$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft File: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft (raw, json) Hash identifier: WgpzKHFNzF3mDGQ0kJuH5Lx9266PXuJV9c8G/4PAwsk= Subject key identifier: 46:BA:50:23:0C:F4:EE:85:F8:0F:93:58:13:35:68:2D:1D:2E:D8:FB Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 Certificate issuer: /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Certificate serial: 010D0C9F4328584AF1DF278AE843CA5301E54080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft Manifest number: 010D0C9F4328584073A828BB106FC730EFBA8E59 Signing time: Fri 22 Aug 2025 21:00:08 +0000 Manifest this update: Fri 22 Aug 2025 21:00:08 +0000 Manifest next update: Mon 25 Aug 2025 21:00:00 +0000 Files and hashes: 1: 309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (hash: 8aC6JNQYfZq1o9uGkmD+l8bp9+dKFmhkEySZLR8cCOs=) 2: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl (hash: Gm4AbGrynmJOouoLxNDra+xAe4r6xVqAgIQOxPipoKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:df:27:8a:e8:43:ca:53:01:e5:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Validity Not Before: Aug 22 21:00:08 2025 GMT Not After : Aug 25 21:00:00 2025 GMT Subject: CN=24dbdd24-5fdf-415b-9086-2785c4363dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:64:4d:fd:0a:c4:d2:06:3e:75:97:c8:1b: b1:6a:c9:58:54:64:30:91:da:bc:f5:39:9b:59:02: bf:19:ad:91:f6:01:7a:38:04:ac:0d:54:11:36:de: b9:e9:01:99:ab:62:8c:8a:b0:aa:d2:87:1b:0b:4f: 49:45:a3:2a:de:9c:a6:03:bd:59:cd:89:b6:56:c2: ee:4f:66:79:75:03:e9:52:a9:8d:2c:22:9b:73:aa: 77:a4:a3:76:c1:df:50:ff:68:27:d8:92:23:77:3f: 7a:8b:d0:d2:2d:19:ed:1e:79:ff:52:84:81:aa:f5: d3:e3:05:31:8a:38:01:7a:c1:b3:0e:6f:5c:33:d5: 61:95:f7:db:69:f6:94:72:b3:3e:d2:88:09:1a:87: 64:0b:f0:1e:54:ce:2c:ba:45:af:77:69:06:d3:51: e5:58:6b:1c:90:11:15:9b:07:56:4a:a1:56:29:0a: 6e:ff:9a:88:15:3c:0b:a8:63:a7:06:38:61:ef:c8: fc:34:48:b3:21:2b:55:9e:57:c7:c4:db:01:61:e7: 56:52:49:c4:96:de:90:01:30:c7:b3:5a:b9:b6:3d: 4d:c4:74:62:79:6f:1b:f3:5b:54:40:0d:df:c4:14: 72:b9:64:bd:4e:35:a0:5e:95:1d:a7:82:a7:56:d5: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:50:23:0C:F4:EE:85:F8:0F:93:58:13:35:68:2D:1D:2E:D8:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl X509v3 Authority Key Identifier: keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:41:b1:9e:c0:29:3a:98:c0:bf:a8:a4:f0:d7:73:ef:7c:6a: 03:d8:90:06:00:2b:a4:ef:f3:19:7a:e3:34:56:68:0d:3d:84: 37:00:79:66:40:95:a6:cc:dd:be:0e:c6:27:a1:e2:86:9d:8b: 86:79:db:65:4d:eb:66:d1:1b:a6:86:6b:62:fe:6a:9a:1f:ad: e7:ac:db:69:10:66:90:6f:2a:f3:24:57:75:26:a5:f9:2f:c0: 73:26:a9:4a:75:21:4a:0f:cb:b7:88:49:f8:90:01:71:2e:b3: 23:35:19:d3:59:dd:af:73:0d:b3:e6:63:65:f4:a3:41:e4:96: 65:49:1a:75:96:2c:15:3e:cd:27:36:c7:9b:7c:dc:f4:a4:a9: eb:c5:e1:0c:f7:4f:ef:3c:7d:52:81:e0:27:ec:51:5e:2a:20: 47:bf:0c:59:22:5d:0b:cf:4a:2e:1c:f4:f8:1d:e1:64:9e:7e: b3:ca:45:f3:29:79:83:cd:e4:fb:5d:bd:b6:f4:47:7e:82:98: 37:f1:6d:13:a7:d3:5f:23:24:2b:4b:7d:4b:8e:9a:55:02:cb: 6e:fe:7e:37:00:5d:f7:d9:64:9c:b3:a5:a1:fc:40:b1:17:56: 60:27:ac:9d:31:63:cb:98:79:c1:76:64:10:63:bd:93:3e:2a: 63:db:d2:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx3yeK6EPKUwHlQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz ZjhlMB4XDTI1MDgyMjIxMDAwOFoXDTI1MDgyNTIxMDAwMFowLzEtMCsGA1UEAxMk MjRkYmRkMjQtNWZkZi00MTViLTkwODYtMjc4NWM0MzYzZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYdkTf0KxNIGPnWXyBuxaslYVGQwkdq89Tmb WQK/Ga2R9gF6OASsDVQRNt656QGZq2KMirCq0ocbC09JRaMq3pymA71ZzYm2VsLu T2Z5dQPpUqmNLCKbc6p3pKN2wd9Q/2gn2JIjdz96i9DSLRntHnn/UoSBqvXT4wUx ijgBesGzDm9cM9VhlffbafaUcrM+0ogJGodkC/AeVM4sukWvd2kG01HlWGsckBEV mwdWSqFWKQpu/5qIFTwLqGOnBjhh78j8NEizIStVnlfHxNsBYedWUknElt6QATDH s1q5tj1NxHRieW8b81tUQA3fxBRyuWS9TjWgXpUdp4KnVtVc0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEa6UCMM9O6F+A+TWBM1aC0dLtj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2 OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvZGY5Njk2ZjYtN2NhNS00 ZWI3LWJkMjEtZWFlZTNiMWUzZjhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl M2IxZTNmOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHQbGewCk6mMC/qKTw13Pv fGoD2JAGACuk7/MZeuM0VmgNPYQ3AHlmQJWmzN2+DsYnoeKGnYuGedtlTetm0Rum hmti/mqaH63nrNtpEGaQbyrzJFd1JqX5L8BzJqlKdSFKD8u3iEn4kAFxLrMjNRnT Wd2vcw2z5mNl9KNB5JZlSRp1liwVPs0nNsebfNz0pKnrxeEM90/vPH1SgeAn7FFe KiBHvwxZIl0Lz0ouHPT4HeFknn6zykXzKXmDzeT7Xb229Ed+gpg38W0Tp9NfIyQr S31LjppVAstu/n43AF332WScs6Wh/ECxF1ZgJ6ydMWPLmHnBdmQQY72TPipj29Io -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:27 2025 by rpki-client