$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: Do4jthKsGhEbOhvKrli7xZnS4S7nznYLJFr6sWk0T7E= Subject key identifier: 1E:A1:BA:96:38:30:7B:F4:2A:D8:65:16:4C:10:4E:EF:F0:03:F4:5F Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584AF308E272755AC3F947B633C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3359 Signing time: Sat 23 Aug 2025 07:00:03 +0000 Manifest this update: Sat 23 Aug 2025 07:00:03 +0000 Manifest next update: Tue 26 Aug 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: +HumoP+y1kRF/KbtKLXmgaKsyGkfY1ADuS5c+aY+Rf8=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: 1yG4EeXN++D8kruqS4WqUWvtqG99mfhki/SSt58d8b8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:08:e2:72:75:5a:c3:f9:47:b6:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Aug 23 07:00:03 2025 GMT Not After : Aug 26 07:00:00 2025 GMT Subject: CN=b544363a-24f3-4128-a4f8-b74130774401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:f2:53:5e:38:d9:e4:82:f4:df:9a:97:67: be:f2:86:89:a3:3d:fc:7a:b1:07:76:5d:8c:2c:ba: 16:f1:7c:6b:f9:94:33:a2:2b:a7:65:ea:14:24:91: 26:e3:d3:89:24:13:0b:27:ce:84:95:a3:13:7f:13: fa:d4:6f:b8:76:1f:ea:e1:a5:91:d9:75:e3:1e:d3: 32:58:9f:fe:d7:68:65:dd:30:f5:a1:3d:e3:a1:a8: eb:04:ee:d9:32:9b:1d:bd:58:5c:db:ba:8b:a0:d7: 4f:c0:77:3d:7d:4e:da:3b:e8:4c:3c:f2:c9:0c:3b: 24:42:43:b5:71:f9:62:ee:de:6b:5c:26:f4:31:dd: 55:15:f2:2f:bd:64:fb:d5:35:02:43:03:5f:e3:17: 1f:60:f8:44:1d:d1:91:c9:dd:c8:f1:3c:23:f9:4c: e8:97:82:b9:88:5f:2b:d2:8e:51:9a:12:c7:03:c7: 5d:7d:78:cc:1c:0f:9a:ea:69:a9:06:e7:16:20:6e: d1:ce:ef:6b:6f:a8:0d:82:c5:c4:a4:81:52:38:9d: f3:a5:c2:ec:20:12:49:84:ed:41:d8:3e:47:d7:ef: 85:56:03:23:8c:0d:5d:3f:e2:4b:e2:ee:a5:da:88: 90:f7:0f:5d:c8:3d:a9:4e:24:6e:a7:5c:62:67:5f: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:BA:96:38:30:7B:F4:2A:D8:65:16:4C:10:4E:EF:F0:03:F4:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:63:8b:a4:40:35:07:8d:99:96:24:85:f9:9c:8c:83:d8:b5: f2:aa:c3:77:3a:df:38:44:08:a9:fe:14:9e:b4:82:f5:d4:b0: 6b:b8:ee:79:6c:06:e7:56:a6:ae:3e:bd:71:40:95:84:f0:57: f8:77:9a:de:01:67:f1:34:24:9a:69:ae:94:dd:1a:89:03:66: c4:d3:7f:9d:be:8a:0c:3d:6b:fd:c2:f2:89:c0:fb:40:8b:97: 80:a0:c5:f4:db:3e:8a:ab:21:42:36:83:af:2b:80:bd:63:b7: 89:e2:1a:e2:cf:75:81:cb:41:43:4e:20:03:78:df:50:44:38: e0:45:10:98:2a:8a:66:d0:99:11:24:90:07:7b:69:c2:d7:cd: e8:01:33:fe:89:73:70:84:11:db:66:ce:d4:d8:7f:d5:2d:cd: 87:59:52:b1:df:19:9b:dd:52:d9:5c:c0:75:c9:f9:eb:b6:dc: db:7a:dc:77:42:ac:91:66:f7:76:06:e8:d3:4d:24:8c:1f:8a: 55:7d:de:c8:5b:98:6f:2a:90:87:fe:84:f5:32:45:4d:f3:17: ff:72:50:79:10:8f:b8:1c:85:31:88:f3:88:80:a3:20:ae:09: 99:81:22:e5:ba:f0:ec:d0:12:d0:40:92:ac:f8:35:59:9d:a3: cc:95:33:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzCOJydVrD+Ue2M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDgyMzA3MDAwM1oXDTI1MDgyNjA3MDAwMFowLzEtMCsGA1UEAxMk YjU0NDM2M2EtMjRmMy00MTI4LWE0ZjgtYjc0MTMwNzc0NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg7yU1442eSC9N+al2e+8oaJoz38erEHdl2M LLoW8Xxr+ZQzoiunZeoUJJEm49OJJBMLJ86ElaMTfxP61G+4dh/q4aWR2XXjHtMy WJ/+12hl3TD1oT3joajrBO7ZMpsdvVhc27qLoNdPwHc9fU7aO+hMPPLJDDskQkO1 cfli7t5rXCb0Md1VFfIvvWT71TUCQwNf4xcfYPhEHdGRyd3I8Twj+Uzol4K5iF8r 0o5RmhLHA8ddfXjMHA+a6mmpBucWIG7Rzu9rb6gNgsXEpIFSOJ3zpcLsIBJJhO1B 2D5H1++FVgMjjA1dP+JL4u6l2oiQ9w9dyD2pTiRup1xiZ1+TeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB6hupY4MHv0KthlFkwQTu/wA/RfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRY4ukQDUHjZmWJIX5nIyD 2LXyqsN3Ot84RAip/hSetIL11LBruO55bAbnVqauPr1xQJWE8Ff4d5reAWfxNCSa aa6U3RqJA2bE03+dvooMPWv9wvKJwPtAi5eAoMX02z6KqyFCNoOvK4C9Y7eJ4hri z3WBy0FDTiADeN9QRDjgRRCYKopm0JkRJJAHe2nC183oATP+iXNwhBHbZs7U2H/V Lc2HWVKx3xmb3VLZXMB1yfnrttzbetx3QqyRZvd2BujTTSSMH4pVfd7IW5hvKpCH /oT1MkVN8xf/clB5EI+4HIUxiPOIgKMgrgmZgSLluvDs0BLQQJKs+DVZnaPMlTO6 -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:22 2025 by rpki-client