$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft File: c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft (raw, json) Hash identifier: N/xG3Jh644q+/X8xB9YRUcles3lz8MiWEx9n2yJWlBM= Subject key identifier: A4:99:97:07:CF:C7:E1:1B:71:0C:39:7F:B3:BA:62:FB:6D:32:95:F8 Authority key identifier: 8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 Certificate issuer: /CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Certificate serial: 010D0C9F4328584AF39DD642D773C086AC4EFA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft Manifest number: 010D0C9F4328584073A851E7AB99689230705E58 Signing time: Sat 23 Aug 2025 12:00:08 +0000 Manifest this update: Sat 23 Aug 2025 12:00:08 +0000 Manifest next update: Tue 26 Aug 2025 12:00:00 +0000 Files and hashes: 1: 175a7774-3b58-3926-8574-a23f74a28ae2.roa (hash: yyWlXrMf06YnqO3XdK4Hmt1lRMCSXhdDnQWF2TeNt+o=) 2: c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl (hash: HPuXd88rDKbbtKyPE9jLtEXMF2GScnaSq5f77+dwSik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:9d:d6:42:d7:73:c0:86:ac:4e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Validity Not Before: Aug 23 12:00:08 2025 GMT Not After : Aug 26 12:00:00 2025 GMT Subject: CN=d8e8686e-51f3-43ab-8e88-d552a40f410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:cf:4b:b7:f3:7c:32:12:3a:27:56:0e:67: 25:97:62:fb:69:2e:b8:b4:7d:21:b0:0b:c1:68:4b: f7:f5:47:64:d0:fc:04:58:34:3a:00:26:cd:61:84: 68:5c:e8:b9:e8:ee:29:70:1a:8f:68:6f:20:60:fe: 25:a9:c7:9b:f3:62:4a:50:3f:65:95:39:88:ec:81: e8:5b:97:51:f9:2e:ca:2b:96:d8:cb:4e:a2:8d:7c: d8:f4:03:af:84:1c:c1:5d:4a:be:49:e9:60:64:bc: 89:64:08:70:d6:0d:58:08:f3:11:bb:ed:6a:e6:1a: 1a:5f:e4:04:33:ec:7a:31:89:c5:5e:fa:0f:22:fa: 08:2a:0e:4f:aa:5b:b0:69:89:be:13:19:de:0f:cf: a0:d5:bc:76:a2:e0:90:20:0e:d6:60:c8:53:43:77: e9:0b:7a:9c:7a:60:0f:68:5e:47:c8:b5:20:69:77: d1:06:b7:9e:74:ae:08:30:16:36:f6:a9:43:90:c7: 56:66:2a:9b:f8:42:04:1e:a0:6c:10:e4:83:cc:b0: 77:ec:76:8d:7c:70:c4:b2:6a:76:2a:d5:29:4b:46: 65:4c:25:bf:9c:32:88:f8:71:b7:69:e5:26:0c:76: 69:82:5b:1f:27:da:70:be:03:1e:2c:f6:0b:f7:13: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:97:07:CF:C7:E1:1B:71:0C:39:7F:B3:BA:62:FB:6D:32:95:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl X509v3 Authority Key Identifier: keyid:8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e2:5b:01:bc:3b:92:58:be:b3:f5:fa:c1:2b:d0:24:e1:d3: 61:fd:08:c0:01:78:fc:50:78:48:1c:31:6f:63:39:70:ad:be: 40:19:df:66:9a:ce:b5:4d:88:2d:85:ba:1e:4b:6e:81:3c:7c: 32:76:59:55:3e:3f:1a:d1:a6:f4:ff:63:b3:2e:2d:dc:9c:fe: fa:29:bb:19:5c:2c:20:cd:d7:62:ba:7a:78:f8:01:a7:4b:d0: 58:1a:92:ac:c3:9c:bf:90:04:f7:57:21:0e:db:f6:2e:0f:c6: 1e:55:29:11:4d:45:1e:fc:13:03:27:52:28:71:59:cb:61:39: 76:f1:1f:61:e4:da:51:5b:16:6e:b5:e6:d2:9f:2c:35:98:68: 6c:8e:98:63:46:42:4d:47:eb:da:e8:cc:9d:aa:d2:3f:41:99: b6:42:c8:88:22:3a:7c:bf:c2:a9:32:8c:07:91:98:07:95:2d: 76:a6:67:05:8b:06:28:d6:75:11:3b:b3:d0:15:52:3b:e1:b0: 32:99:4c:e9:06:70:44:ea:f0:89:c4:27:5d:7d:a0:95:d9:04: 17:65:64:ac:4e:3c:9f:ea:f1:9f:84:5c:55:8f:2a:71:82:9c: da:3c:ec:50:f0:b5:3b:30:07:f5:57:81:c0:78:9e:d2:c3:0b: a0:00:ef:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzndZC13PAhqxO+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwMGFjZTAtYTc3Zi00NTZiLWIyYTctZGI1ZTZiODll ODdhMB4XDTI1MDgyMzEyMDAwOFoXDTI1MDgyNjEyMDAwMFowLzEtMCsGA1UEAxMk ZDhlODY4NmUtNTFmMy00M2FiLThlODgtZDU1MmE0MGY0MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwvPS7fzfDISOidWDmcll2L7aS64tH0hsAvB aEv39Udk0PwEWDQ6ACbNYYRoXOi56O4pcBqPaG8gYP4lqceb82JKUD9llTmI7IHo W5dR+S7KK5bYy06ijXzY9AOvhBzBXUq+SelgZLyJZAhw1g1YCPMRu+1q5hoaX+QE M+x6MYnFXvoPIvoIKg5PqluwaYm+ExneD8+g1bx2ouCQIA7WYMhTQ3fpC3qcemAP aF5HyLUgaXfRBreedK4IMBY29qlDkMdWZiqb+EIEHqBsEOSDzLB37HaNfHDEsmp2 KtUpS0ZlTCW/nDKI+HG3aeUmDHZpglsfJ9pwvgMeLPYL9xOeNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKSZlwfPx+EbcQw5f7O6YvttMpX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAw YWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVlNmI4OWU4N2EvYzkwMGFjZTAtYTc3Zi00 NTZiLWIyYTctZGI1ZTZiODllODdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzkwMGFjZTAtYTc3Zi00NTZiLWIy YTctZGI1ZTZiODllODdhL2M5MDBhY2UwLWE3N2YtNDU2Yi1iMmE3LWRiNWU2Yjg5 ZTg3YS5jcmwwHwYDVR0jBBgwFoAUi/bnYA++6ZQC1r/uuyRax337zSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAwYWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVl NmI4OWU4N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw4lsBvDuSWL6z9frBK9Ak 4dNh/QjAAXj8UHhIHDFvYzlwrb5AGd9mms61TYgthboeS26BPHwydllVPj8a0ab0 /2OzLi3cnP76KbsZXCwgzddiunp4+AGnS9BYGpKsw5y/kAT3VyEO2/YuD8YeVSkR TUUe/BMDJ1IocVnLYTl28R9h5NpRWxZutebSnyw1mGhsjphjRkJNR+va6MydqtI/ QZm2QsiIIjp8v8KpMowHkZgHlS12pmcFiwYo1nURO7PQFVI74bAymUzpBnBE6vCJ xCddfaCV2QQXZWSsTjyf6vGfhFxVjypxgpzaPOxQ8LU7MAf1V4HAeJ7SwwugAO9x -----END CERTIFICATE-----Generated at Sat Aug 23 21:46:39 2025 by rpki-client