$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft File: b6e29f76-f782-45f9-8ad8-791d08e6d174.mft (raw, json) Hash identifier: 84/5exOM5wOs7ysEWcaATSYpSdar0gk9fpSdFCBDtgA= Subject key identifier: 26:40:0A:B8:6F:47:2E:28:E3:43:E7:FA:B5:E9:C0:E7:19:83:F6:6B Authority key identifier: 58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 Certificate issuer: /CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Certificate serial: 010D0C9F4328584AF3BB9CA9F8FC64BED6A8C600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft Manifest number: 010D0C9F4328584073A855DAAD18DF67421AF89A Signing time: Sat 23 Aug 2025 13:00:08 +0000 Manifest this update: Sat 23 Aug 2025 13:00:08 +0000 Manifest next update: Tue 26 Aug 2025 13:00:00 +0000 Files and hashes: 1: 70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa (hash: dp9PW5yxo0SRIt28IWQUTVVLgPWnQAggP6wszl8wHdE=) 2: b6e29f76-f782-45f9-8ad8-791d08e6d174.crl (hash: AwEK9Y5aASOp+3MBZvLFtONXuCb8FZAiwn8CbfDD904=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:9c:a9:f8:fc:64:be:d6:a8:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Validity Not Before: Aug 23 13:00:08 2025 GMT Not After : Aug 26 13:00:00 2025 GMT Subject: CN=08ea19d1-6ebc-4474-848c-c4fc0a1403dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:23:7e:4c:fb:e1:67:22:51:c3:62:5d:6b: 5a:f7:33:87:14:0d:53:bd:aa:6a:d0:70:78:ac:1c: 9a:a2:60:40:db:19:b3:b8:e1:38:44:8e:37:01:34: 27:4c:53:36:d4:5b:33:02:a0:14:70:2b:16:3a:86: 12:34:da:76:94:ca:3c:84:a9:3c:27:42:15:3f:77: ca:cc:84:b9:8c:25:2e:e4:8d:42:dc:27:1c:e8:32: 58:3f:15:42:89:33:7c:ae:4d:72:bb:1c:d3:50:c0: e6:67:18:f5:50:47:51:6d:87:47:80:9d:72:58:f2: 7b:39:10:92:bb:eb:b3:3e:fc:03:ec:c4:6f:1a:3f: 8d:a7:0a:47:7e:4e:fd:34:41:c0:b0:1b:1e:51:29: 96:e8:fd:c4:62:73:a2:e2:8a:51:a4:81:c7:48:de: e8:94:fd:19:86:97:b3:62:d6:1c:93:ff:10:b6:02: e7:a7:72:a6:1a:d7:e9:b7:6b:c7:a3:41:53:95:93: e9:59:87:0a:93:4e:bc:cb:ac:60:ce:7a:92:70:8f: 76:de:34:eb:3f:b0:e5:e9:56:97:b7:8c:5e:62:bb: 0e:7c:6b:0e:b5:01:ad:c4:05:01:f1:e5:b8:0c:73: c3:71:7a:9d:9d:a8:2b:32:72:03:8a:e4:02:f9:eb: bf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:0A:B8:6F:47:2E:28:E3:43:E7:FA:B5:E9:C0:E7:19:83:F6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl X509v3 Authority Key Identifier: keyid:58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8b:5b:ad:af:c9:1f:b9:f8:3d:3b:25:eb:e3:aa:de:fa:d0: 96:85:ac:c6:96:27:30:72:56:14:e5:bc:1b:57:d9:08:b7:30: 