$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft File: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft (raw, json) Hash identifier: imit18DkscC2GQh7WCt0JD/SYuPM2iXr+PQgxgzq98k= Subject key identifier: 61:EC:A6:3C:F3:82:DF:DD:3B:B2:22:48:AB:EC:70:6E:4C:0A:0F:FA Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584B103B5702A967608B702AAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft Manifest number: 010D0C9F43285844238BC8FE3994304CD933521B Signing time: Tue 02 Sep 2025 18:00:08 +0000 Manifest this update: Tue 02 Sep 2025 18:00:08 +0000 Manifest next update: Thu 04 Sep 2025 18:00:00 +0000 Files and hashes: 1: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (hash: H2u6wQn0J6KXCHUn3xALCz+zjs6QqOYb/B+WvB3CJXg=) 2: 6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa (hash: oVJIKsZ+LeToSZ07luUwcNcyAc8B9tmFZPDzNZUh4z8=) 3: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (hash: OfvCPO8eVfg6VVrXYOk063L7whQrL+yU2CUe1QsigbI=) 4: d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl (hash: 3tv8DKFPH5nIHZiwmoQsBWOnpzxcBmwWkMToPFaVUhw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:3b:57:02:a9:67:60:8b:70:2a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Sep 2 18:00:08 2025 GMT Not After : Sep 4 18:00:00 2025 GMT Subject: CN=774c4e2c-a9e0-4b46-ba17-1604a6d602c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:b3:02:b5:d8:04:0e:7a:86:86:9b:b9:0c: ad:66:b0:eb:c8:fb:eb:74:2f:9c:82:33:5c:72:93: 1e:c9:a7:7f:a2:4c:59:f1:ad:d2:2b:48:4c:93:ea: 4d:d5:24:41:6d:c4:46:35:e4:b9:97:38:a0:84:81: f9:6a:7f:8c:bf:5a:4d:e4:be:60:c2:e0:0e:9f:2b: 5f:8a:86:9b:60:8b:cf:b8:13:58:5e:6f:32:d7:8f: d5:ef:c4:32:11:b9:9a:2f:ce:96:43:85:3f:6c:d5: 69:e1:07:95:2a:42:db:f5:fd:53:26:23:8b:89:7e: 48:0e:54:a4:65:7a:b0:1f:8f:e3:63:54:a8:e0:7c: c7:e8:da:56:2e:b3:c2:7c:8c:99:43:16:05:aa:78: d7:eb:43:ac:fc:4e:62:f4:fc:cf:e3:b7:9f:6e:46: 19:7a:74:e2:f9:58:e8:65:e5:fb:d0:e1:52:7d:31: 30:e2:e5:7c:67:1a:47:3b:98:e0:49:92:bc:43:3c: 50:8f:f5:48:93:bc:83:a4:54:85:ff:dd:19:99:93: 8e:ce:c7:c5:57:41:ec:0b:e5:43:68:6f:5d:4d:04: a0:3e:c1:39:17:46:3b:55:c4:8f:35:66:89:e3:27: e2:1a:69:4d:97:f4:f6:4b:84:94:c1:9b:ef:a4:87: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EC:A6:3C:F3:82:DF:DD:3B:B2:22:48:AB:EC:70:6E:4C:0A:0F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ef:af:e3:b3:43:d6:a8:51:86:70:19:d7:dc:cb:4e:b9:e7: b8:96:6b:93:a2:41:a9:ee:53:f9:bb:21:57:5f:59:96:ec:44: 8a:e4:2a:a3:a0:f8:14:86:51:8c:96:47:4f:10:03:ef:43:1f: af:5b:38:18:b8:e5:96:0d:96:af:73:35:d7:44:3c:60:a3:fa: ec:e9:6d:46:73:e3:76:71:dd:85:6a:4c:5f:5d:d7:a7:4e:66: 60:9e:fd:71:50:9a:cc:51:0e:46:8c:f9:75:56:ac:1b:cd:05: 66:db:67:fa:04:8a:bd:80:28:41:f0:0d:8e:79:1f:1b:5c:67: 69:f6:df:cf:d8:c2:c0:75:ae:c0:2e:db:80:28:8a:ff:d1:df: 99:f2:21:86:9b:72:16:d5:36:7c:ef:0b:95:99:5f:f8:1f:ce: 51:d3:0c:f6:d1:bf:83:6e:61:b5:82:99:21:e6:77:17:3f:07: a6:ef:74:a8:66:17:31:25:9a:c1:44:2b:77:ea:89:c9:c2:77: 5f:76:ed:5b:42:14:fa:91:53:6e:58:60:6d:4c:5a:0b:79:40: 4a:f5:37:ee:93:c2:6f:97:d5:df:ec:09:67:69:97:e5:c8:f9: 0c:0f:ec:6f:83:61:d5:fc:c1:5d:2e:78:e4:c2:ca:c4:47:a9: 6e:2e:cc:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsQO1cCqWdgi3AqrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MDkwMjE4MDAwOFoXDTI1MDkwNDE4MDAwMFowLzEtMCsGA1UEAxMk Nzc0YzRlMmMtYTllMC00YjQ2LWJhMTctMTYwNGE2ZDYwMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOuzArXYBA56hoabuQytZrDryPvrdC+cgjNc cpMeyad/okxZ8a3SK0hMk+pN1SRBbcRGNeS5lzighIH5an+Mv1pN5L5gwuAOnytf ioabYIvPuBNYXm8y14/V78QyEbmaL86WQ4U/bNVp4QeVKkLb9f1TJiOLiX5IDlSk ZXqwH4/jY1So4HzH6NpWLrPCfIyZQxYFqnjX60Os/E5i9PzP47efbkYZenTi+Vjo ZeX70OFSfTEw4uV8ZxpHO5jgSZK8QzxQj/VIk7yDpFSF/90ZmZOOzsfFV0HsC+VD aG9dTQSgPsE5F0Y7VcSPNWaJ4yfiGmlNl/T2S4SUwZvvpIfrbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGHspjzzgt/dO7IiSKvscG5MCg/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvZDhhMGYxNzYtYjRhMi00 ZTMyLThhOTgtNGUxMmUwN2Q4OTk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh76/js0PWqFGGcBnX3MtO uee4lmuTokGp7lP5uyFXX1mW7ESK5CqjoPgUhlGMlkdPEAPvQx+vWzgYuOWWDZav czXXRDxgo/rs6W1Gc+N2cd2FakxfXdenTmZgnv1xUJrMUQ5GjPl1VqwbzQVm22f6 BIq9gChB8A2OeR8bXGdp9t/P2MLAda7ALtuAKIr/0d+Z8iGGm3IW1TZ87wuVmV/4 H85R0wz20b+DbmG1gpkh5ncXPwem73SoZhcxJZrBRCt36onJwndfdu1bQhT6kVNu WGBtTFoLeUBK9Tfuk8Jvl9Xf7AlnaZflyPkMD+xvg2HV/MFdLnjkwsrER6luLszS -----END CERTIFICATE-----Generated at Wed Sep 3 15:20:26 2025 by rpki-client