$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft File: a5227ba9-e279-4048-a93b-e62de3502f68.mft (raw, json) Hash identifier: XS7EyXZ/vquFVAv3z6+qHEy0qstQL7XkiaJm5wZ8Ng0= Subject key identifier: 59:63:AB:7C:5D:07:EC:CE:9B:C1:0B:BB:AC:27:24:57:50:97:6B:67 Authority key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 Certificate issuer: /CN=a5227ba9-e279-4048-a93b-e62de3502f68 Certificate serial: 010D0C9F4328584AF6FD6A8C66EE18A97CBB1A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft Manifest number: 010D0C9F432858469476DC8B9CBC71965EA2B29C Signing time: Sun 24 Aug 2025 17:00:08 +0000 Manifest this update: Sun 24 Aug 2025 17:00:08 +0000 Manifest next update: Wed 27 Aug 2025 17:00:00 +0000 Files and hashes: 1: 7aa03dbb-c767-31ad-805f-79f186089aa4.roa (hash: aY4JCdNma6gGMDIY1nZs2OWvTWzPzqU79eJ3q4Q+gwI=) 2: a5227ba9-e279-4048-a93b-e62de3502f68.crl (hash: NJNIVhBMhwieDKIZIgliPCBYC+G6JwckGTyudj/AbYw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:fd:6a:8c:66:ee:18:a9:7c:bb:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5227ba9-e279-4048-a93b-e62de3502f68 Validity Not Before: Aug 24 17:00:08 2025 GMT Not After : Aug 27 17:00:00 2025 GMT Subject: CN=d9e1bec7-96c1-4924-a3a7-eb7e2e5e9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:72:27:34:ef:bc:63:55:fe:3a:e0:35:69: 35:09:88:1a:cc:b2:9f:f3:4e:58:18:67:b9:41:d9: 97:a2:27:26:22:62:82:56:8a:72:95:7d:63:2c:5b: 67:1e:99:f4:0f:c8:c1:bf:9a:81:c0:33:f3:f5:4c: e1:5d:f3:26:8a:29:6b:37:e9:26:0c:4c:05:bb:e5: 4e:78:f5:b5:00:b1:a5:08:7b:91:45:3f:d3:c2:21: 26:ce:5f:64:a6:5f:bd:8d:11:07:08:79:37:82:85: 19:ba:b9:ed:df:22:f9:45:07:2d:a4:23:df:23:aa: 22:8d:51:2e:68:7e:c2:99:1c:fb:81:55:8f:8f:83: a1:de:17:06:fc:0d:fb:43:16:1d:6f:3c:62:fa:3d: 7a:c5:7a:a5:8e:c4:b9:bb:9f:50:a0:98:e7:e3:69: 32:44:8a:3b:d7:fa:d2:1f:92:d2:05:24:bc:f0:d0: 25:25:f9:30:11:05:e6:4a:32:74:91:e2:14:2f:b1: fb:08:ec:3d:1c:20:60:19:27:19:da:f9:39:f3:60: cc:0f:7b:8e:b1:d2:4d:e0:cc:a1:71:7d:fc:c9:96: aa:f9:42:70:c3:02:83:17:2a:0c:ba:df:a6:43:b9: 5d:2b:3d:51:2b:ce:57:bc:ea:17:74:f3:c7:2a:24: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:AB:7C:5D:07:EC:CE:9B:C1:0B:BB:AC:27:24:57:50:97:6B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl X509v3 Authority Key Identifier: keyid:44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:52:ce:8e:89:05:d3:a8:bf:f8:c5:42:ce:33:44:ab:f9:2d: 79:86:00:33:05:c2:c6:bd:d0:87:d2:6d:d6:f7:6c:d7:2d:32: 