$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft File: 5248b6be-3e69-4e67-8c1c-9f85fde15922.mft (raw, json) Hash identifier: Dk4roFuoaeJS2Wv5mwySgrtBfN+6ST+M7fvmxuYqRB8= Subject key identifier: 49:A1:7F:EC:7C:C4:DB:C1:2E:16:61:AB:50:FB:04:9C:AA:56:B8:0D Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6 Certificate issuer: /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922 Certificate serial: 010D0C9F4328584AF2EB2884D62F768605C3CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft Manifest number: 010D0C9F4328584073A842EDE733AB9658C35EDA Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: 5248b6be-3e69-4e67-8c1c-9f85fde15922.crl (hash: xbXCW+xhFr7tiCJiJWIP6QpTwtYpG4zAZvPuIig9d/U=) 2: a662b604-8a40-31fd-848a-cd7f0cad04af.roa (hash: dgyGkgwnRmqCGHqhGjX+woWy66dDZmk2yPIXDUF0H2g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:28:84:d6:2f:76:86:05:c3:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=a8b49f5c-d95a-47bc-8711-b7893d1e34f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:0d:50:07:1f:47:1f:d4:d9:14:f1:15:52: 29:4f:29:4e:b8:aa:8b:de:54:7f:4e:e9:94:ae:ce: 94:98:28:ae:fe:35:11:cc:b5:f2:3a:bc:6b:94:bb: 76:89:f0:20:0a:a9:4a:6c:5b:7a:e3:62:e0:df:0a: 5a:2c:2c:8b:c6:97:4f:8f:be:c4:1f:ab:2e:9f:ba: 12:38:44:18:cd:8e:e5:d4:9e:c5:6e:d5:35:35:6d: 3e:a1:2c:3e:88:5a:a2:53:07:e5:dd:ae:88:61:c7: e9:96:49:ee:19:53:39:fe:f4:62:4e:59:7a:44:af: b6:30:38:1c:77:81:77:a3:d5:d4:3f:5d:39:f7:87: ce:71:c5:40:e7:56:f4:f4:ad:de:ef:cd:dd:3f:d3: c8:ff:7e:45:b6:10:1a:a7:ff:4c:c9:d8:85:c1:19: 59:17:d4:61:ac:e1:cc:df:4e:bb:e8:0a:96:ae:b0: 82:19:57:50:81:b3:8e:f4:0b:75:b5:dd:31:e4:eb: 96:9d:a7:ae:6b:3a:5f:1c:a0:87:b8:7b:24:48:6c: 44:a9:71:78:48:0f:12:c0:37:3c:57:ab:a0:9c:b9: df:2b:ab:fe:8c:a1:cc:4e:99:d4:11:1a:6f:2b:c3: a2:ec:e0:20:ef:dc:5b:b5:e6:30:7f:b1:7d:d7:46: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:7F:EC:7C:C4:DB:C1:2E:16:61:AB:50:FB:04:9C:AA:56:B8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl X509v3 Authority Key Identifier: keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bc:f1:36:e9:70:c5:e5:ab:60:8b:79:2f:93:83:ab:fc:f1: cd:c9:1a:41:e6:2b:6f:fe:56:fa:3f:5e:34:a8:28:1f:54:56: c5:33:62:c4:e9:49:71:e4:66:eb:f1:cf:36:4f:d8:bf:e3:4e: cc:90:04:f5:95:7d:12:06:ff:62:37:65:04:58:e8:56:d2:da: d6:40:51:fa:dd:d3:bc:bf:32:a4:fe:ad:f7:ec:77:68:b9:aa: 0d:49:15:ff:21:cb:96:d8:86:f0:1c:cc:d2:52:02:c2:5a:12: e7:19:a0:06:a3:8d:e5:83:12:9f:03:78:ae:a5:95:72:0a:0f: 47:0e:cf:a5:46:c2:ce:09:ff:ee:7e:69:37:7a:74:dd:36:32: ab:d3:07:25:62:b9:cb:0b:7c:a2:3a:d6:0a:2c:fb:bd:12:18: 83:76:76:50:55:b6:e0:8c:0d:eb:11:71:6e:dd:a4:67:b8:83: 9a:38:17:c4:18:b6:93:1d:0a:0c:77:9a:fd:6c:cc:57:ec:e3: c6:fc:5e:95:a4:08:ff:75:8f:4c:da:01:76:5d:56:22:82:2f: 35:0a:6d:58:14:03:ff:8f:94:7f:0d:59:2e:2e:ce:3a:ce:f9: 16:c6:46:8a:25:17:a5:d3:ba:e7:f0:3b:2e:e9:e9:1e:c6:6d: b9:7e:36:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yiE1i92hgXDywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI0OGI2YmUtM2U2OS00ZTY3LThjMWMtOWY4NWZkZTE1 OTIyMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk YThiNDlmNWMtZDk1YS00N2JjLTg3MTEtYjc4OTNkMWUzNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAUNUAcfRx/U2RTxFVIpTylOuKqL3lR/TumU rs6UmCiu/jURzLXyOrxrlLt2ifAgCqlKbFt642Lg3wpaLCyLxpdPj77EH6sun7oS OEQYzY7l1J7FbtU1NW0+oSw+iFqiUwfl3a6IYcfplknuGVM5/vRiTll6RK+2MDgc d4F3o9XUP10594fOccVA51b09K3e783dP9PI/35FthAap/9MydiFwRlZF9RhrOHM 30676AqWrrCCGVdQgbOO9At1td0x5OuWnaeuazpfHKCHuHskSGxEqXF4SA8SwDc8 V6ugnLnfK6v+jKHMTpnUERpvK8Oi7OAg79xbteYwf7F910amGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEmhf+x8xNvBLhZhq1D7BJyqVrgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4 YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1ZmRlMTU5MjIvNTI0OGI2YmUtM2U2OS00 ZTY3LThjMWMtOWY4NWZkZTE1OTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI0OGI2YmUtM2U2OS00ZTY3LThj MWMtOWY4NWZkZTE1OTIyLzUyNDhiNmJlLTNlNjktNGU2Ny04YzFjLTlmODVmZGUx NTkyMi5jcmwwHwYDVR0jBBgwFoAUW5Iq0ngQHJ0959+yCSA19tB1JNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1 ZmRlMTU5MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgvPE26XDF5atgi3kvk4Or /PHNyRpB5itv/lb6P140qCgfVFbFM2LE6Ulx5Gbr8c82T9i/407MkAT1lX0SBv9i N2UEWOhW0trWQFH63dO8vzKk/q337HdouaoNSRX/IcuW2IbwHMzSUgLCWhLnGaAG o43lgxKfA3iupZVyCg9HDs+lRsLOCf/ufmk3enTdNjKr0wclYrnLC3yiOtYKLPu9 EhiDdnZQVbbgjA3rEXFu3aRnuIOaOBfEGLaTHQoMd5r9bMxX7OPG/F6VpAj/dY9M 2gF2XVYigi81Cm1YFAP/j5R/DVkuLs46zvkWxkaKJRel07rn8Dsu6ekexm25fjYC -----END CERTIFICATE-----Generated at Sat Aug 23 20:49:18 2025 by rpki-client