$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft File: 7b407ffa-7fa7-4255-8a63-77381712e9e8.mft (raw, json) Hash identifier: YO8CswVB4E9vKtlf+5p2dj/eWrnFoHhmUaZQyZWL7nI= Subject key identifier: 9B:04:9D:FB:39:01:29:F3:57:1D:AA:D7:72:49:BD:83:51:F3:FC:55 Authority key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Certificate issuer: /CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Certificate serial: 010D0C9F4328584AF9E5D3798E527805B17D3B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft Manifest number: 010D0C9F4328584940E89232F5239F1B05F1F9A1 Signing time: Mon 25 Aug 2025 18:00:03 +0000 Manifest this update: Mon 25 Aug 2025 18:00:03 +0000 Manifest next update: Thu 28 Aug 2025 18:00:00 +0000 Files and hashes: 1: 7b407ffa-7fa7-4255-8a63-77381712e9e8.crl (hash: zjRp0Qm3CaPeE7qWCJbz1ZFND7x/o9KmFlgd4WXIFn4=) 2: 9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa (hash: 8tu7A07ZeMdbcsixZN4Mq/z8T8K4N1yWjg6aSv6SyBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e5:d3:79:8e:52:78:05:b1:7d:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Validity Not Before: Aug 25 18:00:03 2025 GMT Not After : Aug 28 18:00:00 2025 GMT Subject: CN=c7afda63-a9ce-4814-a4bf-2c99133eba6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:59:cf:7a:66:57:b5:f9:d9:cb:e6:66:44: 01:a2:9e:c0:b3:43:0c:01:c7:ca:34:ff:79:f8:36: 20:96:e2:50:5e:36:fe:82:a3:63:30:a7:67:f1:7d: f8:0d:70:ee:dd:85:6d:91:d8:f1:71:2b:da:72:c1: 59:82:d8:85:ad:24:2b:1b:ec:9d:d1:0a:c6:3f:79: 3f:85:1d:99:19:05:ca:0d:7b:3a:1e:56:1a:3c:d9: 8a:fc:b6:5a:18:4b:95:eb:e7:f9:c0:57:cf:b0:6d: ab:3c:be:48:a1:87:27:de:5d:07:bb:19:59:8f:07: 1f:75:e8:63:16:fd:82:68:5e:77:c6:ae:22:3d:c1: 34:cd:a8:70:d8:02:51:f4:29:ac:9a:b7:c1:ff:f8: 4a:4b:ba:e4:b9:a8:44:a0:2e:53:a1:43:32:9a:aa: de:d1:b8:61:72:bc:83:a5:5a:3a:f5:3c:04:3b:89: bc:ff:c2:34:89:26:3f:9c:62:c3:ee:5e:22:bd:bb: 0b:ec:e9:65:2c:a4:25:b5:e5:c5:72:6d:89:ec:83: 66:77:bc:8c:9f:a5:89:a1:bb:d0:15:72:37:d5:21: 39:fc:bb:1f:a2:37:bc:45:e6:02:3e:77:69:c0:9a: fb:cc:98:b1:5f:60:5c:e4:f9:fb:ef:d0:52:8d:24: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:04:9D:FB:39:01:29:F3:57:1D:AA:D7:72:49:BD:83:51:F3:FC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl X509v3 Authority Key Identifier: keyid:C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:77:01:e5:fa:93:4c:4c:97:cd:ce:a5:db:bd:12:22:a1:be: 