$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: owfLTJPSvJ6E43S8MLnV9eS+Cfj+fxuNrZoVUAH+kTM= Subject key identifier: D2:26:56:C0:65:43:3D:02:8D:2E:5C:04:D7:9F:A6:E7:52:A3:5C:DA Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584AE8730C2D263270AFBED3F944 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF27A Signing time: Tue 19 Aug 2025 12:00:04 +0000 Manifest this update: Tue 19 Aug 2025 12:00:04 +0000 Manifest next update: Thu 21 Aug 2025 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: m1rMbXwryThce79aW26bbj47JD8neKtlR/bmhYTsN2g=) 2: c778b757-0391-3c4a-869f-5f03f34425a6.roa (hash: FBe/AVcK/YxtuzK1UNmTgexo8Iq1uOatoxGLWiqrFUs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:73:0c:2d:26:32:70:af:be:d3:f9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Aug 19 12:00:04 2025 GMT Not After : Aug 21 12:00:00 2025 GMT Subject: CN=a2e76ff1-bdfa-48af-9243-5e527eb588c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:de:a7:2b:82:50:91:ce:cb:4b:d6:cf:2f: 8a:9c:1c:18:ba:e4:c3:cf:d3:a8:a0:0c:ea:0e:90: a5:cc:76:3e:47:57:c3:0f:c8:28:2d:73:76:c8:6a: ec:50:f2:c9:22:0f:0c:56:8f:59:99:74:8b:49:64: e6:c0:5c:ab:e5:e9:22:c8:e3:08:b4:69:99:6d:da: 6a:8e:ce:46:26:8b:df:39:1b:16:69:61:9e:bb:0c: 53:39:1f:57:51:cb:df:66:4d:0f:47:7f:28:45:37: 85:ed:15:8e:95:4d:5e:77:a9:61:39:46:d2:80:ed: e5:33:c8:dc:3b:10:29:9f:b4:96:b4:21:ce:a1:2a: c9:01:b2:7b:07:ee:8f:18:a0:90:ae:c2:ce:d9:2e: 9e:9b:16:5a:6f:cc:df:d5:f9:0e:2a:94:2b:17:73: 84:ab:5c:e7:e9:d5:2f:8b:88:27:89:da:b2:04:00: d0:06:b6:bb:be:11:c7:5f:05:c9:6b:f9:d7:b2:ee: 9a:dc:a4:c0:af:00:95:80:27:d9:e3:19:3a:3f:ae: ad:db:5b:a3:08:3b:b9:50:6c:a0:9f:97:0c:11:77: 42:cb:00:ed:b5:ab:52:57:a6:3d:18:80:c0:6d:72: a5:44:a1:11:1f:f2:ad:88:da:a9:36:27:7e:e3:ae: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:56:C0:65:43:3D:02:8D:2E:5C:04:D7:9F:A6:E7:52:A3:5C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5d:3c:be:14:ba:27:1c:c0:89:f7:dd:fe:26:32:99:a5:a9: dd:73:12:eb:97:9a:96:48:8b:b8:f6:3d:f7:1a:14:06:3e:c8: fc:6f:60:b3:e5:77:b8:68:fc:95:5a:19:18:1f:dc:c0:30:3e: 93:61:86:28:97:1a:a8:69:ae:18:7a:ef:ab:89:82:fe:0b:47: 30:f8:08:0e:f7:f1:19:ff:ee:d3:78:ab:e8:1e:a7:e7:a0:03: e3:98:0d:ec:36:c9:a4:74:b4:6e:2a:c8:f0:28:6b:7b:a1:17: 90:82:b5:9f:56:da:21:d1:b3:f4:6f:e8:1b:60:6e:36:db:2e: fc:7e:f8:34:47:8b:49:22:cc:f5:60:72:7a:48:07:1d:6f:5f: c2:be:08:44:5c:bc:78:99:ff:9d:de:85:28:15:1a:be:86:77: db:84:3f:82:b1:c2:a3:ac:12:be:2a:89:44:4f:b1:ab:86:74: e2:ac:6b:05:54:06:43:59:42:db:af:98:db:d2:4f:93:7d:84: 44:c1:1a:1e:e2:77:7e:af:b0:f7:57:86:1e:3f:8d:b9:08:55: a2:82:39:20:78:48:04:30:d0:c7:db:b3:a6:08:bb:2e:c3:89: 1e:ce:f7:54:11:93:65:3e:56:5c:51:70:25:38:2d:34:39:6b: 64:27:1c:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErocwwtJjJwr77T+UQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI1MDgxOTEyMDAwNFoXDTI1MDgyMTEyMDAwMFowLzEtMCsGA1UEAxMk YTJlNzZmZjEtYmRmYS00OGFmLTkyNDMtNWU1MjdlYjU4OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIXepyuCUJHOy0vWzy+KnBwYuuTDz9OooAzq DpClzHY+R1fDD8goLXN2yGrsUPLJIg8MVo9ZmXSLSWTmwFyr5ekiyOMItGmZbdpq js5GJovfORsWaWGeuwxTOR9XUcvfZk0PR38oRTeF7RWOlU1ed6lhOUbSgO3lM8jc OxApn7SWtCHOoSrJAbJ7B+6PGKCQrsLO2S6emxZab8zf1fkOKpQrF3OEq1zn6dUv i4gnidqyBADQBra7vhHHXwXJa/nXsu6a3KTArwCVgCfZ4xk6P66t21ujCDu5UGyg n5cMEXdCywDttatSV6Y9GIDAbXKlRKERH/KtiNqpNid+465DpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNImVsBlQz0CjS5cBNefpudSo1zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOXTy+FLonHMCJ993+JjKZ pandcxLrl5qWSIu49j33GhQGPsj8b2Cz5Xe4aPyVWhkYH9zAMD6TYYYolxqoaa4Y eu+riYL+C0cw+AgO9/EZ/+7TeKvoHqfnoAPjmA3sNsmkdLRuKsjwKGt7oReQgrWf Vtoh0bP0b+gbYG422y78fvg0R4tJIsz1YHJ6SAcdb1/CvghEXLx4mf+d3oUoFRq+ hnfbhD+CscKjrBK+KolET7GrhnTirGsFVAZDWULbr5jb0k+TfYREwRoe4nd+r7D3 V4YeP425CFWigjkgeEgEMNDH27OmCLsuw4kezvdUEZNlPlZcUXAlOC00OWtkJxwE -----END CERTIFICATE-----Generated at Wed Aug 20 13:10:54 2025 by rpki-client