$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft File: 29540dcd-69da-45be-b57c-8c4aefcf66fe.mft (raw, json) Hash identifier: fsk11W07HCBXWyqQ8yUV5Z6OlrPLg1cq2vEfdkveQIY= Subject key identifier: 21:65:D8:8B:01:BE:AF:FD:1C:35:7F:F1:2D:21:CA:93:FE:AA:BF:F7 Authority key identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 Certificate issuer: /CN=29540dcd-69da-45be-b57c-8c4aefcf66fe Certificate serial: 010D0C9F4328584AF8D9DB2AF2D059669A3280C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft Manifest number: 010D0C9F43285848A90BBD47EDD40EA157DDCD59 Signing time: Mon 25 Aug 2025 09:00:08 +0000 Manifest this update: Mon 25 Aug 2025 09:00:08 +0000 Manifest next update: Thu 28 Aug 2025 09:00:00 +0000 Files and hashes: 1: 29540dcd-69da-45be-b57c-8c4aefcf66fe.crl (hash: 9YGp2F2hHHI/iEWdNgPanwZklmm7k26ORotd3DiWdrI=) 2: abb00048-3cd8-351a-b0c7-cfbdb46bc6dc.roa (hash: EMOUJxdWg4WchNAhG+jeP+VbFBf7b2XuAf3/1cwPDAY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:d9:db:2a:f2:d0:59:66:9a:32:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29540dcd-69da-45be-b57c-8c4aefcf66fe Validity Not Before: Aug 25 09:00:08 2025 GMT Not After : Aug 28 09:00:00 2025 GMT Subject: CN=db891fad-8f09-4623-a44d-4870b050375b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:f0:99:6a:92:09:70:90:15:eb:0a:90:15: 60:8b:7f:26:a7:a0:49:b7:18:78:91:4f:d0:1b:06: 78:a0:91:cb:01:67:9e:da:b0:fb:51:f8:4d:41:45: ab:e5:fd:24:5a:31:df:13:51:c2:e0:7c:74:ee:51: 3f:d8:96:d2:74:4b:a2:b4:ff:62:be:1e:6a:6d:a7: b2:7b:cc:6a:db:91:83:73:42:d0:10:7a:d3:c1:62: 52:fb:27:80:3b:66:a1:7b:53:43:87:ca:ee:6a:7a: 28:aa:41:9a:98:74:a9:59:f3:8d:c4:85:b9:16:ca: 2a:e1:5f:7b:c0:67:f0:ed:1c:5a:47:e1:f5:92:85: ff:43:df:3c:6e:24:78:73:ee:ec:3d:68:12:8f:5b: 67:25:fa:7e:15:6b:eb:0e:3f:bc:04:6c:df:89:5a: 6c:90:64:b7:4d:7b:90:0e:9e:45:60:7d:93:1a:d9: 78:97:17:d9:86:02:6d:b6:04:f7:59:5c:4e:67:75: a5:47:10:76:6f:75:fd:6f:ec:29:f2:58:e7:9a:63: cb:84:66:6f:b7:79:46:1d:fe:70:65:de:b6:e3:60: 0c:c7:dc:82:ee:83:29:02:6f:bb:3a:52:24:7f:37: ea:71:96:79:f5:6c:7b:2a:d8:36:0f:fd:df:97:19: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:D8:8B:01:BE:AF:FD:1C:35:7F:F1:2D:21:CA:93:FE:AA:BF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.crl X509v3 Authority Key Identifier: keyid:3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:73:3c:66:11:46:22:e3:c8:de:34:c1:6a:fa:ab:87:f5:8d: 2a:4c:87:70:a1:d3:04:8b:e5:63:29:9f:30:83:34:62:8e:62: 