZ4UT0ZuX/sVLVaIIdWJUocaHWTFW6x3Bcgltu3YYWaQrk1bXWgEtc85wt8 5cnZLqslqwTBozPSIv0i8XXM6QvY0sUHOBx0kfO87aZKKsmno7w91Oa6MQJIz8CF rhGkyPxdx+VXm6BGhmSKguVExnYsG+35Ztzc92MwC3A0Wi6iu/6YCHdq2AAgr8OK LgMGTigR42o4Uy3LtF5JxBaWQChFKDe5pxgo+WyqOSfMQTj6Vlq40r8oUdOTOE2D bXkjRytBUK8866Th15fF4SAROlgs+EOGnqEJEcUgkmwq4B/vZCXwy7JVloJmAVnp -----END CERTIFICATE-----Generated at Mon Aug 25 09:37:06 2025 by rpki-client