$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft File: 2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft (raw, json) Hash identifier: ytlZeg2xdjwQvFtHYZwzOBJkTaUihvRHdHE/Q/o8Wm8= Subject key identifier: 34:87:F7:F0:3E:74:C6:E4:EA:97:16:38:3D:76:60:48:32:15:B2:4D Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584AF4507E1497A8CE975B887400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft Manifest number: 010D0C9F4328584163B5014B5945217EC16E2984 Signing time: Sat 23 Aug 2025 18:00:08 +0000 Manifest this update: Sat 23 Aug 2025 18:00:08 +0000 Manifest next update: Mon 25 Aug 2025 18:00:00 +0000 Files and hashes: 1: 2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl (hash: qlvmpI7uewqAQ8flRJWZWWlk9TfgO9DBikHmNlSvJNU=) 2: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (hash: iXKgLQvzQReK1VrRdYaHiGBK/yi+aKwkpK3ofnWLqvU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:50:7e:14:97:a8:ce:97:5b:88:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Aug 23 18:00:08 2025 GMT Not After : Aug 25 18:00:00 2025 GMT Subject: CN=b72a8eaa-c1df-4310-b911-52f9a3d1d781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:eb:37:a4:3c:fc:f0:03:ad:2e:86:73:c9: 87:04:07:04:18:40:9c:f3:fe:97:c9:ed:5c:65:ee: 6a:59:b4:6f:b1:9f:ee:f8:d0:14:e5:2b:8a:e9:40: 35:70:a5:c5:0e:b0:f1:13:b6:91:9f:a9:93:9f:d8: 5e:f1:cf:b3:5d:5d:a9:e5:80:23:a0:4f:6d:5f:05: 82:28:e8:5e:29:15:ed:e6:a7:0f:69:71:bc:21:c1: 23:8a:ef:a4:96:d3:57:66:bc:bc:fe:e8:5f:af:c3: 75:a8:4e:c4:5d:00:e4:2f:6f:ea:85:c2:fb:a0:0a: 97:0f:a4:fa:f2:dc:30:74:a6:fe:f2:31:dc:94:7e: bc:c6:b2:9d:86:61:8c:d2:6a:cf:79:b1:6c:51:98: 0a:0f:f9:80:de:fb:a7:ac:a5:a3:4d:56:68:55:97: 55:d6:a9:20:46:8e:9e:d1:15:4f:22:89:fb:5a:b2: ca:a6:09:6f:07:a9:6d:3e:2a:85:d5:49:0e:01:b2: 96:93:8e:f9:4b:05:82:0d:28:37:a1:7f:5c:a6:27: 02:48:01:f7:71:fa:8f:3c:b2:11:c7:49:5f:a4:ff: 85:82:f5:dd:c3:ef:b3:1c:1c:b8:eb:2d:63:bf:01: 77:b8:ce:91:dd:01:c7:99:2a:b5:d6:62:2a:ad:f4: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:F7:F0:3E:74:C6:E4:EA:97:16:38:3D:76:60:48:32:15:B2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:83:29:04:b5:31:78:53:e9:38:f6:88:ee:ed:a9:7e:e8:73: c0:49:e6:f3:62:02:e6:f1:0c:a8:86:2c:59:1a:6d:58:66:fb: 46:3f:6c:1d:4f:a1:a5:38:43:52:d9:9b:43:6e:b9:3f:02:42: c3:e7:02:94:05:b8:0c:f9:cf:23:bf:e3:10:91:1c:90:9b:80: d8:6b:0d:94:e3:8f:a0:46:02:f5:5e:a9:d2:3f:78:d7:61:87: 06:b7:8c:83:ab:c6:d0:ab:9b:fe:f4:be:65:79:2c:84:60:63: 5c:15:13:af:19:2d:e7:11:b5:76:0f:32:0f:d8:72:56:2d:08: 31:4e:26:bb:35:54:04:16:e3:a9:f6:07:35:46:e1:dd:53:fd: 0f:ef:41:ae:59:51:3a:94:bd:c4:b0:0c:91:2b:d5:0d:d7:a9: c1:1e:2e:1d:70:96:1b:ea:0a:6c:a3:05:05:4f:67:d4:23:e6: d5:d6:25:4e:28:3a:3e:bc:60:42:47:62:19:2b:61:f0:85:3e: bd:d5:8f:43:6e:4f:cb:fa:05:5c:2c:be:62:d1:1c:c0:aa:91: 69:05:35:ed:bf:f9:37:dd:70:1f:be:ee:26:b1:47:71:db:98: f1:f2:e4:10:91:72:0d:6a:71:c5:ec:1f:df:31:44:4b:7f:eb: 9c:6b:a6:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0UH4Ul6jOl1uIdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI1MDgyMzE4MDAwOFoXDTI1MDgyNTE4MDAwMFowLzEtMCsGA1UEAxMk YjcyYThlYWEtYzFkZi00MzEwLWI5MTEtNTJmOWEzZDFkNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9TrN6Q8/PADrS6Gc8mHBAcEGECc8/6Xye1c Ze5qWbRvsZ/u+NAU5SuK6UA1cKXFDrDxE7aRn6mTn9he8c+zXV2p5YAjoE9tXwWC KOheKRXt5qcPaXG8IcEjiu+kltNXZry8/uhfr8N1qE7EXQDkL2/qhcL7oAqXD6T6 8twwdKb+8jHclH68xrKdhmGM0mrPebFsUZgKD/mA3vunrKWjTVZoVZdV1qkgRo6e 0RVPIon7WrLKpglvB6ltPiqF1UkOAbKWk475SwWCDSg3oX9cpicCSAH3cfqPPLIR x0lfpP+FgvXdw++zHBy46y1jvwF3uM6R3QHHmSq11mIqrfScawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDSH9/A+dMbk6pcWOD12YEgyFbJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvMmNkNGY1MmYtNDA1My00 NWRiLWI4ZTAtYTdlMGUzYjg1ZmJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAugykEtTF4U+k49oju7al+ 6HPASebzYgLm8QyohixZGm1YZvtGP2wdT6GlOENS2ZtDbrk/AkLD5wKUBbgM+c8j v+MQkRyQm4DYaw2U44+gRgL1XqnSP3jXYYcGt4yDq8bQq5v+9L5leSyEYGNcFROv GS3nEbV2DzIP2HJWLQgxTia7NVQEFuOp9gc1RuHdU/0P70GuWVE6lL3EsAyRK9UN 16nBHi4dcJYb6gpsowUFT2fUI+bV1iVOKDo+vGBCR2IZK2HwhT691Y9Dbk/L+gVc LL5i0RzAqpFpBTXtv/k33XAfvu4msUdx25jx8uQQkXINanHF7B/fMURLf+uca6aq -----END CERTIFICATE-----Generated at Sun Aug 24 09:31:45 2025 by rpki-client