75:62:60:a2:f7:ca:64:f6:e6:e7:66:65:81:75:ab:72:46:1c: df:2b:13:f0:bf:24:ea:8f:ad:90:4b:89:b2:03:c7:f3:bf:dd: f0:74:67:3f:cd:69:11:91:93:34:af:74:84:53:d6:da:bf:a3: ee:d5:fa:55:9f:c7:84:04:2a:3e:fa:f8:9c:d8:12:76:e8:24: be:96:f0:81:bc:6d:54:c1:ad:96:e9:df:59:9a:96:37:b3:c9: 29:8d:2c:9b:94:c8:7d:7e:a8:5b:b1:23:73:ef:88:77:32:49: 85:65:e2:ae:72:bc:df:e4:bc:ae:39:4f:33:06:1b:bb:57:06: 7e:c7:d0:55:1c:bf:a5:24:c2:28:bd:f3:ec:88:a7:9a:15:84: 0e:f2:d8:c0:9c:d1:54:2d:e7:6f:63:c7:06:0a:10:38:36:82: 05:a3:38:53:78:12:59:7c:36:88:a4:0f:f7:b2:c8:61:3b:fc: a5:1c:08:9b:89:6c:a1:1c:1c:d7:aa:df:22:4b:1e:d6:63:10: 25:b9:f8:aa:8e:9b:7a:55:f5:0f:c4:f6:7e:72:24:c7:99:15: 4e:bd:e0:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr42dsq8tBZZpoygMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NDBkY2QtNjlkYS00NWJlLWI1N2MtOGM0YWVmY2Y2 NmZlMB4XDTI1MDgyNTA5MDAwOFoXDTI1MDgyODA5MDAwMFowLzEtMCsGA1UEAxMk ZGI4OTFmYWQtOGYwOS00NjIzLWE0NGQtNDg3MGIwNTAzNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQjwmWqSCXCQFesKkBVgi38mp6BJtxh4kU/Q GwZ4oJHLAWee2rD7UfhNQUWr5f0kWjHfE1HC4Hx07lE/2JbSdEuitP9ivh5qbaey e8xq25GDc0LQEHrTwWJS+yeAO2ahe1NDh8ruanooqkGamHSpWfONxIW5Fsoq4V97 wGfw7RxaR+H1koX/Q988biR4c+7sPWgSj1tnJfp+FWvrDj+8BGzfiVpskGS3TXuQ Dp5FYH2TGtl4lxfZhgJttgT3WVxOZ3WlRxB2b3X9b+wp8ljnmmPLhGZvt3lGHf5w Zd6242AMx9yC7oMpAm+7OlIkfzfqcZZ59Wx7Ktg2D/3flxmQHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFl2IsBvq/9HDV/8S0hypP+qr/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yOTU0 MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRhZWZjZjY2ZmUvMjk1NDBkY2QtNjlkYS00 NWJlLWI1N2MtOGM0YWVmY2Y2NmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjk1NDBkY2QtNjlkYS00NWJlLWI1 N2MtOGM0YWVmY2Y2NmZlLzI5NTQwZGNkLTY5ZGEtNDViZS1iNTdjLThjNGFlZmNm NjZmZS5jcmwwHwYDVR0jBBgwFoAUO7yh0YEILQco9fNexfuHqu8AepgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yOTU0MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRh ZWZjZjY2ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+czxmEUYi48jeNMFq+quH 9Y0qTIdwodMEi+VjKZ8wgzRijmJ1YmCi98pk9ubnZmWBdatyRhzfKxPwvyTqj62Q S4myA8fzv93wdGc/zWkRkZM0r3SEU9bav6Pu1fpVn8eEBCo++vic2BJ26CS+lvCB vG1Uwa2W6d9ZmpY3s8kpjSyblMh9fqhbsSNz74h3MkmFZeKucrzf5LyuOU8zBhu7 VwZ+x9BVHL+lJMIovfPsiKeaFYQO8tjAnNFULedvY8cGChA4NoIFozhTeBJZfDaI pA/3sshhO/ylHAibiWyhHBzXqt8iSx7WYxAlufiqjpt6VfUPxPZ+ciTHmRVOveAL -----END CERTIFICATE-----Generated at Tue Aug 26 06:56:13 2025 by rpki-client