$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft (raw, json) Hash identifier: yJG8SOurVWIh2aXLpWBYkF3yxwGjjBhFn+4m+5Kfm5A= Subject key identifier: 04:E3:55:06:F1:D6:D2:7A:1D:52:EF:0B:13:C0:F4:DC:BD:CD:4C:FB Authority key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Certificate issuer: /CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Certificate serial: 010D0C9F4328584AF2740A76E9E347465732F650 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft Manifest number: 010D0C9F4328584073A837D5DC90CFDD9E2C4A5A Signing time: Sat 23 Aug 2025 02:00:08 +0000 Manifest this update: Sat 23 Aug 2025 02:00:08 +0000 Manifest next update: Tue 26 Aug 2025 02:00:00 +0000 Files and hashes: 1: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl (hash: aC02SYzx6mYSqybCAjBJdnfJ4TFv2JcvQQKxu5dDPsQ=) 2: c565c5c0-8555-3cb8-bca1-d3a92ed022e8.roa (hash: Bm+AyfjIXa/Ul+iApbOxITj6AehU8mOB2l1LJOqRmH8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:74:0a:76:e9:e3:47:46:57:32:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Validity Not Before: Aug 23 02:00:08 2025 GMT Not After : Aug 26 02:00:00 2025 GMT Subject: CN=9a30bd68-031b-4f10-b749-dde99b411b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:0d:6c:8c:00:1c:36:4b:22:e9:a2:85:e6: 40:76:08:b3:e6:95:b3:87:f5:86:5a:67:21:d6:2c: 11:9b:36:8e:81:3f:a9:c6:f0:1f:bc:11:61:11:1f: c8:5b:71:93:ab:04:ef:a5:a9:3e:98:3b:65:13:24: 7a:f0:c8:a0:f4:b5:93:04:f6:0a:37:82:6e:c6:39: c0:b8:14:6c:1c:3a:62:18:d3:6e:c7:5a:a2:8f:d5: 9d:ef:cf:b5:d5:90:0b:33:b9:6f:e2:3c:0f:94:ec: 6b:00:53:34:ac:88:bd:df:4d:13:e5:0a:15:ce:a5: cb:be:7d:19:c3:c6:c4:14:4d:22:d4:90:48:b7:cc: 13:47:ae:55:fe:70:d0:2a:50:8b:e2:2e:32:df:c0: 34:ba:27:b3:0c:31:a8:83:24:36:3e:17:e6:6c:d4: d1:73:71:dd:3d:55:64:1b:26:e8:98:81:b3:38:6d: c4:36:06:55:13:53:77:fa:de:ba:da:fb:ff:90:41: da:4d:b6:16:ba:ba:06:51:9f:61:4d:32:75:6d:9e: 47:95:d7:20:b2:bc:52:d9:78:d2:9e:82:68:42:d9: be:27:b9:0a:ef:03:67:26:2d:30:fe:69:c2:6c:a9: d2:da:0b:00:c5:38:99:c1:31:ac:49:96:c5:90:77: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E3:55:06:F1:D6:D2:7A:1D:52:EF:0B:13:C0:F4:DC:BD:CD:4C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl X509v3 Authority Key Identifier: keyid:57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b0:8b:da:ed:47:ca:19:24:d1:4e:ac:ae:26:3c:16:df:3a: 7b:d0:72:7f:00:82:c2:92:14:05:9b:0f:fc:ad:9f:3e:45:44: 69:d3:f7:14:cc:55:80:a5:aa:43:fc:51:41:73:aa:2b:75:13: c5:35:30:6d:41:fd:b2:1f:c0:59:d9:49:cb:75:ba:72:7e:4f: 1f:b4:f5:83:a5:a6:24:58:e6:c5:63:00:74:b2:17:54:30:07: 63:0b:a6:91:ef:db:d6:4c:1f:7f:25:e6:f0:1c:fb:c5:07:ae: 6b:f5:d5:13:26:e8:b0:10:2f:9b:d5:4b:5d:b6:ee:a0:ef:12: 29:dd:93:e9:cc:99:82:aa:cd:56:ea:75:ef:71:01:78:c0:08: 2a:42:31:5e:94:1d:b6:57:43:d3:52:cc:d2:85:78:30:88:82: 92:33:d3:35:5d:81:24:59:20:10:c5:8d:de:a5:74:ee:e3:32: 6e:f0:6c:e0:ec:18:4b:b8:20:01:a0:75:b1:eb:59:75:31:97: 72:ff:c8:c1:1c:5c:39:c3:f6:3b:e6:ca:e2:54:0f:09:3b:aa: 2c:4f:49:03:32:f9:6a:e1:9b:a5:c1:1c:14:84:0b:35:86:41: 96:a7:76:09:1e:d9:0b:df:4e:6a:3a:04:c4:a2:64:3b:25:1a: 1e:5c:a5:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErydAp26eNHRlcy9lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWEx NGM2MB4XDTI1MDgyMzAyMDAwOFoXDTI1MDgyNjAyMDAwMFowLzEtMCsGA1UEAxMk OWEzMGJkNjgtMDMxYi00ZjEwLWI3NDktZGRlOTliNDExYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8sNbIwAHDZLIumiheZAdgiz5pWzh/WGWmch 1iwRmzaOgT+pxvAfvBFhER/IW3GTqwTvpak+mDtlEyR68Mig9LWTBPYKN4JuxjnA uBRsHDpiGNNux1qij9Wd78+11ZALM7lv4jwPlOxrAFM0rIi9300T5QoVzqXLvn0Z w8bEFE0i1JBIt8wTR65V/nDQKlCL4i4y38A0uiezDDGogyQ2PhfmbNTRc3HdPVVk GybomIGzOG3ENgZVE1N3+t662vv/kEHaTbYWuroGUZ9hTTJ1bZ5HldcgsrxS2XjS noJoQtm+J7kK7wNnJi0w/mnCbKnS2gsAxTiZwTGsSZbFkHec+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFATjVQbx1tJ6HVLvCxPA9Ny9zUz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0 NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvNDk5NDUwYmQtNjQzMi00 ZTVkLWEyOWYtMWMzOGMxZWExNGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDk5NDUwYmQtNjQzMi00ZTVkLWEy OWYtMWMzOGMxZWExNGM2LzQ5OTQ1MGJkLTY0MzItNGU1ZC1hMjlmLTFjMzhjMWVh MTRjNi5jcmwwHwYDVR0jBBgwFoAUV5x9/YcwBLe0R40DMFkQXZSTefEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4 YzFlYTE0YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQsIva7UfKGSTRTqyuJjwW 3zp70HJ/AILCkhQFmw/8rZ8+RURp0/cUzFWApapD/FFBc6ordRPFNTBtQf2yH8BZ 2UnLdbpyfk8ftPWDpaYkWObFYwB0shdUMAdjC6aR79vWTB9/JebwHPvFB65r9dUT JuiwEC+b1Utdtu6g7xIp3ZPpzJmCqs1W6nXvcQF4wAgqQjFelB22V0PTUszShXgw iIKSM9M1XYEkWSAQxY3epXTu4zJu8Gzg7BhLuCABoHWx61l1MZdy/8jBHFw5w/Y7 5sriVA8JO6osT0kDMvlq4ZulwRwUhAs1hkGWp3YJHtkL305qOgTEomQ7JRoeXKV+ -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:40 2025 by rpki-client