73:34:db:9e:6b:c3:01:48:f5:bb:c8:0f:d1:76:ba:66:9c:b2: 10:2b:10:40:e8:3a:97:13:d9:79:99:b2:e9:94:3d:27:29:bf: fa:57:14:c9:0a:fc:45:08:8a:b0:b5:ef:3d:43:eb:af:69:58: 4d:df:6d:52:9a:32:11:50:63:4d:91:ee:47:e4:1f:a1:e3:a6: 47:3b:25:9b:5d:ba:5f:87:4a:2d:3f:96:56:f8:97:cd:de:04: 18:c4:6f:db:4b:20:8e:91:9e:ac:da:bc:59:3e:f3:48:ed:2c: d0:03:c4:66:9e:72:60:7b:10:ee:20:c7:a0:5a:fd:6a:4d:85: 27:98:ef:94:e0:1b:d3:08:bb:7c:24:0d:56:1a:af:b6:a0:03: af:e2:af:4f:9c:55:70:20:e7:c2:0f:95:51:49:2f:5a:89:23: 26:46:7c:d8:0a:2e:63:0f:e5:62:64:f0:61:49:b5:b1:0e:9d: 4f:71:52:64:44:59:4f:0b:32:6a:6c:22:6f:8d:77:17:bd:a8: ae:cf:da:b2:42:5f:13:36:7c:b1:3a:2a:8c:8f:f7:b5:81:d2: 63:51:a5:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr2/WqMZu4YqXy7GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMjdiYTktZTI3OS00MDQ4LWE5M2ItZTYyZGUzNTAy ZjY4MB4XDTI1MDgyNDE3MDAwOFoXDTI1MDgyNzE3MDAwMFowLzEtMCsGA1UEAxMk ZDllMWJlYzctOTZjMS00OTI0LWEzYTctZWI3ZTJlNWU5MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQNyJzTvvGNV/jrgNWk1CYgazLKf805YGGe5 QdmXoicmImKCVopylX1jLFtnHpn0D8jBv5qBwDPz9UzhXfMmiilrN+kmDEwFu+VO ePW1ALGlCHuRRT/TwiEmzl9kpl+9jREHCHk3goUZurnt3yL5RQctpCPfI6oijVEu aH7CmRz7gVWPj4Oh3hcG/A37QxYdbzxi+j16xXqljsS5u59QoJjn42kyRIo71/rS H5LSBSS88NAlJfkwEQXmSjJ0keIUL7H7COw9HCBgGScZ2vk582DMD3uOsdJN4Myh cX38yZaq+UJwwwKDFyoMut+mQ7ldKz1RK85XvOoXdPPHKiT03wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFljq3xdB+zOm8ELu6wnJFdQl2tnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNTIy N2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJkZTM1MDJmNjgvYTUyMjdiYTktZTI3OS00 MDQ4LWE5M2ItZTYyZGUzNTAyZjY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTUyMjdiYTktZTI3OS00MDQ4LWE5 M2ItZTYyZGUzNTAyZjY4L2E1MjI3YmE5LWUyNzktNDA0OC1hOTNiLWU2MmRlMzUw MmY2OC5jcmwwHwYDVR0jBBgwFoAURALyzjziW8X5F5zrSltLPDo+lvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNTIyN2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJk ZTM1MDJmNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMUs6OiQXTqL/4xULOM0Sr +S15hgAzBcLGvdCH0m3W92zXLTJzNNuea8MBSPW7yA/RdrpmnLIQKxBA6DqXE9l5 mbLplD0nKb/6VxTJCvxFCIqwte89Q+uvaVhN321SmjIRUGNNke5H5B+h46ZHOyWb Xbpfh0otP5ZW+JfN3gQYxG/bSyCOkZ6s2rxZPvNI7SzQA8RmnnJgexDuIMegWv1q TYUnmO+U4BvTCLt8JA1WGq+2oAOv4q9PnFVwIOfCD5VRSS9aiSMmRnzYCi5jD+Vi ZPBhSbWxDp1PcVJkRFlPCzJqbCJvjXcXvaiuz9qyQl8TNnyxOiqMj/e1gdJjUaV0 -----END CERTIFICATE-----Generated at Mon Aug 25 08:08:57 2025 by rpki-client