$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft File: b71f0bde-5320-4917-be9e-6cadf8118c9a.mft (raw, json) Hash identifier: Ku85BfmTfL+uYm+kq0tn3XRssmRhFOS86aG66k1SxxQ= Subject key identifier: 88:96:8E:37:6A:E4:0F:F5:32:19:54:F6:0A:20:9F:E8:74:27:F3:E4 Authority key identifier: 49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7 Certificate issuer: /CN=b71f0bde-5320-4917-be9e-6cadf8118c9a Certificate serial: 010D0C9F4328584AF9AA43604C89D0CFE7674A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft Manifest number: 010D0C9F43285848DC1C80F637A2D2D1E9A93846 Signing time: Mon 25 Aug 2025 16:00:03 +0000 Manifest this update: Mon 25 Aug 2025 16:00:03 +0000 Manifest next update: Thu 28 Aug 2025 16:00:00 +0000 Files and hashes: 1: 6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa (hash: i8o60e3qHpoS0TREFLrMoykm9iQ6q9r1C+r7x6UsXeo=) 2: b71f0bde-5320-4917-be9e-6cadf8118c9a.crl (hash: MiIC8jlSH7cHAJTfrt7j3DeXH6htmqIxA/Mr23C0gUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:aa:43:60:4c:89:d0:cf:e7:67:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f0bde-5320-4917-be9e-6cadf8118c9a Validity Not Before: Aug 25 16:00:03 2025 GMT Not After : Aug 28 16:00:00 2025 GMT Subject: CN=43fd8baa-d5a7-424f-bd32-741c2716d7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:af:ff:11:ec:8b:73:e0:81:4e:07:b7:03: 11:ad:64:5d:92:a2:3f:d0:01:8c:66:63:df:72:ed: 10:8a:98:6a:3a:96:66:59:48:89:49:6d:8f:5c:4c: c3:1f:93:3f:d8:ff:58:ae:42:2d:88:f0:d1:4c:3e: f2:d3:56:29:d2:eb:e8:eb:2b:34:40:03:87:73:ef: 4f:01:4d:d3:2e:d6:1b:3b:fd:10:14:29:ad:d5:94: 98:02:a7:1f:bf:a4:cf:79:00:1c:0d:d0:3c:ee:6f: ff:ef:67:c7:0e:e8:03:cb:db:b5:5c:5c:07:a4:82: 6d:0a:dc:4b:5d:f6:ea:15:97:b2:52:a5:9a:16:ee: 3f:3b:9b:56:83:4e:aa:96:41:55:e6:94:1b:92:d4: 84:a0:e7:02:66:9d:e6:c9:e9:bc:e1:4f:c3:5d:ef: c7:c5:aa:90:10:66:c2:2d:90:dd:28:56:f6:ff:67: 0a:42:a1:c6:a9:fb:62:b1:18:1e:9a:75:ae:96:2e: 9b:10:a3:ad:81:61:5a:05:58:90:76:15:f5:9b:a5: b7:f0:e2:5f:a9:b7:d2:58:98:dd:14:ca:90:cc:94: 28:76:d9:a9:49:cf:67:b1:28:90:85:ee:5e:45:b2: 3e:7c:10:23:c0:1a:e2:6b:93:4f:22:e6:a5:2e:aa: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:96:8E:37:6A:E4:0F:F5:32:19:54:F6:0A:20:9F:E8:74:27:F3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl X509v3 Authority Key Identifier: keyid:49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8a:45:98:ec:3c:c6:55:30:e0:51:44:17:b5:27:b9:d0:be: 