$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft (raw, json) Hash identifier: vPXBG59REfoSaHGlnoLbzCKuxYn8Q0pg2F/BoTf4msE= Subject key identifier: EE:89:1A:C1:9E:50:E9:17:C5:E2:CF:E5:EB:A0:47:B2:CF:B6:54:2C Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584AEB5B8DA87A4F358F7FD5FDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft Manifest number: 010D0C9F4328584A1A12077C4B595F510F327C0B Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl (hash: VGsmXFrJZH18+XFdAktaBlFBpZ7Fo+PYwUq5On6l3t0=) 2: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (hash: Knhw+PcxM/gO83sDLhvnIfdgHod+BYiZ0PtoyeDh5tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:8d:a8:7a:4f:35:8f:7f:d5:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=851595f0-9daf-4d5b-af82-00ae7b194042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:a5:2f:95:d0:e6:b3:fd:ce:9f:a1:dd:2f: c8:a3:4a:57:bf:73:4f:be:e2:0d:fa:99:7e:b3:fc: 9b:39:50:ad:e8:a7:17:4d:a5:4e:aa:7b:de:16:85: c5:3b:ff:c4:da:9f:65:cc:23:ec:86:29:0a:a1:b9: f3:bb:51:23:de:aa:da:0d:19:68:27:19:ed:2c:4c: 0e:36:1a:50:47:82:50:f6:60:05:31:d9:70:7b:69: 0c:08:4c:fe:a5:24:76:b3:93:61:0e:a0:5a:63:49: e7:d1:55:42:7c:20:6a:52:97:9e:04:16:34:7a:71: cb:de:cb:6e:4f:2b:ad:f1:37:ff:85:f4:79:e9:e4: 40:2a:74:66:5f:ca:ab:24:69:06:09:ca:48:a1:18: aa:c2:c0:ce:ff:9b:95:78:cf:b4:bf:90:76:4e:07: 4a:f1:13:dd:50:22:16:8c:db:84:bf:f2:41:4d:a5: dc:a1:87:98:1c:5b:76:f5:c8:84:f3:d3:d1:d4:e8: 66:0b:c6:e2:49:e3:30:7d:64:10:1a:e3:53:28:64: 5b:fd:38:48:20:d5:d7:c1:10:f0:87:2d:1f:d6:0c: 6d:99:11:8d:b4:d3:05:d3:96:3b:fb:85:f6:33:14: f7:78:83:e4:43:da:1a:ac:87:37:0c:6a:fd:8d:41: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:1A:C1:9E:50:E9:17:C5:E2:CF:E5:EB:A0:47:B2:CF:B6:54:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0a:45:8b:51:d1:f7:6e:f2:4f:7b:67:14:34:45:fc:00:84: 45:fc:bf:c3:4a:42:82:4d:e7:ff:03:84:09:05:87:d5:7a:9d: 8f:a5:18:9b:9a:94:aa:54:d2:c3:90:0b:d3:3f:8e:42:89:66: c8:93:1f:b1:b6:eb:1f:e2:11:a7:01:62:28:ae:49:9f:84:62: 2d:75:9f:03:8a:7b:60:55:cd:ae:3a:e0:fd:f9:33:34:a3:2c: 44:dc:6b:84:4d:82:1c:c4:0b:c0:45:14:e3:34:47:c9:a8:aa: bc:d4:cf:09:b0:0d:05:69:d8:d5:94:15:a1:86:68:b9:7c:bf: 9c:82:16:87:7e:ad:e1:2e:a7:9f:38:ca:7a:ba:c4:c6:7f:d8: 39:e1:25:6b:0e:d0:3d:72:ec:fa:ca:88:f8:c9:82:0b:56:d2: ae:b9:23:20:5a:51:81:75:40:95:b2:59:99:e3:40:8c:4b:df: 09:0d:79:9d:02:0d:8f:83:a6:2e:4d:3d:aa:ff:e8:01:71:28: a0:ec:1b:d8:61:a2:fe:a2:7f:19:c6:1a:60:fd:00:64:1e:44: e6:3a:65:e8:b9:5d:b9:df:d8:0b:bf:e9:36:89:a2:f7:5b:a8: 9a:92:fc:49:ab:4a:53:3c:e5:7e:6e:1f:39:43:19:37:be:5f: fd:58:7e:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW42oek81j3/V/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk ODUxNTk1ZjAtOWRhZi00ZDViLWFmODItMDBhZTdiMTk0MDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTmlL5XQ5rP9zp+h3S/Io0pXv3NPvuIN+pl+ s/ybOVCt6KcXTaVOqnveFoXFO//E2p9lzCPshikKobnzu1Ej3qraDRloJxntLEwO NhpQR4JQ9mAFMdlwe2kMCEz+pSR2s5NhDqBaY0nn0VVCfCBqUpeeBBY0enHL3stu Tyut8Tf/hfR56eRAKnRmX8qrJGkGCcpIoRiqwsDO/5uVeM+0v5B2TgdK8RPdUCIW jNuEv/JBTaXcoYeYHFt29ciE89PR1OhmC8biSeMwfWQQGuNTKGRb/ThIINXXwRDw hy0f1gxtmRGNtNMF05Y7+4X2MxT3eIPkQ9oarIc3DGr9jUEk6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6JGsGeUOkXxeLP5eugR7LPtlQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYTRmMmYxYTctMDdlNS00 MmY4LWIxYWEtMWUyZTk1YTY1ZmY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHCkWLUdH3bvJPe2cUNEX8 AIRF/L/DSkKCTef/A4QJBYfVep2PpRibmpSqVNLDkAvTP45CiWbIkx+xtusf4hGn AWIorkmfhGItdZ8DintgVc2uOuD9+TM0oyxE3GuETYIcxAvARRTjNEfJqKq81M8J sA0FadjVlBWhhmi5fL+cghaHfq3hLqefOMp6usTGf9g54SVrDtA9cuz6yoj4yYIL VtKuuSMgWlGBdUCVslmZ40CMS98JDXmdAg2Pg6YuTT2q/+gBcSig7BvYYaL+on8Z xhpg/QBkHkTmOmXouV2539gLv+k2iaL3W6iakvxJq0pTPOV+bh85Qxk3vl/9WH4P -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:27 2025 by rpki-client