$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: 3agJ/MXyVl31ssr6YzkDXl0AOMb4KI/QTl85mKCNVhI= Subject key identifier: 47:AC:0C:65:CC:DF:20:F7:AF:ED:13:66:8C:6B:9C:8C:81:A0:20:3D Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584AE99CD31102EC4B84E9D5B880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FABA9 Signing time: Tue 19 Aug 2025 22:00:03 +0000 Manifest this update: Tue 19 Aug 2025 22:00:03 +0000 Manifest next update: Fri 22 Aug 2025 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: lSYZa5Q9NtseZmOhah2gi/fNn4gKu67/gC5TiwRTG8o=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: dS4SBFabfmm6taIoHv8hTimJCh+eb3N+i2B9Yedpk3E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:9c:d3:11:02:ec:4b:84:e9:d5:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Aug 19 22:00:03 2025 GMT Not After : Aug 22 22:00:00 2025 GMT Subject: CN=35c893be-9ce4-4f84-9037-b24122f1ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:56:91:ef:3d:df:62:e6:62:1e:a4:f8:fd: 6b:4c:64:48:17:7c:c6:47:77:d5:1c:4a:c4:6f:82: 14:b7:95:fc:52:dd:55:69:2c:cd:51:e3:1b:91:f7: 46:a4:4e:3e:f8:65:53:bb:c5:d1:a1:fa:11:68:71: 61:e5:92:22:65:8a:70:9c:fc:15:83:b4:57:b9:67: 2b:be:e5:a3:87:a8:9a:e3:30:59:d7:4d:fa:fd:3f: 47:fb:48:ac:16:b8:cb:dc:65:17:88:f7:a0:6f:fe: 20:01:24:04:4d:fc:b5:ed:d6:d7:71:ef:cb:b1:12: 19:ec:88:37:c1:a9:91:42:5d:e3:d4:ea:5c:aa:93: 29:67:c1:15:e8:9a:90:38:e7:de:59:a7:af:ba:ad: cb:10:55:1e:ab:92:8c:7b:cf:d5:ff:b1:e9:3d:e0: 81:e9:4b:88:b6:bf:27:48:74:29:61:5d:fe:1a:11: ff:28:57:8f:27:db:7c:30:34:df:26:e7:b6:7c:ff: 48:e1:f7:dc:13:d9:1c:d2:8b:ab:ce:10:ef:ff:a6: 18:dc:2b:cd:9a:ee:53:c4:94:7b:b6:58:02:c6:fb: 48:f3:62:98:92:d4:e8:ae:31:4e:a0:c1:be:a8:21: a5:51:25:5e:96:e9:77:00:59:aa:c9:f6:2f:0f:2c: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:0C:65:CC:DF:20:F7:AF:ED:13:66:8C:6B:9C:8C:81:A0:20:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:cd:d8:62:d8:1c:0b:c6:b1:20:d3:e0:f9:65:8e:9e:ac: 02:e0:c9:00:13:97:7c:7d:7c:d2:a9:9f:03:b7:93:28:79:26: 0d:1e:44:d9:13:1e:30:ad:c2:46:ce:84:d1:d2:a8:2b:d2:c3: 6e:b3:88:36:90:74:fa:8a:c8:22:b3:e9:6b:4d:c9:77:f4:e7: 85:b0:33:ba:e5:f7:ec:b3:8c:b1:c3:7c:f1:34:dc:19:99:fe: 6e:3b:03:b2:04:90:d4:8e:15:bc:9e:6a:ab:25:63:83:81:d2: 4e:d4:5b:25:f5:ff:8b:38:3f:8d:b7:2f:d3:ae:86:14:b8:d3: 59:51:d6:b4:ae:5a:e6:60:92:b5:66:09:90:07:8b:74:87:f2: d2:fa:e0:c7:b2:3b:26:0b:cb:eb:50:82:f2:11:70:51:64:36: 53:27:4b:5d:d9:e9:88:e8:8e:71:ca:b6:b9:0e:9b:0f:e5:bd: 36:bd:9c:5d:3b:a1:e6:6c:0a:9e:19:38:b5:a2:41:ed:9d:34: f7:18:33:8d:85:7b:e8:34:70:b9:62:16:d9:7d:9f:4b:3d:df: 7d:1c:b1:f6:99:63:46:40:a1:49:56:94:84:51:ad:aa:75:87: f7:8b:a9:e4:27:0f:61:7f:ba:a8:91:63:92:b3:58:e7:a1:a1: 0f:93:c2:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpnNMRAuxLhOnVuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MDgxOTIyMDAwM1oXDTI1MDgyMjIyMDAwMFowLzEtMCsGA1UEAxMk MzVjODkzYmUtOWNlNC00Zjg0LTkwMzctYjI0MTIyZjFjY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3FWke8932LmYh6k+P1rTGRIF3zGR3fVHErE b4IUt5X8Ut1VaSzNUeMbkfdGpE4++GVTu8XRofoRaHFh5ZIiZYpwnPwVg7RXuWcr vuWjh6ia4zBZ1036/T9H+0isFrjL3GUXiPegb/4gASQETfy17dbXce/LsRIZ7Ig3 wamRQl3j1OpcqpMpZ8EV6JqQOOfeWaevuq3LEFUeq5KMe8/V/7HpPeCB6UuItr8n SHQpYV3+GhH/KFePJ9t8MDTfJue2fP9I4ffcE9kc0ourzhDv/6YY3CvNmu5TxJR7 tlgCxvtI82KYktTorjFOoMG+qCGlUSVelul3AFmqyfYvDyxW5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEesDGXM3yD3r+0TZoxrnIyBoCA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl0s3YYtgcC8axINPg+WWO nqwC4MkAE5d8fXzSqZ8Dt5MoeSYNHkTZEx4wrcJGzoTR0qgr0sNus4g2kHT6isgi s+lrTcl39OeFsDO65ffss4yxw3zxNNwZmf5uOwOyBJDUjhW8nmqrJWODgdJO1Fsl 9f+LOD+Nty/TroYUuNNZUda0rlrmYJK1ZgmQB4t0h/LS+uDHsjsmC8vrUILyEXBR ZDZTJ0td2emI6I5xyra5DpsP5b02vZxdO6HmbAqeGTi1okHtnTT3GDONhXvoNHC5 YhbZfZ9LPd99HLH2mWNGQKFJVpSEUa2qdYf3i6nkJw9hf7qokWOSs1jnoaEPk8JV -----END CERTIFICATE-----Generated at Wed Aug 20 00:42:08 2025 by rpki-client