$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft File: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft (raw, json) Hash identifier: Cj2xsHVS902GVwE+MbaICkP4P5GRjtiS38TMikl8Z6E= Subject key identifier: 65:D5:78:21:D5:48:0B:FC:02:20:3F:A0:CE:1A:42:C1:50:69:DB:83 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584AF3F72767B4E7104D2225AB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft Manifest number: 010D0C9F4328584A1A40BB5ED5171D328F14E04F Signing time: Sat 23 Aug 2025 15:00:08 +0000 Manifest this update: Sat 23 Aug 2025 15:00:08 +0000 Manifest next update: Tue 26 Aug 2025 15:00:00 +0000 Files and hashes: 1: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (hash: yt5EEkiHe7wV43zWi99nICm6dcHRc8bslv4Gwb8Hgqg=) 2: 8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl (hash: mVLlbOwWY8J8ATMcn6ziLnO46c5gCTlcIG2t0tzDXzQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:f7:27:67:b4:e7:10:4d:22:25:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Aug 23 15:00:08 2025 GMT Not After : Aug 26 15:00:00 2025 GMT Subject: CN=f5093b35-8082-416c-80c0-7a0353d9f6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:9e:c0:46:4d:08:da:67:44:bd:ff:4a:bc: d7:cc:ce:e2:80:a2:d1:99:99:a4:93:a7:fb:b9:c3: b1:c5:ca:c3:b4:8b:88:bd:55:57:2e:05:cb:56:ac: dc:a0:40:4d:84:d2:de:d6:ab:a3:ab:5f:dc:1f:83: dd:2f:df:b8:da:24:28:4f:d2:0d:d1:e7:e7:35:db: 5d:3c:09:06:94:e6:b9:ae:c3:e0:2f:77:e0:4f:81: 47:0d:7a:2d:97:a1:bc:9e:80:8d:58:51:ee:f7:f4: 1e:7b:dd:05:59:13:89:30:78:60:bc:ee:9b:31:b6: 04:21:4f:24:1a:15:54:fd:1d:b2:34:93:d3:89:bf: a7:c1:bd:c5:5e:75:28:98:63:68:5d:c3:84:71:1d: a5:52:c7:49:af:12:24:a4:09:74:7c:35:92:fe:8d: 02:77:f8:68:d3:fd:d8:f8:aa:64:60:fd:3d:dd:b8: 02:a6:3a:69:19:fb:d3:e3:b7:bc:a9:8b:61:98:da: c8:63:92:dd:14:dd:08:ee:58:cb:3b:f2:8d:ef:97: c2:69:e9:9f:fe:ec:78:78:6a:c3:af:91:a1:d7:94: 08:25:07:bc:01:5f:e5:2d:89:d8:f7:1f:8f:20:1f: 89:c3:e5:73:b6:2a:64:b8:1c:e8:66:a2:d4:dd:56: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:78:21:D5:48:0B:FC:02:20:3F:A0:CE:1A:42:C1:50:69:DB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ed:0f:26:40:5e:2a:d3:d7:da:54:4e:18:14:35:ff:98:67: d6:a9:53:58:a6:bc:36:d4:d5:ff:1a:9f:14:81:91:76:ce:94: 5e:85:33:56:77:ca:07:b7:82:e5:33:56:f6:b5:c2:e1:93:e0: e9:18:49:9f:27:b2:6d:a7:81:a0:cf:bc:fb:ef:78:56:e4:82: 0f:e1:73:97:1f:a6:c6:28:d9:05:25:32:db:74:3f:bc:a5:59: 58:1e:c1:45:7e:d7:d1:e3:25:80:e5:b3:37:89:16:f4:87:29: fc:9a:99:c7:2e:52:31:93:ff:c4:a8:44:49:74:6c:40:69:f7: d3:4e:ce:25:d0:e3:c6:27:1f:ab:19:b1:85:67:fa:bd:e8:94: fb:6b:fe:be:a6:2b:71:36:ed:00:43:95:0c:98:63:00:e2:dd: 79:b7:eb:0b:31:dd:8c:17:fe:ab:ae:24:db:1a:3d:68:b0:f4: d6:ed:d4:80:85:35:0c:40:d2:96:67:e6:b3:5c:c5:03:4c:07: 62:ee:ba:59:41:e1:37:87:23:8b:7e:69:13:03:fe:45:10:85: 58:c2:81:a7:12:a4:84:cc:d0:fa:6a:4b:99:90:76:04:0c:54: 67:72:b4:a4:e8:db:65:45:48:11:4e:50:e4:23:bf:db:32:c9: f6:d1:f4:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz9ydntOcQTSIlq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MDgyMzE1MDAwOFoXDTI1MDgyNjE1MDAwMFowLzEtMCsGA1UEAxMk ZjUwOTNiMzUtODA4Mi00MTZjLTgwYzAtN2EwMzUzZDlmNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTuewEZNCNpnRL3/SrzXzM7igKLRmZmkk6f7 ucOxxcrDtIuIvVVXLgXLVqzcoEBNhNLe1qujq1/cH4PdL9+42iQoT9IN0efnNdtd PAkGlOa5rsPgL3fgT4FHDXotl6G8noCNWFHu9/Qee90FWROJMHhgvO6bMbYEIU8k GhVU/R2yNJPTib+nwb3FXnUomGNoXcOEcR2lUsdJrxIkpAl0fDWS/o0Cd/ho0/3Y +KpkYP093bgCpjppGfvT47e8qYthmNrIY5LdFN0I7ljLO/KN75fCaemf/ux4eGrD r5Gh15QIJQe8AV/lLYnY9x+PIB+Jw+VztipkuBzoZqLU3VYGLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGXVeCHVSAv8AiA/oM4aQsFQaduDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvOGYxZDVlY2QtODc3MC00 NmEyLWI3YzgtMjUxYjU2NGI5ZTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi7Q8mQF4q09faVE4YFDX/ mGfWqVNYprw21NX/Gp8UgZF2zpRehTNWd8oHt4LlM1b2tcLhk+DpGEmfJ7Jtp4Gg z7z773hW5IIP4XOXH6bGKNkFJTLbdD+8pVlYHsFFftfR4yWA5bM3iRb0hyn8mpnH LlIxk//EqERJdGxAaffTTs4l0OPGJx+rGbGFZ/q96JT7a/6+pitxNu0AQ5UMmGMA 4t15t+sLMd2MF/6rriTbGj1osPTW7dSAhTUMQNKWZ+azXMUDTAdi7rpZQeE3hyOL fmkTA/5FEIVYwoGnEqSEzND6akuZkHYEDFRncrSk6NtlRUgRTlDkI7/bMsn20fSc -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:25 2025 by rpki-client