$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft File: 2522458f-db94-4ba6-8127-005675e4eea9.mft (raw, json) Hash identifier: amCNLVaqoPiD552Bc1MPX4iVwPY5+RGNahzE3cZuQqE= Subject key identifier: BD:0A:93:2C:7F:C5:39:21:2F:72:C2:07:BA:45:3B:2A:D3:DB:02:98 Authority key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Certificate issuer: /CN=2522458f-db94-4ba6-8127-005675e4eea9 Certificate serial: 010D0C9F4328584AF1FCE3ECD496A2A147C97080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft Manifest number: 010D0C9F43285844E1D27932CB1C753288C13739 Signing time: Fri 22 Aug 2025 22:00:04 +0000 Manifest this update: Fri 22 Aug 2025 22:00:04 +0000 Manifest next update: Mon 25 Aug 2025 22:00:00 +0000 Files and hashes: 1: 2522458f-db94-4ba6-8127-005675e4eea9.crl (hash: lv/9mvai8bdw/VdVtCA3+/6ebnSlQUqcKfLYFfJnj4o=) 2: eb861998-933b-39d8-b4de-a7fcd97f739e.roa (hash: ByUBnHMgYyrwNIaVyWz1y/lN+hxnvJp99DNjc13acIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:fc:e3:ec:d4:96:a2:a1:47:c9:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2522458f-db94-4ba6-8127-005675e4eea9 Validity Not Before: Aug 22 22:00:04 2025 GMT Not After : Aug 25 22:00:00 2025 GMT Subject: CN=3a9c475b-dfd5-4d4f-9c24-6f29475d1fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:ae:34:3b:e1:75:10:e6:b2:e1:42:4a:4b: d0:5e:d8:a4:84:f2:04:0f:d2:69:74:f7:9c:c3:8a: bc:6f:99:01:1d:17:45:01:d5:c7:da:37:f7:af:22: 91:7f:9f:b6:a0:91:cb:38:0c:e7:73:2e:d3:0f:6a: 75:ba:86:11:fc:37:a3:23:ed:67:ee:41:65:d7:df: cd:8f:0c:41:4b:5c:66:b0:56:cc:37:88:31:3e:2f: 97:a1:d6:6d:dd:8c:cc:d2:8e:9f:a9:71:18:99:d0: ef:46:c7:2e:9e:3e:c8:7c:d5:e0:dc:e9:b3:65:79: e6:16:d9:4e:fb:20:b0:1c:13:9b:02:1f:c5:c0:45: d4:70:d3:cd:47:70:fc:5d:37:63:d5:b0:10:e0:79: 14:5c:75:6c:d2:fa:eb:aa:f6:af:61:1b:35:58:4e: 37:5a:44:09:2f:12:c2:a9:49:41:ce:d6:a5:68:50: 17:e6:c6:d8:54:18:ae:a1:f4:b3:5d:52:ce:cd:bc: 6a:72:43:26:94:d6:fd:ac:27:8d:b5:32:b7:a1:6f: c3:38:6c:c7:63:45:d0:7c:e3:68:37:05:98:a8:c5: ba:0d:49:6c:3a:83:5f:11:9b:56:91:24:38:92:70: 75:58:da:e6:40:0a:84:7e:87:20:72:16:dc:2b:a1: ff:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0A:93:2C:7F:C5:39:21:2F:72:C2:07:BA:45:3B:2A:D3:DB:02:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl X509v3 Authority Key Identifier: keyid:59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:cb:f5:88:1d:e0:be:0d:c0:b9:49:a4:2d:77:d5:f4:e1:bf: 