$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft File: 938e1602-8093-4bcd-b527-f5d1756295fc.mft (raw, json) Hash identifier: hXZ78sMvFk8KI4JAmlbcoSv0Wfj2bSLD0DUilv2H9/w= Subject key identifier: 53:D6:38:12:4B:3A:04:09:A1:F3:69:E9:82:D1:E5:58:36:AF:41:A7 Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Certificate issuer: /CN=938e1602-8093-4bcd-b527-f5d1756295fc Certificate serial: 010D0C9F4328584AF98C8B726111DA1DBC4D3F90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft Manifest number: 010D0C9F432858481E2C2E83A803BC884E05520D Signing time: Mon 25 Aug 2025 15:00:08 +0000 Manifest this update: Mon 25 Aug 2025 15:00:08 +0000 Manifest next update: Thu 28 Aug 2025 15:00:00 +0000 Files and hashes: 1: 938e1602-8093-4bcd-b527-f5d1756295fc.crl (hash: YqgofnztadFv3BpePe2qV7GCRxnOAFlEFfZybkfFvjA=) 2: c431513d-aaef-3485-b46c-d4c9e32372d8.roa (hash: xSQszdLI7pqUXpx2pG8Hap375hJBDOR3uRvphVJRC4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:8c:8b:72:61:11:da:1d:bc:4d:3f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc Validity Not Before: Aug 25 15:00:08 2025 GMT Not After : Aug 28 15:00:00 2025 GMT Subject: CN=618135bd-3cec-428b-a4f4-addc326fb434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:ba:19:21:6a:05:e6:20:c5:b8:ca:1c:55: 91:de:b3:e5:15:d7:c8:2f:4c:06:f4:56:3f:20:a0: 6d:90:a6:9e:6a:18:75:f0:fd:70:af:09:6d:83:0f: 71:a1:69:2f:1e:20:25:09:52:c9:2c:fc:69:93:20: 5b:6d:46:37:d9:a2:53:ac:a0:78:fc:73:9d:46:52: 7a:6b:e4:8d:76:da:0f:08:71:33:b3:1d:51:b0:8c: c8:ec:42:ee:81:e0:79:c1:51:9c:05:a1:fb:4e:95: ec:ab:f9:6e:0e:d2:b0:01:5e:be:83:f6:35:34:b5: 68:1c:c9:6c:10:76:f4:c3:e3:2e:55:72:ec:96:32: 8e:dc:36:8a:16:32:7f:18:17:50:97:47:64:f4:71: 4b:27:64:98:79:2a:15:86:84:70:8c:73:99:b0:15: 42:7c:01:f3:d7:2d:1b:82:81:63:09:62:3d:3f:c8: c2:ba:b2:bc:d4:9f:28:c2:0f:10:93:1f:b9:48:ac: 5d:f2:f7:ff:2d:ac:55:85:b5:63:cd:d7:b5:bf:9b: 8c:db:95:4b:ad:15:d7:9a:d3:75:21:61:76:a1:f4: 1e:2c:1e:30:dd:49:9b:88:3a:3d:5d:b5:61:e8:b8: 59:96:04:11:08:93:28:59:36:ee:a5:8b:a3:ce:53: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:38:12:4B:3A:04:09:A1:F3:69:E9:82:D1:E5:58:36:AF:41:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl X509v3 Authority Key Identifier: keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d6:bf:6b:01:a3:c7:21:0a:52:96:9b:33:e1:bd:73:ab:8d: 8d:7e:9f:c1:44:47:3e:4e:8d:23:d9:8f:45:f8:b0:f5:1e:67: ee:e6:e7:d2:7d:a2:1b:14:0a:dd:bd:d5:d7:aa:1a:a7:fb:d7: 43:55:ee:33:96:f2:4a:b8:0c:aa:6a:c7:25:ce:a1:35:95:c3: 73:db:3f:50:41:5d:30:45:58:6c:46:c5:04:d8:0c:ad:4f:18: 4b:e8:b0:ac:73:87:dc:93:b3:01:cf:6a:8b:75:08:43:95:65: b1:89:a9:fa:81:c2:d6:ff:fd:4c:04:7e:f7:f5:4a:1c:10:12: 31:f6:e8:c2:90:20:d2:10:71:2f:fe:4d:4f:87:ea:d7:ef:d9: df:c0:9e:08:21:fd:4e:74:46:20:4f:55:2a:14:d1:6a:5f:56: d6:f4:a5:70:d8:c0:8e:07:6e:e5:5e:99:c9:6e:05:1f:d8:02: 7f:3e:ed:e1:bd:9b:92:b2:3b:70:ed:51:72:a7:62:c3:7c:52: 4a:9a:21:a0:08:8d:df:9a:dd:83:0f:a5:08:99:10:ea:84:3a: 55:83:d3:60:88:70:8b:0d:1b:04:0c:05:ef:93:87:8a:44:82: 48:39:10:71:da:6e:75:d7:89:cb:ad:62:0d:98:a5:3f:c6:18: d0:ad:c0:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr5jItyYRHaHbxNP5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5 NWZjMB4XDTI1MDgyNTE1MDAwOFoXDTI1MDgyODE1MDAwMFowLzEtMCsGA1UEAxMk NjE4MTM1YmQtM2NlYy00MjhiLWE0ZjQtYWRkYzMyNmZiNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5C6GSFqBeYgxbjKHFWR3rPlFdfIL0wG9FY/ IKBtkKaeahh18P1wrwltgw9xoWkvHiAlCVLJLPxpkyBbbUY32aJTrKB4/HOdRlJ6 a+SNdtoPCHEzsx1RsIzI7ELugeB5wVGcBaH7TpXsq/luDtKwAV6+g/Y1NLVoHMls EHb0w+MuVXLsljKO3DaKFjJ/GBdQl0dk9HFLJ2SYeSoVhoRwjHOZsBVCfAHz1y0b goFjCWI9P8jCurK81J8owg8Qkx+5SKxd8vf/LaxVhbVjzde1v5uM25VLrRXXmtN1 IWF2ofQeLB4w3UmbiDo9XbVh6LhZlgQRCJMoWTbupYujzlPpyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFPWOBJLOgQJofNp6YLR5Vg2r0GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Mzhl MTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvOTM4ZTE2MDItODA5My00 YmNkLWI1MjctZjVkMTc1NjI5NWZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTM4ZTE2MDItODA5My00YmNkLWI1 MjctZjVkMTc1NjI5NWZjLzkzOGUxNjAyLTgwOTMtNGJjZC1iNTI3LWY1ZDE3NTYy OTVmYy5jcmwwHwYDVR0jBBgwFoAU/MwAtMa9gHxpV2YtGanrwjeJePYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQx NzU2Mjk1ZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA71r9rAaPHIQpSlpsz4b1z q42Nfp/BREc+To0j2Y9F+LD1Hmfu5ufSfaIbFArdvdXXqhqn+9dDVe4zlvJKuAyq asclzqE1lcNz2z9QQV0wRVhsRsUE2AytTxhL6LCsc4fck7MBz2qLdQhDlWWxian6 gcLW//1MBH739UocEBIx9ujCkCDSEHEv/k1Ph+rX79nfwJ4IIf1OdEYgT1UqFNFq X1bW9KVw2MCOB27lXpnJbgUf2AJ/Pu3hvZuSsjtw7VFyp2LDfFJKmiGgCI3fmt2D D6UImRDqhDpVg9NgiHCLDRsEDAXvk4eKRIJIORBx2m5114nLrWINmKU/xhjQrcDy -----END CERTIFICATE-----Generated at Tue Aug 26 06:41:40 2025 by rpki-client