45:c2:1f:95:fe:7c:5e:01:c7:d9:ba:02:c7:0f:3c:c2:32:9c: 9a:9c:26:cf:51:ef:0a:22:a3:88:d8:21:21:5b:3e:3f:92:98: b4:fa:72:0f:39:be:27:45:19:14:ca:f6:54:5c:44:e0:5d:c8: b4:50:a7:42:fb:4f:8e:7c:77:f9:35:fe:0b:aa:3b:d8:94:cb: 0b:7b:66:8d:7a:25:9c:c3:23:35:77:58:d2:cb:e2:5b:00:8d: 97:1e:55:38:6a:d3:26:3e:16:ad:c8:d6:cf:a8:ee:4d:23:9c: 29:db:05:cf:08:b0:ce:f9:e7:53:96:6e:df:c2:49:47:5d:ad: 15:dd:bd:c8:5f:5b:84:c8:8e:2f:5c:02:43:0e:e5:4f:3d:a0: 81:58:14:a6:b3:f1:49:7f:6f:7c:91:7d:c8:d4:d1:e8:7e:ce: 11:9b:fd:c6:8b:16:a8:3a:01:e3:2b:f7:4b:97:e9:b9:cc:71: 6f:a3:90:06:c6:be:8a:50:2f:32:e0:21:39:7e:d5:be:c5:ed: 0f:71:f8:40:29:55:3e:eb:a4:46:65:35:00:35:0e:9c:e1:1d: 68:13:ee:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzu5yp+PxkvtaoxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZlMjlmNzYtZjc4Mi00NWY5LThhZDgtNzkxZDA4ZTZk MTc0MB4XDTI1MDgyMzEzMDAwOFoXDTI1MDgyNjEzMDAwMFowLzEtMCsGA1UEAxMk MDhlYTE5ZDEtNmViYy00NDc0LTg0OGMtYzRmYzBhMTQwM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR4jfkz74WciUcNiXWta9zOHFA1Tvapq0HB4 rByaomBA2xmzuOE4RI43ATQnTFM21FszAqAUcCsWOoYSNNp2lMo8hKk8J0IVP3fK zIS5jCUu5I1C3Ccc6DJYPxVCiTN8rk1yuxzTUMDmZxj1UEdRbYdHgJ1yWPJ7ORCS u+uzPvwD7MRvGj+NpwpHfk79NEHAsBseUSmW6P3EYnOi4opRpIHHSN7olP0Zhpez YtYck/8QtgLnp3KmGtfpt2vHo0FTlZPpWYcKk068y6xgznqScI923jTrP7Dl6VaX t4xeYrsOfGsOtQGtxAUB8eW4DHPDcXqdnagrMnIDiuQC+eu/QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCZACrhvRy4o40Pn+rXpwOcZg/ZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUy OWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFkMDhlNmQxNzQvYjZlMjlmNzYtZjc4Mi00 NWY5LThhZDgtNzkxZDA4ZTZkMTc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjZlMjlmNzYtZjc4Mi00NWY5LThh ZDgtNzkxZDA4ZTZkMTc0L2I2ZTI5Zjc2LWY3ODItNDVmOS04YWQ4LTc5MWQwOGU2 ZDE3NC5jcmwwHwYDVR0jBBgwFoAUWLB6IKgRUwfQQ1rgBQMgU6N0nwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUyOWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFk MDhlNmQxNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYi1utr8kfufg9OyXr46re +tCWhazGlicwclYU5bwbV9kItzBFwh+V/nxeAcfZugLHDzzCMpyanCbPUe8KIqOI 2CEhWz4/kpi0+nIPOb4nRRkUyvZUXETgXci0UKdC+0+OfHf5Nf4LqjvYlMsLe2aN eiWcwyM1d1jSy+JbAI2XHlU4atMmPhatyNbPqO5NI5wp2wXPCLDO+edTlm7fwklH Xa0V3b3IX1uEyI4vXAJDDuVPPaCBWBSms/FJf298kX3I1NHofs4Rm/3GixaoOgHj K/dLl+m5zHFvo5AGxr6KUC8y4CE5ftW+xe0PcfhAKVU+66RGZTUANQ6c4R1oE+7s -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:59 2025 by rpki-client