$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft File: 1fd804af-5006-4871-96a7-e7dfad97b8b5.mft (raw, json) Hash identifier: qu3HrVzG1vuLXEV0ilOHz2tTwV+1CTb4aFj0mL1Aw9w= Subject key identifier: FC:73:59:20:07:A6:4B:41:0C:09:AD:50:78:8C:09:B2:3C:DD:1C:D4 Authority key identifier: 74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D Certificate issuer: /CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Certificate serial: 010D0C9F4328584AF432ABADE642DDBF4F222D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft Manifest number: 010D0C9F43285849B32DFBADFD857E94CA78E195 Signing time: Sat 23 Aug 2025 17:00:03 +0000 Manifest this update: Sat 23 Aug 2025 17:00:03 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 1fd804af-5006-4871-96a7-e7dfad97b8b5.crl (hash: Xr2rqm0UB6VnDPFaCWYt8l3bMbMZ2szuouxD4599GGY=) 2: d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa (hash: HiGL+BAHFnIh6ybVDjDal/sU0k24qUNwZiqBBUQTWzk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:32:ab:ad:e6:42:dd:bf:4f:22:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Validity Not Before: Aug 23 17:00:03 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=088b916c-81da-424b-9140-98b6fcd8b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:f6:b3:19:4e:af:ab:31:3f:7f:49:48:90: ec:fe:38:d5:b2:3e:27:71:5d:00:e5:57:5d:cf:ec: 00:e2:a6:11:0e:95:63:37:db:0e:ca:38:cc:f8:9b: 29:46:cd:ab:16:a8:9d:1c:f1:0c:3d:15:d9:f2:bc: 0d:31:a2:6d:96:e7:86:6a:ee:3d:c0:ee:58:16:47: 03:df:35:23:02:a8:d8:77:a1:62:dd:1c:fe:81:e3: b0:bd:30:b5:6b:0c:d0:74:49:de:3c:00:71:1c:ca: 86:a4:16:63:88:c6:27:f4:fa:4a:22:ce:b5:2d:7c: 6d:28:83:e2:56:cb:65:53:e2:e1:fa:0c:7f:9e:c7: 00:36:9e:3d:1b:fc:8d:80:13:b4:b6:8b:1c:9c:cc: 69:c5:3e:91:7f:ce:6f:59:5c:58:ed:ec:84:90:87: 47:36:53:52:7c:93:f8:82:fb:9b:32:79:44:9c:53: 1a:66:26:66:db:15:af:98:7f:e7:51:14:12:0a:1a: 94:14:65:93:66:39:e6:e0:7b:61:b2:a1:3b:32:f4: 27:8d:69:5b:89:2b:57:85:53:8d:b1:2e:90:e6:bc: 8b:b1:c8:d2:9d:fb:19:c7:21:5a:d0:e8:0b:b9:30: 06:84:38:df:47:0e:eb:55:51:bd:f5:b8:ca:17:44: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:73:59:20:07:A6:4B:41:0C:09:AD:50:78:8C:09:B2:3C:DD:1C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl X509v3 Authority Key Identifier: keyid:74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:54:6b:b7:43:02:24:57:01:c1:31:4b:df:3f:92:09:b4:70: d6:96:a4:0d:e4:c4:56:20:ce:f8:a2:1c:f7:56:58:1d:b3:ae: 53:0a:dd:a7:c4:42:12:6d:94:33:c2:77:b0:eb:35:85:55:b2: 89:b1:03:77:63:8f:be:4f:1b:42:4c:22:e4:90:fa:17:a1:72: 3b:f7:3d:d8:64:aa:b6:8a:b6:08:36:73:af:a9:95:f5:fc:08: 28:f9:7d:1a:85:69:9b:04:45:f2:2d:de:e6:2f:d0:6a:0e:2c: 15:8e:c9:e5:12:df:09:b4:c9:2a:e8:b2:ef:b1:12:41:35:39: 03:3e:95:34:c8:04:84:55:45:97:27:19:6a:04:76:ae:e1:44: 29:e1:92:4f:36:7d:33:d5:42:ef:a7:ec:6c:2a:a0:4c:81:73: 2a:7f:94:fb:8e:33:ad:31:7e:ba:c0:e9:e8:02:94:6e:60:46: 6b:b7:28:18:e7:cb:eb:2e:d4:5e:20:b9:31:82:c7:56:89:a8: 55:3a:e2:41:1c:59:7c:32:82:0d:d0:2c:54:54:9d:b1:6d:07: de:d4:df:bb:bb:54:89:3e:a1:9a:c2:87:8b:37:df:c2:d5:ec: a2:4c:8b:27:13:f7:69:42:2c:33:d5:25:86:49:dd:d9:4a:12: db:76:59:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0Mqut5kLdv08iLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkODA0YWYtNTAwNi00ODcxLTk2YTctZTdkZmFkOTdi OGI1MB4XDTI1MDgyMzE3MDAwM1oXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk MDg4YjkxNmMtODFkYS00MjRiLTkxNDAtOThiNmZjZDhiMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrP2sxlOr6sxP39JSJDs/jjVsj4ncV0A5Vdd z+wA4qYRDpVjN9sOyjjM+JspRs2rFqidHPEMPRXZ8rwNMaJtlueGau49wO5YFkcD 3zUjAqjYd6Fi3Rz+geOwvTC1awzQdEnePABxHMqGpBZjiMYn9PpKIs61LXxtKIPi VstlU+Lh+gx/nscANp49G/yNgBO0toscnMxpxT6Rf85vWVxY7eyEkIdHNlNSfJP4 gvubMnlEnFMaZiZm2xWvmH/nURQSChqUFGWTZjnm4HthsqE7MvQnjWlbiStXhVON sS6Q5ryLscjSnfsZxyFa0OgLuTAGhDjfRw7rVVG99bjKF0SceQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPxzWSAHpktBDAmtUHiMCbI83RzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4 MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2RmYWQ5N2I4YjUvMWZkODA0YWYtNTAwNi00 ODcxLTk2YTctZTdkZmFkOTdiOGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZkODA0YWYtNTAwNi00ODcxLTk2 YTctZTdkZmFkOTdiOGI1LzFmZDgwNGFmLTUwMDYtNDg3MS05NmE3LWU3ZGZhZDk3 YjhiNS5jcmwwHwYDVR0jBBgwFoAUdELMmvH4xJQrc6BuHC931ugwvT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2Rm YWQ5N2I4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDVGu3QwIkVwHBMUvfP5IJ tHDWlqQN5MRWIM74ohz3Vlgds65TCt2nxEISbZQzwnew6zWFVbKJsQN3Y4++TxtC TCLkkPoXoXI79z3YZKq2irYINnOvqZX1/Ago+X0ahWmbBEXyLd7mL9BqDiwVjsnl Et8JtMkq6LLvsRJBNTkDPpU0yASEVUWXJxlqBHau4UQp4ZJPNn0z1ULvp+xsKqBM gXMqf5T7jjOtMX66wOnoApRuYEZrtygY58vrLtReILkxgsdWiahVOuJBHFl8MoIN 0CxUVJ2xbQfe1N+7u1SJPqGawoeLN9/C1eyiTIsnE/dpQiwz1SWGSd3ZShLbdlkl -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:35 2025 by rpki-client