$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft File: 1d394508-6160-4e82-89e3-165fa2784b30.mft (raw, json) Hash identifier: 6GEva7Zhmxyk1NCI+DMZzGQTb6QUHU4yx7muR/NsKh0= Subject key identifier: 71:5F:72:79:41:A7:EE:FA:4C:02:B0:67:3F:14:C2:00:CB:B1:78:C8 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F4328584AE8EA2C9F164549EA663FB458 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft Manifest number: 010D0C9F4328584073A81C4F1733DD25CF2E4DD6 Signing time: Tue 19 Aug 2025 16:00:03 +0000 Manifest this update: Tue 19 Aug 2025 16:00:03 +0000 Manifest next update: Thu 21 Aug 2025 16:00:00 +0000 Files and hashes: 1: 1d394508-6160-4e82-89e3-165fa2784b30.crl (hash: hhPM9IhPLk9GuCp9wdPZhMUPYOwxIdbvn8fVSkiKtjs=) 2: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (hash: rrJeXs7FJw6nUbDSIKHX/uoTnwImo0mAqucOr9QNfwg=) 3: d081b8cf-9f69-3201-9281-293c163a8a96.roa (hash: 5gQTYAerkwhxs3JbPV+BtDreBosbo7NapAVxP0iiGGI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:ea:2c:9f:16:45:49:ea:66:3f:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Aug 19 16:00:03 2025 GMT Not After : Aug 21 16:00:00 2025 GMT Subject: CN=887de14f-9a27-4b75-b086-de96f39d055d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:c3:82:cf:80:a0:b1:6e:7c:e3:8f:d7:77: d3:ec:86:39:c1:73:0b:2e:7c:96:a6:fd:de:5b:c4: d1:68:b9:3e:12:bb:4a:f7:8b:6f:c2:d2:6d:57:96: 16:84:e9:af:19:62:4e:31:8d:3a:7d:12:81:46:0c: 06:5d:09:ff:c1:1c:c2:28:25:af:33:80:c9:1a:d9: 26:cf:1c:7f:10:52:2d:e4:a2:52:d0:69:ca:65:99: 4f:66:34:a2:ec:f6:34:dd:33:b0:2a:aa:b9:e0:35: 93:ff:6d:18:fa:a4:16:65:e5:4b:0c:f5:7c:6c:5f: 52:d8:1c:e6:2c:cc:a9:4c:f1:f8:69:2d:bf:5c:11: d7:2d:c1:20:07:2e:cd:36:56:67:cb:a1:0a:06:ff: c3:5e:ab:99:6e:66:16:fd:0f:ab:60:b1:23:31:e6: 5e:e0:3f:3a:6a:2f:c7:33:d3:79:ff:0d:f8:3b:de: 55:4b:4e:1f:1c:e4:4e:7d:aa:11:c8:8e:42:32:4d: 7a:d8:be:0a:da:e0:c7:44:0e:8d:9d:91:28:55:ee: 1f:9a:13:53:47:6f:84:5c:11:94:df:c1:20:cd:c3: 47:9c:7b:93:09:de:95:f6:5d:32:f3:3a:2f:7c:48: 78:41:03:f3:56:77:26:31:da:68:36:c4:00:cc:b6: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:72:79:41:A7:EE:FA:4C:02:B0:67:3F:14:C2:00:CB:B1:78:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:36:64:27:87:1e:bc:e1:ed:65:6b:f4:c6:48:0c:c5:b7:a1: e4:38:84:32:df:12:e9:70:c9:71:5f:d8:f1:25:7f:27:8d:12: e7:3d:95:6b:51:53:48:2b:27:69:51:ce:25:ad:58:2e:0b:5d: 2d:a1:74:6b:89:d2:06:b3:75:54:b8:af:21:8b:60:ca:8d:53: 3a:ef:71:ec:07:51:93:c8:b4:6c:fe:56:2a:ec:13:6a:b7:ab: 26:c3:5a:6d:2e:c6:99:fd:03:48:2f:4a:c9:a9:6c:0c:1c:8e: 0c:f1:01:b6:81:7a:d3:99:03:85:94:8e:69:dc:6a:c6:ec:d9: 61:63:80:af:97:7e:d5:69:8f:12:08:75:30:b7:4d:63:13:1f: ff:f6:3b:19:19:4c:70:93:e9:74:63:ab:eb:cc:8f:cb:5d:01: 0d:7e:01:b3:e5:65:fd:b4:0a:e6:b3:02:c0:b6:6b:5a:3e:87: 3c:c1:17:28:c1:52:66:52:ae:f2:d2:be:a7:ad:88:45:ee:b3: 44:04:7f:b2:0b:4d:51:a0:20:6f:8a:b2:04:9c:2a:31:e1:79: 23:45:6a:7a:91:25:9e:91:70:40:06:ee:f3:f6:d6:7f:f7:49: d7:d7:a8:c8:a9:5b:70:0e:b5:27:2b:b1:69:64:07:f9:b8:2a: 71:99:71:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEro6iyfFkVJ6mY/tFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI1MDgxOTE2MDAwM1oXDTI1MDgyMTE2MDAwMFowLzEtMCsGA1UEAxMk ODg3ZGUxNGYtOWEyNy00Yjc1LWIwODYtZGU5NmYzOWQwNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfrDgs+AoLFufOOP13fT7IY5wXMLLnyWpv3e W8TRaLk+ErtK94tvwtJtV5YWhOmvGWJOMY06fRKBRgwGXQn/wRzCKCWvM4DJGtkm zxx/EFIt5KJS0GnKZZlPZjSi7PY03TOwKqq54DWT/20Y+qQWZeVLDPV8bF9S2Bzm LMypTPH4aS2/XBHXLcEgBy7NNlZny6EKBv/DXquZbmYW/Q+rYLEjMeZe4D86ai/H M9N5/w34O95VS04fHOROfaoRyI5CMk162L4K2uDHRA6NnZEoVe4fmhNTR2+EXBGU 38EgzcNHnHuTCd6V9l0y8zovfEh4QQPzVncmMdpoNsQAzLaUqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFfcnlBp+76TAKwZz8UwgDLsXjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvMWQzOTQ1MDgtNjE2MC00 ZTgyLTg5ZTMtMTY1ZmEyNzg0YjMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAONmQnhx684e1la/TGSAzF t6HkOIQy3xLpcMlxX9jxJX8njRLnPZVrUVNIKydpUc4lrVguC10toXRridIGs3VU uK8hi2DKjVM673HsB1GTyLRs/lYq7BNqt6smw1ptLsaZ/QNIL0rJqWwMHI4M8QG2 gXrTmQOFlI5p3GrG7NlhY4Cvl37VaY8SCHUwt01jEx//9jsZGUxwk+l0Y6vrzI/L XQENfgGz5WX9tArmswLAtmtaPoc8wRcowVJmUq7y0r6nrYhF7rNEBH+yC01RoCBv irIEnCox4XkjRWp6kSWekXBABu7z9tZ/90nX16jIqVtwDrUnK7FpZAf5uCpxmXHZ -----END CERTIFICATE-----Generated at Wed Aug 20 13:15:17 2025 by rpki-client