$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: VKtZdLu17CUkTB7ZY1hCSvqF6sWoXoS48ehPOZ1ario= Subject key identifier: 44:F9:38:B7:1C:39:FF:8B:80:4C:01:F0:23:84:22:8B:E7:D0:D1:20 Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F4328584AE8CC75A9861AB3D2CCFB8300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF18A1 Signing time: Tue 19 Aug 2025 15:00:08 +0000 Manifest this update: Tue 19 Aug 2025 15:00:08 +0000 Manifest next update: Fri 22 Aug 2025 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: w1S6LwFv76IVhPg0K6VRC1b+x/s20J9Y4sxXPQt1e/8=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: 8+VCF9u70Qi+JpLD4YlTGCG/O/wmpqoxZGriT9z4xzM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:cc:75:a9:86:1a:b3:d2:cc:fb:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: Aug 19 15:00:08 2025 GMT Not After : Aug 22 15:00:00 2025 GMT Subject: CN=c75c3049-2a6a-4e9a-b5ec-ed4355b6cb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:1d:9c:a8:70:ff:77:ac:84:24:20:be:dc: 66:02:ed:be:e9:f4:69:26:e4:c3:57:92:e1:72:dd: da:89:7c:59:7f:d9:2e:c2:eb:e2:85:fe:3f:3d:49: a4:ca:da:43:9a:7c:5d:25:5b:ae:e4:5f:05:6a:1c: dd:27:e5:1d:6c:cd:b0:78:8d:4a:03:d8:47:39:d4: c1:e6:5f:e7:aa:ef:2e:33:ac:26:d7:52:25:00:84: 35:7c:98:c6:f1:b9:31:b8:e4:8d:53:b3:c0:56:07: 11:e4:6d:b7:58:15:96:8d:68:f4:73:51:e0:32:50: 4f:e8:cb:7a:2e:db:4f:ce:97:9e:c4:92:69:58:60: 31:65:43:ee:6d:ca:bc:61:67:75:af:03:85:b3:9c: f2:3f:95:68:4c:f3:41:17:36:d2:ee:ab:b4:b1:26: b7:30:b1:3d:f4:19:49:b2:4d:2a:bf:45:e1:48:6a: 61:5e:aa:6a:9d:9b:a2:18:47:b8:39:7a:3d:34:1c: 3e:d4:9e:05:d3:0a:0d:91:09:02:08:8b:f0:eb:0c: f6:ad:87:7f:7a:3b:18:5c:75:47:e6:e6:ad:d3:0c: 98:38:2f:2b:75:59:2e:8e:af:91:cb:2b:95:32:ad: c5:91:79:2d:96:90:35:fd:34:9c:68:17:c8:d4:e4: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F9:38:B7:1C:39:FF:8B:80:4C:01:F0:23:84:22:8B:E7:D0:D1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7c:85:74:09:87:f7:66:c2:da:8b:0d:a6:5a:e1:5b:b3:ab: 74:8b:2e:4c:25:b6:98:a9:5c:62:27:d6:5f:05:d3:18:77:97: d5:26:d6:b6:43:18:e9:bb:0d:cc:33:32:f6:e5:49:eb:d8:a9: 04:c1:13:c6:31:2d:c8:f3:72:62:da:82:1e:f1:ed:e1:48:d3: cb:8c:ea:86:53:14:b0:d9:34:73:82:56:e4:17:4b:fb:ef:71: 3a:b3:a6:c8:d7:a7:6a:06:90:8f:cf:76:02:2a:06:e8:48:65: 47:6f:fa:f5:cd:5f:10:8a:5a:5f:55:a9:eb:df:9d:f5:fb:4d: 66:5d:97:c9:07:5c:f8:30:63:b1:0a:db:2a:d6:be:07:ee:1a: 52:6b:6e:de:b5:77:1e:c8:7c:b6:cd:3e:3d:a1:c9:d5:cc:78: ed:38:86:f3:07:74:37:de:b1:ba:a4:ed:00:cf:8c:6e:1d:58: 71:ef:33:3b:2c:88:00:dc:db:b1:97:07:08:ab:fa:80:7c:cc: ff:3b:ad:14:ce:df:d7:11:b7:b0:2d:a2:e3:bd:5d:ee:2d:21: c5:8e:35:fd:09:4c:00:6b:e5:ef:cf:a2:d7:b1:6a:f0:e6:fa: 2e:a8:3f:e0:be:ca:0b:d5:a5:f5:ff:13:d4:29:26:a4:bd:5b: 38:96:71:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErozHWphhqz0sz7gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI1MDgxOTE1MDAwOFoXDTI1MDgyMjE1MDAwMFowLzEtMCsGA1UEAxMk Yzc1YzMwNDktMmE2YS00ZTlhLWI1ZWMtZWQ0MzU1YjZjYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzwdnKhw/3eshCQgvtxmAu2+6fRpJuTDV5Lh ct3aiXxZf9kuwuvihf4/PUmkytpDmnxdJVuu5F8FahzdJ+UdbM2weI1KA9hHOdTB 5l/nqu8uM6wm11IlAIQ1fJjG8bkxuOSNU7PAVgcR5G23WBWWjWj0c1HgMlBP6Mt6 LttPzpeexJJpWGAxZUPubcq8YWd1rwOFs5zyP5VoTPNBFzbS7qu0sSa3MLE99BlJ sk0qv0XhSGphXqpqnZuiGEe4OXo9NBw+1J4F0woNkQkCCIvw6wz2rYd/ejsYXHVH 5uat0wyYOC8rdVkujq+RyyuVMq3FkXktlpA1/TScaBfI1ORK/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFET5OLccOf+LgEwB8COEIovn0NEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRfIV0CYf3ZsLaiw2mWuFb s6t0iy5MJbaYqVxiJ9ZfBdMYd5fVJta2Qxjpuw3MMzL25Unr2KkEwRPGMS3I83Ji 2oIe8e3hSNPLjOqGUxSw2TRzglbkF0v773E6s6bI16dqBpCPz3YCKgboSGVHb/r1 zV8QilpfVanr3531+01mXZfJB1z4MGOxCtsq1r4H7hpSa27etXceyHy2zT49ocnV zHjtOIbzB3Q33rG6pO0Az4xuHVhx7zM7LIgA3NuxlwcIq/qAfMz/O60Uzt/XEbew LaLjvV3uLSHFjjX9CUwAa+Xvz6LXsWrw5vouqD/gvsoL1aX1/xPUKSakvVs4lnHu -----END CERTIFICATE-----Generated at Wed Aug 20 16:19:56 2025 by rpki-client