$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft File: ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft (raw, json) Hash identifier: My4HEP9VR/0Wxiulhfk7bp3KEwG0aeKDWomW4rKlaaw= Subject key identifier: 26:CD:2E:41:23:2A:AB:83:92:BD:5B:CC:48:CA:BE:36:48:51:3C:49 Authority key identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 Certificate issuer: /CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Certificate serial: 010D0C9F4328584B21AB167805B82F7889C5BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft Manifest number: 010D0C9F4328584B21AA24C0C83B1A425711BD0A Signing time: Mon 08 Sep 2025 23:54:03 +0000 Manifest this update: Mon 08 Sep 2025 23:54:03 +0000 Manifest next update: Thu 11 Sep 2025 23:00:00 +0000 Files and hashes: 1: 27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa (hash: Y/IRi2ezBzaB5mA/Lb6m4VN8Kj/wiS3ryrmpbv733tc=) 2: ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl (hash: QqaB+dzSDKZfn0oHpxSpb0p9+t30MjYZPzuVn5JU+9U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:ab:16:78:05:b8:2f:78:89:c5:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Validity Not Before: Sep 8 23:54:03 2025 GMT Not After : Sep 11 23:00:00 2025 GMT Subject: CN=967fd6d7-1817-493a-9d2f-cfefe271eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:70:87:94:5a:4b:41:e2:ce:7d:84:78:66: 35:d8:4b:88:0d:e4:a3:e0:fa:86:4c:c4:8a:02:c6: a8:a3:c0:d2:7d:a3:9f:b7:aa:cf:7a:4f:37:ca:05: bf:fc:e7:aa:c9:d3:46:a9:84:a4:3a:9d:8c:78:87: d4:3a:83:63:6e:d9:fa:0e:00:ce:63:3b:52:04:45: c9:73:f9:29:18:66:aa:8d:a2:de:e5:f6:2c:61:af: 3e:79:cc:0d:49:85:82:06:33:b9:f6:0f:ad:d3:e7: 7d:99:7c:75:55:d9:3a:49:fc:b4:4b:9b:98:1e:d9: d7:fc:44:ae:4f:74:d3:c5:c6:f2:4c:16:8c:f7:8e: f5:6d:ae:af:13:50:9a:97:0c:70:e1:14:84:b5:f7: b2:66:9a:d7:5e:c9:24:f9:ef:be:6f:0f:53:54:9c: df:de:6d:a8:99:25:20:79:1b:41:0a:8b:60:8e:06: 14:02:35:00:38:9b:13:1e:6b:66:86:32:3d:17:e5: 53:26:05:32:73:03:f9:62:07:d3:85:32:91:6a:22: 9d:df:a6:52:e6:ed:12:b6:d7:04:9b:cd:d4:b8:c9: 99:e4:98:7a:46:d6:04:ad:da:c4:38:1f:3a:8c:fd: 46:04:e2:d2:d9:1f:8f:c6:8e:9c:f5:66:5b:8c:3e: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CD:2E:41:23:2A:AB:83:92:BD:5B:CC:48:CA:BE:36:48:51:3C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl X509v3 Authority Key Identifier: keyid:9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d3:9f:d9:03:fc:21:5d:82:6b:f1:79:c4:1a:87:7d:52:c7: a4:6e:f6:de:90:46:a2:ee:47:e8:ce:9f:27:76:46:b8:d5:04: d5:d9:61:83:4a:7f:ed:d2:2d:72:74:d6:06:d3:8e:8a:5a:b8: f4:8b:97:8a:23:93:5c:2d:23:19:3a:6e:3c:90:a7:1d:3e:a5: 8d:4d:df:b4:d1:50:0d:cd:fb:40:0b:16:14:4b:57:a5:4d:24: 58:89:c5:73:de:bc:42:c8:07:35:36:60:f8:25:e5:24:f6:7e: 8b:82:fd:a5:ce:48:42:05:b9:1e:99:51:88:42:47:56:86:b6: 14:65:89:4e:17:0b:eb:a7:40:91:af:a6:ae:a3:5b:3d:7d:41: 19:f0:41:99:d5:1a:89:4d:6b:52:99:f2:bd:4d:6b:08:b0:4a: 64:0c:a9:4d:fb:f0:56:35:2e:39:0b:6c:82:28:5c:a2:6c:15: 30:20:ba:df:f0:45:4a:f2:4b:6e:62:65:7b:a1:d9:f9:60:52: 4c:8a:2e:6f:af:80:d9:e1:77:3b:d1:11:9d:5b:12:3e:97:55: d8:35:d0:eb:39:c8:36:6e:fa:9a:8b:ff:92:cb:5b:42:bd:4a: e8:36:02:28:fb:ed:c5:b3:cf:8c:3a:e3:4f:9e:8d:88:e8:61: fe:d8:9c:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEshqxZ4BbgveInFvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EwZjE4Y2EtNDE4OS00NWUxLTljNTgtMDlmMmRhYTgw OGZhMB4XDTI1MDkwODIzNTQwM1oXDTI1MDkxMTIzMDAwMFowLzEtMCsGA1UEAxMk OTY3ZmQ2ZDctMTgxNy00OTNhLTlkMmYtY2ZlZmUyNzFlZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpwh5RaS0Hizn2EeGY12EuIDeSj4PqGTMSK Asaoo8DSfaOft6rPek83ygW//OeqydNGqYSkOp2MeIfUOoNjbtn6DgDOYztSBEXJ c/kpGGaqjaLe5fYsYa8+ecwNSYWCBjO59g+t0+d9mXx1Vdk6Sfy0S5uYHtnX/ESu T3TTxcbyTBaM9471ba6vE1Calwxw4RSEtfeyZprXXskk+e++bw9TVJzf3m2omSUg eRtBCotgjgYUAjUAOJsTHmtmhjI9F+VTJgUycwP5YgfThTKRaiKd36ZS5u0SttcE m83UuMmZ5Jh6RtYErdrEOB86jP1GBOLS2R+Pxo6c9WZbjD5FpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCbNLkEjKquDkr1bzEjKvjZIUTxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBm MThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFhODA4ZmEvY2EwZjE4Y2EtNDE4OS00 NWUxLTljNTgtMDlmMmRhYTgwOGZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2EwZjE4Y2EtNDE4OS00NWUxLTlj NTgtMDlmMmRhYTgwOGZhL2NhMGYxOGNhLTQxODktNDVlMS05YzU4LTA5ZjJkYWE4 MDhmYS5jcmwwHwYDVR0jBBgwFoAUnz/Y9lRVQsQPIwOfwIRAbNYB38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYy ZGFhODA4ZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBq05/ZA/whXYJr8XnEGod9 UsekbvbekEai7kfozp8ndka41QTV2WGDSn/t0i1ydNYG046KWrj0i5eKI5NcLSMZ Om48kKcdPqWNTd+00VANzftACxYUS1elTSRYicVz3rxCyAc1NmD4JeUk9n6Lgv2l zkhCBbkemVGIQkdWhrYUZYlOFwvrp0CRr6auo1s9fUEZ8EGZ1RqJTWtSmfK9TWsI sEpkDKlN+/BWNS45C2yCKFyibBUwILrf8EVK8ktuYmV7odn5YFJMii5vr4DZ4Xc7 0RGdWxI+l1XYNdDrOcg2bvqai/+Sy1tCvUroNgIo++3Fs8+MOuNPno2I6GH+2Jz4 -----END CERTIFICATE-----Generated at Tue Sep 9 20:10:47 2025 by rpki-client