$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: q+q9R/9ipMJ8Ur/AQhvOIJ0sIcaNnXSFzWisUWOxbic= Subject key identifier: 12:46:B8:A4:40:38:8B:5F:9B:EA:52:CD:75:A2:E0:64:48:26:D0:13 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584AF432ABA1EEECB1E0A2826F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A8741 Signing time: Sat 23 Aug 2025 17:00:03 +0000 Manifest this update: Sat 23 Aug 2025 17:00:03 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: 4rPcd+7oF1vMhFw8C5SrdKfKJrpUNCvSN5Q5A1K+b+c=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: LxuC2nJldHiLSHZbsADwu27pgdGZKF8yrIKNsyFiTgo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:32:ab:a1:ee:ec:b1:e0:a2:82:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Aug 23 17:00:03 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=a85e475a-1d5b-4b02-ba1e-f073d96cd2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:f0:f7:36:9e:b5:dc:5b:b4:73:11:22:d2: b5:f3:e0:a1:6c:69:2e:a5:7a:c4:27:37:e8:38:97: 32:08:4f:fa:b8:36:89:d2:e6:7b:ca:6b:a7:65:dd: 16:23:79:85:99:49:a6:bc:64:f1:76:84:79:f0:40: 63:fd:1b:f4:d7:4a:78:3c:22:2c:be:c7:c5:00:47: 2a:0b:50:fb:70:fa:73:11:52:a8:1f:d4:cb:9a:dc: 02:f3:48:20:b2:45:7b:52:4d:3e:05:b6:55:7e:17: 48:5b:ed:bb:15:79:c6:26:b8:69:9c:98:af:b8:fa: 0b:d7:68:b3:2b:fd:09:eb:c7:a3:f6:5a:4a:76:4b: ca:17:cf:ce:dd:d4:14:cf:0b:36:62:5b:58:e1:18: db:dc:de:a0:f3:3c:01:f7:ea:c5:74:0c:bd:1a:3a: 80:74:c9:74:ac:fe:28:45:bc:8b:0d:cd:69:3b:f9: e1:b5:53:cd:2f:b2:15:9a:e4:02:0c:16:d6:d5:0f: 51:52:9f:49:85:fa:27:00:b4:c6:aa:47:00:07:d8: 6c:07:16:45:78:50:41:ce:95:4e:16:83:bb:91:bc: 9f:bb:1c:ab:5c:40:53:ff:64:db:8c:ec:58:d2:64: 2f:07:96:52:da:d7:db:32:e9:06:25:30:d0:7d:ef: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:B8:A4:40:38:8B:5F:9B:EA:52:CD:75:A2:E0:64:48:26:D0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:61:2f:a8:00:46:74:8b:88:c7:25:14:75:77:ef:8c:05:84: 0c:2e:cd:33:08:8a:73:90:00:2e:36:a5:69:61:60:9d:b2:97: f5:88:e3:83:b4:10:28:e4:96:dd:f8:b3:84:bb:e1:81:b2:77: 5a:ab:a0:c9:7e:7a:93:86:e1:3e:1c:f9:3e:e2:00:4f:02:25: 20:dc:8c:8e:87:05:24:7a:61:24:5f:a7:c2:8a:97:9c:62:7a: 5b:f5:2d:18:0b:a0:6d:98:a2:87:2d:29:79:47:e6:6f:0f:62: b2:86:13:3c:4f:9d:9a:7c:0a:68:00:2f:ba:51:fe:81:f2:98: 9b:1f:51:9b:1d:14:53:6b:81:dc:8e:10:ea:2f:75:c8:e2:2f: 55:85:4b:04:4b:5f:2d:b5:32:5e:54:e2:d0:e7:50:e9:f2:9c: 7a:23:72:20:ed:31:bf:59:cc:68:53:a3:23:6e:f9:15:b6:4f: 9f:f1:e6:ea:d8:30:47:4b:c9:1d:c0:cf:e5:09:33:cc:0f:ac: 3c:98:9c:43:3d:fc:e1:de:11:36:00:0c:d5:2a:87:fa:97:3d: 5c:22:55:18:65:88:3f:78:76:65:99:24:ab:e9:30:cb:2b:8a: 0b:6e:ec:a8:84:e4:24:82:e8:e3:57:52:17:41:bb:e4:61:af: 4b:1a:aa:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0Mquh7uyx4KKCb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MDgyMzE3MDAwM1oXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk YTg1ZTQ3NWEtMWQ1Yi00YjAyLWJhMWUtZjA3M2Q5NmNkMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQbw9zaetdxbtHMRItK18+ChbGkupXrEJzfo OJcyCE/6uDaJ0uZ7ymunZd0WI3mFmUmmvGTxdoR58EBj/Rv010p4PCIsvsfFAEcq C1D7cPpzEVKoH9TLmtwC80ggskV7Uk0+BbZVfhdIW+27FXnGJrhpnJivuPoL12iz K/0J68ej9lpKdkvKF8/O3dQUzws2YltY4Rjb3N6g8zwB9+rFdAy9GjqAdMl0rP4o RbyLDc1pO/nhtVPNL7IVmuQCDBbW1Q9RUp9JhfonALTGqkcAB9hsBxZFeFBBzpVO FoO7kbyfuxyrXEBT/2TbjOxY0mQvB5ZS2tfbMukGJTDQfe9TpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBJGuKRAOItfm+pSzXWi4GRIJtATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZYS+oAEZ0i4jHJRR1d++M BYQMLs0zCIpzkAAuNqVpYWCdspf1iOODtBAo5Jbd+LOEu+GBsndaq6DJfnqThuE+ HPk+4gBPAiUg3IyOhwUkemEkX6fCipecYnpb9S0YC6BtmKKHLSl5R+ZvD2KyhhM8 T52afApoAC+6Uf6B8pibH1GbHRRTa4HcjhDqL3XI4i9VhUsES18ttTJeVOLQ51Dp 8px6I3Ig7TG/WcxoU6MjbvkVtk+f8ebq2DBHS8kdwM/lCTPMD6w8mJxDPfzh3hE2 AAzVKof6lz1cIlUYZYg/eHZlmSSr6TDLK4oLbuyohOQkgujjV1IXQbvkYa9LGqoY -----END CERTIFICATE-----Generated at Sat Aug 23 22:54:01 2025 by rpki-client