$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft (raw, json) Hash identifier: GvYX/0phet+CKXoBQKinGovBYdVr5S9RIE6REF0H8EQ= Subject key identifier: 53:DD:FA:E9:BB:EB:C6:44:2F:6C:C7:53:42:5F:48:C0:48:A4:2A:72 Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Certificate serial: 010D0C9F4328584AEBF0696EF2C4C012D20BF900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft Manifest number: 010D0C9F4328584A17DA3FA749DC24C8808F300E Signing time: Wed 20 Aug 2025 18:00:03 +0000 Manifest this update: Wed 20 Aug 2025 18:00:03 +0000 Manifest next update: Sat 23 Aug 2025 18:00:00 +0000 Files and hashes: 1: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (hash: bnock/DxAIxmenno1m2eyIHPxFGcjPV124LK3B6c0Z4=) 2: c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl (hash: ufQD50eOPlqI0KPIZcBvZMKcGAlHD3sXXHydUghDm6E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:f0:69:6e:f2:c4:c0:12:d2:0b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Validity Not Before: Aug 20 18:00:03 2025 GMT Not After : Aug 23 18:00:00 2025 GMT Subject: CN=50aa3be3-eb43-40e9-a776-d7249442a8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:fc:39:fa:61:62:4d:96:d3:04:2b:33:32: 58:44:35:f3:13:d3:41:e1:ca:00:13:85:a5:0d:15: 79:b5:05:5d:8b:b5:a8:0d:4e:a3:c4:c0:15:62:9e: a6:a0:be:84:6f:99:bf:7f:e5:14:1c:bd:3a:65:71: 3c:03:37:2d:59:b6:cd:af:e5:60:ad:d5:e0:ac:7d: 87:ed:7e:52:e1:0d:8b:0f:b0:8b:49:b2:16:19:dd: 88:a7:07:fc:f8:e9:06:0d:68:2c:03:50:fe:7c:30: 5f:f6:19:ca:8d:00:84:2a:8d:2e:3a:f2:de:aa:55: 1e:f8:85:fd:9d:0e:fe:9d:e7:0b:8c:ce:e2:38:d2: 44:9f:eb:c6:4f:0f:88:aa:87:be:27:36:e9:56:12: 4b:a1:a7:f8:eb:2e:d3:dc:b9:a8:d1:29:d9:a7:da: 6d:d3:dd:4a:33:df:26:3d:e7:74:cc:b3:eb:5b:7e: 46:4c:3c:c9:6c:ec:dc:b4:45:af:dd:f3:12:20:eb: 7a:7b:7c:57:90:8e:c4:bf:36:64:3f:bf:2a:c6:78: 73:df:fa:e6:80:2e:22:df:de:25:84:65:20:68:19: a2:96:d2:52:14:e4:c3:f9:4e:f4:4d:bd:e2:b6:e8: aa:39:31:69:59:91:c1:91:98:0c:20:d7:58:59:12: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:FA:E9:BB:EB:C6:44:2F:6C:C7:53:42:5F:48:C0:48:A4:2A:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl X509v3 Authority Key Identifier: keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5b:65:bc:84:87:b1:ac:c8:c3:2e:8f:cf:11:14:01:06:0c: 55:65:a3:b5:44:73:62:f5:b6:bc:be:85:f8:c3:8b:11:e8:0a: 38:b5:88:bd:86:ae:56:ec:c6:c8:19:20:21:d0:e0:a3:34:ce: 34:b7:e4:a4:22:54:7e:ec:fd:73:d3:97:c0:38:39:c1:fd:87: fa:ae:c1:0d:f3:1d:da:7d:db:69:e3:ce:66:b0:e5:2a:a7:46: 59:44:bb:b2:59:14:58:61:89:90:52:78:a8:d8:52:16:43:89: fa:a0:f0:f4:4d:a2:b9:09:62:be:23:d4:30:80:6e:10:24:65: 65:23:f1:a5:71:f8:12:bf:49:74:17:dc:3c:ae:63:43:a4:4f: 31:f7:81:36:52:87:cb:b0:ff:37:36:48:5f:ed:be:dc:35:1a: 51:da:de:df:f3:1f:1d:d3:f3:ad:1a:76:0c:64:33:de:91:9f: a4:f2:86:90:1e:95:7f:0a:21:bc:e4:3e:31:82:74:c6:55:e3: 85:68:e0:7a:1a:ca:75:e4:19:4b:18:25:31:e3:e4:3b:41:71: f5:57:0c:f2:e9:60:b4:04:09:85:b9:de:b3:01:20:26:f3:23: 16:ed:fa:b8:e2:62:95:48:88:ea:d5:04:e5:07:73:57:51:91: ad:a9:15:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErr8Glu8sTAEtIL+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0 MzVlMB4XDTI1MDgyMDE4MDAwM1oXDTI1MDgyMzE4MDAwMFowLzEtMCsGA1UEAxMk NTBhYTNiZTMtZWI0My00MGU5LWE3NzYtZDcyNDk0NDJhOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUj8OfphYk2W0wQrMzJYRDXzE9NB4coAE4Wl DRV5tQVdi7WoDU6jxMAVYp6moL6Eb5m/f+UUHL06ZXE8AzctWbbNr+VgrdXgrH2H 7X5S4Q2LD7CLSbIWGd2Ipwf8+OkGDWgsA1D+fDBf9hnKjQCEKo0uOvLeqlUe+IX9 nQ7+necLjM7iONJEn+vGTw+Iqoe+JzbpVhJLoaf46y7T3Lmo0SnZp9pt091KM98m Ped0zLPrW35GTDzJbOzctEWv3fMSIOt6e3xXkI7EvzZkP78qxnhz3/rmgC4i394l hGUgaBmiltJSFOTD+U70Tb3ituiqOTFpWZHBkZgMINdYWRIfcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFPd+um768ZEL2zHU0JfSMBIpCpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jN2Fl YTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvYzdhZWE3ZTItZTM4MC00 NTU5LTlmZjMtNGZjNzEzOGM0MzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzdhZWE3ZTItZTM4MC00NTU5LTlm ZjMtNGZjNzEzOGM0MzVlL2M3YWVhN2UyLWUzODAtNDU1OS05ZmYzLTRmYzcxMzhj NDM1ZS5jcmwwHwYDVR0jBBgwFoAUAueJuYYj4tMp8jV4mdgRxdPaCpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3 MTM4YzQzNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdW2W8hIexrMjDLo/PERQB BgxVZaO1RHNi9ba8voX4w4sR6Ao4tYi9hq5W7MbIGSAh0OCjNM40t+SkIlR+7P1z 05fAODnB/Yf6rsEN8x3afdtp485msOUqp0ZZRLuyWRRYYYmQUnio2FIWQ4n6oPD0 TaK5CWK+I9QwgG4QJGVlI/GlcfgSv0l0F9w8rmNDpE8x94E2UofLsP83Nkhf7b7c NRpR2t7f8x8d0/OtGnYMZDPekZ+k8oaQHpV/CiG85D4xgnTGVeOFaOB6Gsp15BlL GCUx4+Q7QXH1Vwzy6WC0BAmFud6zASAm8yMW7fq44mKVSIjq1QTlB3NXUZGtqRV5 -----END CERTIFICATE-----Generated at Wed Aug 20 21:39:17 2025 by rpki-client