$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: PBNoyyCp+kYx43aXa3cozjB2meBPqYCcpp/hQ1w7dBg= Subject key identifier: B4:CA:4E:47:31:F3:22:5E:ED:68:61:82:8E:F4:DA:A4:E2:3A:17:9C Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584AF3BB9967ACAAF2E408D3E0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060C44 Signing time: Sat 23 Aug 2025 13:00:08 +0000 Manifest this update: Sat 23 Aug 2025 13:00:08 +0000 Manifest next update: Tue 26 Aug 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: CTniHTuwyN9BPdLN37KcEMH67YiOzYlK7OE7feMCCeI=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: wUyXG0YnVgiACqxctTwbZfmIEH5jQcFlmLtFBwl/LX4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:99:67:ac:aa:f2:e4:08:d3:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Aug 23 13:00:08 2025 GMT Not After : Aug 26 13:00:00 2025 GMT Subject: CN=059091b8-e5fc-4c81-b227-6f608b4a466d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:46:12:ea:ee:3f:4a:6c:81:f9:bc:4c:bf: 47:3a:23:a7:d2:f7:60:24:24:4c:9a:0a:18:91:2c: 25:1f:85:b9:f0:db:d6:27:85:c8:a0:e2:5e:21:f2: ce:43:0c:7b:7b:a9:71:b3:e8:bf:fc:e3:68:b1:18: 9e:73:43:c8:e4:2b:75:8f:b0:46:aa:17:aa:5f:2c: 92:75:62:90:b0:79:6a:d6:b1:73:36:13:91:82:e1: 3d:98:3f:14:f8:22:f2:c6:06:42:00:6a:bb:7e:b1: d6:7c:39:87:79:f1:b6:20:67:9b:c1:83:da:e8:93: 58:4e:4a:42:6d:b3:cb:1d:c6:83:57:df:b4:46:85: 37:ce:db:bb:0a:43:98:23:73:96:5f:d4:ff:3f:48: d8:00:16:57:fa:5a:72:4d:88:76:83:60:9e:30:94: 3f:3d:2b:3f:46:bd:c4:f8:d5:a5:6a:59:3f:70:2a: 1b:2b:65:00:85:b7:2a:4c:15:a9:89:40:f2:0c:d0: 4a:ad:d9:e5:33:25:2d:73:8e:72:0f:17:f5:7e:df: 13:9a:5b:a9:ec:7d:15:fa:ad:70:2c:79:67:d5:b6: 6d:3c:24:fd:4d:ce:72:75:bb:43:11:95:70:93:3e: da:46:c2:b4:fa:67:42:f7:95:ef:88:bc:b2:8e:ed: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CA:4E:47:31:F3:22:5E:ED:68:61:82:8E:F4:DA:A4:E2:3A:17:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e3:ef:3e:5b:10:2a:91:7b:d7:9e:6c:ea:9c:54:c3:b2:15: ad:c0:c6:25:ae:32:b9:32:06:f5:ed:d9:5e:10:fb:68:5f:a3: b7:1c:cf:56:92:40:b3:5a:ac:9b:a4:a3:21:95:29:88:0c:0a: e9:b4:b5:da:42:91:49:6d:78:e5:54:41:b5:c6:69:7d:08:75: e2:e3:13:43:d2:51:30:14:d7:a4:44:a4:8d:5b:de:21:b6:1a: 1e:9a:28:8c:a7:c6:53:89:ba:c9:c5:ab:48:84:42:ad:b6:1b: ef:af:f5:a5:d6:15:5f:83:45:15:c8:d4:88:85:55:6e:07:b9: cb:d8:24:60:ee:5f:41:7d:49:47:53:73:cd:9a:5f:c8:6d:06: 6e:ce:38:cf:e6:39:a5:cd:be:21:50:f4:90:2c:a4:fb:7c:87: c0:e0:63:43:93:a2:55:d3:87:f1:1c:9a:f3:dc:bd:75:c2:93: 44:26:13:d1:aa:e6:62:ea:4f:f7:69:f6:e9:bf:80:82:6d:44: 5b:15:12:bc:de:3c:49:a9:a8:b8:07:51:92:f7:ea:61:62:d8: 9d:c6:fd:88:15:ed:66:2b:f0:3e:b5:f3:f2:25:4c:59:35:b5: 4f:98:bc:b9:35:f2:a2:7e:b6:0c:df:69:91:45:3c:a4:79:f4: 7f:e1:f7:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzu5lnrKry5AjT4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDgyMzEzMDAwOFoXDTI1MDgyNjEzMDAwMFowLzEtMCsGA1UEAxMk MDU5MDkxYjgtZTVmYy00YzgxLWIyMjctNmY2MDhiNGE0NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrdGEuruP0psgfm8TL9HOiOn0vdgJCRMmgoY kSwlH4W58NvWJ4XIoOJeIfLOQwx7e6lxs+i//ONosRiec0PI5Ct1j7BGqheqXyyS dWKQsHlq1rFzNhORguE9mD8U+CLyxgZCAGq7frHWfDmHefG2IGebwYPa6JNYTkpC bbPLHcaDV9+0RoU3ztu7CkOYI3OWX9T/P0jYABZX+lpyTYh2g2CeMJQ/PSs/Rr3E +NWlalk/cCobK2UAhbcqTBWpiUDyDNBKrdnlMyUtc45yDxf1ft8Tmlup7H0V+q1w LHln1bZtPCT9Tc5ydbtDEZVwkz7aRsK0+mdC95XviLyyju0cnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLTKTkcx8yJe7Whhgo702qTiOhecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCl4+8+WxAqkXvXnmzqnFTD shWtwMYlrjK5Mgb17dleEPtoX6O3HM9WkkCzWqybpKMhlSmIDArptLXaQpFJbXjl VEG1xml9CHXi4xND0lEwFNekRKSNW94hthoemiiMp8ZTibrJxatIhEKtthvvr/Wl 1hVfg0UVyNSIhVVuB7nL2CRg7l9BfUlHU3PNml/IbQZuzjjP5jmlzb4hUPSQLKT7 fIfA4GNDk6JV04fxHJrz3L11wpNEJhPRquZi6k/3afbpv4CCbURbFRK83jxJqai4 B1GS9+phYtidxv2IFe1mK/A+tfPyJUxZNbVPmLy5NfKifrYM32mRRTykefR/4fcQ -----END CERTIFICATE-----Generated at Sat Aug 23 22:07:41 2025 by rpki-client