$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: GuFsrs5v3CDmec+l1tfpFXxyUeDsz/tOCbtLsNVsM8c= Subject key identifier: 62:D3:2C:A8:95:32:8B:56:AA:79:0D:AD:E6:8C:9E:24:E6:D1:28:64 Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584AF414F3DEE42A27B5375DD480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E1CB Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Tue 26 Aug 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: AvBMtMgdiJY4x8jglxNfOK3ZSoTfvOWW1XIHKDnUzRE=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: mFPVuDKac9wSqt3KhVlEyDXDF50zMa7g9K21XKiaS18=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:f3:de:e4:2a:27:b5:37:5d:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 26 16:00:00 2025 GMT Subject: CN=3e8f43db-f950-4f61-8888-4b78b095e75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:61:40:d4:01:45:5b:52:76:8f:f8:17:bc: 14:53:06:19:63:b2:8c:59:ed:c6:9f:96:67:7b:38: d6:63:23:a6:1b:35:28:20:67:0f:6c:cc:9c:89:5f: e3:25:7f:e1:b6:92:d1:0a:44:1a:90:c2:cf:c3:73: 7b:37:43:d4:8f:08:c0:56:50:4c:8c:45:e7:3d:65: 54:80:5b:7c:9c:58:83:6e:64:4c:27:cc:61:8f:eb: 7f:63:a3:74:8c:95:02:58:02:c8:97:54:1c:28:c1: 70:6f:8d:21:06:2b:e1:0d:74:de:95:9a:59:c0:07: 1b:46:cf:a6:36:48:8f:1e:5a:02:29:4f:5c:9a:28: 2f:a3:e2:eb:e0:36:b1:01:0d:01:49:ab:27:10:3f: f0:e4:43:79:4a:30:9a:38:76:e4:5f:16:e1:b9:02: 02:f6:17:65:a4:e0:23:e4:56:a7:9e:05:58:9f:40: a9:54:71:22:f7:87:39:93:07:f5:d7:c0:7d:16:53: 8f:21:72:0e:fe:7b:3e:79:a1:c9:df:27:4a:b9:14: 0e:1b:ef:37:3e:5b:17:98:17:75:76:47:8d:9b:bb: b1:ae:5e:47:94:54:43:9c:31:c3:d2:4f:57:4a:19: 75:2b:22:9b:98:01:a8:b9:e1:9d:fd:60:9c:70:bb: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D3:2C:A8:95:32:8B:56:AA:79:0D:AD:E6:8C:9E:24:E6:D1:28:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d2:5e:68:6c:a1:a9:45:5d:1f:da:9d:e8:8e:0a:23:a8:cb: 76:37:0e:e6:15:92:52:4e:59:0f:16:f2:83:e5:a9:9c:2c:71: 61:09:d1:c1:4c:d9:1b:84:8e:cb:32:ff:21:19:4d:7c:1e:7e: 45:2a:ad:4e:e5:11:23:e8:04:8f:8f:e8:b2:51:9d:e0:ec:d1: 4b:b8:59:d1:a3:f9:8e:04:5d:38:29:6a:39:50:a0:db:1a:e5: 49:ad:6f:e3:5c:4a:08:57:fb:89:36:c0:cb:67:d9:46:64:ed: 0f:f8:21:6f:f3:9c:80:24:7a:45:5e:81:73:a6:10:1f:45:e7: cc:3b:e1:5b:e8:4a:62:ff:4b:35:1a:00:50:3e:78:4a:8e:ad: 0b:10:d5:89:b8:7f:4d:86:1c:d1:28:72:95:7d:46:27:0a:56: 69:5d:eb:c6:79:f3:a1:b7:03:2c:73:2c:14:d9:a8:bd:60:97: ed:79:6f:9e:60:ae:fa:ec:11:b9:32:91:d1:34:63:8f:c9:2f: b5:df:4e:88:72:9a:3f:bf:6b:2e:92:e7:0a:03:53:dd:80:38: 7b:6b:8e:03:ea:2f:42:03:3d:bb:c8:f0:cb:16:1c:54:48:74: ac:e5:4c:8a:6e:98:76:2a:95:1d:1f:5c:f0:88:79:ba:f8:14: 31:1b:2b:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FPPe5ContTdd1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNjE2MDAwMFowLzEtMCsGA1UEAxMk M2U4ZjQzZGItZjk1MC00ZjYxLTg4ODgtNGI3OGIwOTVlNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTRhQNQBRVtSdo/4F7wUUwYZY7KMWe3Gn5Zn ezjWYyOmGzUoIGcPbMyciV/jJX/htpLRCkQakMLPw3N7N0PUjwjAVlBMjEXnPWVU gFt8nFiDbmRMJ8xhj+t/Y6N0jJUCWALIl1QcKMFwb40hBivhDXTelZpZwAcbRs+m NkiPHloCKU9cmigvo+Lr4DaxAQ0BSasnED/w5EN5SjCaOHbkXxbhuQIC9hdlpOAj 5FanngVYn0CpVHEi94c5kwf118B9FlOPIXIO/ns+eaHJ3ydKuRQOG+83PlsXmBd1 dkeNm7uxrl5HlFRDnDHD0k9XShl1KyKbmAGoueGd/WCccLtiPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGLTLKiVMotWqnkNreaMniTm0ShkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL0l5obKGpRV0f2p3ojgoj qMt2Nw7mFZJSTlkPFvKD5amcLHFhCdHBTNkbhI7LMv8hGU18Hn5FKq1O5REj6ASP j+iyUZ3g7NFLuFnRo/mOBF04KWo5UKDbGuVJrW/jXEoIV/uJNsDLZ9lGZO0P+CFv 85yAJHpFXoFzphAfRefMO+Fb6Epi/0s1GgBQPnhKjq0LENWJuH9NhhzRKHKVfUYn ClZpXevGefOhtwMscywU2ai9YJfteW+eYK767BG5MpHRNGOPyS+1306Icpo/v2su kucKA1PdgDh7a44D6i9CAz27yPDLFhxUSHSs5UyKbph2KpUdH1zwiHm6+BQxGytw -----END CERTIFICATE-----Generated at Sat Aug 23 18:46:54 2025 by rpki-client