$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: OYgrmhzuBM6xI/TXFdpj+r/0WBpHb2onJGQwnLVf8Vo= Subject key identifier: 26:DE:4D:59:8E:39:B5:20:69:BB:34:60:41:E5:B5:60:53:70:49:8D Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584AF0F0ECBE1DEC6CFD2B7AA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11B97 Signing time: Fri 22 Aug 2025 13:00:08 +0000 Manifest this update: Fri 22 Aug 2025 13:00:08 +0000 Manifest next update: Sun 24 Aug 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: v43p5DeWsz6071iNdEeUuRrpCRyfYBtfIW+duV/QZwY=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: gDnfnn8fNr4v2OTZfPfTYcn6BfyIFvMThbM8Z31tvtw=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: m7M86f9NRdvqSG5xrL74J4O73stTf+b79zNKZiYPq2o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f0:ec:be:1d:ec:6c:fd:2b:7a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Aug 22 13:00:08 2025 GMT Not After : Aug 24 13:00:00 2025 GMT Subject: CN=51d12054-a821-409b-bc41-9b282cb06cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:0f:03:fb:9d:d5:e3:22:38:d4:e6:81:9c: 2a:b3:82:e4:3d:52:26:6c:e1:52:c0:ff:08:25:8d: 6d:49:29:ab:b8:b9:10:2d:75:da:fa:77:b5:08:36: 7d:c7:52:67:15:f6:91:2d:be:15:19:f0:96:6d:c2: be:5d:65:0c:c1:43:ab:2f:3c:44:94:fa:ee:f6:e0: 0d:eb:5c:a7:fb:8d:38:33:7b:a7:2a:51:de:7e:93: 82:1e:bd:28:66:bd:aa:d8:12:35:85:e7:62:c2:14: f6:94:65:7d:63:36:95:7e:8d:07:b6:af:63:89:92: d4:12:2e:1e:31:36:34:a4:f6:35:e4:70:a5:69:95: 63:70:20:10:71:05:29:ac:7e:7f:bc:bd:4e:28:99: db:c0:cc:13:34:a0:ee:03:95:43:66:c4:67:25:d7: 16:3d:71:18:84:e5:61:5f:a0:d8:8d:a2:90:38:1d: ab:e5:50:7c:30:69:d5:9d:ec:05:7a:ab:1f:aa:20: 20:a6:b1:dc:f2:4b:b7:25:46:ae:19:db:df:1f:97: da:cd:c6:c5:3e:37:d5:07:08:e1:6d:59:eb:a3:37: 26:f3:58:95:d8:c9:70:e8:12:43:05:ca:aa:3d:4f: 06:e7:d9:95:a4:56:8b:d3:b8:24:5c:a1:78:48:78: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:4D:59:8E:39:B5:20:69:BB:34:60:41:E5:B5:60:53:70:49:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ad:33:8f:ff:a0:00:4a:bd:ef:ad:74:21:3c:ac:c4:aa:d4: 25:75:58:17:5e:6b:ae:5d:bd:01:88:da:72:4b:79:b5:96:07: a4:ba:e3:11:3d:a5:e3:63:ab:81:ed:1a:70:51:1b:4b:38:b2: d4:04:55:8d:40:67:12:ee:e1:b3:7f:ab:8b:04:12:59:87:3e: 08:4c:b0:d7:f3:ea:36:c1:00:b1:5f:42:43:49:82:53:9f:9c: 5f:f9:96:15:13:4a:6f:68:d2:e5:36:03:10:42:9d:19:e8:f6: ac:20:97:47:f8:d9:8d:d8:c4:dd:39:7f:50:89:c2:c1:8b:c7: 83:dd:4d:8a:70:77:e0:dd:51:c0:59:45:17:79:e6:fa:7c:e5: f3:ff:cb:4c:63:cb:5d:c1:51:b3:33:e3:f1:c2:83:4d:db:8a: 11:ce:0a:9c:50:b1:57:76:78:2c:ce:42:94:c8:38:32:29:17: d3:f1:35:a8:b7:3c:e0:8f:95:56:8b:c0:ec:65:31:1a:18:a6: 95:d6:b1:4e:e6:5b:e7:ba:7b:ee:2a:24:ad:be:ae:f1:b1:11: 5e:12:65:81:40:f6:84:3a:13:ba:b7:ab:af:b2:0a:df:f5:48: 8f:63:27:24:c8:a5:6b:c7:40:9b:ea:fc:75:91:a0:89:a5:80: 3c:90:5a:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErw8Oy+Hexs/St6ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MDgyMjEzMDAwOFoXDTI1MDgyNDEzMDAwMFowLzEtMCsGA1UEAxMk NTFkMTIwNTQtYTgyMS00MDliLWJjNDEtOWIyODJjYjA2Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutYPA/ud1eMiONTmgZwqs4LkPVImbOFSwP8I JY1tSSmruLkQLXXa+ne1CDZ9x1JnFfaRLb4VGfCWbcK+XWUMwUOrLzxElPru9uAN 61yn+404M3unKlHefpOCHr0oZr2q2BI1hediwhT2lGV9YzaVfo0Htq9jiZLUEi4e MTY0pPY15HClaZVjcCAQcQUprH5/vL1OKJnbwMwTNKDuA5VDZsRnJdcWPXEYhOVh X6DYjaKQOB2r5VB8MGnVnewFeqsfqiAgprHc8ku3JUauGdvfH5fazcbFPjfVBwjh bVnrozcm81iV2Mlw6BJDBcqqPU8G59mVpFaL07gkXKF4SHhoJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCbeTVmOObUgabs0YEHltWBTcEmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsrTOP/6AASr3vrXQhPKzE qtQldVgXXmuuXb0BiNpyS3m1lgekuuMRPaXjY6uB7RpwURtLOLLUBFWNQGcS7uGz f6uLBBJZhz4ITLDX8+o2wQCxX0JDSYJTn5xf+ZYVE0pvaNLlNgMQQp0Z6PasIJdH +NmN2MTdOX9QicLBi8eD3U2KcHfg3VHAWUUXeeb6fOXz/8tMY8tdwVGzM+PxwoNN 24oRzgqcULFXdngszkKUyDgyKRfT8TWotzzgj5VWi8DsZTEaGKaV1rFO5lvnunvu KiStvq7xsRFeEmWBQPaEOhO6t6uvsgrf9UiPYyckyKVrx0Cb6vx1kaCJpYA8kFpF -----END CERTIFICATE-----Generated at Sat Aug 23 11:36:57 2025 by rpki-client