$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: LvhdgjcM0WEc6UFbnH+xuJT2IOlStsSXsPqsLj2jZBk= Subject key identifier: 23:1B:BE:CC:11:1F:3D:6F:BC:51:4E:DC:A0:D0:20:7F:FC:44:6F:DA Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584AF6A4048C5E3776D9489BCB20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A067C Signing time: Sun 24 Aug 2025 14:00:03 +0000 Manifest this update: Sun 24 Aug 2025 14:00:03 +0000 Manifest next update: Tue 26 Aug 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: Kd/suIS4o6QtT1Sfl7AuRHI7ak0qI8RXySR8pSginbY=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: jTSjZaH8d1rB33Wt1GoefPHHDnR3/F+iDuTlgI52Apw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:a4:04:8c:5e:37:76:d9:48:9b:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Aug 24 14:00:03 2025 GMT Not After : Aug 26 14:00:00 2025 GMT Subject: CN=53f0e146-b5f0-41b9-b125-cb1e87330d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:95:a9:ab:e1:04:01:23:c4:fb:ab:1b:7e: 58:6f:80:4e:cc:3e:d4:f3:a9:cb:a4:c4:af:74:f1: 89:59:ab:4f:62:7e:dd:9c:37:5b:ea:50:c2:f5:94: da:b6:54:bc:bf:26:91:26:28:ca:16:58:8e:27:d7: 58:07:4b:98:0f:f0:41:48:5a:14:7f:83:c9:8e:a1: 05:11:2c:16:71:24:55:78:c8:18:76:4d:5d:a9:44: 17:b9:12:52:b5:06:e3:01:44:99:db:6b:41:c5:29: 83:1a:9d:9b:dd:df:04:ee:fb:37:7a:85:4e:83:81: 7d:d3:d7:a1:9a:01:b4:f8:5d:68:d8:11:bb:49:05: 51:6f:dd:d6:4e:a5:e5:08:31:63:96:fe:f6:7d:dc: aa:d1:d9:41:95:fe:14:06:ee:e7:6c:20:fc:75:99: 61:e1:61:1e:71:62:3f:4b:55:d7:f5:d0:0d:4d:68: 64:f8:78:60:2a:c2:e3:b5:7c:21:22:d5:6a:fb:b4: d4:84:e6:ae:c2:22:dd:bb:4b:3e:67:de:2c:c9:52: 4e:07:8b:f5:2f:d0:fb:bd:0f:a5:de:d5:9e:79:51: de:78:9e:16:51:cb:2c:eb:9f:bc:ec:52:90:00:56: a7:d2:de:02:ae:ca:d5:56:e5:88:46:b0:9b:b7:5c: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:BE:CC:11:1F:3D:6F:BC:51:4E:DC:A0:D0:20:7F:FC:44:6F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cd:51:36:b6:c2:22:f2:19:d2:49:2c:f5:41:40:23:48:22: 9a:8d:a2:fb:4a:f9:fa:06:4d:4c:2d:a7:3a:78:0b:72:4d:16: ac:d7:c0:20:e1:8f:13:fb:c2:7d:3a:aa:e2:04:ff:d2:bd:c6: a9:b2:3f:20:4e:95:99:c2:a4:e2:05:42:ef:61:f4:8b:a3:94: 49:79:a9:43:3b:62:67:14:98:98:cb:e7:52:a6:f9:67:93:33: 7c:5b:3e:8e:1c:05:84:60:10:86:d6:3e:31:d3:e5:51:ce:ba: 39:c3:fe:91:5a:b8:3b:d6:02:47:b9:ea:47:ea:18:be:2b:80: c3:a8:a4:a2:2d:8e:7b:fb:c3:a7:84:3f:39:fb:15:15:b5:05: 68:01:6d:47:09:92:95:54:47:ac:be:8e:f7:ce:84:cd:3a:ec: 48:29:a0:95:01:da:68:66:46:5c:a0:d1:dc:82:24:85:e6:4f: 2c:76:f8:9b:c2:4c:81:33:ec:58:28:cf:9c:df:76:41:4e:4b: ce:04:9f:84:99:42:dd:32:78:d2:c3:80:dd:eb:d1:11:e5:b2: b8:79:6f:17:e5:1e:5c:9e:fb:59:f5:de:d1:0c:f7:9f:38:6e: fd:4d:30:a4:fd:7e:bd:9e:8e:e4:b4:3d:c5:3e:6d:c5:e8:ca: e2:b2:d7:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr2pASMXjd22UibyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MDgyNDE0MDAwM1oXDTI1MDgyNjE0MDAwMFowLzEtMCsGA1UEAxMk NTNmMGUxNDYtYjVmMC00MWI5LWIxMjUtY2IxZTg3MzMwZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f+VqavhBAEjxPurG35Yb4BOzD7U86nLpMSv dPGJWatPYn7dnDdb6lDC9ZTatlS8vyaRJijKFliOJ9dYB0uYD/BBSFoUf4PJjqEF ESwWcSRVeMgYdk1dqUQXuRJStQbjAUSZ22tBxSmDGp2b3d8E7vs3eoVOg4F909eh mgG0+F1o2BG7SQVRb93WTqXlCDFjlv72fdyq0dlBlf4UBu7nbCD8dZlh4WEecWI/ S1XX9dANTWhk+HhgKsLjtXwhItVq+7TUhOauwiLdu0s+Z94syVJOB4v1L9D7vQ+l 3tWeeVHeeJ4WUcss65+87FKQAFan0t4CrsrVVuWIRrCbt1yiYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCMbvswRHz1vvFFO3KDQIH/8RG/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXzVE2tsIi8hnSSSz1QUAj SCKajaL7Svn6Bk1MLac6eAtyTRas18Ag4Y8T+8J9OqriBP/Svcapsj8gTpWZwqTi BULvYfSLo5RJealDO2JnFJiYy+dSpvlnkzN8Wz6OHAWEYBCG1j4x0+VRzro5w/6R Wrg71gJHuepH6hi+K4DDqKSiLY57+8OnhD85+xUVtQVoAW1HCZKVVEesvo73zoTN OuxIKaCVAdpoZkZcoNHcgiSF5k8sdvibwkyBM+xYKM+c33ZBTkvOBJ+EmULdMnjS w4Dd69ER5bK4eW8X5R5cnvtZ9d7RDPefOG79TTCk/X69no7ktD3FPm3F6Mristc4 -----END CERTIFICATE-----Generated at Mon Aug 25 09:30:09 2025 by rpki-client