19:f0:1a:41:2a:87:b8:7d:43:e1:d4:ba:8d:7f:6e:0a:d3:47: 47:62:3e:64:dc:6c:1b:dd:28:66:94:70:e6:a7:ee:af:d0:57: b5:dd:09:15:f0:a3:b3:18:94:c9:b9:c0:d2:35:2e:2c:22:13: cb:6c:0f:8a:f0:f7:fb:10:4b:79:05:84:03:a9:09:c0:eb:f4: b6:6b:df:67:e4:43:25:f2:c4:55:cf:2d:3a:e9:af:f3:52:ca: af:6c:a5:64:bc:0a:b8:6c:57:35:34:ca:64:71:e9:f3:f7:9c: d3:30:ff:8f:28:a1:69:5a:66:10:0c:94:f4:0d:1c:25:1f:b0: 47:80:f2:4f:a7:7a:d1:4a:49:9e:6c:03:c0:03:07:5f:de:af: 6f:8f:1b:57:fc:9f:09:74:d2:17:6c:68:9e:5a:97:4e:99:2b: fd:3f:52:17:88:29:33:e4:50:41:5f:09:99:62:ea:63:31:56: 67:2a:71:f0:79:4d:96:94:f8:f2:87:ed:aa:fa:35:7c:59:a6: ea:dc:59:06:6c:93:19:0c:2e:47:eb:05:c4:1c:19:01:ca:4f: b1:2c:c6:c1:6e:88:78:59:65:b7:f3:9d:fa:7c:a3:13:5c:4a: 04:f9:0c:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr5qkNgTInQz+dnSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjBiZGUtNTMyMC00OTE3LWJlOWUtNmNhZGY4MTE4 YzlhMB4XDTI1MDgyNTE2MDAwM1oXDTI1MDgyODE2MDAwMFowLzEtMCsGA1UEAxMk NDNmZDhiYWEtZDVhNy00MjRmLWJkMzItNzQxYzI3MTZkN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUOv/xHsi3PggU4HtwMRrWRdkqI/0AGMZmPf cu0QiphqOpZmWUiJSW2PXEzDH5M/2P9YrkItiPDRTD7y01Yp0uvo6ys0QAOHc+9P AU3TLtYbO/0QFCmt1ZSYAqcfv6TPeQAcDdA87m//72fHDugDy9u1XFwHpIJtCtxL XfbqFZeyUqWaFu4/O5tWg06qlkFV5pQbktSEoOcCZp3myem84U/DXe/HxaqQEGbC LZDdKFb2/2cKQqHGqftisRgemnWuli6bEKOtgWFaBViQdhX1m6W38OJfqbfSWJjd FMqQzJQodtmpSc9nsSiQhe5eRbI+fBAjwBria5NPIualLqpOvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIiWjjdq5A/1MhlU9gogn+h0J/PkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNzFm MGJkZS01MzIwLTQ5MTctYmU5ZS02Y2FkZjgxMThjOWEvYjcxZjBiZGUtNTMyMC00 OTE3LWJlOWUtNmNhZGY4MTE4YzlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjcxZjBiZGUtNTMyMC00OTE3LWJl OWUtNmNhZGY4MTE4YzlhL2I3MWYwYmRlLTUzMjAtNDkxNy1iZTllLTZjYWRmODEx OGM5YS5jcmwwHwYDVR0jBBgwFoAUSTjQ3E9y3G0ec0O5XjfLrMUC8ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNzFmMGJkZS01MzIwLTQ5MTctYmU5ZS02Y2Fk ZjgxMThjOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaikWY7DzGVTDgUUQXtSe5 0L4Z8BpBKoe4fUPh1LqNf24K00dHYj5k3Gwb3ShmlHDmp+6v0Fe13QkV8KOzGJTJ ucDSNS4sIhPLbA+K8Pf7EEt5BYQDqQnA6/S2a99n5EMl8sRVzy066a/zUsqvbKVk vAq4bFc1NMpkcenz95zTMP+PKKFpWmYQDJT0DRwlH7BHgPJPp3rRSkmebAPAAwdf 3q9vjxtX/J8JdNIXbGieWpdOmSv9P1IXiCkz5FBBXwmZYupjMVZnKnHweU2WlPjy h+2q+jV8Wabq3FkGbJMZDC5H6wXEHBkByk+xLMbBboh4WWW38536fKMTXEoE+Qwp -----END CERTIFICATE-----Generated at Tue Aug 26 06:35:25 2025 by rpki-client