$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft File: 43cfd68f-5452-437e-b80d-ac981dd1cf19.mft (raw, json) Hash identifier: X5rxAlVGsVERJmlsSRl6GoXmTcI/fKaZ9Zz9Z3B2Izw= Subject key identifier: 16:8D:4F:55:D1:4B:66:14:E8:18:94:68:75:6C:67:B0:D0:46:D9:E3 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F4328584AF238732E56CC1882277BBF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft Manifest number: 010D0C9F43285845BEA9F4225D8B3089F3DD15E6 Signing time: Sat 23 Aug 2025 00:00:04 +0000 Manifest this update: Sat 23 Aug 2025 00:00:04 +0000 Manifest next update: Mon 25 Aug 2025 00:00:00 +0000 Files and hashes: 1: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (hash: bLCmIV7aN8i+2hs3oiLtEAUTeii4mO2oBsJITw+VVMM=) 2: 43cfd68f-5452-437e-b80d-ac981dd1cf19.crl (hash: f0Jy3/8CdjbQY8h9pl4grhIwjxfm0plSKkhekV7fLZU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:38:73:2e:56:cc:18:82:27:7b:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Aug 23 00:00:04 2025 GMT Not After : Aug 25 00:00:00 2025 GMT Subject: CN=f2ff7240-3caa-4380-8f87-308032dd67cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:83:b6:b2:e9:ae:c7:cb:81:97:f6:0e:c6: eb:25:82:f1:23:b7:1b:23:ad:65:f1:f0:7b:68:cd: 9b:2f:3d:13:61:29:0e:0b:c3:d2:fb:5d:5e:6c:89: 08:86:4d:03:03:c5:eb:f3:05:0c:90:f9:3f:4a:3a: 93:bb:8b:93:eb:dd:fb:64:60:e8:a0:fc:c6:c8:e2: 45:2b:1c:57:ca:5b:be:ab:8d:72:f2:0f:73:ac:17: 5f:ad:36:ec:33:bc:b8:da:2c:76:c1:9c:38:97:40: 85:b7:7e:2d:37:8e:30:35:09:ee:92:fc:e2:19:b6: 64:ca:57:8b:a9:87:b7:c6:3d:f8:c2:71:ff:86:1a: f7:72:3c:41:21:70:4e:c6:57:0e:28:6a:1a:ed:f9: c5:41:63:b5:6b:0b:2e:35:a8:9b:bb:6c:5a:b9:1b: 89:c8:59:e3:b1:b4:48:0d:cc:c8:c9:42:41:cf:64: a4:84:ea:c3:39:42:9f:ed:f8:0c:a3:0c:a2:9f:63: 84:e1:45:db:81:01:08:08:82:d1:3d:61:ea:ec:32: ee:b6:eb:67:9b:e4:fd:71:23:c8:20:a0:05:9c:02: 33:cc:53:33:26:d0:4f:c9:65:36:ae:62:11:fd:29: 2f:26:a9:10:1a:f0:a4:41:a4:dd:bf:62:28:b2:ce: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:4F:55:D1:4B:66:14:E8:18:94:68:75:6C:67:B0:D0:46:D9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9d:ff:5f:62:f3:15:b0:8d:d2:2e:35:f2:12:c9:88:a4:ae: 7d:38:40:60:e1:2e:7f:14:7c:7f:18:72:52:ef:bd:ad:4f:32: db:51:42:cd:c9:01:29:98:15:1d:50:aa:49:72:55:4a:4e:36: 5f:11:0e:ba:93:3f:42:83:ec:8a:8b:d2:7c:fd:9f:ab:50:f2: 0e:ab:1f:54:63:b3:ee:a8:61:00:27:4c:f6:df:a8:3d:70:89: 08:26:8d:4b:64:c8:12:92:b2:5e:ea:02:af:a5:f0:ec:65:de: bb:6c:80:6f:3e:e0:42:63:0b:20:f5:4b:f4:86:9e:7a:b6:0c: 3a:21:6a:a1:4a:dc:f6:e8:50:4f:08:a8:73:ee:f2:e5:01:85: 4c:0f:d9:4f:71:d6:3b:80:c1:98:a9:65:39:81:7e:02:a5:00: e6:46:2f:e7:5d:15:7c:ff:e6:a4:ba:4d:d1:52:f4:0a:84:9e: b9:8c:cb:62:1a:6e:f3:77:fc:cf:5e:50:8a:88:e1:74:aa:0b: a9:32:07:a3:cf:06:ef:3e:07:5e:5c:a9:46:a1:c3:e9:c8:68: 55:4f:d7:62:86:7a:f5:98:80:7a:75:65:5c:43:80:0a:b5:3d: 38:e6:38:5d:ac:31:79:7e:54:6a:4e:af:61:0c:f4:30:2d:ea: af:d5:71:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryOHMuVswYgid7v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI1MDgyMzAwMDAwNFoXDTI1MDgyNTAwMDAwMFowLzEtMCsGA1UEAxMk ZjJmZjcyNDAtM2NhYS00MzgwLThmODctMzA4MDMyZGQ2N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/2DtrLprsfLgZf2DsbrJYLxI7cbI61l8fB7 aM2bLz0TYSkOC8PS+11ebIkIhk0DA8Xr8wUMkPk/SjqTu4uT6937ZGDooPzGyOJF KxxXylu+q41y8g9zrBdfrTbsM7y42ix2wZw4l0CFt34tN44wNQnukvziGbZkyleL qYe3xj34wnH/hhr3cjxBIXBOxlcOKGoa7fnFQWO1awsuNaibu2xauRuJyFnjsbRI DczIyUJBz2SkhOrDOUKf7fgMowyin2OE4UXbgQEICILRPWHq7DLututnm+T9cSPI IKAFnAIzzFMzJtBPyWU2rmIR/SkvJqkQGvCkQaTdv2Ioss55xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBaNT1XRS2YU6BiUaHVsZ7DQRtnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvNDNjZmQ2OGYtNTQ1Mi00 MzdlLWI4MGQtYWM5ODFkZDFjZjE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9nf9fYvMVsI3SLjXyEsmI pK59OEBg4S5/FHx/GHJS772tTzLbUULNyQEpmBUdUKpJclVKTjZfEQ66kz9Cg+yK i9J8/Z+rUPIOqx9UY7PuqGEAJ0z236g9cIkIJo1LZMgSkrJe6gKvpfDsZd67bIBv PuBCYwsg9Uv0hp56tgw6IWqhStz26FBPCKhz7vLlAYVMD9lPcdY7gMGYqWU5gX4C pQDmRi/nXRV8/+akuk3RUvQKhJ65jMtiGm7zd/zPXlCKiOF0qgupMgejzwbvPgde XKlGocPpyGhVT9dihnr1mIB6dWVcQ4AKtT045jhdrDF5flRqTq9hDPQwLeqv1XFY -----END CERTIFICATE-----Generated at Sat Aug 23 20:52:29 2025 by rpki-client