$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: 1w20rnRwFttiy0eKrV9mihVU7kZHKABY9krHOGS/7/4= Subject key identifier: BE:70:3C:77:B6:94:86:F2:20:7D:3A:27:D5:CE:EB:00:F3:65:D5:7A Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584AF48C0E2DD023B2BF5ED98800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C5C5 Signing time: Sat 23 Aug 2025 20:00:08 +0000 Manifest this update: Sat 23 Aug 2025 20:00:08 +0000 Manifest next update: Mon 25 Aug 2025 20:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: vnHSRu4KRcZBO31IB07ZTnwmgB4ABDreVgTn8fwOMh4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:8c:0e:2d:d0:23:b2:bf:5e:d9:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Aug 23 20:00:08 2025 GMT Not After : Aug 25 20:00:00 2025 GMT Subject: CN=057946b8-16e7-45d9-bdf7-f1d3da43d0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:0c:c3:c6:ec:6f:df:9b:ea:06:98:c5:5c: 55:ba:54:cf:f6:ea:1c:9f:fd:fd:db:bf:32:ae:a1: 28:b4:92:f3:3e:cf:63:ac:6e:0c:53:3b:eb:a8:a0: 8d:62:c1:43:9f:8f:8e:42:01:ba:7c:da:b7:30:ee: b0:5a:98:c1:91:30:b6:68:db:2a:3d:bf:d1:9e:2b: 81:7b:2a:b4:72:a0:d7:a3:33:52:24:b6:85:43:92: ea:c1:12:66:99:38:72:a4:e0:c5:ee:8e:93:27:bf: 46:f4:2c:7d:1f:a7:38:01:56:8d:6f:dc:fe:2e:fe: bd:31:28:d1:f6:88:05:06:a5:34:14:e8:cf:55:f8: e9:ab:ce:ed:78:ba:de:3b:cc:dc:b9:e1:3e:67:9b: 87:3f:e7:84:ed:28:4c:d2:43:27:fc:2e:b8:6e:84: a8:11:68:34:68:20:ff:83:0f:55:8a:d9:80:de:28: 7f:b6:9e:d6:37:e5:a9:d9:cd:54:2a:74:7a:13:aa: af:b9:b1:4e:23:df:02:20:c0:22:43:63:0c:d9:f9: 1b:fc:c0:af:65:2f:8e:28:70:e3:11:1f:a4:60:f4: 5f:9b:b0:b6:38:a7:d1:85:83:44:36:53:da:a8:dd: 92:fb:37:8f:a9:66:ac:e1:d1:04:cf:23:32:0b:d6: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:3C:77:B6:94:86:F2:20:7D:3A:27:D5:CE:EB:00:F3:65:D5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d8:b2:a7:ce:33:25:08:2d:b0:ce:09:67:44:23:11:e9:33: bd:4b:0e:e9:ce:21:4f:8b:5c:e4:45:21:a1:e7:51:d7:e1:fa: c9:ea:fb:78:1c:28:02:a5:1b:9b:39:10:51:9a:22:c7:8f:4a: 55:c5:8b:5a:4c:ec:03:35:a1:a2:83:68:2b:ef:64:df:16:d4: 83:1e:7d:49:37:9a:1d:a3:90:95:3d:63:7a:da:16:63:99:5f: 78:50:21:38:e9:b9:73:bb:41:0b:a0:e9:0c:3c:0c:8d:0b:de: 7f:82:ba:a3:94:06:d5:71:fe:c7:d0:d5:06:00:37:92:64:aa: 00:39:e5:ff:cd:59:b2:35:10:7a:ec:43:28:57:bd:0d:4f:fa: d4:5b:a0:6f:12:5b:ca:a5:47:0c:a7:d4:de:63:4c:3b:9a:38: 04:f0:14:29:db:d8:b3:41:48:37:23:f7:be:5f:e4:60:c3:2e: 34:a2:f0:9e:47:8c:70:5e:02:73:3d:61:6b:7b:a9:78:d8:b0: d5:17:76:71:1e:14:c1:c8:33:71:52:d8:07:6d:1f:f9:b5:22: 28:69:2e:65:15:4c:9d:be:ca:ee:59:99:02:1f:2e:83:c6:6a: ed:bb:aa:34:0f:4c:5e:0c:21:14:d1:69:66:41:85:64:6f:4b: 36:31:df:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0jA4t0COyv17ZiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI1MDgyMzIwMDAwOFoXDTI1MDgyNTIwMDAwMFowLzEtMCsGA1UEAxMk MDU3OTQ2YjgtMTZlNy00NWQ5LWJkZjctZjFkM2RhNDNkMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0QMw8bsb9+b6gaYxVxVulTP9uocn/39278y rqEotJLzPs9jrG4MUzvrqKCNYsFDn4+OQgG6fNq3MO6wWpjBkTC2aNsqPb/RniuB eyq0cqDXozNSJLaFQ5LqwRJmmThypODF7o6TJ79G9Cx9H6c4AVaNb9z+Lv69MSjR 9ogFBqU0FOjPVfjpq87teLreO8zcueE+Z5uHP+eE7ShM0kMn/C64boSoEWg0aCD/ gw9VitmA3ih/tp7WN+Wp2c1UKnR6E6qvubFOI98CIMAiQ2MM2fkb/MCvZS+OKHDj ER+kYPRfm7C2OKfRhYNENlPaqN2S+zePqWas4dEEzyMyC9ZgQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5wPHe2lIbyIH06J9XO6wDzZdV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz2LKnzjMlCC2wzglnRCMR 6TO9Sw7pziFPi1zkRSGh51HX4frJ6vt4HCgCpRubORBRmiLHj0pVxYtaTOwDNaGi g2gr72TfFtSDHn1JN5odo5CVPWN62hZjmV94UCE46blzu0ELoOkMPAyNC95/grqj lAbVcf7H0NUGADeSZKoAOeX/zVmyNRB67EMoV70NT/rUW6BvElvKpUcMp9TeY0w7 mjgE8BQp29izQUg3I/e+X+Rgwy40ovCeR4xwXgJzPWFre6l42LDVF3ZxHhTByDNx UtgHbR/5tSIoaS5lFUydvsruWZkCHy6Dxmrtu6o0D0xeDCEU0WlmQYVkb0s2Md/Q -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:19 2025 by rpki-client