$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft File: 31d2846b-36c4-41a9-86c2-a98e92bef162.mft (raw, json) Hash identifier: 3lC6BlX+zOecV0l2tFUEoAGGxaujWh9mX8xxDXvZg+8= Subject key identifier: D4:9B:7E:88:75:0A:83:07:6F:57:36:12:3F:1C:4F:8C:9A:C4:07:02 Authority key identifier: D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71 Certificate issuer: /CN=31d2846b-36c4-41a9-86c2-a98e92bef162 Certificate serial: 010D0C9F4328584AEE263D25313987107E308916 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft Manifest number: 010D0C9F4328584A411CB8FB258CA75D902BD93F Signing time: Thu 21 Aug 2025 13:00:08 +0000 Manifest this update: Thu 21 Aug 2025 13:00:08 +0000 Manifest next update: Sun 24 Aug 2025 13:00:00 +0000 Files and hashes: 1: 1c66c136-216a-334e-9397-93f9ed1f75ca.roa (hash: C48h0WnZqpNFFk3qXZfYAE0qNSQ7u5RuGVOdlEtGl+o=) 2: 31d2846b-36c4-41a9-86c2-a98e92bef162.crl (hash: l4p8ET5TppEV6rTGcLTzmhElddPSSOoVLz1BYJZH1fk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:3d:25:31:39:87:10:7e:30:89:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2846b-36c4-41a9-86c2-a98e92bef162 Validity Not Before: Aug 21 13:00:08 2025 GMT Not After : Aug 24 13:00:00 2025 GMT Subject: CN=233cba48-ef69-4957-9a2f-99acce68d5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:89:8f:3a:54:f7:61:17:33:6f:47:7c:b5: 85:98:c2:4c:9a:a3:35:66:83:6d:5e:39:a6:3e:96: 13:84:ef:67:71:8e:84:56:69:1b:7a:4b:9f:1b:be: 04:10:1b:dc:8f:fc:c7:61:f3:fa:fc:66:0c:e2:6c: 79:2b:df:ab:b2:f3:86:a1:ae:53:09:14:3d:67:ab: ca:f2:0b:91:9a:d1:c4:82:04:b1:64:61:6b:97:81: e3:e3:95:db:93:cb:04:1d:ac:a2:29:35:bc:bd:df: 70:08:d8:65:2f:e6:bf:1b:95:0a:49:a4:4b:74:09: 32:c1:4d:01:da:ce:8a:c5:a9:e4:16:42:2f:28:2e: 3b:4a:a1:1e:d2:72:81:02:d0:51:87:82:7f:a8:28: 0a:61:11:95:d5:19:4b:b6:5d:52:84:5f:85:8f:66: 5a:42:fb:cd:86:8e:59:9a:7d:8c:09:7d:06:8c:35: 81:b3:a0:e1:a7:84:c0:10:5b:7d:d7:4b:29:0b:e8: b8:7e:7b:64:62:1c:4e:84:b9:d5:e3:29:e0:b3:a1: 1c:58:d4:3b:1a:64:a4:8b:c0:0f:88:c4:ce:32:99: 18:6e:e0:0f:57:fc:d8:74:5f:cb:54:a7:d1:e7:7e: 86:52:30:99:f1:99:98:93:15:63:bb:b1:c2:b6:6a: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:7E:88:75:0A:83:07:6F:57:36:12:3F:1C:4F:8C:9A:C4:07:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl X509v3 Authority Key Identifier: keyid:D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4b:23:1e:b8:7a:1f:b2:b9:92:60:6c:8b:3c:a1:5b:76:36: