$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: xHilgR/SZ1u0PMqGC0q/yBCbYCwMGqix5qw2wvBX6ak= Subject key identifier: 98:A1:DD:EF:D7:94:9E:1B:38:54:89:76:D7:E8:EF:C4:E9:89:0D:4A Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F4328584AF2EB2693BE104ED4230A4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE4D8 Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: XqQ90kOVPg5MLOwD48ly+xzXCxz3nloiIx2MdlrJqUQ=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: M8FucBjd2DxT6OSK1LKQdRTmQvzNJe0gtsnF6rQGet4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:26:93:be:10:4e:d4:23:0a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=7c5b52d3-b1c0-43f5-8584-2614ff17479e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:cc:22:03:b8:9f:c9:85:d9:3f:9e:7b:85: f8:ce:81:15:7a:dc:ee:29:23:24:74:c5:88:6e:c0: ca:cf:83:e8:f0:0b:d6:66:42:03:25:7c:be:12:7d: bc:13:72:3a:12:09:37:83:d6:a2:49:d8:f3:eb:ee: c6:dc:77:e6:86:ee:e3:82:e3:be:70:32:b6:14:3e: 12:f8:6f:fc:4f:68:29:be:14:37:7a:b4:22:b0:0e: 75:26:b8:43:c9:7c:62:51:f7:10:06:90:52:fe:f6: 26:38:f1:e5:74:53:80:cf:21:7f:c8:5d:9f:2d:7b: 4f:00:ea:d2:d8:92:29:c7:d2:3f:1b:d4:8d:fc:eb: 58:da:ea:19:eb:ca:2b:71:17:35:fd:f7:24:1d:86: 4f:f8:9e:ac:ce:85:d9:1c:64:eb:32:45:51:6b:b6: fb:14:2e:cf:b5:08:3b:50:12:45:ab:14:26:4d:72: 9e:36:01:cd:05:11:ef:95:72:b1:2f:5c:17:f6:e0: a2:5a:b5:fe:e9:2e:7b:49:a0:3b:7f:7a:a3:03:17: cd:b0:ca:ad:0f:a0:64:2c:47:01:da:1c:db:6f:f3: 99:19:e3:e1:4c:c7:7b:e1:a7:25:27:2f:3a:86:d8: 8a:f0:56:7d:65:d7:f1:b5:73:18:b8:41:d6:e4:a0: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:DD:EF:D7:94:9E:1B:38:54:89:76:D7:E8:EF:C4:E9:89:0D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:01:fd:92:12:59:d5:94:b0:f5:ea:72:68:db:e1:f1:7f:56: f2:f0:23:7d:0f:f1:54:a5:fe:4d:9a:3a:d1:fe:e1:db:65:77: 52:67:0f:c5:51:0d:eb:67:d5:ed:8e:8d:a7:89:79:d2:35:b3: 0c:4d:00:86:af:00:1f:af:e4:83:7b:94:57:31:1f:ff:1b:bb: c5:11:94:a7:70:f6:97:b5:49:d4:a0:4f:c3:ce:57:34:db:18: 6f:e9:6c:41:95:79:d8:35:e3:6c:d5:96:b3:62:09:aa:f9:d4: 5f:91:1a:76:00:f4:3d:47:f4:48:97:8a:61:a0:63:49:35:e9: 8b:e0:71:29:5c:86:d6:19:62:e3:93:c5:35:57:83:90:f4:cd: 2e:6f:62:4d:5d:a7:e8:43:13:d0:e7:ac:7d:d3:74:67:6b:61: 5d:34:7b:4c:bf:a6:84:d4:6c:0a:cc:72:5c:df:a9:d8:34:0a: e7:b5:88:7f:34:11:d3:8e:45:77:b4:5c:3f:85:f5:47:d9:bd: 68:7c:c5:17:70:b6:7c:66:90:00:02:14:17:0e:82:98:52:73: 1c:71:a3:56:cf:be:ac:a3:8d:75:47:4a:a1:c1:7e:f6:ef:0e: 68:89:19:e7:1d:b5:8f:01:df:5a:a8:94:60:05:83:16:7b:46: c1:91:8f:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yaTvhBO1CMKTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk N2M1YjUyZDMtYjFjMC00M2Y1LTg1ODQtMjYxNGZmMTc0NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8vMIgO4n8mF2T+ee4X4zoEVetzuKSMkdMWI bsDKz4Po8AvWZkIDJXy+En28E3I6Egk3g9aiSdjz6+7G3Hfmhu7jguO+cDK2FD4S +G/8T2gpvhQ3erQisA51JrhDyXxiUfcQBpBS/vYmOPHldFOAzyF/yF2fLXtPAOrS 2JIpx9I/G9SN/OtY2uoZ68orcRc1/fckHYZP+J6szoXZHGTrMkVRa7b7FC7PtQg7 UBJFqxQmTXKeNgHNBRHvlXKxL1wX9uCiWrX+6S57SaA7f3qjAxfNsMqtD6BkLEcB 2hzbb/OZGePhTMd74aclJy86htiK8FZ9ZdfxtXMYuEHW5KBTJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJih3e/XlJ4bOFSJdtfo78TpiQ1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeAf2SElnVlLD16nJo2+Hx f1by8CN9D/FUpf5NmjrR/uHbZXdSZw/FUQ3rZ9Xtjo2niXnSNbMMTQCGrwAfr+SD e5RXMR//G7vFEZSncPaXtUnUoE/Dzlc02xhv6WxBlXnYNeNs1ZazYgmq+dRfkRp2 APQ9R/RIl4phoGNJNemL4HEpXIbWGWLjk8U1V4OQ9M0ub2JNXafoQxPQ56x903Rn a2FdNHtMv6aE1GwKzHJc36nYNArntYh/NBHTjkV3tFw/hfVH2b1ofMUXcLZ8ZpAA AhQXDoKYUnMccaNWz76so411R0qhwX727w5oiRnnHbWPAd9aqJRgBYMWe0bBkY9c -----END CERTIFICATE-----Generated at Sat Aug 23 22:07:31 2025 by rpki-client