$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: biJjDvv0PTRv4Tf0c5HsBpybF0MK0Cb7JdL+NUzfNx4= Subject key identifier: 51:7A:35:35:7B:8C:CD:5D:64:2A:ED:0C:34:95:58:91:06:93:7F:2E Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584B18B92057A4D0535450A00E68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7689 Signing time: Fri 05 Sep 2025 19:00:03 +0000 Manifest this update: Fri 05 Sep 2025 19:00:03 +0000 Manifest next update: Mon 08 Sep 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: 0V8IAhx9fiHbI7iwBszqoEnJeqQqggsTgE5AdGFS2Pg=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: aTIcESR1nXAtgPL3y5laoEzXRkiG8gsByFhmRBc7ZVQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:b9:20:57:a4:d0:53:54:50:a0:0e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Sep 5 19:00:03 2025 GMT Not After : Sep 8 19:00:00 2025 GMT Subject: CN=e5bb32aa-962a-43b2-929f-aa66f95c1505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:1e:78:b2:e5:30:7f:90:38:08:0a:51:1c: ef:fb:e4:2f:46:86:dc:00:14:f9:56:93:55:44:6c: b8:63:7c:ec:0e:de:d8:43:e0:97:5d:ed:38:6b:bf: 9f:40:ec:51:9c:e6:77:9a:d2:bc:cb:57:8f:99:78: 06:87:67:2a:0d:97:f9:8d:ad:ee:7c:fa:57:c1:0c: 46:24:cb:98:0c:b3:d8:55:89:c0:ba:a0:b3:df:03: bb:ff:b9:89:b6:18:7b:b4:72:30:45:ab:6b:6b:b1: 31:bc:50:f5:14:79:6f:3a:cb:8e:9d:3f:36:3a:97: 35:e0:a7:cb:ec:56:a1:af:e0:16:4c:8d:9f:31:1e: d9:de:a2:eb:42:16:08:52:21:39:88:0d:5a:58:62: f4:2e:f5:91:2a:5a:0f:17:c4:f1:f5:49:f4:71:a2: 2c:22:28:e1:13:0c:bd:a3:47:d2:d7:3a:a1:3c:a9: 09:fe:40:82:6a:2b:ee:98:a3:2c:61:92:75:a1:63: f2:65:d2:28:38:13:66:ba:bb:e7:26:c9:70:1a:94: ca:5b:be:c1:56:75:75:30:e3:65:c2:91:68:3f:3f: 60:30:05:6e:08:8d:15:d9:72:e5:dc:f9:ef:9a:e0: 87:d2:2c:f0:32:24:0c:0f:d5:8f:81:e8:49:06:9e: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:35:35:7B:8C:CD:5D:64:2A:ED:0C:34:95:58:91:06:93:7F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:90:e5:47:cc:63:4b:a6:35:eb:52:5b:27:11:cd:da:3c:85: 4f:cb:c6:14:f3:a2:fb:df:39:20:87:2b:bd:78:fa:64:3e:cc: eb:b0:f3:b8:9d:56:b9:d1:1e:9b:20:c5:18:c3:4c:fb:21:4f: da:41:14:22:0f:ec:8e:03:be:89:d6:0d:f1:10:a6:85:57:26: 8d:d7:4f:24:a4:a8:f9:44:49:54:6d:1b:52:45:da:9b:dc:6f: 91:c5:36:b0:28:9d:f3:c6:1b:03:ab:32:ef:d6:93:c8:78:f3: c8:a8:fb:45:17:7e:67:52:63:79:55:ef:36:03:6d:f8:ac:d5: 8a:02:d2:51:b2:46:25:11:fd:c3:8f:a2:9b:b3:e0:c1:e3:eb: 35:a2:80:48:a3:5a:5e:c2:2c:bd:37:14:3e:4d:13:31:b8:ee: 79:24:45:df:71:2b:00:36:1d:53:d3:58:05:ce:14:1d:3e:e2: 09:87:87:a6:a8:7b:9a:09:8c:49:82:1e:18:ba:c7:e7:8d:e8: 8d:0f:e8:90:7e:2d:78:ac:dd:98:87:f0:0a:ca:e3:3a:62:ee: a7:3b:1b:fb:72:8f:37:10:95:05:94:96:1f:c6:9e:4c:04:87: d0:be:54:f4:95:86:1a:cc:e7:cd:42:7e:0c:79:5b:53:64:7d: de:32:9d:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsYuSBXpNBTVFCgDmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MDkwNTE5MDAwM1oXDTI1MDkwODE5MDAwMFowLzEtMCsGA1UEAxMk ZTViYjMyYWEtOTYyYS00M2IyLTkyOWYtYWE2NmY5NWMxNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlkeeLLlMH+QOAgKURzv++QvRobcABT5VpNV RGy4Y3zsDt7YQ+CXXe04a7+fQOxRnOZ3mtK8y1ePmXgGh2cqDZf5ja3ufPpXwQxG JMuYDLPYVYnAuqCz3wO7/7mJthh7tHIwRatra7ExvFD1FHlvOsuOnT82Opc14KfL 7Fahr+AWTI2fMR7Z3qLrQhYIUiE5iA1aWGL0LvWRKloPF8Tx9Un0caIsIijhEwy9 o0fS1zqhPKkJ/kCCaivumKMsYZJ1oWPyZdIoOBNmurvnJslwGpTKW77BVnV1MONl wpFoPz9gMAVuCI0V2XLl3PnvmuCH0izwMiQMD9WPgehJBp5zPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFF6NTV7jM1dZCrtDDSVWJEGk38uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRkOVHzGNLpjXrUlsnEc3a PIVPy8YU86L73zkghyu9ePpkPszrsPO4nVa50R6bIMUYw0z7IU/aQRQiD+yOA76J 1g3xEKaFVyaN108kpKj5RElUbRtSRdqb3G+RxTawKJ3zxhsDqzLv1pPIePPIqPtF F35nUmN5Ve82A234rNWKAtJRskYlEf3Dj6Kbs+DB4+s1ooBIo1pewiy9NxQ+TRMx uO55JEXfcSsANh1T01gFzhQdPuIJh4emqHuaCYxJgh4YusfnjeiND+iQfi14rN2Y h/AKyuM6Yu6nOxv7co83EJUFlJYfxp5MBIfQvlT0lYYazOfNQn4MeVtTZH3eMp2b -----END CERTIFICATE-----Generated at Sat Sep 6 14:35:21 2025 by rpki-client