$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft File: de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft (raw, json) Hash identifier: QA0Wk2MpK5N/M412rCDV2J5Aq456ET8h6xCyrplmDEQ= Subject key identifier: 20:FE:79:73:C9:2B:96:94:02:B7:8B:1F:E1:E3:84:07:FF:A4:A3:0D Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584AE925C34F64C29AEF45ABFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft Manifest number: 010D0C9F432858418B0E1501B4C6C959891455B2 Signing time: Tue 19 Aug 2025 18:00:08 +0000 Manifest this update: Tue 19 Aug 2025 18:00:08 +0000 Manifest next update: Thu 21 Aug 2025 18:00:00 +0000 Files and hashes: 1: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (hash: urQr1sOoJGt9jEUqkIUl82wqlfNcGluZTXQYwVzGRXE=) 2: de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl (hash: YOm5UDcin2P4eThSxYbK+PrT8yFKOHFYzFAOjAHgzaA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:25:c3:4f:64:c2:9a:ef:45:ab:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Aug 19 18:00:08 2025 GMT Not After : Aug 21 18:00:00 2025 GMT Subject: CN=025ce925-a8f2-47a4-8aca-d72ab69e0d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:08:78:01:d1:e0:ae:15:bf:a6:f0:c0:91: 91:a3:a5:2b:f0:3b:4c:c3:b0:23:01:56:c6:cb:72: 54:8f:3c:26:09:fc:a3:37:21:1d:2f:9b:8e:d1:09: f8:a8:5e:8c:34:38:75:86:30:ed:90:36:30:5e:0a: 7f:ba:c9:97:3b:c1:32:b2:a6:1d:09:33:14:79:a4: 9f:f0:91:a7:57:f9:fc:ff:4b:c1:e5:52:66:36:79: d8:38:93:89:46:00:2f:c8:a2:a0:67:b3:4c:bd:4e: 3e:60:2f:24:ac:8b:e5:8b:f4:6c:57:f9:79:5e:34: 64:2b:57:67:7c:bf:62:1d:04:07:22:7e:e9:6d:51: b9:db:23:0d:1a:83:1b:76:62:cb:b6:73:d2:1c:d7: b8:6a:ee:93:8c:a0:6a:61:83:17:29:22:02:ad:6f: a4:87:a0:80:69:ea:e2:ac:29:96:8a:c6:73:a2:a0: c6:e5:64:3b:2c:86:20:e9:ae:70:19:b7:5d:25:be: cd:ca:ba:06:77:80:cb:79:d5:35:05:15:f4:d1:2f: 01:17:ac:4f:f3:44:52:d1:30:0b:13:7e:bc:f2:1a: cd:38:9b:b5:e0:0a:66:56:fe:fa:5f:53:2a:85:b6: de:bf:68:74:ff:e3:57:43:e0:c9:ea:e8:8d:f1:33: 97:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:79:73:C9:2B:96:94:02:B7:8B:1F:E1:E3:84:07:FF:A4:A3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a5:a9:69:d6:d2:e6:5a:d3:17:12:03:31:61:fd:62:a3:3f: ce:29:ae:98:7a:04:75:ef:0b:e8:c0:5f:67:05:bc:8a:70:fb: c1:8d:a6:aa:e4:2b:6d:2c:d1:47:33:b2:71:3d:a7:22:ca:63: 2a:f8:e6:e7:4c:08:97:fb:93:51:52:d7:ce:8a:80:92:8e:58: cd:cf:30:61:c5:72:fb:b4:0f:e5:4f:53:db:3c:c9:d6:67:1f: 6e:05:89:88:ce:7f:bf:61:2b:7f:89:1f:2d:5e:c7:d2:62:43: 15:a1:86:08:37:0e:2a:6f:e1:ee:98:0a:e5:e9:53:31:0d:a7: f6:8d:1d:84:6c:b7:48:8f:9a:fd:0e:61:5d:6f:74:e1:f7:bb: 94:5d:ce:3e:94:59:b2:cb:6a:a5:bb:e3:89:7f:0d:ee:35:2e: f2:94:a1:24:83:5f:ee:44:ae:e3:3f:c7:a6:75:4e:da:67:e2: a4:93:8b:a2:29:ff:91:f7:e5:28:8b:bd:c4:78:58:67:7e:7b: b7:73:f9:88:ff:cd:a2:28:fe:58:7c:97:c0:3f:0d:38:94:eb: 92:f6:ea:56:25:c1:00:67:63:29:ad:1d:c5:52:f1:e1:ac:9b: c0:0c:18:0d:49:13:80:ad:ba:ba:9e:e2:7d:2f:92:a4:d0:2a: 11:3c:22:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpJcNPZMKa70Wr/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MDgxOTE4MDAwOFoXDTI1MDgyMTE4MDAwMFowLzEtMCsGA1UEAxMk MDI1Y2U5MjUtYThmMi00N2E0LThhY2EtZDcyYWI2OWUwZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyQIeAHR4K4Vv6bwwJGRo6Ur8DtMw7AjAVbG y3JUjzwmCfyjNyEdL5uO0Qn4qF6MNDh1hjDtkDYwXgp/usmXO8EysqYdCTMUeaSf 8JGnV/n8/0vB5VJmNnnYOJOJRgAvyKKgZ7NMvU4+YC8krIvli/RsV/l5XjRkK1dn fL9iHQQHIn7pbVG52yMNGoMbdmLLtnPSHNe4au6TjKBqYYMXKSICrW+kh6CAaeri rCmWisZzoqDG5WQ7LIYg6a5wGbddJb7NyroGd4DLedU1BRX00S8BF6xP80RS0TAL E3688hrNOJu14ApmVv76X1Mqhbbev2h0/+NXQ+DJ6uiN8TOXfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCD+eXPJK5aUAreLH+HjhAf/pKMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvZGU4ZTYwYWYtODU3Ny00 YmI3LThlM2UtMjhlNGVjODhiNzI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwpalp1tLmWtMXEgMxYf1i oz/OKa6YegR17wvowF9nBbyKcPvBjaaq5CttLNFHM7JxPaciymMq+ObnTAiX+5NR UtfOioCSjljNzzBhxXL7tA/lT1PbPMnWZx9uBYmIzn+/YSt/iR8tXsfSYkMVoYYI Nw4qb+HumArl6VMxDaf2jR2EbLdIj5r9DmFdb3Th97uUXc4+lFmyy2qlu+OJfw3u NS7ylKEkg1/uRK7jP8emdU7aZ+Kkk4uiKf+R9+Uoi73EeFhnfnu3c/mI/82iKP5Y fJfAPw04lOuS9upWJcEAZ2MprR3FUvHhrJvADBgNSROArbq6nuJ9L5Kk0CoRPCJR -----END CERTIFICATE-----Generated at Wed Aug 20 16:11:16 2025 by rpki-client