$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft File: da044fca-c418-4088-8a66-0c6896769f77.mft (raw, json) Hash identifier: eZZaSbka+pkyY1YejfWsXeYBdPv9NujRRvrf4cp+KN0= Subject key identifier: 1B:D6:11:4D:87:14:7B:9E:24:49:01:C7:18:69:35:40:EC:2F:B6:8B Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 Certificate issuer: /CN=da044fca-c418-4088-8a66-0c6896769f77 Certificate serial: 010D0C9F4328584AF1C16009586950B53F9EBF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft Manifest number: 010D0C9F4328584875513DB7F2A29634842952E7 Signing time: Fri 22 Aug 2025 20:00:08 +0000 Manifest this update: Fri 22 Aug 2025 20:00:08 +0000 Manifest next update: Mon 25 Aug 2025 20:00:00 +0000 Files and hashes: 1: 772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer (hash: aNvRbIngd4MgrVJJyPtqL+yT8rTjYdfGr8ydQfBebRc=) 2: da044fca-c418-4088-8a66-0c6896769f77.crl (hash: g2WKqbEkf8+OEMtYUFnYpLnfoMFismkfxz8S8Vlmx6U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:c1:60:09:58:69:50:b5:3f:9e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77 Validity Not Before: Aug 22 20:00:08 2025 GMT Not After : Aug 25 20:00:00 2025 GMT Subject: CN=21fbc88c-f1b7-4e4e-a9f0-1f80201b3ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:e1:d6:81:f0:9d:8c:84:18:13:31:34:78: 9e:e1:50:3d:e0:d8:6f:f8:e4:d9:2f:9a:bd:e5:0e: 50:f8:65:ed:a6:67:34:01:75:61:eb:3b:07:c2:69: e7:e5:d0:4c:0b:c4:7b:53:13:3d:73:cf:25:e9:ba: 27:b0:4c:3b:ee:52:f8:c1:5a:ca:d1:e5:82:21:ae: 3f:32:11:3e:29:b3:ca:b6:c8:c8:31:8d:f2:43:fd: b0:07:63:8d:2c:7e:9e:c0:49:60:f9:19:c9:0a:57: 61:ac:06:82:d6:32:80:b1:bd:73:e1:28:03:51:53: 70:af:4a:56:1d:c7:32:ac:50:ea:72:ca:7b:d8:fd: a9:0b:c8:e5:39:15:51:f9:ae:4b:c7:e6:82:0f:76: 72:40:f7:45:2d:58:5d:98:0e:f6:ff:f5:d1:f6:18: 04:1f:c8:66:61:06:e2:77:03:1d:29:47:07:3e:99: d6:2d:37:85:76:13:89:74:22:11:a4:eb:7b:6d:7c: e8:71:55:3a:d1:45:61:d1:a3:67:04:0b:fc:6f:20: 93:c4:e9:a7:90:b1:53:36:2f:41:6c:49:24:5b:58: 3e:0a:1d:00:2a:56:16:f2:14:45:74:8a:7f:27:2d: be:e0:93:4a:3c:fa:d1:c2:94:87:62:65:a0:ce:3c: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D6:11:4D:87:14:7B:9E:24:49:01:C7:18:69:35:40:EC:2F:B6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl X509v3 Authority Key Identifier: keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:17:8f:0a:21:90:2d:1d:b0:77:dd:dc:38:2d:1a:e4:ac:82: bf:33:c4:d2:00:77:2f:64:c5:ac:b7:3a:fe:2e:b7:00:bf:1d: e3:4e:ba:b0:6c:8e:31:fa:d3:2f:4f:0e:1b:16:dc:0e:09:de: d8:b9:43:d6:74:98:e8:68:c6:54:f2:ea:f9:ed:ae:94:7d:0f: f7:d2:bd:92:40:f3:6b:e2:fd:0a:0c:03:a8:6e:e2:bf:26:8f: 20:1c:db:a3:0d:7c:74:ca:81:ed:b0:25:01:af:21:52:80:93: 33:8a:6b:b6:ab:47:1d:2d:2b:c5:c5:55:0d:1d:74:e4:c8:c5: b3:3b:5c:1a:a1:8e:03:25:ce:4a:7d:a8:f5:d4:c4:3f:81:f5: 1f:5d:16:13:6f:71:44:5c:0e:9c:ce:47:38:3c:04:90:4c:7b: 22:96:f6:37:fa:55:5d:e3:b9:84:3a:56:47:6b:6f:cd:8e:10: 55:18:d6:6f:f5:f8:85:be:cc:58:fd:b5:95:54:cd:55:50:99: 5a:c5:43:ef:b6:86:33:0d:1e:ec:4b:bd:21:5d:76:6b:5c:4c: 9f:4b:92:a3:5b:f7:3f:d1:22:4e:4f:49:b3:25:bc:79:9d:39: 75:45:a6:2e:c9:68:b9:d1:d4:f8:72:bc:19:f2:c2:f1:31:5f: e3:76:4f:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxwWAJWGlQtT+ev4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwNDRmY2EtYzQxOC00MDg4LThhNjYtMGM2ODk2NzY5 Zjc3MB4XDTI1MDgyMjIwMDAwOFoXDTI1MDgyNTIwMDAwMFowLzEtMCsGA1UEAxMk MjFmYmM4OGMtZjFiNy00ZTRlLWE5ZjAtMWY4MDIwMWIzY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29bh1oHwnYyEGBMxNHie4VA94Nhv+OTZL5q9 5Q5Q+GXtpmc0AXVh6zsHwmnn5dBMC8R7UxM9c88l6bonsEw77lL4wVrK0eWCIa4/ MhE+KbPKtsjIMY3yQ/2wB2ONLH6ewElg+RnJCldhrAaC1jKAsb1z4SgDUVNwr0pW HccyrFDqcsp72P2pC8jlORVR+a5Lx+aCD3ZyQPdFLVhdmA72//XR9hgEH8hmYQbi dwMdKUcHPpnWLTeFdhOJdCIRpOt7bXzocVU60UVh0aNnBAv8byCTxOmnkLFTNi9B bEkkW1g+Ch0AKlYW8hRFdIp/Jy2+4JNKPPrRwpSHYmWgzjyq2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBvWEU2HFHueJEkBxxhpNUDsL7aLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0 NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4OTY3NjlmNzcvZGEwNDRmY2EtYzQxOC00 MDg4LThhNjYtMGM2ODk2NzY5Zjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwNDRmY2EtYzQxOC00MDg4LThh NjYtMGM2ODk2NzY5Zjc3L2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2 OWY3Ny5jcmwwHwYDVR0jBBgwFoAUjcyAYfi6cVkdKmxFPIslnfWf/TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4 OTY3NjlmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2F48KIZAtHbB33dw4LRrk rIK/M8TSAHcvZMWstzr+LrcAvx3jTrqwbI4x+tMvTw4bFtwOCd7YuUPWdJjoaMZU 8ur57a6UfQ/30r2SQPNr4v0KDAOobuK/Jo8gHNujDXx0yoHtsCUBryFSgJMzimu2 q0cdLSvFxVUNHXTkyMWzO1waoY4DJc5Kfaj11MQ/gfUfXRYTb3FEXA6czkc4PASQ THsilvY3+lVd47mEOlZHa2/NjhBVGNZv9fiFvsxY/bWVVM1VUJlaxUPvtoYzDR7s S70hXXZrXEyfS5KjW/c/0SJOT0mzJbx5nTl1RaYuyWi50dT4crwZ8sLxMV/jdk+u -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:32 2025 by rpki-client