$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft File: 63991382-256c-41c7-9e97-783d23a22bf2.mft (raw, json) Hash identifier: 7LG6g8WxnzaGJpd9YHljE7N3wfGIKVXlvbEO4y26kG8= Subject key identifier: 89:F4:92:64:15:17:8F:61:73:19:30:E8:CB:8F:F1:EA:BB:94:BD:A2 Authority key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D Certificate issuer: /CN=63991382-256c-41c7-9e97-783d23a22bf2 Certificate serial: 010D0C9F4328584AF432B062FEE88F079B41DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft Manifest number: 010D0C9F4328584A5D7EA312D1E629A8EE0B0EB9 Signing time: Sat 23 Aug 2025 17:00:03 +0000 Manifest this update: Sat 23 Aug 2025 17:00:03 +0000 Manifest next update: Tue 26 Aug 2025 17:00:00 +0000 Files and hashes: 1: 63991382-256c-41c7-9e97-783d23a22bf2.crl (hash: Y4HVQlJXlta7zgRnfsb678+Ijb6UXV0xTaX3jTTQi9k=) 2: a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa (hash: igSGcObt+yLgeyiWUxIj6MKFydMvEDqcbxHDMRD1NZM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:32:b0:62:fe:e8:8f:07:9b:41:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63991382-256c-41c7-9e97-783d23a22bf2 Validity Not Before: Aug 23 17:00:03 2025 GMT Not After : Aug 26 17:00:00 2025 GMT Subject: CN=f9570fbc-cee4-430d-a18a-61b381a85919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c6:4a:f6:6b:df:c7:c7:ce:bc:87:85:ee:b2: d0:49:8d:a7:63:c5:49:10:8d:d2:b0:e4:3b:92:4f: 5e:96:7c:5c:ae:db:fb:4e:e8:4e:8b:c4:dc:7b:43: 87:51:ef:bf:62:a9:fa:d8:55:2b:ff:b5:e2:1a:94: 95:43:47:0b:0c:d0:89:09:01:d2:24:43:f8:a9:7f: 44:d4:88:86:b9:ac:c8:e5:8f:e5:47:09:bf:35:a6: a5:6d:2a:52:24:26:e5:9f:ca:de:e8:b9:c2:69:d3: 77:b3:7c:a8:e7:00:42:44:81:cb:ca:32:c3:c4:5c: 20:dd:0c:c4:8d:ce:7c:e6:52:4b:d9:34:4a:97:17: 31:ba:bd:b8:b4:9f:d3:94:8d:e5:ec:5b:dc:34:0d: d6:4b:13:5a:21:75:fe:c8:e9:0f:28:9b:c1:a2:c0: cb:fa:eb:14:db:11:c1:3b:7e:dc:de:c6:05:b4:00: 77:f6:9b:76:4a:72:09:df:29:04:9c:b5:d6:07:d6: 49:b4:45:27:c3:94:16:b9:14:db:70:2e:6f:1b:28: 39:be:6c:a3:62:f2:78:a4:9d:90:b9:65:7d:96:07: 76:c7:14:dd:8a:a5:f1:12:31:22:99:6b:8c:10:08: 34:1f:05:f7:fc:3d:7f:19:92:19:8a:97:c3:27:27: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:92:64:15:17:8F:61:73:19:30:E8:CB:8F:F1:EA:BB:94:BD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl X509v3 Authority Key Identifier: keyid:77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ad:4e:65:b3:47:64:65:00:9a:b7:12:55:68:9e:62:9c:a2: