$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: irNmX4gGtM0It/GpASjaLX/QDwga9AF8Lg5b0nMb7BY= Subject key identifier: BC:7F:AE:31:DB:C5:89:B3:EE:26:E0:23:BC:2F:AB:58:90:60:40:87 Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584AF3D9636CBBAABA215ED65540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A067B Signing time: Sat 23 Aug 2025 14:00:08 +0000 Manifest this update: Sat 23 Aug 2025 14:00:08 +0000 Manifest next update: Tue 26 Aug 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: Kd/suIS4o6QtT1Sfl7AuRHI7ak0qI8RXySR8pSginbY=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: lwSmBAtxkzNtAQTCy43mRng545wuot+9E7g/FoLdbrw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:d9:63:6c:bb:aa:ba:21:5e:d6:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Aug 23 14:00:08 2025 GMT Not After : Aug 26 14:00:00 2025 GMT Subject: CN=ad1ed662-4b76-46eb-88fe-2158ae9ef713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:0e:66:77:b7:20:e3:1c:54:37:1b:3a:12: 3e:a0:23:82:fa:58:ce:53:1d:55:a3:52:b4:f9:02: 66:be:5e:5d:43:2a:b2:92:ac:26:c0:58:85:de:d4: af:30:79:d3:c3:1d:bb:f9:4a:62:ce:20:45:6a:0d: da:ad:54:eb:ec:72:6f:22:48:fc:78:69:66:2d:06: 7d:9b:d9:07:36:29:54:e6:8f:70:43:ad:97:2e:eb: ad:db:19:33:98:73:8a:d3:0c:b0:ee:59:ce:23:71: ed:32:54:d5:ad:3c:67:f0:c8:d5:e1:a9:9e:6c:46: db:f8:53:57:6c:9f:04:5c:49:6b:27:1a:7f:67:a7: 18:c1:0d:2b:90:12:09:0c:be:7c:65:94:89:5e:09: 56:7d:8b:bb:33:16:9a:46:ec:c9:a3:25:40:9e:6f: 15:41:af:88:47:e1:4a:a5:51:c0:e9:95:a8:c1:37: a6:00:da:d2:0e:f6:38:96:f4:92:e8:80:fd:de:71: 27:a1:9e:64:6d:76:3b:b2:47:e0:e3:bb:5d:fc:eb: 9d:ca:b9:68:3a:dd:6a:e4:f4:6b:34:62:36:e4:48: 65:26:ac:56:58:08:21:39:4b:c4:b4:2b:93:b5:85: e6:22:36:35:ee:74:5f:ae:38:63:6f:9c:04:f7:c3: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:AE:31:DB:C5:89:B3:EE:26:E0:23:BC:2F:AB:58:90:60:40:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:25:c9:5b:ec:ca:c0:df:93:4d:a5:87:2f:2b:f9:41:3a:82: 62:3e:56:bd:83:0d:10:c2:c0:b5:bb:08:e0:d2:a9:b9:67:2a: 14:2d:56:45:0a:89:00:d3:49:58:47:a7:47:cc:0f:3b:b0:7d: c0:04:ab:d8:b5:59:64:85:33:a0:e4:40:5d:60:55:43:fc:f2: b8:d5:62:f1:3c:3b:2f:e4:fc:82:63:db:b1:ad:06:66:b4:4d: 3e:92:2f:28:91:d0:d8:fa:3f:d9:28:7e:40:64:35:ae:ca:e2: 3a:71:b2:36:d9:5f:32:f4:80:92:1c:07:92:5b:e4:1d:c1:11: d4:87:8c:9b:68:66:f3:78:00:72:c5:b2:de:6f:77:55:df:7d: ce:ac:1e:0e:bb:c4:88:06:18:b9:b0:d5:88:b4:a9:d7:0f:a1: 95:3b:1e:5f:f3:a0:d3:ab:e8:48:b5:a8:9d:ae:7f:0c:2d:a8: ea:f8:6d:79:cf:d4:b0:08:5a:65:07:b7:34:a1:b7:a1:d5:b2: 12:97:92:82:14:14:bf:76:50:63:d0:26:6d:50:2e:71:2b:cf: 55:87:17:20:56:c8:7b:5d:8b:3b:cd:f3:9b:10:cd:20:6f:87: 03:08:97:9d:74:97:77:d8:38:27:26:e8:29:d2:ee:bd:e9:de: 87:f8:1f:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz2WNsu6q6IV7WVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MDgyMzE0MDAwOFoXDTI1MDgyNjE0MDAwMFowLzEtMCsGA1UEAxMk YWQxZWQ2NjItNGI3Ni00NmViLTg4ZmUtMjE1OGFlOWVmNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7G8OZne3IOMcVDcbOhI+oCOC+ljOUx1Vo1K0 +QJmvl5dQyqykqwmwFiF3tSvMHnTwx27+UpiziBFag3arVTr7HJvIkj8eGlmLQZ9 m9kHNilU5o9wQ62XLuut2xkzmHOK0wyw7lnOI3HtMlTVrTxn8MjV4amebEbb+FNX bJ8EXElrJxp/Z6cYwQ0rkBIJDL58ZZSJXglWfYu7MxaaRuzJoyVAnm8VQa+IR+FK pVHA6ZWowTemANrSDvY4lvSS6ID93nEnoZ5kbXY7skfg47td/OudyrloOt1q5PRr NGI25EhlJqxWWAghOUvEtCuTtYXmIjY17nRfrjhjb5wE98N4tQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLx/rjHbxYmz7ibgI7wvq1iQYECHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIJclb7MrA35NNpYcvK/lB OoJiPla9gw0QwsC1uwjg0qm5ZyoULVZFCokA00lYR6dHzA87sH3ABKvYtVlkhTOg 5EBdYFVD/PK41WLxPDsv5PyCY9uxrQZmtE0+ki8okdDY+j/ZKH5AZDWuyuI6cbI2 2V8y9ICSHAeSW+QdwRHUh4ybaGbzeAByxbLeb3dV333OrB4Ou8SIBhi5sNWItKnX D6GVOx5f86DTq+hItaidrn8MLajq+G15z9SwCFplB7c0obeh1bISl5KCFBS/dlBj 0CZtUC5xK89VhxcgVsh7XYs7zfObEM0gb4cDCJeddJd32DgnJugp0u696d6H+B9R -----END CERTIFICATE-----Generated at Sat Aug 23 20:02:14 2025 by rpki-client