c1:3d:02:3c:51:7e:82:3c:24:fd:c2:90:79:69:8c:69:25:36: 00:e6:9e:3f:b2:ac:86:ac:38:fc:41:bc:f2:19:52:0a:a5:06: 08:8d:6c:cb:bc:0d:38:a1:91:f7:1d:32:54:f8:44:2a:9b:4d: 25:a1:57:58:74:70:a1:cd:23:09:03:20:6d:da:68:b2:ef:22: 2d:fc:ce:90:b2:6a:42:a5:07:fb:a9:fd:f8:74:5e:90:b0:79: 32:87:c5:cf:6a:d8:da:7f:82:b7:91:90:92:75:7d:a8:32:e5: c2:2a:96:d9:0e:fc:e2:8a:0a:eb:0b:ca:9c:19:64:53:d3:51: 9c:68:1d:ad:4e:2a:67:ac:37:49:17:7d:78:af:51:fb:19:fa: 0d:02:bb:6a:d0:02:65:3e:1f:02:99:d6:e1:1a:95:28:35:de: 00:37:26:6a:27:ff:72:55:9e:eb:ad:66:d9:a9:7b:59:58:de: fd:6c:86:a5:f1:36:a0:8a:92:b9:86:2f:cf:df:9c:5b:06:88: 8a:c4:eb:43:39:bf:f9:4c:d1:0d:8d:b1:d0:ce:6f:84:8f:19: 57:a7:67:55:02:e4:ad:a1:5b:7e:60:1d:86:9a:57:3d:20:6b: 12:f3:5d:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEruJj0lMTmHEH4wiRYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkMjg0NmItMzZjNC00MWE5LTg2YzItYTk4ZTkyYmVm MTYyMB4XDTI1MDgyMTEzMDAwOFoXDTI1MDgyNDEzMDAwMFowLzEtMCsGA1UEAxMk MjMzY2JhNDgtZWY2OS00OTU3LTlhMmYtOTlhY2NlNjhkNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq+JjzpU92EXM29HfLWFmMJMmqM1ZoNtXjmm PpYThO9ncY6EVmkbekufG74EEBvcj/zHYfP6/GYM4mx5K9+rsvOGoa5TCRQ9Z6vK 8guRmtHEggSxZGFrl4Hj45Xbk8sEHayiKTW8vd9wCNhlL+a/G5UKSaRLdAkywU0B 2s6KxankFkIvKC47SqEe0nKBAtBRh4J/qCgKYRGV1RlLtl1ShF+Fj2ZaQvvNho5Z mn2MCX0GjDWBs6Dhp4TAEFt910spC+i4fntkYhxOhLnV4yngs6EcWNQ7GmSki8AP iMTOMpkYbuAPV/zYdF/LVKfR536GUjCZ8ZmYkxVju7HCtmryNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNSbfoh1CoMHb1c2Ej8cT4yaxAcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQy ODQ2Yi0zNmM0LTQxYTktODZjMi1hOThlOTJiZWYxNjIvMzFkMjg0NmItMzZjNC00 MWE5LTg2YzItYTk4ZTkyYmVmMTYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFkMjg0NmItMzZjNC00MWE5LTg2 YzItYTk4ZTkyYmVmMTYyLzMxZDI4NDZiLTM2YzQtNDFhOS04NmMyLWE5OGU5MmJl ZjE2Mi5jcmwwHwYDVR0jBBgwFoAU0RvHr1VVyQwgMvxor4+rSY5agXEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQyODQ2Yi0zNmM0LTQxYTktODZjMi1hOThl OTJiZWYxNjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOSyMeuHofsrmSYGyLPKFb djbBPQI8UX6CPCT9wpB5aYxpJTYA5p4/sqyGrDj8QbzyGVIKpQYIjWzLvA04oZH3 HTJU+EQqm00loVdYdHChzSMJAyBt2miy7yIt/M6QsmpCpQf7qf34dF6QsHkyh8XP atjaf4K3kZCSdX2oMuXCKpbZDvziigrrC8qcGWRT01GcaB2tTipnrDdJF314r1H7 GfoNArtq0AJlPh8CmdbhGpUoNd4ANyZqJ/9yVZ7rrWbZqXtZWN79bIal8TagipK5 hi/P35xbBoiKxOtDOb/5TNENjbHQzm+EjxlXp2dVAuStoVt+YB2Gmlc9IGsS811b -----END CERTIFICATE-----Generated at Fri Aug 22 00:02:26 2025 by rpki-client