$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft File: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft (raw, json) Hash identifier: I0xSWFDiF+OW05yiK+yKzYlDgpSwUX45jsx2/KFVYF0= Subject key identifier: 37:47:54:2B:E6:BB:34:37:DD:D5:96:8A:0E:26:96:1B:C3:A1:99:D4 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584B387AA7E4BF45A334BFC904E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft Manifest number: 010D0C9F43285849EC4A33425EE8DEC9DC5348C1 Signing time: Wed 17 Sep 2025 04:00:03 +0000 Manifest this update: Wed 17 Sep 2025 04:00:03 +0000 Manifest next update: Fri 19 Sep 2025 04:00:00 +0000 Files and hashes: 1: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl (hash: 3TWyE99dq/QAh35/Z3QV3aZf6iiSxb8pvYXPceEFoFs=) 2: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (hash: cNKIVR3ZK3UkcfhSrVKjqaqWdiL+AGvuwZ8nwTYFvoM=) 3: 9114f267-64fb-3c87-ba5c-fe28d188d01d.roa (hash: pIlRyMcz7AdfWXmTzSoP0+eCEEDKxeF7yZnM2LE42s0=) 4: b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (hash: zdODePTJpALvJ+7yEEq6HtfOM5C3/czrVq94FEdnUJM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:7a:a7:e4:bf:45:a3:34:bf:c9:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Sep 17 04:00:03 2025 GMT Not After : Sep 19 04:00:00 2025 GMT Subject: CN=89ce9116-d7dc-4eb6-afcf-bb86a5e6eb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:fd:57:24:d5:2d:5b:68:f9:76:c9:58:a5: 21:87:25:8d:eb:e9:50:25:d8:a6:33:2f:07:61:2a: da:93:96:b8:35:fb:68:0c:ef:5a:a5:97:32:5c:99: db:bd:70:4c:97:8e:54:67:91:f0:79:2b:ef:4b:dc: 0e:cc:2d:36:35:d2:94:75:ac:77:e4:83:bf:6a:7c: ff:00:81:c1:0a:2d:ff:e1:8e:a5:bc:87:26:a0:45: a8:18:3b:56:a4:12:33:80:a7:44:25:13:5c:7d:c9: 6b:e2:ce:22:33:eb:b3:f2:a2:41:47:3d:72:38:cc: 72:a1:29:7d:bb:e2:88:fe:bc:a6:0b:82:5b:d4:5c: 4b:d4:cd:87:6e:89:c1:f8:96:ff:91:c3:0b:53:83: b4:82:9a:7d:a5:68:a7:8b:64:80:c3:34:39:1a:16: 07:d9:e4:b3:30:26:fc:13:c5:de:1e:41:f2:f2:bb: 03:e4:6a:8e:61:79:3c:de:0c:76:64:b9:61:0e:1f: 23:58:cb:f3:3a:3a:eb:26:08:56:dc:ca:e4:0b:1e: 0e:af:24:ea:df:77:27:8e:dd:af:08:37:c0:e3:2b: 87:86:e4:16:14:e9:6c:5d:67:16:bf:75:5a:43:e3: 08:63:e9:6c:b3:83:66:aa:9a:50:18:a6:e0:01:73: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:47:54:2B:E6:BB:34:37:DD:D5:96:8A:0E:26:96:1B:C3:A1:99:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:86:3e:61:2f:d6:4f:16:0e:f3:b0:7e:43:51:eb:dc:c1:fa: ca:e3:c2:32:f4:3e:5f:d0:13:c8:b9:ed:7b:ba:4f:17:08:4f: fc:0e:51:ee:61:2d:b9:ac:93:96:ee:37:39:14:73:cb:b2:71: e2:aa:67:5d:f5:8c:5e:f1:ef:0f:b5:14:6d:00:5d:99:e4:f1: 44:dd:28:be:7f:a0:15:62:ce:b0:f8:54:fb:90:bf:af:91:b7: dc:25:67:5b:90:11:da:05:70:40:44:7a:56:e5:a3:12:ee:37: 9a:66:02:05:1b:ef:f7:34:1c:4b:cf:e7:c4:30:b1:c5:72:f2: 30:4a:92:60:53:49:46:fd:09:6d:a8:b8:9a:91:25:4a:40:b0: 90:4c:4b:fb:46:07:4f:53:f7:2e:4f:b4:0d:50:ed:6d:70:51: cb:aa:05:84:23:f2:00:c5:0d:3f:e6:db:cf:3a:fb:fd:8d:fe: 03:2f:26:ef:7c:f8:2f:e5:af:90:f5:a9:29:14:05:88:f2:fb: 4c:c2:3d:09:d2:14:6d:16:0f:47:80:07:f0:63:95:d4:e6:e6: 88:56:1c:61:15:3d:06:7c:ed:7f:0d:d8:c0:89:f5:79:39:a5: 17:1f:d9:2e:21:ce:d7:10:22:cf:22:84:ef:d4:f3:41:45:86: cb:76:06:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs4eqfkv0WjNL/JBOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI1MDkxNzA0MDAwM1oXDTI1MDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk ODljZTkxMTYtZDdkYy00ZWI2LWFmY2YtYmI4NmE1ZTZlYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicv9VyTVLVto+XbJWKUhhyWN6+lQJdimMy8H YSrak5a4NftoDO9apZcyXJnbvXBMl45UZ5HweSvvS9wOzC02NdKUdax35IO/anz/ AIHBCi3/4Y6lvIcmoEWoGDtWpBIzgKdEJRNcfclr4s4iM+uz8qJBRz1yOMxyoSl9 u+KI/rymC4Jb1FxL1M2HbonB+Jb/kcMLU4O0gpp9pWini2SAwzQ5GhYH2eSzMCb8 E8XeHkHy8rsD5GqOYXk83gx2ZLlhDh8jWMvzOjrrJghW3MrkCx4OryTq33cnjt2v CDfA4yuHhuQWFOlsXWcWv3VaQ+MIY+lss4NmqppQGKbgAXMTyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDdHVCvmuzQ33dWWig4mlhvDoZnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvMGMzM2FmZjUtMTBkMy00 NTRhLThiMjctY2E0YzRmNTA4NTFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGhj5hL9ZPFg7zsH5DUevc wfrK48Iy9D5f0BPIue17uk8XCE/8DlHuYS25rJOW7jc5FHPLsnHiqmdd9Yxe8e8P tRRtAF2Z5PFE3Si+f6AVYs6w+FT7kL+vkbfcJWdbkBHaBXBARHpW5aMS7jeaZgIF G+/3NBxLz+fEMLHFcvIwSpJgU0lG/QltqLiakSVKQLCQTEv7RgdPU/cuT7QNUO1t cFHLqgWEI/IAxQ0/5tvPOvv9jf4DLybvfPgv5a+Q9akpFAWI8vtMwj0J0hRtFg9H gAfwY5XU5uaIVhxhFT0GfO1/DdjAifV5OaUXH9kuIc7XECLPIoTv1PNBRYbLdgaW -----END CERTIFICATE-----Generated at Wed Sep 17 23:54:47 2025 by rpki-client