$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft File: 2d64a9b2-da39-490b-a76e-0928cd57270b.mft (raw, json) Hash identifier: 50xvm7jLb49gUnt3K2ma5ZQQhV6Q2HQ+cMOBKJ4VZUI= Subject key identifier: B6:16:83:F8:EC:2D:24:A8:9B:C0:02:15:83:84:AC:12:35:9A:73:76 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F4328584AF3800148674A5AF113E58000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft Manifest number: 010D0C9F4328584073A84EEE88D6A99E0FAD9879 Signing time: Sat 23 Aug 2025 11:00:03 +0000 Manifest this update: Sat 23 Aug 2025 11:00:03 +0000 Manifest next update: Tue 26 Aug 2025 11:00:00 +0000 Files and hashes: 1: 2d64a9b2-da39-490b-a76e-0928cd57270b.crl (hash: ZV3Sc3FK3exwef3HXmNzymPLYPRRQ/HY6Ymzu6x0DxU=) 2: 43d9c709-1869-3602-ba60-82f81826def9.roa (hash: 6nJpwYF5jhDV1xGItv4/kZmoDg4Bxz5Y/5FQ0WYRZ3E=) 3: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (hash: BPqpXKN/Jb5/mrIGLZMjqjau7rGIt5rXc9/Pb/Sxs6E=) 4: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (hash: pvwRXbJcD9TuaOT0WuNHOF0nla7D132cgnEAr8AqW5A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:80:01:48:67:4a:5a:f1:13:e5:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Aug 23 11:00:03 2025 GMT Not After : Aug 26 11:00:00 2025 GMT Subject: CN=df4712a6-69b1-457e-9025-63d9e4d06585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:49:9f:39:00:0b:8a:87:4b:e0:b6:f2:c7: f8:7d:ab:bd:d7:74:d9:22:a2:5f:53:f0:44:98:c2: 6b:bb:23:06:70:14:c5:42:54:62:46:f4:2a:87:7b: 78:0a:4d:4d:27:49:0c:b7:3d:f0:a2:2d:6d:f8:71: 46:39:03:68:ef:fa:ea:f8:67:aa:31:c4:77:1a:f0: 2b:d7:45:df:49:fb:44:b4:88:18:33:cd:a9:df:fc: 60:c2:f3:bd:e3:88:11:eb:11:e5:da:a9:82:ab:b3: e6:76:42:32:49:6c:7b:10:8f:47:9a:c9:e8:35:39: e7:05:8e:2c:64:57:e1:fc:91:af:6b:9e:45:06:f1: ef:5f:93:75:fd:8e:bf:43:34:b1:2a:84:8b:16:ac: 77:10:a0:0d:00:14:33:a1:6d:8f:1a:22:ba:55:3e: 2c:44:60:50:54:af:44:02:8c:6d:e3:33:1f:91:cc: 63:e2:93:cc:32:f8:13:a6:b3:f8:ff:de:02:2f:f6: 40:c0:ae:c3:ca:f0:15:a1:5f:33:59:8b:b8:9a:8f: b0:55:01:4c:9a:b8:ed:0e:9d:7c:89:3b:62:cb:fe: 74:8e:f1:b3:a6:a7:18:bd:78:90:78:3f:48:04:fb: 82:bc:21:e8:7e:ce:cb:32:a7:44:7e:54:70:d3:53: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:83:F8:EC:2D:24:A8:9B:C0:02:15:83:84:AC:12:35:9A:73:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:64:0f:70:18:b6:c1:5a:a0:e2:49:8b:ae:87:0e:73:55: b4:d2:94:f2:7f:3e:89:4b:0e:4e:4d:20:5e:74:ca:80:49:bd: 95:9c:41:d7:ca:1f:db:47:9c:eb:c3:64:fe:eb:98:43:11:09: fa:fa:93:1f:8e:2c:2d:f2:a7:74:89:d2:b6:78:d5:c8:2c:76: 72:b6:ee:74:a2:38:29:e5:94:60:46:72:85:f3:17:3c:12:5e: d0:a1:9d:e5:82:e3:92:e3:35:e0:34:b5:c9:32:ae:7b:30:e2: a9:00:10:be:6d:94:36:92:d0:31:2a:b3:79:eb:87:bc:7e:44: a3:25:b5:59:4d:ff:eb:17:db:b1:b2:c9:73:6d:38:51:40:94: 5f:5d:cc:57:59:fa:55:62:79:e1:b9:66:ff:b2:30:d4:ea:c9: 52:d2:d2:73:f4:19:6a:d8:aa:1c:bb:13:27:f2:ae:a2:cd:2a: 99:08:bd:86:ef:a8:83:e7:52:02:0e:2c:cc:e5:6c:76:1b:61: 84:4f:cb:9d:fc:d4:a4:27:af:b0:5f:18:b6:54:c4:b9:93:5f: 59:26:d7:c5:ba:05:5e:5e:6f:08:63:a5:c0:62:9c:e4:f7:d6: 32:4b:5c:f2:90:91:81:6d:ee:25:b6:5f:22:b9:35:62:f6:17: f3:58:fd:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzgAFIZ0pa8RPlgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MDgyMzExMDAwM1oXDTI1MDgyNjExMDAwMFowLzEtMCsGA1UEAxMk ZGY0NzEyYTYtNjliMS00NTdlLTkwMjUtNjNkOWU0ZDA2NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChJnzkAC4qHS+C28sf4fau913TZIqJfU/BE mMJruyMGcBTFQlRiRvQqh3t4Ck1NJ0kMtz3woi1t+HFGOQNo7/rq+GeqMcR3GvAr 10XfSftEtIgYM82p3/xgwvO944gR6xHl2qmCq7PmdkIySWx7EI9HmsnoNTnnBY4s ZFfh/JGva55FBvHvX5N1/Y6/QzSxKoSLFqx3EKANABQzoW2PGiK6VT4sRGBQVK9E Aoxt4zMfkcxj4pPMMvgTprP4/94CL/ZAwK7DyvAVoV8zWYu4mo+wVQFMmrjtDp18 iTtiy/50jvGzpqcYvXiQeD9IBPuCvCHofs7LMqdEflRw01NK6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLYWg/jsLSSom8ACFYOErBI1mnN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvMmQ2NGE5YjItZGEzOS00 OTBiLWE3NmUtMDkyOGNkNTcyNzBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaHWQPcBi2wVqg4kmLrocO c1W00pTyfz6JSw5OTSBedMqASb2VnEHXyh/bR5zrw2T+65hDEQn6+pMfjiwt8qd0 idK2eNXILHZytu50ojgp5ZRgRnKF8xc8El7QoZ3lguOS4zXgNLXJMq57MOKpABC+ bZQ2ktAxKrN564e8fkSjJbVZTf/rF9uxsslzbThRQJRfXcxXWfpVYnnhuWb/sjDU 6slS0tJz9Blq2KocuxMn8q6izSqZCL2G76iD51ICDizM5Wx2G2GET8ud/NSkJ6+w Xxi2VMS5k19ZJtfFugVeXm8IY6XAYpzk99YyS1zykJGBbe4ltl8iuTVi9hfzWP2p -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:41 2025 by rpki-client