$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft File: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft (raw, json) Hash identifier: 54AnH8FYaXN1+RrtzddJQcG4Y831a4FFwf785xfLEnE= Subject key identifier: 2C:AE:BE:C4:29:F9:D1:33:60:4B:A2:02:A8:66:D4:DC:AA:DA:84:B6 Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F4328584AF450849F21E0E4CF48AA7280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft Manifest number: 010D0C9F4328584073A820B7BA7FD11DDCD1E7DB Signing time: Sat 23 Aug 2025 18:00:08 +0000 Manifest this update: Sat 23 Aug 2025 18:00:08 +0000 Manifest next update: Mon 25 Aug 2025 18:00:00 +0000 Files and hashes: 1: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl (hash: zAn/v8Nu3etU9haI8okjV6G/C9DDPEuYeZwzzbi5D8U=) 2: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (hash: g6HROYboabEXb19cIZN4E4BjJ5193ZyiQWKC/2/aRf0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:50:84:9f:21:e0:e4:cf:48:aa:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: Aug 23 18:00:08 2025 GMT Not After : Aug 25 18:00:00 2025 GMT Subject: CN=8d95e3b8-15f6-4504-b724-93e55d5e7c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:d5:58:3f:02:5d:0d:98:ac:0e:c6:bd:0c: 40:5d:71:89:31:a3:99:e3:8b:2c:7f:01:46:c5:03: 63:30:f9:73:63:ec:f1:73:4b:0b:05:d0:bf:de:1e: 70:53:fd:cb:4c:4a:64:f3:b6:68:fe:fe:11:18:ae: 56:b3:60:d8:11:91:2d:2a:bc:12:69:b3:99:e1:76: 7a:95:ed:fa:6d:69:40:50:bd:04:56:64:34:68:6c: d3:6e:a3:05:14:6f:6c:1e:78:b1:c9:cc:99:8a:aa: c2:62:b5:e2:67:c1:de:40:86:16:42:9f:1b:89:16: 9c:de:22:00:a6:e0:53:43:ff:87:0e:cb:8b:c0:7c: b9:67:be:09:f5:4a:e0:53:fd:9e:70:86:c9:8a:0f: 51:32:3d:c8:3f:a1:5d:c9:ec:a5:e1:0b:7c:9a:7a: 59:4f:07:d7:98:1b:bf:4e:2c:9c:27:5f:12:25:cc: 59:a9:ca:93:40:8e:5b:87:dd:ab:a4:c3:26:a9:28: 70:3d:24:c3:d8:e4:2e:2c:c9:48:a8:de:fc:f5:c6: c6:1c:b9:7a:9a:64:cf:b6:81:dc:fa:b4:71:da:5d: e8:64:38:b1:2c:41:79:66:3a:3c:b5:a2:e5:a2:51: 95:d0:0c:25:b2:c2:dd:b3:b8:cd:99:5b:42:f8:c6: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:BE:C4:29:F9:D1:33:60:4B:A2:02:A8:66:D4:DC:AA:DA:84:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:83:64:43:d3:fc:c2:e9:27:0c:60:0e:94:d7:c6:3c:7a:35: 37:b4:9a:df:35:0c:f7:b1:fa:a8:b3:8a:96:95:a3:7b:a5:01: 21:a1:5f:0d:78:9a:eb:04:19:05:d4:0a:1d:6b:b2:fd:e4:79: 34:40:08:53:22:d8:23:ae:e2:29:1c:f9:c1:bd:20:91:2c:d9: 18:55:5e:90:8f:c1:f7:2b:fd:70:f7:95:f3:9c:88:0b:cf:8a: b8:5e:28:2a:51:c0:35:9c:8f:f9:98:1f:e8:1f:65:a9:a8:17: 29:70:ca:d3:79:2a:bb:18:7b:af:db:3a:74:a5:28:9f:29:6e: 67:c8:57:b9:ae:2f:57:b3:54:90:e7:f7:df:fd:02:86:f5:f8: df:1d:93:63:66:e3:31:70:4a:eb:f2:dc:ba:32:3c:fa:d4:35: da:8f:ba:82:21:5c:e0:cb:37:43:d9:e3:ef:ba:61:b7:14:26: 3a:a4:04:b0:02:43:9d:f2:40:4d:00:3a:05:29:f2:d9:0d:30: 2e:5f:b7:b3:3c:96:57:ba:21:85:af:b9:ae:79:de:fd:7e:cb: 77:4a:72:0e:7e:2a:50:02:d4:fc:c1:7a:8e:e7:09:55:1f:1d: 82:76:31:0d:24:c7:b0:80:f4:9c:2b:be:19:07:c6:aa:ad:e1: e4:43:b3:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0UISfIeDkz0iqcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MDgyMzE4MDAwOFoXDTI1MDgyNTE4MDAwMFowLzEtMCsGA1UEAxMk OGQ5NWUzYjgtMTVmNi00NTA0LWI3MjQtOTNlNTVkNWU3YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq7VWD8CXQ2YrA7GvQxAXXGJMaOZ44ssfwFG xQNjMPlzY+zxc0sLBdC/3h5wU/3LTEpk87Zo/v4RGK5Ws2DYEZEtKrwSabOZ4XZ6 le36bWlAUL0EVmQ0aGzTbqMFFG9sHnixycyZiqrCYrXiZ8HeQIYWQp8biRac3iIA puBTQ/+HDsuLwHy5Z74J9UrgU/2ecIbJig9RMj3IP6Fdyeyl4Qt8mnpZTwfXmBu/ TiycJ18SJcxZqcqTQI5bh92rpMMmqShwPSTD2OQuLMlIqN789cbGHLl6mmTPtoHc +rRx2l3oZDixLEF5Zjo8taLlolGV0AwlssLds7jNmVtC+MaawwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCyuvsQp+dEzYEuiAqhm1Nyq2oS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvNGMzZjY3MTctMjA0OC00 NGMxLWFlNzctNTBlNWNlNmU5ZGVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbg2RD0/zC6ScMYA6U18Y8 ejU3tJrfNQz3sfqos4qWlaN7pQEhoV8NeJrrBBkF1Aoda7L95Hk0QAhTItgjruIp HPnBvSCRLNkYVV6Qj8H3K/1w95XznIgLz4q4XigqUcA1nI/5mB/oH2WpqBcpcMrT eSq7GHuv2zp0pSifKW5nyFe5ri9Xs1SQ5/ff/QKG9fjfHZNjZuMxcErr8ty6Mjz6 1DXaj7qCIVzgyzdD2ePvumG3FCY6pASwAkOd8kBNADoFKfLZDTAuX7ezPJZXuiGF r7mued79fst3SnIOfipQAtT8wXqO5wlVHx2CdjENJMewgPScK74ZB8aqreHkQ7Mj -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:40 2025 by rpki-client