$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft File: 2bd92006-9133-44da-89c6-5e9014a854c9.mft (raw, json) Hash identifier: ZHBNfdavCbPHpt+Iy7RLmRFg6snXr5XoRpZw/FKOwbk= Subject key identifier: 42:8E:0E:B3:F2:61:DF:61:33:4D:43:75:6D:9E:59:A9:05:AD:B7:DE Authority key identifier: DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07 Certificate issuer: /CN=2bd92006-9133-44da-89c6-5e9014a854c9 Certificate serial: 010D0C9F4328584AF185D1E35CC8C65881A73980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft Manifest number: 010D0C9F4328584545AB59161326ADC631A7AEF6 Signing time: Fri 22 Aug 2025 18:00:08 +0000 Manifest this update: Fri 22 Aug 2025 18:00:08 +0000 Manifest next update: Mon 25 Aug 2025 18:00:00 +0000 Files and hashes: 1: 2bd92006-9133-44da-89c6-5e9014a854c9.crl (hash: epacq+AE2qjTcklOllsvh/CDizzooKgjLeNFCcWlDSc=) 2: 840cb531-cc21-3eb3-9286-cda6c5a55992.roa (hash: +2xYAVYtul1xWfcJfTyI0CD2XmVCm41hsnAVGss40QA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:85:d1:e3:5c:c8:c6:58:81:a7:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd92006-9133-44da-89c6-5e9014a854c9 Validity Not Before: Aug 22 18:00:08 2025 GMT Not After : Aug 25 18:00:00 2025 GMT Subject: CN=196c0c09-12fd-4562-acae-a0f64d6bf426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:6b:46:13:50:0a:fb:91:3b:ae:2e:10:77: ac:b9:5b:bb:e4:e8:7b:8d:86:71:bc:7e:74:7e:b1: cc:86:ca:18:46:e4:12:4c:db:dc:2c:ca:19:af:ca: 62:d0:c6:fe:8b:fe:5c:9f:a3:4a:02:b2:43:8e:c3: 17:c3:7b:3a:f1:56:b2:9f:a3:6e:87:12:15:2d:a8: 0e:98:ec:55:bf:a1:f1:3a:4b:2b:d9:56:63:15:3a: 9f:ef:70:52:0b:c1:45:49:c6:a5:16:7d:36:29:57: 67:51:ae:67:da:09:98:85:c0:99:16:ac:93:6f:2e: 16:e8:8f:79:9b:52:77:b5:05:74:d1:9b:d6:c4:67: 30:db:9c:0a:7d:65:81:eb:fb:06:d4:64:66:7c:69: f7:26:56:bd:62:b0:08:22:af:fb:1e:d7:80:b2:3f: 8d:34:a8:fe:3e:0b:7d:d4:05:61:d6:9e:f5:7b:43: 39:8e:5a:5f:95:3c:fc:1d:d2:b4:1c:8b:23:a5:09: 3f:55:29:26:f1:86:2d:da:b2:8e:98:72:8e:24:1d: 1c:cf:03:26:0b:bb:c3:37:35:5f:1a:53:d0:37:91: 70:fa:0f:23:f0:bd:db:9a:2a:b8:0f:8a:5e:31:e8: 1f:e7:7e:e0:3d:d9:28:b8:8a:80:20:ca:7a:0a:49: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:0E:B3:F2:61:DF:61:33:4D:43:75:6D:9E:59:A9:05:AD:B7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl X509v3 Authority Key Identifier: keyid:DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f0:bb:99:a0:d7:51:1f:63:bc:40:1e:89:54:7a:f5:12:42: 4d:f4:82:11:56:07:87:b6:32:6b:ff:e9:da:68:4b:6e:36:83: