$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft File: 5a81d94a-3591-433e-8f6e-da4b9078552b.mft (raw, json) Hash identifier: QceI4iEMTRu6ipNJ20SjJi69NhRDL7mUbtOwcP41oaY= Subject key identifier: D8:29:04:EB:E1:71:BD:E6:F4:3D:B8:A8:DA:34:98:E4:AA:0F:A9:58 Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F4328584AF9C816D83795AB06D22B9300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft Manifest number: 010D0C9F43285848562F8573C59705F64E7918F8 Signing time: Mon 25 Aug 2025 17:00:08 +0000 Manifest this update: Mon 25 Aug 2025 17:00:08 +0000 Manifest next update: Thu 28 Aug 2025 17:00:00 +0000 Files and hashes: 1: 5a81d94a-3591-433e-8f6e-da4b9078552b.crl (hash: Tj9Yyof7UEfuQRg2hMYCHr5UeoYX363fzpmtxZYGhi4=) 2: fc54ca24-1892-3666-9175-3d07e4e310b4.roa (hash: DMs/WDAR2W600Pb1+8pjVZv4iyv6G3Lb8gwoFOHvMJg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:16:d8:37:95:ab:06:d2:2b:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Aug 25 17:00:08 2025 GMT Not After : Aug 28 17:00:00 2025 GMT Subject: CN=8f6cda85-34f4-4c07-8faa-70aad144ba01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:a4:7b:0b:0b:39:0c:d9:f5:6c:95:b6:af: 1c:0b:18:f0:9f:7c:31:c8:41:ae:5a:e3:63:06:a6: a4:68:26:9c:7b:60:fc:f8:a4:71:ef:ce:c7:46:4a: a0:50:08:02:d1:78:5c:69:be:89:e1:e7:1b:68:a7: 5b:16:6b:5a:4c:1d:98:80:a3:e2:64:45:75:f3:11: 90:9c:b1:9a:d3:89:f3:6b:c6:7b:f0:ee:4c:ec:04: 2a:d6:80:d9:b0:2f:72:d4:ba:34:19:a6:2f:00:97: f7:fe:f8:42:8e:47:26:53:88:c4:6c:8e:66:78:a3: 4c:0f:af:db:41:4c:bb:e8:0d:b5:fe:7a:8c:fe:ee: 83:8f:5a:ae:69:4f:6b:54:d2:19:d4:76:b9:49:a4: d6:bd:f8:53:1b:7c:a7:9c:bc:f1:80:46:d1:04:6b: f4:b1:43:0c:fc:01:01:b5:89:7b:68:fc:25:3d:ab: b6:74:db:a5:93:11:0b:b7:ab:91:09:62:81:3e:57: 9a:18:51:92:5e:7e:74:2b:fc:04:b5:d0:c9:91:46: 3a:84:8b:a3:15:90:71:e7:a1:1d:fb:13:8c:ff:f9: 88:e9:fb:6f:d4:b0:5b:ec:a5:32:9b:09:c5:5e:28: 29:c0:23:72:6d:d9:32:69:92:83:88:03:ab:76:70: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:04:EB:E1:71:BD:E6:F4:3D:B8:A8:DA:34:98:E4:AA:0F:A9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8f:3a:0c:c2:8e:65:96:c0:00:83:4a:c1:07:0f:18:f8:fc: da:77:b6:bc:13:af:55:d1:8f:7a:0b:25:3b:6e:c8:1a:36:69: 93:85:8e:86:a7:66:5d:1a:9a:63:c2:8f:a4:62:0d:84:94:53: dd:9a:f4:96:d8:2a:67:97:da:dd:df:f5:8f:b4:20:3d:d2:d5: 4f:5b:c2:32:58:0f:39:2a:68:29:31:4d:1d:f0:b8:1e:e4:45: 6a:1c:3c:24:ac:a0:d7:5c:26:90:70:8f:50:0a:46:cc:67:13: 9d:2e:40:ec:16:2b:c0:fb:94:39:38:73:13:6a:1b:37:77:e7: a3:b5:8a:0a:80:36:3e:2d:04:4e:19:d0:17:cb:37:e3:5c:9e: 6d:46:12:9f:fc:ee:2b:31:e3:10:96:41:b1:12:39:a3:13:59: 32:6b:19:ba:48:13:ef:ce:24:a8:ff:d2:52:06:32:b9:68:52: e4:b3:91:9c:e8:e4:50:38:2e:fc:06:d1:72:04:4a:69:ff:74: 38:0f:fa:d4:ab:5c:52:30:3b:31:57:ab:77:7a:14:c2:d5:8c: 3b:a0:81:74:db:4b:8c:19:2b:f5:b6:f3:b9:80:bc:25:6c:0f: 0f:13:2d:ea:6d:0f:f9:cd:ca:05:fb:4e:9c:3b:5c:18:a6:96: 02:41:61:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr5yBbYN5WrBtIrkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI1MDgyNTE3MDAwOFoXDTI1MDgyODE3MDAwMFowLzEtMCsGA1UEAxMk OGY2Y2RhODUtMzRmNC00YzA3LThmYWEtNzBhYWQxNDRiYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhICkewsLOQzZ9WyVtq8cCxjwn3wxyEGuWuNj BqakaCace2D8+KRx787HRkqgUAgC0Xhcab6J4ecbaKdbFmtaTB2YgKPiZEV18xGQ nLGa04nza8Z78O5M7AQq1oDZsC9y1Lo0GaYvAJf3/vhCjkcmU4jEbI5meKNMD6/b QUy76A21/nqM/u6Dj1quaU9rVNIZ1Ha5SaTWvfhTG3ynnLzxgEbRBGv0sUMM/AEB tYl7aPwlPau2dNulkxELt6uRCWKBPleaGFGSXn50K/wEtdDJkUY6hIujFZBx56Ed +xOM//mI6ftv1LBb7KUymwnFXigpwCNybdkyaZKDiAOrdnCQ1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNgpBOvhcb3m9D24qNo0mOSqD6lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvNWE4MWQ5NGEtMzU5MS00 MzNlLThmNmUtZGE0YjkwNzg1NTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcjzoMwo5llsAAg0rBBw8Y +Pzad7a8E69V0Y96CyU7bsgaNmmThY6Gp2ZdGppjwo+kYg2ElFPdmvSW2Cpnl9rd 3/WPtCA90tVPW8IyWA85KmgpMU0d8Lge5EVqHDwkrKDXXCaQcI9QCkbMZxOdLkDs FivA+5Q5OHMTahs3d+ejtYoKgDY+LQROGdAXyzfjXJ5tRhKf/O4rMeMQlkGxEjmj E1kyaxm6SBPvziSo/9JSBjK5aFLks5Gc6ORQOC78BtFyBEpp/3Q4D/rUq1xSMDsx V6t3ehTC1Yw7oIF020uMGSv1tvO5gLwlbA8PEy3qbQ/5zcoF+06cO1wYppYCQWHA -----END CERTIFICATE-----Generated at Tue Aug 26 07:03:40 2025 by rpki-client