04:8a:31:f3:39:f1:16:72:cc:90:f6:30:f8:b1:0a:1d:ed:6e: 15:6f:c5:da:99:83:0a:8a:b6:93:79:b7:19:8b:e8:ee:4c:ac: d6:b9:c7:ac:48:d7:4c:b3:40:11:ce:74:80:49:7a:c9:1b:b6: 36:56:91:2e:56:0f:9f:30:b7:48:d9:01:a3:65:d6:93:9c:15: 70:aa:61:b1:33:da:18:1d:c0:9f:1a:02:13:d0:37:3a:c3:52: 9a:c9:75:0d:2e:c1:a5:34:d0:76:89:15:f0:e9:66:a9:11:6f: 61:0b:2c:61:91:b1:a9:88:ad:1e:3c:06:91:e7:c7:ee:0d:9c: 11:6a:90:74:ef:87:88:12:8c:60:3d:c5:06:2c:30:54:b0:6f: 0c:a0:6a:06:91:95:d7:90:e1:13:ef:66:66:77:db:3f:69:ae: 2b:87:cd:fa:c4:4a:67:cd:aa:b9:82:bc:4a:45:7f:aa:22:a6: 69:f0:17:af:62:0e:c1:8d:72:63:aa:be:d5:66:d5:62:6d:b1: 60:74:df:ac:26:8a:8a:14:6e:22:d6:20:9f:79:25:a5:3b:2d: 02:bc:66:b9:14:bd:cd:2a:26:7b:c7:ff:3b:fe:69:c9:10:04: a1:11:3f:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx/OPs1JaioUfJcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMjQ1OGYtZGI5NC00YmE2LTgxMjctMDA1Njc1ZTRl ZWE5MB4XDTI1MDgyMjIyMDAwNFoXDTI1MDgyNTIyMDAwMFowLzEtMCsGA1UEAxMk M2E5YzQ3NWItZGZkNS00ZDRmLTljMjQtNmYyOTQ3NWQxZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlduuNDvhdRDmsuFCSkvQXtikhPIED9JpdPec w4q8b5kBHRdFAdXH2jf3ryKRf5+2oJHLOAzncy7TD2p1uoYR/DejI+1n7kFl19/N jwxBS1xmsFbMN4gxPi+XodZt3YzM0o6fqXEYmdDvRscunj7IfNXg3OmzZXnmFtlO +yCwHBObAh/FwEXUcNPNR3D8XTdj1bAQ4HkUXHVs0vrrqvavYRs1WE43WkQJLxLC qUlBztalaFAX5sbYVBiuofSzXVLOzbxqckMmlNb9rCeNtTK3oW/DOGzHY0XQfONo NwWYqMW6DUlsOoNfEZtWkSQ4knB1WNrmQAqEfocgchbcK6H/+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0Kkyx/xTkhL3LCB7pFOyrT2wKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTIy NDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVlNGVlYTkvMjUyMjQ1OGYtZGI5NC00 YmE2LTgxMjctMDA1Njc1ZTRlZWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUyMjQ1OGYtZGI5NC00YmE2LTgx MjctMDA1Njc1ZTRlZWE5LzI1MjI0NThmLWRiOTQtNGJhNi04MTI3LTAwNTY3NWU0 ZWVhOS5jcmwwHwYDVR0jBBgwFoAUWcHcK14el6JVyj5DREmZI+gm5QEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2 NzVlNGVlYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQy/WIHeC+DcC5SaQtd9X0 4b8EijHzOfEWcsyQ9jD4sQod7W4Vb8XamYMKiraTebcZi+juTKzWucesSNdMs0AR znSASXrJG7Y2VpEuVg+fMLdI2QGjZdaTnBVwqmGxM9oYHcCfGgIT0Dc6w1KayXUN LsGlNNB2iRXw6WapEW9hCyxhkbGpiK0ePAaR58fuDZwRapB074eIEoxgPcUGLDBU sG8MoGoGkZXXkOET72Zmd9s/aa4rh836xEpnzaq5grxKRX+qIqZp8BevYg7BjXJj qr7VZtVibbFgdN+sJoqKFG4i1iCfeSWlOy0CvGa5FL3NKiZ7x/87/mnJEAShET/K -----END CERTIFICATE-----Generated at Sat Aug 23 18:48:48 2025 by rpki-client