$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: XbM0x8+JBy5A+2WlRDFaqvmGXejNZ82uprI0439rliM= Subject key identifier: EF:1E:C8:D0:BC:F8:E9:F5:F4:19:D8:5D:86:6B:52:E7:9F:32:B0:44 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584AF4C79CE37493526ACFFA9DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EDF52 Signing time: Sat 23 Aug 2025 22:00:08 +0000 Manifest this update: Sat 23 Aug 2025 22:00:08 +0000 Manifest next update: Mon 25 Aug 2025 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: CkJsmEfmwE31JGajD2RSRQtkvtjdmT0UWMfGIuIXhQU=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: 0+DC6OJHd6D9xWMAYpgnwV7pxJMx2GkVfS/SaD2xwso=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:c7:9c:e3:74:93:52:6a:cf:fa:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Aug 23 22:00:08 2025 GMT Not After : Aug 25 22:00:00 2025 GMT Subject: CN=ad83e77f-a528-43eb-bd76-c24b2ff36b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:e5:51:55:a9:be:fa:31:a2:31:ca:b2:f8: 70:fc:f0:93:5b:92:fb:c6:46:de:15:d0:27:86:2b: 0a:cf:19:3b:bf:86:00:2c:b0:7f:c7:cb:b5:d7:b1: e0:b5:42:97:3a:6a:bc:c4:3b:4e:18:ec:fb:96:80: 19:c5:02:6f:8b:ed:74:53:64:ad:68:3a:f3:61:47: 27:f5:56:fb:0e:f8:61:9c:17:36:65:34:13:e8:2b: cd:95:27:b9:c9:1e:c7:72:32:bd:a8:6c:1d:36:6c: 52:6f:cf:81:e5:8a:f0:93:76:a7:fc:f1:ba:b7:3f: 99:37:c4:04:6b:3d:52:94:e9:10:4e:d8:6c:69:9c: 5f:a3:7c:f3:35:41:67:fe:13:98:ef:50:f1:3f:3e: 88:08:f5:a7:1d:94:26:f1:68:a0:e4:40:01:3b:bf: bf:01:39:6f:ef:e0:bf:f1:c2:4e:37:12:04:16:72: 85:b3:3e:3b:65:9d:3c:8a:77:d3:b4:2e:fb:9f:ef: 63:46:d4:4e:d8:ae:5b:c1:b5:a3:89:9f:ea:f2:bf: 61:09:72:ca:e1:7b:c4:69:ce:81:0d:93:be:89:5b: 75:36:07:3b:d0:4e:71:63:3b:be:0a:10:b6:b1:e2: 94:a1:10:57:e4:d6:e4:f2:9e:6a:64:bd:f9:49:f9: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:C8:D0:BC:F8:E9:F5:F4:19:D8:5D:86:6B:52:E7:9F:32:B0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6d:91:92:d7:21:9d:d0:76:1c:de:52:1a:30:a3:f6:a6:06: 89:a8:19:3d:8e:70:36:a5:fe:c2:96:70:f6:da:df:06:0e:7d: 54:45:5d:fb:e2:5c:76:06:58:9a:61:3a:40:93:20:c1:ab:c1: 12:cc:c6:f3:4b:a4:95:da:74:bb:39:ed:9b:8a:af:86:16:f3: 15:b6:ba:28:47:0b:b6:5d:44:68:16:54:d1:d1:be:0f:d6:40: 4f:e3:a1:63:fa:21:4c:63:34:07:ba:45:a1:52:0f:01:f9:ce: 26:e5:97:15:ef:32:43:9c:98:e2:ee:9b:cd:d5:a5:30:5a:e1: 7e:ff:70:b2:07:8d:5d:9c:36:00:42:fe:21:e0:27:69:49:d4: 50:98:78:e1:08:ea:24:b9:b9:54:f6:95:e3:46:97:ba:27:f0: 25:58:6f:61:68:34:78:6c:d4:50:53:ae:3b:aa:9d:d8:f9:46: 63:15:7c:1d:ce:6d:25:6a:5d:b3:48:22:4f:85:e0:e6:2e:6b: 0e:bf:9f:2e:71:ec:c4:f8:8e:47:0b:c3:90:fd:16:df:57:96: 45:8f:85:c3:f5:fc:c6:52:98:f3:2d:27:0f:43:c4:df:4c:1b: 9f:7a:45:c3:5d:44:38:28:13:58:d2:3d:b4:97:ba:42:a7:a5: 56:34:de:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0x5zjdJNSas/6ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MDgyMzIyMDAwOFoXDTI1MDgyNTIyMDAwMFowLzEtMCsGA1UEAxMk YWQ4M2U3N2YtYTUyOC00M2ViLWJkNzYtYzI0YjJmZjM2YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOvlUVWpvvoxojHKsvhw/PCTW5L7xkbeFdAn hisKzxk7v4YALLB/x8u117HgtUKXOmq8xDtOGOz7loAZxQJvi+10U2StaDrzYUcn 9Vb7DvhhnBc2ZTQT6CvNlSe5yR7HcjK9qGwdNmxSb8+B5Yrwk3an/PG6tz+ZN8QE az1SlOkQTthsaZxfo3zzNUFn/hOY71DxPz6ICPWnHZQm8Wig5EABO7+/ATlv7+C/ 8cJONxIEFnKFsz47ZZ08infTtC77n+9jRtRO2K5bwbWjiZ/q8r9hCXLK4XvEac6B DZO+iVt1Ngc70E5xYzu+ChC2seKUoRBX5Nbk8p5qZL35SfkFpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO8eyNC8+On19BnYXYZrUuefMrBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjbZGS1yGd0HYc3lIaMKP2 pgaJqBk9jnA2pf7ClnD22t8GDn1URV374lx2BliaYTpAkyDBq8ESzMbzS6SV2nS7 Oe2biq+GFvMVtrooRwu2XURoFlTR0b4P1kBP46Fj+iFMYzQHukWhUg8B+c4m5ZcV 7zJDnJji7pvN1aUwWuF+/3CyB41dnDYAQv4h4CdpSdRQmHjhCOokublU9pXjRpe6 J/AlWG9haDR4bNRQU647qp3Y+UZjFXwdzm0lal2zSCJPheDmLmsOv58ucezE+I5H C8OQ/RbfV5ZFj4XD9fzGUpjzLScPQ8TfTBufekXDXUQ4KBNY0j20l7pCp6VWNN77 -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:52 2025 by rpki-client