$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft File: e49f1cd9-302a-4377-9a40-b12c78b69f87.mft (raw, json) Hash identifier: vpARn7Q451NlKmX/kWArq9Ml439sBKXxTCSnbd+W5M0= Subject key identifier: 26:CE:0D:75:BC:BE:B9:43:1C:43:3E:57:A6:BD:E5:A3:42:EC:25:D9 Authority key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Certificate issuer: /CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Certificate serial: 010D0C9F4328584B3C8CEB770379A910CDFD3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft Manifest number: 010D0C9F43285841636D8947664456676FDBFADE Signing time: Thu 18 Sep 2025 15:00:03 +0000 Manifest this update: Thu 18 Sep 2025 15:00:03 +0000 Manifest next update: Sat 20 Sep 2025 15:00:00 +0000 Files and hashes: 1: c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa (hash: ssp7fcc0ZEjsIck4SLE+fwhMRrG2ipU8AkUZox0Ky8s=) 2: e49f1cd9-302a-4377-9a40-b12c78b69f87.crl (hash: WdA+MZNa1lu8B9ASkE6v4RxoZUwuz9aeSyd5294K/J0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:8c:eb:77:03:79:a9:10:cd:fd:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Validity Not Before: Sep 18 15:00:03 2025 GMT Not After : Sep 20 15:00:00 2025 GMT Subject: CN=59fbf149-0a03-46c5-b9fd-98827b2b405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:f5:69:28:49:33:9f:15:9c:10:c0:a2:c0: 1f:38:85:5f:cb:6e:41:8f:00:52:e5:ec:e2:ef:2b: 2e:ae:c3:e6:bb:2a:e0:79:b0:c5:f2:8f:ab:35:62: 69:2b:eb:bf:76:f9:91:3b:30:02:b5:50:30:cf:ae: cf:ae:35:5c:12:2f:a5:bb:6d:ec:f0:e6:88:44:23: aa:cc:b9:87:9f:6c:e4:18:46:23:1a:59:77:11:93: cf:d6:11:ab:a7:48:73:0c:59:1d:ef:b9:a4:ed:fd: 16:71:8b:63:1e:ea:c1:29:4f:96:db:b2:74:a2:de: 3c:ff:44:bd:ae:2a:53:f9:70:d9:bc:24:5b:3f:f1: 40:a5:5b:98:ff:f0:50:de:84:fa:0f:86:9a:0c:fe: b1:64:53:86:a6:a8:82:59:df:1c:4c:06:03:ed:c7: eb:1d:8e:1f:6e:ae:20:90:5e:74:b2:96:7f:04:e3: 75:73:58:89:1b:8f:22:38:5c:92:4f:a0:08:af:9e: d6:20:99:c6:8e:b8:8b:d8:07:97:e5:e5:d2:db:c8: b5:62:63:06:27:e0:41:66:3b:cf:a3:53:85:46:48: c1:09:42:05:35:9f:1c:5b:14:b4:bd:56:f3:ac:a2: 27:df:a6:93:a8:94:a5:57:58:29:e2:db:e4:80:c1: aa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:0D:75:BC:BE:B9:43:1C:43:3E:57:A6:BD:E5:A3:42:EC:25:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl X509v3 Authority Key Identifier: keyid:E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:30:eb:2f:a3:7c:bf:df:fc:11:8a:07:08:07:72:06:a7:66: f5:ba:c4:7c:23:59:8a:c2:30:bc:df:78:73:63:32:bf:70:36: 79:5f:24:4e:9c:1d:8b:04:1e:10:c2:33:da:97:32:4d:dc:37: 97:54:ba:bc:fe:e8:7c:bf:01:44:d1:e3:27:c1:59:08:90:8a: 51:d8:1c:bb:dd:24:57:8d:b5:ce:c9:d2:f9:a3:cf:31:f0:3b: 63:a3:a4:37:a5:b2:3b:a4:90:88:21:65:c8:21:7b:82:43:b0: e3:cd:41:bf:0b:e2:d6:9b:19:e0:b7:d7:a7:68:73:c4:b4:b4: 89:27:a5:f2:80:64:bc:1d:a2:d4:d8:34:43:d3:46:03:24:58: 0b:a3:62:07:38:3b:03:4c:d5:86:82:90:ba:37:75:a5:d7:58: 78:b7:54:50:27:b4:b8:72:28:6f:06:19:97:20:84:8e:44:eb: f7:4b:8a:53:86:51:40:55:12:fd:ec:1a:59:9d:1d:7e:89:7a: bc:72:d1:1a:6a:0f:3a:8b:8f:9e:49:10:2a:04:1f:29:bc:72: 50:8d:4f:e1:57:59:70:9a:36:4c:0d:a9:af:bd:86:d2:6e:fc: 75:9a:0b:1e:4e:59:03:44:b8:e2:54:2e:4f:d7:ef:5a:6d:d4: dd:36:2b:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs8jOt3A3mpEM39PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5 Zjg3MB4XDTI1MDkxODE1MDAwM1oXDTI1MDkyMDE1MDAwMFowLzEtMCsGA1UEAxMk NTlmYmYxNDktMGEwMy00NmM1LWI5ZmQtOTg4MjdiMmI0MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMn1aShJM58VnBDAosAfOIVfy25BjwBS5ezi 7ysursPmuyrgebDF8o+rNWJpK+u/dvmROzACtVAwz67PrjVcEi+lu23s8OaIRCOq zLmHn2zkGEYjGll3EZPP1hGrp0hzDFkd77mk7f0WcYtjHurBKU+W27J0ot48/0S9 ripT+XDZvCRbP/FApVuY//BQ3oT6D4aaDP6xZFOGpqiCWd8cTAYD7cfrHY4fbq4g kF50spZ/BON1c1iJG48iOFyST6AIr57WIJnGjriL2AeX5eXS28i1YmMGJ+BBZjvP o1OFRkjBCUIFNZ8cWxS0vVbzrKIn36aTqJSlV1gp4tvkgMGqpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCbODXW8vrlDHEM+V6a95aNC7CXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNDlm MWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvZTQ5ZjFjZDktMzAyYS00 Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTQ5ZjFjZDktMzAyYS00Mzc3LTlh NDAtYjEyYzc4YjY5Zjg3L2U0OWYxY2Q5LTMwMmEtNDM3Ny05YTQwLWIxMmM3OGI2 OWY4Ny5jcmwwHwYDVR0jBBgwFoAU52APEsECvJc3o/Np0qc8ROVOvN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJj NzhiNjlmODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdMOsvo3y/3/wRigcIB3IG p2b1usR8I1mKwjC833hzYzK/cDZ5XyROnB2LBB4QwjPalzJN3DeXVLq8/uh8vwFE 0eMnwVkIkIpR2By73SRXjbXOydL5o88x8Dtjo6Q3pbI7pJCIIWXIIXuCQ7DjzUG/ C+LWmxngt9enaHPEtLSJJ6XygGS8HaLU2DRD00YDJFgLo2IHODsDTNWGgpC6N3Wl 11h4t1RQJ7S4cihvBhmXIISOROv3S4pThlFAVRL97BpZnR1+iXq8ctEaag86i4+e SRAqBB8pvHJQjU/hV1lwmjZMDamvvYbSbvx1mgseTlkDRLjiVC5P1+9abdTdNiu4 -----END CERTIFICATE-----Generated at Fri Sep 19 03:31:32 2025 by rpki-client