$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: 2ajY12cpOfZ9r+bPiD4DGU8xIWx4rz0/EMRTs+w+PnU= Subject key identifier: 06:47:61:89:E4:39:F7:E5:31:44:62:77:80:4B:0B:02:E1:69:C8:84 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584AF53EBBDC134908A02EDCAD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337977 Signing time: Sun 24 Aug 2025 02:00:08 +0000 Manifest this update: Sun 24 Aug 2025 02:00:08 +0000 Manifest next update: Tue 26 Aug 2025 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: nhCNjjPtJBJ9JUgDUTT+5zsysvYqFwZ8nl9n+7BKrn0=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: oMNuP0rftL/ojrk4mESxOeSy+t+ZIxOsRxu4TDXDcHg=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: 9VYQDu2O40K+J/Gp5pB31p2Ov67fXZZwXnZratWcXSo=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: zH8Y2dlKwI2zqyJ6ptAkj4mOsSb+9UemPIr8gw0QyLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:3e:bb:dc:13:49:08:a0:2e:dc:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Aug 24 02:00:08 2025 GMT Not After : Aug 26 02:00:00 2025 GMT Subject: CN=74bdc578-a628-468f-828b-06a6b47bbbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:16:68:7f:d4:a6:da:fe:1b:ae:6d:57:6d: 0f:0d:03:51:fc:49:f0:41:1a:dd:1d:ed:f2:11:a7: 30:c2:85:64:ef:04:3e:a8:b3:f5:57:08:de:d5:3a: c3:f4:1f:ac:25:53:92:5b:67:b9:49:bf:12:b8:7b: 8c:aa:13:38:03:0f:e0:23:a4:33:5e:87:14:70:42: 75:77:2f:35:04:59:05:d4:d1:44:c1:5b:b6:ff:17: 4e:53:05:60:93:65:e3:7f:b5:bc:fd:8b:7c:b0:55: 4b:3d:11:26:d7:b4:30:46:a3:02:79:0b:c0:bf:18: 8f:01:7a:1d:2d:73:f5:b4:f8:d7:00:34:3d:8c:d5: c0:4d:89:3a:dc:e7:be:79:26:8f:1a:76:23:9b:18: d0:c3:e8:59:35:53:66:4e:92:af:16:8e:00:c7:80: d9:d3:fc:2b:f4:d5:c8:c5:e5:e4:0a:a7:82:3d:e5: 32:2f:63:d0:c2:0c:4f:5c:13:84:b2:6a:9b:07:c7: e7:53:69:95:47:d8:17:c6:25:62:85:66:23:71:8b: dd:7d:1e:1c:a7:09:c4:14:75:6f:d3:6b:ff:9e:cf: a3:e5:42:6e:6e:50:a2:2b:34:45:76:bc:52:02:b8: 80:8e:3f:68:d8:7e:87:6f:c9:8b:32:f2:6d:43:02: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:47:61:89:E4:39:F7:E5:31:44:62:77:80:4B:0B:02:E1:69:C8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bf:15:59:da:48:33:f5:b4:dd:0b:7f:94:bd:c3:3e:a1:99: 51:f0:e4:db:9c:18:98:15:98:73:ed:1b:a9:00:09:8d:29:66: 10:73:0b:d2:27:ab:49:1a:06:58:e2:a2:b0:d6:42:84:df:a4: 7b:5e:11:54:90:ea:5b:98:b5:57:c7:f5:57:f3:42:2e:55:30: b7:94:fd:a3:71:38:dc:aa:19:bc:84:1f:d3:c7:46:5b:fa:af: ef:9c:aa:e7:8a:47:df:90:cf:3d:fe:22:a2:a9:d5:40:d8:e1: c2:cf:10:b4:32:33:43:19:55:e7:af:22:ea:bf:e4:4b:87:da: 12:7b:1c:7e:c5:ac:b6:8b:cd:98:57:74:56:9b:f3:63:28:a0: be:81:cd:8f:1c:ce:c0:d8:0f:c1:fc:c9:89:71:50:07:69:92: 7d:9a:ac:fe:c2:2d:d4:98:1e:58:1c:47:3b:75:91:d9:9c:35: b8:0f:f1:2c:88:1b:f8:27:e6:ad:e0:b9:6e:bb:8b:e3:9d:4f: 6d:7f:fc:90:0a:20:04:8c:17:cd:92:b7:e4:15:6c:06:5f:72: 6c:c8:f4:8c:23:37:8e:55:98:f0:90:85:02:38:03:6a:f1:b8: e4:f5:56:d5:37:48:52:a0:07:4f:2a:a1:74:78:c4:30:8b:ce: c9:1b:b4:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr1PrvcE0kIoC7crWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDgyNDAyMDAwOFoXDTI1MDgyNjAyMDAwMFowLzEtMCsGA1UEAxMk NzRiZGM1NzgtYTYyOC00NjhmLTgyOGItMDZhNmI0N2JiYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxQWaH/Uptr+G65tV20PDQNR/EnwQRrdHe3y EacwwoVk7wQ+qLP1Vwje1TrD9B+sJVOSW2e5Sb8SuHuMqhM4Aw/gI6QzXocUcEJ1 dy81BFkF1NFEwVu2/xdOUwVgk2Xjf7W8/Yt8sFVLPREm17QwRqMCeQvAvxiPAXod LXP1tPjXADQ9jNXATYk63Oe+eSaPGnYjmxjQw+hZNVNmTpKvFo4Ax4DZ0/wr9NXI xeXkCqeCPeUyL2PQwgxPXBOEsmqbB8fnU2mVR9gXxiVihWYjcYvdfR4cpwnEFHVv 02v/ns+j5UJublCiKzRFdrxSAriAjj9o2H6Hb8mLMvJtQwKLPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAZHYYnkOfflMURid4BLCwLhaciEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5vxVZ2kgz9bTdC3+UvcM+ oZlR8OTbnBiYFZhz7RupAAmNKWYQcwvSJ6tJGgZY4qKw1kKE36R7XhFUkOpbmLVX x/VX80IuVTC3lP2jcTjcqhm8hB/Tx0Zb+q/vnKrnikffkM89/iKiqdVA2OHCzxC0 MjNDGVXnryLqv+RLh9oSexx+xay2i82YV3RWm/NjKKC+gc2PHM7A2A/B/MmJcVAH aZJ9mqz+wi3UmB5YHEc7dZHZnDW4D/EsiBv4J+at4Lluu4vjnU9tf/yQCiAEjBfN krfkFWwGX3JsyPSMIzeOVZjwkIUCOANq8bjk9VbVN0hSoAdPKqF0eMQwi87JG7TZ -----END CERTIFICATE-----Generated at Sun Aug 24 06:26:47 2025 by rpki-client