$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: CrNjvq0vtXdPXNFGXpyEHDCtyD/L0zcRvAz14mkizoE= Subject key identifier: C1:C4:B3:65:2C:DF:00:D3:21:AF:7B:4A:D5:26:AE:27:75:CF:81:F2 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584AF1DF29CDE6AC2E7B71FA8400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD0799BB Signing time: Fri 22 Aug 2025 21:00:08 +0000 Manifest this update: Fri 22 Aug 2025 21:00:08 +0000 Manifest next update: Sun 24 Aug 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: 5EuFhwi5vQHSSX8Lh2u0kn+7ugAk7Z8EgxJpbpA/CU8=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: WI8e2nk8CmtOD2iTCjbGWxoqULLTTD/cjGnFwu7W59A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:df:29:cd:e6:ac:2e:7b:71:fa:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Aug 22 21:00:08 2025 GMT Not After : Aug 24 21:00:00 2025 GMT Subject: CN=8c245255-f28a-4c8d-a2ee-6737f1e10247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:34:ea:da:04:a5:d0:81:60:de:74:3a:17: 41:68:0d:73:fb:5c:8d:74:44:c9:98:2b:11:de:c2: 51:9e:ec:a2:5c:a3:e5:92:72:73:c3:24:6f:b0:03: 9d:b3:49:b8:7a:9c:de:ab:58:6c:e5:34:c7:d0:ea: 8a:c8:00:3d:8f:80:e3:11:90:22:ad:d8:a5:47:10: ae:97:7c:12:a0:cb:aa:6c:7f:27:b5:b7:3e:f1:d4: 21:a1:8f:d3:db:1a:1c:2d:57:24:2e:01:2d:53:e2: 92:b4:6b:68:b8:bf:b2:33:39:76:08:65:04:f4:a4: d5:4d:2e:b2:04:c2:bb:5a:83:74:68:34:48:0a:67: 25:8d:6c:c9:13:96:d6:94:5d:6d:72:c0:04:0a:bb: a1:ea:51:94:7a:d5:86:84:9e:0b:9f:c0:81:b2:69: e9:30:6c:d0:8e:f9:06:8c:b4:9e:29:3f:e7:a0:3e: bd:e2:fe:d9:95:64:53:22:e8:17:4d:b5:66:49:98: 9a:5d:f6:61:7f:f5:5e:4d:71:a6:45:1b:13:30:d1: 2f:7e:5f:54:73:a5:4d:9d:3c:78:4e:48:b3:e6:fe: 1c:f8:a7:b0:30:79:71:c0:b6:44:7b:b0:c4:d7:cd: 8a:66:82:a5:bb:b1:49:a0:8a:83:fe:ec:71:81:f8: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:B3:65:2C:DF:00:D3:21:AF:7B:4A:D5:26:AE:27:75:CF:81:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:04:94:5e:83:7c:ad:e2:a6:a8:30:b9:b8:0f:48:8b:5c:ad: b2:4f:ae:69:49:e8:e1:cd:ef:63:a4:41:d8:6e:14:38:45:97: 73:80:fb:06:c5:3d:db:8e:0d:5c:cb:d8:39:e8:de:80:17:49: 97:34:c2:c1:8c:c8:1a:d5:1a:40:ba:ae:f3:64:6d:7a:69:42: e9:a1:5b:8d:6a:8a:6c:e8:6f:34:eb:dc:21:32:98:93:5f:e8: 46:ac:f6:df:6c:00:98:37:4a:25:f4:60:3e:1e:fb:b8:59:f9: 29:43:b0:ed:8e:8f:cd:1b:3c:82:b8:20:89:79:c9:75:61:a5: 84:71:63:a8:ec:91:12:58:b4:ee:84:3b:f5:aa:4b:40:33:80: 6e:66:fb:b4:c4:af:da:72:e9:c8:84:7b:f0:ae:78:16:24:72: 75:a3:4a:0d:31:65:f1:bd:a0:e4:f3:4e:5d:f2:ed:27:9e:b9: b8:0d:61:7a:83:de:1c:e0:82:f4:c4:85:dd:aa:2a:31:0a:23: fb:07:e7:9b:90:20:31:1c:2c:9d:24:6a:c3:b7:69:85:dc:4f: 17:1a:d4:ff:9e:a8:7d:28:ef:6c:93:12:c0:d7:79:dd:42:3e: 16:48:34:e7:63:12:a5:37:42:4e:bf:56:ee:53:56:35:a7:c1: 7d:6b:e3:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx3ynN5qwue3H6hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MDgyMjIxMDAwOFoXDTI1MDgyNDIxMDAwMFowLzEtMCsGA1UEAxMk OGMyNDUyNTUtZjI4YS00YzhkLWEyZWUtNjczN2YxZTEwMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL806toEpdCBYN50OhdBaA1z+1yNdETJmCsR 3sJRnuyiXKPlknJzwyRvsAOds0m4epzeq1hs5TTH0OqKyAA9j4DjEZAirdilRxCu l3wSoMuqbH8ntbc+8dQhoY/T2xocLVckLgEtU+KStGtouL+yMzl2CGUE9KTVTS6y BMK7WoN0aDRICmcljWzJE5bWlF1tcsAECruh6lGUetWGhJ4Ln8CBsmnpMGzQjvkG jLSeKT/noD694v7ZlWRTIugXTbVmSZiaXfZhf/VeTXGmRRsTMNEvfl9Uc6VNnTx4 Tkiz5v4c+KewMHlxwLZEe7DE182KZoKlu7FJoIqD/uxxgfgtuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMHEs2Us3wDTIa97StUmrid1z4HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8BJReg3yt4qaoMLm4D0iL XK2yT65pSejhze9jpEHYbhQ4RZdzgPsGxT3bjg1cy9g56N6AF0mXNMLBjMga1RpA uq7zZG16aULpoVuNaops6G8069whMpiTX+hGrPbfbACYN0ol9GA+Hvu4WfkpQ7Dt jo/NGzyCuCCJecl1YaWEcWOo7JESWLTuhDv1qktAM4BuZvu0xK/acunIhHvwrngW JHJ1o0oNMWXxvaDk805d8u0nnrm4DWF6g94c4IL0xIXdqioxCiP7B+ebkCAxHCyd JGrDt2mF3E8XGtT/nqh9KO9skxLA13ndQj4WSDTnYxKlN0JOv1buU1Y1p8F9a+O3 -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:48 2025 by rpki-client