$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft File: a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft (raw, json) Hash identifier: yPTfFTDpZCMqQCPQ1/sNfSoDGzw7xmDfvhLwwQH8DTQ= Subject key identifier: 9D:CA:24:CB:0D:CF:93:2E:99:73:C3:4B:81:32:36:D0:B2:1C:85:D4 Authority key identifier: 25:41:A5:7B:A1:EB:17:45:63:9F:F5:5D:B8:75:27:87:65:EB:02:C9 Certificate issuer: /CN=a1b2096e-e67b-4008-8d1f-efdddddeaea7 Certificate serial: 010D0C9F4328584AE890DD8E976E62D67C970380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft Manifest number: 010D0C9F432858424B205C08D94AF1963B882829 Signing time: Tue 19 Aug 2025 13:00:08 +0000 Manifest this update: Tue 19 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: a1b2096e-e67b-4008-8d1f-efdddddeaea7.crl (hash: 0WKbn0BGEz5iNkyUxXLvxDGUI2QOGt3NTcgjRJ0pbx8=) 2: d7ec5f05-ab79-3772-b93c-5abf74755b5f.roa (hash: 1QuJQnmpxpyLjUFmSfLKo3QLZE85iOfukHHYNqIqlo0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:90:dd:8e:97:6e:62:d6:7c:97:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b2096e-e67b-4008-8d1f-efdddddeaea7 Validity Not Before: Aug 19 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=d6fe03cc-842f-42f5-9b0f-eeea5e7cc008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:4a:99:7a:e3:0b:2d:fa:65:d6:b8:f0:f4: 79:1c:94:08:95:ad:da:76:24:2a:9f:6b:e8:da:38: fa:dd:16:8d:6f:e2:c3:08:97:2c:8b:37:71:88:30: fa:40:7e:6e:8e:5f:22:bc:ee:30:61:bf:8d:42:f4: 19:3e:ed:e0:94:a9:86:00:2a:f8:28:bc:b6:15:a0: 95:0c:65:2d:9f:5f:47:93:b9:ca:32:7f:18:c6:be: 2f:a9:76:d8:e8:42:7d:f4:a0:5b:50:d3:76:36:54: 7d:e3:40:f2:79:05:57:76:91:a7:c6:79:6b:5c:2a: 7b:00:7c:fd:03:04:2f:c7:d8:df:69:1e:61:c0:6e: 70:84:b4:48:fb:4d:93:58:30:98:f7:77:31:19:61: c5:2f:36:97:e6:98:45:a3:6a:b8:96:a4:f4:a3:79: 3b:fd:10:48:14:2d:0b:cc:d1:e2:9f:1c:1b:76:74: 81:a0:f2:de:9b:bc:94:51:01:e3:2e:c9:d4:1a:87: e6:92:6d:c5:82:00:de:82:83:39:09:22:66:21:f0: d1:97:e2:8b:bf:0a:02:91:c6:d2:f4:18:b2:23:59: 7c:0e:0f:b7:d1:2b:74:7b:06:7e:c3:a6:ca:0b:9d: 64:94:9f:39:06:64:eb:6e:c0:c8:13:71:e8:e4:90: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:24:CB:0D:CF:93:2E:99:73:C3:4B:81:32:36:D0:B2:1C:85:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.crl X509v3 Authority Key Identifier: keyid:25:41:A5:7B:A1:EB:17:45:63:9F:F5:5D:B8:75:27:87:65:EB:02:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3d:fd:2e:c5:dc:43:6b:49:60:67:5a:36:8c:9d:45:28:29: 