bd:e6:f7:72:ad:3f:d0:ab:d9:04:a9:44:f8:26:5f:60:67:7c: 31:e3:32:9f:32:7e:27:3b:82:ce:f1:4f:65:97:b6:c6:cc:d1: 94:1e:f7:4e:27:fd:6c:fd:99:e9:54:23:97:92:ab:75:a8:ef: bd:b3:bd:1d:7c:17:33:c6:94:82:f0:b4:ec:b3:c4:e4:c3:87: c7:b4:e2:2f:03:11:42:ab:4a:19:fb:64:0a:26:f9:0b:60:c7: 1a:e9:f4:60:9c:54:6b:ed:6d:64:4c:8d:b5:63:da:55:32:db: 2e:b3:8d:7e:83:58:6d:48:c4:f1:4d:73:53:25:fb:c8:de:a5: 66:c4:a7:0c:87:6c:a1:d2:1f:74:e6:da:53:98:47:b9:fa:15: 23:dc:fc:23:8f:dc:24:9e:f2:26:60:73:f6:15:9f:42:30:a7: 0e:56:7a:74:42:91:5d:88:ae:24:95:4a:49:e2:3c:21:51:96: 5c:a4:94:d6:2a:13:8b:3f:99:91:b6:26:8a:02:e1:12:98:96: b8:0f:a3:ab:4f:71:ad:d4:20:8c:e0:3d:ed:cb:bf:2b:aa:9d: ab:8d:27:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxhdHjXMjGWIGnOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkOTIwMDYtOTEzMy00NGRhLTg5YzYtNWU5MDE0YTg1 NGM5MB4XDTI1MDgyMjE4MDAwOFoXDTI1MDgyNTE4MDAwMFowLzEtMCsGA1UEAxMk MTk2YzBjMDktMTJmZC00NTYyLWFjYWUtYTBmNjRkNmJmNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq85rRhNQCvuRO64uEHesuVu75Oh7jYZxvH50 frHMhsoYRuQSTNvcLMoZr8pi0Mb+i/5cn6NKArJDjsMXw3s68Vayn6NuhxIVLagO mOxVv6HxOksr2VZjFTqf73BSC8FFScalFn02KVdnUa5n2gmYhcCZFqyTby4W6I95 m1J3tQV00ZvWxGcw25wKfWWB6/sG1GRmfGn3Jla9YrAIIq/7HteAsj+NNKj+Pgt9 1AVh1p71e0M5jlpflTz8HdK0HIsjpQk/VSkm8YYt2rKOmHKOJB0czwMmC7vDNzVf GlPQN5Fw+g8j8L3bmiq4D4peMegf537gPdkouIqAIMp6CkmrRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEKODrPyYd9hM01DdW2eWakFrbfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYmQ5 MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkwMTRhODU0YzkvMmJkOTIwMDYtOTEzMy00 NGRhLTg5YzYtNWU5MDE0YTg1NGM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmJkOTIwMDYtOTEzMy00NGRhLTg5 YzYtNWU5MDE0YTg1NGM5LzJiZDkyMDA2LTkxMzMtNDRkYS04OWM2LTVlOTAxNGE4 NTRjOS5jcmwwHwYDVR0jBBgwFoAU3B+96AWOKQ75SFWG9x5peg7eewcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYmQ5MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkw MTRhODU0YzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ8LuZoNdRH2O8QB6JVHr1 EkJN9IIRVgeHtjJr/+naaEtuNoO95vdyrT/Qq9kEqUT4Jl9gZ3wx4zKfMn4nO4LO 8U9ll7bGzNGUHvdOJ/1s/ZnpVCOXkqt1qO+9s70dfBczxpSC8LTss8Tkw4fHtOIv AxFCq0oZ+2QKJvkLYMca6fRgnFRr7W1kTI21Y9pVMtsus41+g1htSMTxTXNTJfvI 3qVmxKcMh2yh0h905tpTmEe5+hUj3Pwjj9wknvImYHP2FZ9CMKcOVnp0QpFdiK4k lUpJ4jwhUZZcpJTWKhOLP5mRtiaKAuESmJa4D6OrT3Gt1CCM4D3ty78rqp2rjSdX -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:09 2025 by rpki-client