$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: RDUnEZ/abdHexcBu8eSBGfEGllUiISYdboeifG6xScY= Subject key identifier: 7F:6B:83:32:17:1D:FE:FE:CD:E6:48:C7:B4:56:00:12:B4:46:F9:AA Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584AF3D964CD20B69FE129342A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB36E Signing time: Sat 23 Aug 2025 14:00:08 +0000 Manifest this update: Sat 23 Aug 2025 14:00:08 +0000 Manifest next update: Mon 25 Aug 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: 1wl/R1ziGYihSGsatlgetPJaATr54WMOMnmQj07USQQ=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: QWPmR0soyExkBQEVIJIlUWYv/ouaDD4pZa47A6L1p+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:d9:64:cd:20:b6:9f:e1:29:34:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Aug 23 14:00:08 2025 GMT Not After : Aug 25 14:00:00 2025 GMT Subject: CN=db4b7f42-25bf-436d-9495-cc5b69ca78e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:40:79:b3:2f:17:13:13:76:f5:23:77:c3: da:76:94:01:6f:33:0a:36:bc:36:80:10:3a:7d:3a: 28:cb:d1:83:dd:c1:13:da:2e:66:80:51:d2:0e:aa: aa:55:5d:dc:9f:7a:4e:48:e1:5a:73:8f:ed:56:01: 8c:27:fb:df:3d:8c:9b:1f:96:21:fe:c1:13:32:67: a2:16:2e:f5:00:0d:a9:2c:72:13:e2:3b:1a:83:82: 4a:75:a1:43:59:67:ef:40:43:c3:60:03:4b:ed:93: b1:44:e1:74:9d:3a:6d:53:44:d2:f1:28:aa:d6:fc: ea:f9:12:74:f5:62:48:31:f7:49:5e:92:bd:07:0f: cd:45:09:17:9c:ed:c0:0e:4e:04:c6:6d:2d:60:60: d3:2d:98:34:bd:52:22:83:34:80:57:f5:77:6d:3b: 00:9e:28:da:bf:ae:6b:4f:f8:56:eb:23:7e:08:fb: 11:9c:ba:d2:a6:93:61:1f:aa:41:72:f9:c0:4a:33: c1:84:ec:f3:f8:dc:b7:c9:22:06:77:3e:5d:ac:b8: a0:26:27:bb:b3:aa:b5:0a:4f:78:07:21:e3:14:a8: 73:76:41:7a:1b:12:57:c6:0b:4a:a3:6a:55:e9:7b: cd:40:dc:89:08:e4:c6:57:c5:2e:7e:90:f1:f5:76: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6B:83:32:17:1D:FE:FE:CD:E6:48:C7:B4:56:00:12:B4:46:F9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:be:30:9f:e8:8c:de:a1:3a:86:a6:93:a2:79:a0:91:76:3f: 66:c7:65:4c:26:1a:1a:ca:63:87:50:bc:4c:b7:6f:b0:b9:46: f8:2a:4c:b8:2b:9b:28:20:03:97:8a:2c:ec:db:48:c0:5d:91: e7:e6:82:62:d8:27:50:14:50:08:01:12:69:22:35:81:85:69: 87:2d:f3:e7:2d:27:95:eb:0d:29:b0:8a:0e:18:36:07:02:d2: 09:c3:b9:52:63:25:0c:96:0d:f7:86:86:cb:c8:9d:69:4f:0f: 8b:b4:ee:1c:95:06:f3:77:65:30:2f:f9:17:ed:f0:95:83:d1: 7c:f0:eb:a4:52:56:a6:ba:d0:b5:3d:98:af:ef:23:79:23:34: fd:92:5d:40:bf:aa:44:0b:8b:ef:8d:27:3c:ef:14:ea:0c:5e: d3:11:12:6e:a1:0c:b3:ae:29:48:56:b3:14:ce:71:27:05:48: e1:38:50:28:a6:b5:d2:a2:c4:fd:5b:06:ec:1e:70:48:16:e0: 15:aa:fe:6e:7e:55:68:8e:70:e6:3c:cc:5a:70:be:f7:1b:9c: 4b:23:63:e5:e0:9a:4d:de:84:f9:2b:fd:78:ce:7c:2d:b1:8b: 3d:db:b8:a8:ce:79:45:42:4e:83:88:e7:90:28:9d:7f:9a:f1: 2a:b3:c7:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz2WTNILaf4Sk0KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDgyMzE0MDAwOFoXDTI1MDgyNTE0MDAwMFowLzEtMCsGA1UEAxMk ZGI0YjdmNDItMjViZi00MzZkLTk0OTUtY2M1YjY5Y2E3OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16NAebMvFxMTdvUjd8PadpQBbzMKNrw2gBA6 fTooy9GD3cET2i5mgFHSDqqqVV3cn3pOSOFac4/tVgGMJ/vfPYybH5Yh/sETMmei Fi71AA2pLHIT4jsag4JKdaFDWWfvQEPDYANL7ZOxROF0nTptU0TS8Siq1vzq+RJ0 9WJIMfdJXpK9Bw/NRQkXnO3ADk4Exm0tYGDTLZg0vVIigzSAV/V3bTsAnijav65r T/hW6yN+CPsRnLrSppNhH6pBcvnASjPBhOzz+Ny3ySIGdz5drLigJie7s6q1Ck94 ByHjFKhzdkF6GxJXxgtKo2pV6XvNQNyJCOTGV8UufpDx9XZYyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH9rgzIXHf7+zeZIx7RWABK0RvmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEvjCf6IzeoTqGppOieaCR dj9mx2VMJhoaymOHULxMt2+wuUb4Kky4K5soIAOXiizs20jAXZHn5oJi2CdQFFAI ARJpIjWBhWmHLfPnLSeV6w0psIoOGDYHAtIJw7lSYyUMlg33hobLyJ1pTw+LtO4c lQbzd2UwL/kX7fCVg9F88OukUlamutC1PZiv7yN5IzT9kl1Av6pEC4vvjSc87xTq DF7TERJuoQyzrilIVrMUznEnBUjhOFAoprXSosT9WwbsHnBIFuAVqv5uflVojnDm PMxacL73G5xLI2Pl4JpN3oT5K/14znwtsYs927ioznlFQk6DiOeQKJ1/mvEqs8fH -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:36 2025 by rpki-client