b2:cd:ba:1b:35:fe:5e:e6:fa:2d:df:ba:c4:e1:8b:2d:97:2b: 44:bb:b8:1b:11:3a:fe:4b:3f:b4:86:2b:1b:05:14:23:ce:81: ae:0c:6d:d2:47:34:e8:9a:87:3c:5e:57:51:10:89:5e:35:9b: d5:d0:35:6d:4d:be:80:cc:65:20:1e:2c:97:66:ee:58:08:01: a1:a9:0d:13:71:13:01:bb:e2:c4:16:03:31:3f:88:fb:b7:36: 7b:5e:89:ef:72:22:a4:43:fb:49:25:1c:30:f0:ad:61:13:a3: 37:00:a9:30:46:32:3d:d5:41:52:ea:a7:03:e7:ac:c6:bf:d2: a4:57:be:ba:50:6f:97:dc:bd:fe:85:5e:24:32:4c:12:e3:48: 8c:e4:44:97:84:03:5e:50:2e:1d:50:28:af:30:a7:11:31:5d: 5b:c6:d4:68:f0:99:fa:1c:37:c0:da:d8:6a:05:c9:91:ee:ba: 42:db:28:7a:7d:7d:e1:d5:e0:76:cc:10:12:9e:bc:c1:cf:42: 21:98:91:98:3d:df:00:87:43:87:d7:e8:98:e8:9d:e0:24:e4: d3:f6:76:37:c6:5b:04:82:17:62:b4:2a:16:84:31:a5:4b:7d: 2c:3b:37:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0MrBi/uiPB5tB3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM5OTEzODItMjU2Yy00MWM3LTllOTctNzgzZDIzYTIy YmYyMB4XDTI1MDgyMzE3MDAwM1oXDTI1MDgyNjE3MDAwMFowLzEtMCsGA1UEAxMk Zjk1NzBmYmMtY2VlNC00MzBkLWExOGEtNjFiMzgxYTg1OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8ZK9mvfx8fOvIeF7rLQSY2nY8VJEI3SsOQ7 kk9elnxcrtv7TuhOi8Tce0OHUe+/Yqn62FUr/7XiGpSVQ0cLDNCJCQHSJEP4qX9E 1IiGuazI5Y/lRwm/NaalbSpSJCbln8re6LnCadN3s3yo5wBCRIHLyjLDxFwg3QzE jc585lJL2TRKlxcxur24tJ/TlI3l7FvcNA3WSxNaIXX+yOkPKJvBosDL+usU2xHB O37c3sYFtAB39pt2SnIJ3ykEnLXWB9ZJtEUnw5QWuRTbcC5vGyg5vmyjYvJ4pJ2Q uWV9lgd2xxTdiqXxEjEimWuMEAg0HwX3/D1/GZIZipfDJyftXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIn0kmQVF49hcxkw6MuP8eq7lL2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82Mzk5 MTM4Mi0yNTZjLTQxYzctOWU5Ny03ODNkMjNhMjJiZjIvNjM5OTEzODItMjU2Yy00 MWM3LTllOTctNzgzZDIzYTIyYmYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjM5OTEzODItMjU2Yy00MWM3LTll OTctNzgzZDIzYTIyYmYyLzYzOTkxMzgyLTI1NmMtNDFjNy05ZTk3LTc4M2QyM2Ey MmJmMi5jcmwwHwYDVR0jBBgwFoAUd9g7EtjN3fXdpBFCo8jnZPQhGF0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82Mzk5MTM4Mi0yNTZjLTQxYzctOWU5Ny03ODNk MjNhMjJiZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJrU5ls0dkZQCatxJVaJ5i nKKyzbobNf5e5vot37rE4YstlytEu7gbETr+Sz+0hisbBRQjzoGuDG3SRzTomoc8 XldREIleNZvV0DVtTb6AzGUgHiyXZu5YCAGhqQ0TcRMBu+LEFgMxP4j7tzZ7Xonv ciKkQ/tJJRww8K1hE6M3AKkwRjI91UFS6qcD56zGv9KkV766UG+X3L3+hV4kMkwS 40iM5ESXhANeUC4dUCivMKcRMV1bxtRo8Jn6HDfA2thqBcmR7rpC2yh6fX3h1eB2 zBASnrzBz0IhmJGYPd8Ah0OH1+iY6J3gJOTT9nY3xlsEghditCoWhDGlS30sOzeF -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:36 2025 by rpki-client