$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 6zSGGBZhWB14Ma09MpjW6Vt3PcsGki83pbhjcqqVXgo= Subject key identifier: 47:2A:43:C4:D1:33:51:D2:40:E0:EF:5D:F2:D2:46:3A:59:3B:7C:B7 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584AF344708A6105C46A360FF100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022459 Signing time: Sat 23 Aug 2025 09:00:03 +0000 Manifest this update: Sat 23 Aug 2025 09:00:03 +0000 Manifest next update: Tue 26 Aug 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: QdDEnDK17hXH6Sdm+BXIbnryRx9wKZhDmhN8AJA/aXA=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: Yrb29edGHECK/Nyu95mBbhm/PTN2GjD/g+rc+aE3clE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:44:70:8a:61:05:c4:6a:36:0f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Aug 23 09:00:03 2025 GMT Not After : Aug 26 09:00:00 2025 GMT Subject: CN=7ea2db65-fd25-4827-8b3a-974968b59591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:75:18:36:10:cc:b6:db:d7:c8:e8:e5:52: a5:3a:50:95:9b:2f:ee:b6:9e:fc:71:8c:35:30:5b: 13:8d:64:50:62:6d:0a:59:f2:33:0e:86:3f:5d:b0: b8:5b:0f:c8:6a:9a:f6:4c:53:6c:55:e3:74:73:8f: 64:47:93:ee:9b:7e:d3:d8:3d:ae:6d:3b:b5:a5:bf: 79:2e:84:7e:76:76:e1:33:1b:e4:93:92:23:48:c2: 61:a5:10:a9:01:94:76:a6:47:98:cc:88:13:81:c4: c8:73:c0:f5:7c:d6:6b:43:9d:aa:33:47:3d:c2:30: 85:82:4e:c7:1e:a9:ff:ac:05:9a:4b:4d:d9:cb:23: 31:bb:8f:d3:b4:d5:23:57:93:78:b8:ac:71:ef:8b: 61:b6:da:48:0a:ae:b0:8a:7a:de:38:34:cb:5f:0a: 57:c8:64:72:42:10:ad:a8:37:73:69:20:e6:86:42: bf:a7:54:d2:88:fc:90:43:d1:38:b7:b1:38:4f:8a: 9f:4f:76:f5:36:a7:2c:d4:59:68:59:a6:c9:89:0a: 2f:9a:8d:e2:f6:32:4d:52:12:d6:9e:25:69:c0:f0: 85:41:8e:48:07:68:c5:2d:e9:0d:c6:1c:0d:3a:a0: a4:dc:83:df:5a:d4:02:a1:23:e7:3d:38:6a:aa:f9: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2A:43:C4:D1:33:51:D2:40:E0:EF:5D:F2:D2:46:3A:59:3B:7C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:50:a6:61:0e:9f:20:0c:5d:3e:df:3c:a9:3a:29:67:2f:0b: ed:d1:f6:46:cf:9e:90:30:38:50:38:67:88:d3:5c:f8:2e:e2: 05:9b:a3:bd:fc:47:f4:2f:f8:cb:b8:b8:21:57:46:3a:c0:35: e9:d4:45:77:88:88:79:a3:5c:3c:82:2c:ff:95:27:ee:aa:61: c1:89:ba:03:19:8e:cd:4f:06:90:fe:07:c5:ed:d2:2f:cd:cf: 5c:9a:76:f2:2a:06:1c:28:30:e4:f0:cc:8a:6b:50:e9:82:41: 54:04:5a:10:22:ca:a8:ba:62:a1:21:95:17:f2:73:73:89:42: 9b:6f:4f:cb:7b:40:36:3c:96:f1:df:72:ee:4e:46:ba:d9:9f: 0e:78:8b:15:19:13:88:03:90:50:e8:ca:21:ed:a2:84:9c:36: d8:ce:06:60:89:99:f0:94:1b:f2:5f:1d:0f:99:ce:11:d8:bb: 45:14:24:82:8c:b6:2a:07:a0:d4:88:49:dc:50:f7:53:04:cd: dd:5c:23:5f:40:7b:f7:33:17:f3:23:9a:b0:22:27:a2:dd:70: 0d:c9:70:db:7d:be:c8:3f:1e:9b:e6:e2:d7:e1:04:4f:e2:e0: ed:11:84:ae:07:81:4f:30:b1:9a:ca:d9:12:92:9e:e4:eb:a5: 36:8e:a3:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzRHCKYQXEajYP8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDgyMzA5MDAwM1oXDTI1MDgyNjA5MDAwMFowLzEtMCsGA1UEAxMk N2VhMmRiNjUtZmQyNS00ODI3LThiM2EtOTc0OTY4YjU5NTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqh1GDYQzLbb18jo5VKlOlCVmy/utp78cYw1 MFsTjWRQYm0KWfIzDoY/XbC4Ww/Iapr2TFNsVeN0c49kR5Pum37T2D2ubTu1pb95 LoR+dnbhMxvkk5IjSMJhpRCpAZR2pkeYzIgTgcTIc8D1fNZrQ52qM0c9wjCFgk7H Hqn/rAWaS03ZyyMxu4/TtNUjV5N4uKxx74thttpICq6winreODTLXwpXyGRyQhCt qDdzaSDmhkK/p1TSiPyQQ9E4t7E4T4qfT3b1Nqcs1FloWabJiQovmo3i9jJNUhLW niVpwPCFQY5IB2jFLekNxhwNOqCk3IPfWtQCoSPnPThqqvlNcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEcqQ8TRM1HSQODvXfLSRjpZO3y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANUKZhDp8gDF0+3zypOiln Lwvt0fZGz56QMDhQOGeI01z4LuIFm6O9/Ef0L/jLuLghV0Y6wDXp1EV3iIh5o1w8 giz/lSfuqmHBiboDGY7NTwaQ/gfF7dIvzc9cmnbyKgYcKDDk8MyKa1DpgkFUBFoQ IsqoumKhIZUX8nNziUKbb0/Le0A2PJbx33LuTka62Z8OeIsVGROIA5BQ6Moh7aKE nDbYzgZgiZnwlBvyXx0Pmc4R2LtFFCSCjLYqB6DUiEncUPdTBM3dXCNfQHv3Mxfz I5qwIiei3XANyXDbfb7IPx6b5uLX4QRP4uDtEYSuB4FPMLGaytkSkp7k66U2jqP0 -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:50 2025 by rpki-client