$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: +OLLIuj8UDVyjysaBsfYb+e0bRKbwzpn1FUNXBfqjzY= Subject key identifier: D9:99:BE:12:4D:D6:C8:4F:83:9D:92:3B:4C:30:AE:9C:89:CE:30:2B Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584AE99CD3802744B204E93D6540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160805 Signing time: Tue 19 Aug 2025 22:00:03 +0000 Manifest this update: Tue 19 Aug 2025 22:00:03 +0000 Manifest next update: Thu 21 Aug 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: +49fMc43C1VmqnOfvqTFAW8g8cb5gG5nvQAnXAG3/tM=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: RB2552h8F58vpW55Hq0Ov9Ctbm/zeZLBaHMWRdvktpo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:9c:d3:80:27:44:b2:04:e9:3d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Aug 19 22:00:03 2025 GMT Not After : Aug 21 22:00:00 2025 GMT Subject: CN=46405685-5229-49fe-b6c6-bf7c5f89e6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:55:92:f6:3a:a2:5b:84:26:ed:5f:c7:fb: 06:ca:bf:b6:be:86:07:af:34:3c:71:66:09:bb:de: 7c:3c:67:dc:3d:13:76:8b:7a:f3:94:07:99:cb:ab: dc:bf:68:dc:15:a5:d6:a3:e7:65:e3:b8:0c:ca:51: d5:ea:99:86:32:13:6e:56:83:e6:ba:73:eb:e4:8e: e8:8b:6c:c2:7a:9b:3e:30:9d:ea:12:57:4d:9b:9b: 41:67:de:5b:e5:fc:b4:f0:eb:7b:88:dc:39:ed:70: 96:cd:81:63:16:6f:d3:50:94:6a:5d:f1:a4:cc:f1: bf:82:05:f1:e0:4d:32:c7:8d:a5:3f:5b:66:f4:8d: 5f:5e:e6:26:f8:dc:76:af:b8:ed:4a:c7:d9:c8:f0: 3b:bc:e0:12:c9:e5:ec:13:c8:8a:a7:f1:b5:bf:a9: 0e:be:f7:3a:da:3c:c5:6f:af:92:cb:cf:53:f4:9f: 8e:6f:ef:f0:d1:af:80:4a:4f:3f:f9:d0:c4:c7:ba: ba:04:a5:48:69:fd:1d:87:01:0e:d2:d6:70:98:4b: 8d:df:21:b1:52:59:83:35:20:85:7e:97:d9:d3:0a: 8c:10:0a:c3:76:0c:f2:82:38:a5:61:6c:d5:f6:21: 89:15:7c:0e:83:a8:6f:95:8e:fa:62:b9:d5:4a:c1: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:BE:12:4D:D6:C8:4F:83:9D:92:3B:4C:30:AE:9C:89:CE:30:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f2:4f:d3:a5:dc:bb:84:61:00:e2:fd:3d:de:77:e2:fc:54: 7d:4a:fd:8d:21:b1:03:82:b5:c6:66:88:8e:64:bc:9e:9e:4e: 66:44:37:57:4e:d1:4a:9a:0f:c8:de:f9:70:32:db:11:bc:34: a0:57:e8:a9:17:9a:d6:a6:f4:fc:a5:81:d4:23:86:58:f3:55: ea:7b:7a:4b:06:0d:0e:11:7d:bb:10:58:37:59:60:a4:ac:c9: c4:fe:8e:d3:04:8a:3a:f8:c0:3f:53:a1:47:bb:65:8d:4b:dc: fb:c4:61:06:71:4e:0b:eb:3b:d5:1a:31:64:c4:05:74:99:58: d6:1b:aa:8b:ac:a8:37:d7:b6:48:19:3a:68:e0:7e:e6:c9:0f: 0f:de:75:f6:25:80:85:5f:72:78:1a:36:a9:3c:7e:11:9d:6b: 34:4f:e8:48:9a:8e:13:47:ef:a4:18:ee:10:53:b3:98:1e:b5: f2:a5:97:a9:d4:08:c2:f3:7f:fd:2e:89:04:3f:4f:52:b6:32: 4a:46:b2:1d:88:25:93:b3:bb:ff:86:a1:38:a5:f9:5e:26:ee: 50:7d:19:cd:47:a3:48:56:71:53:ca:ad:c7:59:1e:f5:2d:e9: a6:fa:55:34:e6:7c:07:c3:7c:37:a8:87:62:c2:96:ee:02:e8: e4:5a:55:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpnNOAJ0SyBOk9ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MDgxOTIyMDAwM1oXDTI1MDgyMTIyMDAwMFowLzEtMCsGA1UEAxMk NDY0MDU2ODUtNTIyOS00OWZlLWI2YzYtYmY3YzVmODllNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVVkvY6oluEJu1fx/sGyr+2voYHrzQ8cWYJ u958PGfcPRN2i3rzlAeZy6vcv2jcFaXWo+dl47gMylHV6pmGMhNuVoPmunPr5I7o i2zCeps+MJ3qEldNm5tBZ95b5fy08Ot7iNw57XCWzYFjFm/TUJRqXfGkzPG/ggXx 4E0yx42lP1tm9I1fXuYm+Nx2r7jtSsfZyPA7vOASyeXsE8iKp/G1v6kOvvc62jzF b6+Sy89T9J+Ob+/w0a+ASk8/+dDEx7q6BKVIaf0dhwEO0tZwmEuN3yGxUlmDNSCF fpfZ0wqMEArDdgzygjilYWzV9iGJFXwOg6hvlY76YrnVSsGb7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNmZvhJN1shPg52SO0wwrpyJzjArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr8k/Tpdy7hGEA4v093nfi /FR9Sv2NIbEDgrXGZoiOZLyenk5mRDdXTtFKmg/I3vlwMtsRvDSgV+ipF5rWpvT8 pYHUI4ZY81Xqe3pLBg0OEX27EFg3WWCkrMnE/o7TBIo6+MA/U6FHu2WNS9z7xGEG cU4L6zvVGjFkxAV0mVjWG6qLrKg317ZIGTpo4H7myQ8P3nX2JYCFX3J4GjapPH4R nWs0T+hImo4TR++kGO4QU7OYHrXypZep1AjC83/9LokEP09StjJKRrIdiCWTs7v/ hqE4pfleJu5QfRnNR6NIVnFTyq3HWR71Lemm+lU05nwHw3w3qIdiwpbuAujkWlWl -----END CERTIFICATE-----Generated at Wed Aug 20 16:19:58 2025 by rpki-client