$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: I5q3BWo931/o6xy1zssRGuexkltjiO4J5c85Hor/MfY= Subject key identifier: EC:8D:5B:A9:AE:63:24:09:6C:C2:8E:52:34:A5:97:91:03:F3:50:4B Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584B39A4715F0F9E25EAC3130F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB388 Signing time: Wed 17 Sep 2025 14:00:03 +0000 Manifest this update: Wed 17 Sep 2025 14:00:03 +0000 Manifest next update: Sat 20 Sep 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: WeXZKVpkWPjQYCaIhqKD4nbfNrcX6txCtWoeYOiHrJg=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: +t5VOtq4ZGc8dV5qfQOneRzg7ismvSRuQeYDNkD8Prk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:a4:71:5f:0f:9e:25:ea:c3:13:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Sep 17 14:00:03 2025 GMT Not After : Sep 20 14:00:00 2025 GMT Subject: CN=23a747c3-185d-4a3e-982b-30dddc795745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:36:31:d8:bb:9d:8f:f3:59:90:7a:c4:56: 8e:ef:38:68:d9:23:10:b8:80:ea:08:db:89:13:a3: 18:ad:77:31:cf:e2:d3:b0:49:c7:d2:8d:5c:20:11: 35:56:98:24:da:69:2f:89:be:93:80:00:43:1d:59: 52:b7:a0:bc:2c:40:d2:c6:42:6f:b4:db:89:37:d1: f3:48:91:04:f8:de:dd:38:6b:96:7f:85:29:59:7f: 2a:1c:63:bf:40:6f:8b:03:be:35:6c:bc:e9:ae:47: 31:1f:04:82:33:13:e3:20:46:a4:5d:e5:ee:e4:3b: b9:60:db:4c:9a:dc:65:5e:a9:b2:4e:07:0f:ef:d4: 98:36:95:0a:15:fa:f1:ba:23:88:44:87:cd:87:44: 1f:10:a0:4c:90:94:70:ad:d2:3d:16:95:3e:cc:9e: 34:84:f6:23:00:77:83:c2:a7:66:7e:18:0f:a9:0b: f5:1d:6f:41:37:d0:46:8e:99:d3:1f:e5:d7:fd:53: ae:d1:6e:de:3d:3b:43:6e:d0:5b:6e:d0:74:0f:77: dd:00:98:39:8a:a9:c7:c4:92:a4:ea:8c:a9:4b:91: 51:05:5f:87:30:8f:fa:9f:34:a9:bd:ab:95:a4:83: 35:fa:ba:95:84:dc:a9:bf:0a:6e:c0:bf:5b:de:88: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:5B:A9:AE:63:24:09:6C:C2:8E:52:34:A5:97:91:03:F3:50:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:15:78:e5:8c:5a:d7:d6:e7:b7:32:25:8a:aa:65:b5:0b:ec: 0b:ce:98:56:d2:7d:b8:be:1f:a4:bf:56:d1:63:43:c7:d2:ff: 17:c9:c2:97:e9:de:1b:fe:40:99:80:6b:fe:a8:25:d8:87:f7: bc:93:1a:68:97:79:50:7f:f5:89:30:24:a1:41:41:24:60:37: 79:61:59:5c:9b:88:28:c6:fc:41:dc:1a:e0:39:35:ba:6f:05: 02:80:84:c5:c9:aa:1e:9c:0c:20:e2:e8:bf:a3:c8:e2:b3:b2: b4:1b:b1:c5:cf:ea:12:47:a5:9a:17:f9:07:45:0e:8e:55:a1: 98:c0:0f:6c:b3:a9:99:c8:9a:96:3b:f3:5d:83:9c:5b:d8:c5: a9:6b:c4:4e:7b:37:34:3b:15:c4:42:2e:e2:31:4a:68:33:3f: 86:c6:f5:06:fa:f4:40:46:ef:61:fe:95:29:da:f3:4c:bc:43: db:b8:48:e3:19:21:36:7e:63:a3:be:18:4c:71:7d:f0:cb:6e: 1d:e0:e7:b0:3c:a2:c7:e0:68:e6:14:60:48:86:21:83:9f:6c: 2a:24:93:3d:6f:cd:26:30:4b:ec:60:b3:48:94:42:39:e6:52: e5:37:b0:de:10:b4:ee:c3:b0:60:5d:28:1a:66:0f:ce:05:d2: 31:db:8f:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs5pHFfD54l6sMTD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDkxNzE0MDAwM1oXDTI1MDkyMDE0MDAwMFowLzEtMCsGA1UEAxMk MjNhNzQ3YzMtMTg1ZC00YTNlLTk4MmItMzBkZGRjNzk1NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCA2Mdi7nY/zWZB6xFaO7zho2SMQuIDqCNuJ E6MYrXcxz+LTsEnH0o1cIBE1Vpgk2mkvib6TgABDHVlSt6C8LEDSxkJvtNuJN9Hz SJEE+N7dOGuWf4UpWX8qHGO/QG+LA741bLzprkcxHwSCMxPjIEakXeXu5Du5YNtM mtxlXqmyTgcP79SYNpUKFfrxuiOIRIfNh0QfEKBMkJRwrdI9FpU+zJ40hPYjAHeD wqdmfhgPqQv1HW9BN9BGjpnTH+XX/VOu0W7ePTtDbtBbbtB0D3fdAJg5iqnHxJKk 6oypS5FRBV+HMI/6nzSpvauVpIM1+rqVhNypvwpuwL9b3og0PwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOyNW6muYyQJbMKOUjSll5ED81BLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkFXjljFrX1ue3MiWKqmW1 C+wLzphW0n24vh+kv1bRY0PH0v8XycKX6d4b/kCZgGv+qCXYh/e8kxpol3lQf/WJ MCShQUEkYDd5YVlcm4goxvxB3BrgOTW6bwUCgITFyaoenAwg4ui/o8jis7K0G7HF z+oSR6WaF/kHRQ6OVaGYwA9ss6mZyJqWO/Ndg5xb2MWpa8ROezc0OxXEQi7iMUpo Mz+GxvUG+vRARu9h/pUp2vNMvEPbuEjjGSE2fmOjvhhMcX3wy24d4OewPKLH4Gjm FGBIhiGDn2wqJJM9b80mMEvsYLNIlEI55lLlN7DeELTuw7BgXSgaZg/OBdIx249K -----END CERTIFICATE-----Generated at Wed Sep 17 23:53:28 2025 by rpki-client