$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.mft (raw, json) Hash identifier: 9JYuODGI7wgjNnLYJ7yf6vAw9/vMqL+cJbUhlVxzCds= Subject key identifier: 8A:4C:5E:C6:0E:D0:9D:E4:C1:0C:C4:BF:71:4A:E1:54:2A:B8:E9:74 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584AF2CD547415CC4BAE04314280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft Manifest number: 010D0C9F4328584073A83E3481BD656300FDCDD8 Signing time: Sat 23 Aug 2025 05:00:03 +0000 Manifest this update: Sat 23 Aug 2025 05:00:03 +0000 Manifest next update: Tue 26 Aug 2025 05:00:00 +0000 Files and hashes: 1: 47727e8f-5ea0-4ad7-a853-5cade93acd74.crl (hash: FsnxauQqt1eviIzOGGGf45hXCSmM/S6uTk4OPBMbxXg=) 2: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (hash: Zp2oXrqyw7zc0xQqMfrEfPviyq3wO6eFH6ypTciz2QY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:cd:54:74:15:cc:4b:ae:04:31:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Aug 23 05:00:03 2025 GMT Not After : Aug 26 05:00:00 2025 GMT Subject: CN=20a07cd4-bb9b-4f05-b94c-44105c381275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:ad:a4:4e:18:33:1b:38:5f:fb:23:47:ea: 25:1a:71:ac:6a:85:8e:f4:67:d9:11:fd:ab:de:01: da:5f:1c:8c:36:15:01:f1:3d:ee:1c:69:1b:8d:2d: e0:aa:7e:52:5c:c8:a7:c7:ac:dd:fd:dd:5e:33:6b: f1:19:75:8c:85:62:fe:d8:b2:69:4a:54:a3:6c:da: 13:7e:a1:d5:86:62:d8:0b:96:46:c1:ca:94:a8:89: 99:c9:58:45:42:a0:b5:e1:e5:44:47:3c:a1:e2:95: d2:b5:c8:b6:9f:91:89:07:20:9c:f1:5e:94:a2:8e: 9c:69:3a:a1:2d:73:c5:64:5e:c4:43:5c:83:9d:4a: bb:68:9f:85:64:a2:44:3d:e0:9a:47:62:d7:6c:72: 33:1e:ac:43:56:7a:ff:b2:bd:e3:24:8e:cf:cb:95: 11:ec:37:f4:85:18:2e:00:15:33:25:77:1b:59:de: a3:ec:84:6b:e4:02:c1:bc:29:d8:99:00:a6:84:61: 89:15:c4:db:35:9e:77:fb:0f:3b:63:04:8e:1d:e7: 73:b5:13:cc:f7:5e:2d:dd:93:8b:af:64:ac:24:56: 7e:fb:01:58:13:ba:58:3c:d8:52:49:ed:ed:83:70: d2:91:b7:d8:1d:c6:08:e4:99:dc:df:9f:f7:61:41: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4C:5E:C6:0E:D0:9D:E4:C1:0C:C4:BF:71:4A:E1:54:2A:B8:E9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8a:4a:b7:4e:46:2b:d7:78:c7:23:eb:02:f6:ac:29:f2:cc: 0d:5f:1c:f4:a2:a9:c2:b2:8e:b2:af:4e:00:6f:a6:d8:19:93: 1a:cb:63:20:4c:fe:80:77:68:04:b5:30:a9:06:28:3e:5c:15: 92:5d:72:fd:93:16:c3:7a:21:12:53:60:c9:c1:df:12:c1:bf: 1e:ad:60:8d:16:fc:73:e6:de:e2:27:9c:5f:0a:7f:a4:8f:4a: 3e:ec:08:29:1d:86:24:34:74:09:09:fb:ba:f3:c8:c2:39:28: 14:5b:07:89:96:b1:bf:a4:92:a0:9a:47:62:26:7f:ea:fb:9c: 76:b5:26:55:b1:d2:6c:0e:10:94:63:f5:4d:dc:c3:ce:c3:21: ea:ed:e9:73:6c:1b:a6:c3:e4:66:69:27:1c:f9:35:e4:c4:0f: c0:41:67:6d:7a:19:73:7d:2f:d7:20:a8:eb:df:57:06:6b:ba: 4b:f5:08:85:ed:c7:69:6a:5f:43:6b:3f:fe:b1:65:a2:29:db: 63:2e:a2:38:97:03:c6:43:48:ad:3a:e1:7b:cb:16:09:42:ba: 55:dc:ef:cb:3d:e5:d3:88:11:6f:5e:88:74:69:9f:3c:47:42: 93:7a:dd:11:ff:59:8b:53:f5:3e:92:b3:e5:c2:78:04:1e:f5: 01:8b:29:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryzVR0FcxLrgQxQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MDgyMzA1MDAwM1oXDTI1MDgyNjA1MDAwMFowLzEtMCsGA1UEAxMk MjBhMDdjZDQtYmI5Yi00ZjA1LWI5NGMtNDQxMDVjMzgxMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T+tpE4YMxs4X/sjR+olGnGsaoWO9GfZEf2r 3gHaXxyMNhUB8T3uHGkbjS3gqn5SXMinx6zd/d1eM2vxGXWMhWL+2LJpSlSjbNoT fqHVhmLYC5ZGwcqUqImZyVhFQqC14eVERzyh4pXStci2n5GJByCc8V6Uoo6caTqh LXPFZF7EQ1yDnUq7aJ+FZKJEPeCaR2LXbHIzHqxDVnr/sr3jJI7Py5UR7Df0hRgu ABUzJXcbWd6j7IRr5ALBvCnYmQCmhGGJFcTbNZ53+w87YwSOHedztRPM914t3ZOL r2SsJFZ++wFYE7pYPNhSSe3tg3DSkbfYHcYI5Jnc35/3YUELewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpMXsYO0J3kwQzEv3FK4VQquOl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvNDc3MjdlOGYtNWVhMC00 YWQ3LWE4NTMtNWNhZGU5M2FjZDc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDikq3TkYr13jHI+sC9qwp 8swNXxz0oqnCso6yr04Ab6bYGZMay2MgTP6Ad2gEtTCpBig+XBWSXXL9kxbDeiES U2DJwd8Swb8erWCNFvxz5t7iJ5xfCn+kj0o+7AgpHYYkNHQJCfu688jCOSgUWweJ lrG/pJKgmkdiJn/q+5x2tSZVsdJsDhCUY/VN3MPOwyHq7elzbBumw+RmaScc+TXk xA/AQWdtehlzfS/XIKjr31cGa7pL9QiF7cdpal9Daz/+sWWiKdtjLqI4lwPGQ0it OuF7yxYJQrpV3O/LPeXTiBFvXoh0aZ88R0KTet0R/1mLU/U+krPlwngEHvUBiynL -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:23 2025 by rpki-client