$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: erfP4Z5nF2DngQUbDLd4Jjw5jx6MGvGQcDW92Op2FbM= Subject key identifier: 93:A2:77:CE:BE:E9:8A:73:F7:CE:90:39:A4:C2:B3:6C:B2:C5:40:0F Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584AF3F72DC4B558709C4BB370F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697EF8 Signing time: Sat 23 Aug 2025 15:00:08 +0000 Manifest this update: Sat 23 Aug 2025 15:00:08 +0000 Manifest next update: Tue 26 Aug 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: jytzhaWVyvYwjHJIMPjRqXPbCvcsOva5mzS/J76A6vQ=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: oytTkp9BzEjSqjJ/tCcMUeoKluRQClzsnTipJr+USu0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:f7:2d:c4:b5:58:70:9c:4b:b3:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Aug 23 15:00:08 2025 GMT Not After : Aug 26 15:00:00 2025 GMT Subject: CN=211b24b5-cbc0-46e5-9b71-09f6a7747b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:51:f4:6c:9d:4e:80:c6:f2:23:ac:d3:7e: 25:d4:aa:ad:b7:43:d3:ce:7f:dd:f2:cb:78:d6:c0: cd:0b:ff:32:a0:85:00:3c:dd:1f:83:a2:2b:68:8a: 81:91:ba:ac:43:46:3a:de:13:b5:aa:72:85:41:e5: d1:a2:23:34:04:89:79:5f:1a:c9:60:59:66:a4:b6: 5b:03:6d:eb:a7:14:7c:dc:4e:2b:2e:e3:1b:ae:e3: f6:a2:9a:6f:a3:ab:80:49:02:72:bb:98:ea:75:b9: 73:f1:b9:01:35:9f:3c:a6:3b:45:43:9f:45:55:a7: e8:c9:9b:02:6b:2f:ba:64:b1:ff:8e:a2:e1:37:2d: 5e:5f:56:44:8b:ae:df:08:11:1e:60:ab:80:d6:a5: 6e:fc:bb:7c:bc:63:2b:d9:83:4d:68:8f:a4:37:78: 62:28:37:30:b1:59:a0:e0:19:49:ff:bf:3e:ba:d8: 38:d9:ed:48:da:cb:4e:d1:26:44:0a:0f:5d:1e:e2: b7:48:dc:69:ca:f7:13:0c:f8:5d:64:52:6b:fa:a7: 45:6f:aa:9d:b5:ba:bb:25:b8:04:e3:53:3a:c7:e7: d3:e3:37:b2:c3:d0:72:06:ce:c8:eb:49:e7:bd:69: f9:70:bf:9f:7a:01:27:0a:91:53:fa:5b:db:7a:71: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:77:CE:BE:E9:8A:73:F7:CE:90:39:A4:C2:B3:6C:B2:C5:40:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b9:2a:93:9d:9f:9d:fd:8b:64:91:af:a1:17:ff:49:c9:a6: 79:c3:5a:ea:55:ae:06:0b:1b:35:a7:0a:a1:1f:63:4a:5c:d3: 02:e2:07:f8:55:51:f7:61:c6:47:86:48:e8:56:a5:50:79:70: 3d:d0:7e:ab:30:bd:22:1a:bb:36:1e:0a:5b:57:11:e8:f0:ff: e9:b1:f4:16:c3:9c:43:36:af:d2:67:97:e7:bd:e3:3b:72:58: 23:7c:f1:de:bb:1d:8d:28:4c:74:0b:f0:ff:fa:8f:55:a5:a5: df:17:ad:d5:1d:f5:7e:d8:b7:b8:74:b5:85:1f:6f:d7:39:19: 84:4a:a5:81:0c:dc:ff:f0:fa:2b:9d:79:65:43:15:74:86:89: 52:e7:30:0d:19:7d:10:3a:50:70:0f:6a:57:74:02:d2:88:c9: 27:b4:ad:eb:a2:a4:93:b1:b4:3e:c0:ff:25:90:dd:3a:68:a4: 92:8f:3b:76:81:10:15:22:03:80:88:09:2d:bc:14:79:6c:1c: ae:7c:56:e3:bd:97:b8:f7:9d:7f:14:65:79:3f:22:c9:be:12: b6:41:2b:53:9f:00:d9:5f:f6:30:af:e1:c7:be:13:6e:64:92: f3:40:3a:35:c1:46:8b:42:94:5a:1d:17:f6:5b:2f:9f:b2:50: 25:27:6f:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz9y3EtVhwnEuzcPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MDgyMzE1MDAwOFoXDTI1MDgyNjE1MDAwMFowLzEtMCsGA1UEAxMk MjExYjI0YjUtY2JjMC00NmU1LTliNzEtMDlmNmE3NzQ3YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRxR9GydToDG8iOs034l1Kqtt0PTzn/d8st4 1sDNC/8yoIUAPN0fg6IraIqBkbqsQ0Y63hO1qnKFQeXRoiM0BIl5XxrJYFlmpLZb A23rpxR83E4rLuMbruP2oppvo6uASQJyu5jqdblz8bkBNZ88pjtFQ59FVafoyZsC ay+6ZLH/jqLhNy1eX1ZEi67fCBEeYKuA1qVu/Lt8vGMr2YNNaI+kN3hiKDcwsVmg 4BlJ/78+utg42e1I2stO0SZECg9dHuK3SNxpyvcTDPhdZFJr+qdFb6qdtbq7JbgE 41M6x+fT4zeyw9ByBs7I60nnvWn5cL+fegEnCpFT+lvbenGDrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJOid86+6Ypz986QOaTCs2yyxUAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOuSqTnZ+d/Ytkka+hF/9J yaZ5w1rqVa4GCxs1pwqhH2NKXNMC4gf4VVH3YcZHhkjoVqVQeXA90H6rML0iGrs2 HgpbVxHo8P/psfQWw5xDNq/SZ5fnveM7clgjfPHeux2NKEx0C/D/+o9VpaXfF63V HfV+2Le4dLWFH2/XORmESqWBDNz/8PornXllQxV0holS5zANGX0QOlBwD2pXdALS iMkntK3roqSTsbQ+wP8lkN06aKSSjzt2gRAVIgOAiAktvBR5bByufFbjvZe4951/ FGV5PyLJvhK2QStTnwDZX/Ywr+HHvhNuZJLzQDo1wUaLQpRaHRf2Wy+fslAlJ28g -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:13 2025 by rpki-client