$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft File: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft (raw, json) Hash identifier: yJRrWrmyMJWV2+To0wLjZ1dLwZL4lBQilUu26Ac/sas= Subject key identifier: F5:C4:99:19:0B:35:1B:2D:1D:0C:3C:6C:44:46:C5:9B:97:91:39:1D Authority key identifier: 3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED Certificate issuer: /CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Certificate serial: 010D0C9F4328584AB5F72DAD615E0EF1FA6F3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft Manifest number: 010D0C9F432858496F552DCD0894BBF5A9254BD6 Signing time: Fri 01 Aug 2025 10:00:03 +0000 Manifest this update: Fri 01 Aug 2025 10:00:03 +0000 Manifest next update: Sun 03 Aug 2025 10:00:00 +0000 Files and hashes: 1: 2670296f-b353-309c-ad96-a0e12b7068a5.roa (hash: GmzLUvrXbwsUyAGqPlsEXFuCf3DX2cLTTy4a1Auv08Q=) 2: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl (hash: f62/MSigwWnO8b4KihGwTfNvkUcI3/RSC/v9wHQwCnA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b5:f7:2d:ad:61:5e:0e:f1:fa:6f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Validity Not Before: Aug 1 10:00:03 2025 GMT Not After : Aug 3 10:00:00 2025 GMT Subject: CN=3db3596f-a710-4cf9-980f-6ce4b0e2afdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:0a:18:f1:91:39:cf:89:4f:75:67:63:46: 97:c5:3b:c6:a9:d1:b3:8a:3d:9e:4a:c9:84:cf:d1: bf:00:5b:d0:72:2d:13:84:6e:45:37:69:e0:75:66: d7:50:a3:be:dc:6c:d1:8a:4a:a5:cc:d3:66:2f:18: c9:c1:61:27:3b:e6:e3:13:89:b7:db:65:e9:7a:12: df:30:b4:85:42:d5:dc:c4:44:42:50:63:c5:d3:23: 36:91:60:8f:cc:5a:93:5f:be:a4:08:fc:73:0c:28: 61:80:b0:fa:68:6f:3b:4d:e2:6e:8c:06:96:9a:e6: e9:6b:18:df:2b:33:e4:72:02:29:76:da:ab:4e:a8: 01:01:c3:b4:c0:d1:6c:ea:46:9a:ac:19:74:18:83: 1d:af:5d:9c:bb:d6:3c:a6:73:95:64:84:5a:34:e3: 61:ce:d0:fb:f7:cf:5a:cb:7d:ae:92:d4:32:ee:18: f7:f2:db:b8:db:a9:01:3d:5c:51:ff:02:ea:8c:cc: e9:2c:40:49:46:20:ad:80:48:cc:b1:22:fb:40:65: 4c:f8:a2:b6:31:8f:b2:1b:43:ad:66:c5:c7:46:02: 56:80:7b:70:bf:e4:b9:c1:be:3b:21:a8:9e:64:b6: 63:c4:ae:03:32:21:ea:59:01:fe:cf:50:c7:d6:30: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C4:99:19:0B:35:1B:2D:1D:0C:3C:6C:44:46:C5:9B:97:91:39:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl X509v3 Authority Key Identifier: keyid:3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4e:c1:a9:4c:f2:51:7a:ce:02:98:d5:78:a2:f5:4a:b7:9e: 43:e3:7b:f1:d7:4f:3e:12:2d:b2:f4:c3:0b:4b:6c:66:aa:74: 24:e4:63:d9:5f:b0:81:a9:23:b8:4c:0d:66:4c:46:7b:42:46: 2e:3f:c4:22:00:61:43:78:bf:ce:26:4a:dc:fc:ce:c4:d2:36: 7a:40:c7:20:a1:2a:5c:c3:ee:cc:40:80:67:ac:0f:b9:a7:b4: 90:1c:67:2e:e8:c1:4a:bc:08:cc:37:58:63:66:0a:6f:7c:d1: 76:74:fc:20:a0:ba:b2:a9:a2:2f:e2:60:23:96:08:af:2c:45: 77:4f:54:e2:16:17:c2:30:b8:77:e4:0f:f0:21:83:b9:9b:87: 69:22:25:a7:f0:60:3b:55:38:bf:96:66:93:e7:ad:37:3a:ec: 29:b4:02:24:96:b9:b2:3b:12:ac:0f:df:4d:1c:a8:be:ea:62: 44:11:25:02:72:f4:ff:4c:74:9d:19:70:a3:b6:46:18:b0:21: 78:93:69:97:f5:2b:9e:d7:5e:2e:1f:0b:46:0f:f2:cd:a7:0f: 90:43:a1:be:71:2c:08:fc:e0:50:99:4e:61:ff:b4:e2:77:05: 6f:2d:47:0d:a1:46:36:d3:80:80:0a:55:20:cd:37:c4:d6:e1: b6:50:b1:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq19y2tYV4O8fpvPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZhYWY2ZTUtZjhhNy00N2Y1LWEzZmYtMWUxNGVlOTdj OTJjMB4XDTI1MDgwMTEwMDAwM1oXDTI1MDgwMzEwMDAwMFowLzEtMCsGA1UEAxMk M2RiMzU5NmYtYTcxMC00Y2Y5LTk4MGYtNmNlNGIwZTJhZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvQKGPGROc+JT3VnY0aXxTvGqdGzij2eSsmE z9G/AFvQci0ThG5FN2ngdWbXUKO+3GzRikqlzNNmLxjJwWEnO+bjE4m322XpehLf MLSFQtXcxERCUGPF0yM2kWCPzFqTX76kCPxzDChhgLD6aG87TeJujAaWmubpaxjf KzPkcgIpdtqrTqgBAcO0wNFs6kaarBl0GIMdr12cu9Y8pnOVZIRaNONhztD7989a y32uktQy7hj38tu426kBPVxR/wLqjMzpLEBJRiCtgEjMsSL7QGVM+KK2MY+yG0Ot ZsXHRgJWgHtwv+S5wb47IaieZLZjxK4DMiHqWQH+z1DH1jAnHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPXEmRkLNRstHQw8bERGxZuXkTkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NmFh ZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0ZWU5N2M5MmMvODZhYWY2ZTUtZjhhNy00 N2Y1LWEzZmYtMWUxNGVlOTdjOTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODZhYWY2ZTUtZjhhNy00N2Y1LWEz ZmYtMWUxNGVlOTdjOTJjLzg2YWFmNmU1LWY4YTctNDdmNS1hM2ZmLTFlMTRlZTk3 YzkyYy5jcmwwHwYDVR0jBBgwFoAUPKtKGGCvkdPmP8nl8/qKBoIlw+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NmFhZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0 ZWU5N2M5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9TsGpTPJRes4CmNV4ovVK t55D43vx108+Ei2y9MMLS2xmqnQk5GPZX7CBqSO4TA1mTEZ7QkYuP8QiAGFDeL/O Jkrc/M7E0jZ6QMcgoSpcw+7MQIBnrA+5p7SQHGcu6MFKvAjMN1hjZgpvfNF2dPwg oLqyqaIv4mAjlgivLEV3T1TiFhfCMLh35A/wIYO5m4dpIiWn8GA7VTi/lmaT5603 OuwptAIklrmyOxKsD99NHKi+6mJEESUCcvT/THSdGXCjtkYYsCF4k2mX9Sue114u HwtGD/LNpw+QQ6G+cSwI/OBQmU5h/7TidwVvLUcNoUY204CAClUgzTfE1uG2ULEu -----END CERTIFICATE-----Generated at Sat Aug 2 05:20:15 2025 by rpki-client