22:7f:5c:ee:1d:7f:f9:e7:47:10:3c:5a:4b:c5:c9:4b:55:09: c1:f7:f5:ea:63:7d:67:47:0c:37:b1:a0:9f:dc:6c:61:5f:4b: 3a:3c:a8:fa:ff:bd:db:9a:55:bb:26:92:98:21:94:d2:70:98: dd:c4:ee:bb:45:ab:d3:9e:79:9f:e2:37:1c:c4:ab:ae:71:c0: 18:bb:e3:e4:f6:a6:be:b6:0e:42:96:62:8f:30:c0:d3:39:53: cc:d3:40:75:ef:d9:3e:94:25:ad:d4:4d:cf:4c:24:3a:14:5c: a8:79:d7:d7:64:e9:68:6f:eb:7e:b8:11:e2:5f:7d:bf:68:52: 80:60:6a:3b:04:d0:9c:d5:7b:4c:74:01:a6:0f:b0:5e:21:e6: d1:68:ba:ae:dd:11:e5:6b:e7:25:dd:67:f9:6e:ba:18:ba:fa: e0:fa:e5:ad:82:81:a5:09:12:b6:92:d7:06:33:50:c9:14:7f: 36:bd:20:52:22:f4:01:94:62:09:c3:11:89:08:c8:f0:fd:cf: ea:b5:5d:7e:a1:c9:52:26:27:47:8d:b7:c8:1d:21:d0:f6:bd: 06:40:6e:45:0e:41:59:45:9a:6e:cb:71:93:e6:05:31:9d:07: f8:fc:12:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr55dN5jlJ4BbF9O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MDdmZmEtN2ZhNy00MjU1LThhNjMtNzczODE3MTJl OWU4MB4XDTI1MDgyNTE4MDAwM1oXDTI1MDgyODE4MDAwMFowLzEtMCsGA1UEAxMk YzdhZmRhNjMtYTljZS00ODE0LWE0YmYtMmM5OTEzM2ViYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3pZz3pmV7X52cvmZkQBop7As0MMAcfKNP95 +DYgluJQXjb+gqNjMKdn8X34DXDu3YVtkdjxcSvacsFZgtiFrSQrG+yd0QrGP3k/ hR2ZGQXKDXs6HlYaPNmK/LZaGEuV6+f5wFfPsG2rPL5IoYcn3l0HuxlZjwcfdehj Fv2CaF53xq4iPcE0zahw2AJR9CmsmrfB//hKS7rkuahEoC5ToUMymqre0bhhcryD pVo69TwEO4m8/8I0iSY/nGLD7l4ivbsL7OllLKQlteXFcm2J7INmd7yMn6WJobvQ FXI31SE5/Lsfoje8ReYCPndpwJr7zJixX2Bc5Pn779BSjSRR1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJsEnfs5ASnzVx2q13JJvYNR8/xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YjQw N2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcxMmU5ZTgvN2I0MDdmZmEtN2ZhNy00 MjU1LThhNjMtNzczODE3MTJlOWU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2I0MDdmZmEtN2ZhNy00MjU1LThh NjMtNzczODE3MTJlOWU4LzdiNDA3ZmZhLTdmYTctNDI1NS04YTYzLTc3MzgxNzEy ZTllOC5jcmwwHwYDVR0jBBgwFoAUwnPNckEbBDCbe/SoQWX+RoCHYiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4 MTcxMmU5ZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHdwHl+pNMTJfNzqXbvRIi ob4if1zuHX/550cQPFpLxclLVQnB9/XqY31nRww3saCf3GxhX0s6PKj6/73bmlW7 JpKYIZTScJjdxO67RavTnnmf4jccxKuuccAYu+Pk9qa+tg5ClmKPMMDTOVPM00B1 79k+lCWt1E3PTCQ6FFyoedfXZOlob+t+uBHiX32/aFKAYGo7BNCc1XtMdAGmD7Be IebRaLqu3RHla+cl3Wf5broYuvrg+uWtgoGlCRK2ktcGM1DJFH82vSBSIvQBlGIJ wxGJCMjw/c/qtV1+oclSJidHjbfIHSHQ9r0GQG5FDkFZRZpuy3GT5gUxnQf4/BLy -----END CERTIFICATE-----Generated at Tue Aug 26 07:12:25 2025 by rpki-client