94:b8:ca:ca:30:c6:d9:90:1e:c1:29:83:44:cd:90:a6:c6:90: 6e:30:c2:b9:a6:39:9e:ac:fe:f6:cb:fe:e7:bc:e1:e2:da:6a: a3:3f:d5:1e:7c:2d:f8:bd:d7:3f:28:f3:c0:42:2e:61:d4:94: 16:17:bb:a3:4c:56:67:d3:1f:3f:61:8d:9f:8c:51:d2:6d:92: 69:7b:b6:74:07:ef:8c:b5:e3:fd:b8:4a:24:4f:d5:ba:49:05: 08:49:14:92:cf:be:50:a4:9c:36:e6:d6:45:7d:7e:5c:c9:e9: c5:22:8f:ac:1f:c7:b6:61:0a:ad:81:e8:da:ef:9a:56:59:93: 2f:46:1c:3f:0e:92:cb:de:20:62:00:36:db:7e:29:42:49:fd: be:d7:18:12:e2:49:fd:39:b6:74:21:2b:73:5b:5c:0b:e7:5d: ef:22:9d:3f:4a:c8:3a:bb:05:72:25:db:cd:de:27:a9:c6:9d: d1:a9:60:42:77:13:1b:b8:5c:88:93:3c:7b:dc:86:e1:33:78: 4d:00:c3:a9:3e:4b:92:76:c1:f9:fe:64:dd:8d:df:57:2a:12: 63:c2:47:35:49:b2:63:ba:9d:b0:87:9b:df:60:cc:6c:95:e7: f3:15:15:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErokN2Ol25i1nyXA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMjA5NmUtZTY3Yi00MDA4LThkMWYtZWZkZGRkZGVh ZWE3MB4XDTI1MDgxOTEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk ZDZmZTAzY2MtODQyZi00MmY1LTliMGYtZWVlYTVlN2NjMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxxKmXrjCy36Zda48PR5HJQIla3adiQqn2vo 2jj63RaNb+LDCJcsizdxiDD6QH5ujl8ivO4wYb+NQvQZPu3glKmGACr4KLy2FaCV DGUtn19Hk7nKMn8Yxr4vqXbY6EJ99KBbUNN2NlR940DyeQVXdpGnxnlrXCp7AHz9 AwQvx9jfaR5hwG5whLRI+02TWDCY93cxGWHFLzaX5phFo2q4lqT0o3k7/RBIFC0L zNHinxwbdnSBoPLem7yUUQHjLsnUGofmkm3FggDegoM5CSJmIfDRl+KLvwoCkcbS 9BiyI1l8Dg+30St0ewZ+w6bKC51klJ85BmTrbsDIE3Ho5JBMhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ3KJMsNz5MumXPDS4EyNtCyHIXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMWIy MDk2ZS1lNjdiLTQwMDgtOGQxZi1lZmRkZGRkZWFlYTcvYTFiMjA5NmUtZTY3Yi00 MDA4LThkMWYtZWZkZGRkZGVhZWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTFiMjA5NmUtZTY3Yi00MDA4LThk MWYtZWZkZGRkZGVhZWE3L2ExYjIwOTZlLWU2N2ItNDAwOC04ZDFmLWVmZGRkZGRl YWVhNy5jcmwwHwYDVR0jBBgwFoAUJUGle6HrF0Vjn/VduHUnh2XrAskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMWIyMDk2ZS1lNjdiLTQwMDgtOGQxZi1lZmRk ZGRkZWFlYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDPf0uxdxDa0lgZ1o2jJ1F KCmUuMrKMMbZkB7BKYNEzZCmxpBuMMK5pjmerP72y/7nvOHi2mqjP9UefC34vdc/ KPPAQi5h1JQWF7ujTFZn0x8/YY2fjFHSbZJpe7Z0B++MteP9uEokT9W6SQUISRSS z75QpJw25tZFfX5cyenFIo+sH8e2YQqtgeja75pWWZMvRhw/DpLL3iBiADbbfilC Sf2+1xgS4kn9ObZ0IStzW1wL513vIp0/Ssg6uwVyJdvN3iepxp3RqWBCdxMbuFyI kzx73IbhM3hNAMOpPkuSdsH5/mTdjd9XKhJjwkc1SbJjup2wh5vfYMxslefzFRWw -----END CERTIFICATE-----Generated at Wed Aug 20 13:11:21 2025 by rpki-client