$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft File: b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft (raw, json) Hash identifier: QKp9+/ZVuJbJ/MqFnnEHhqF0NVrfJ3iWKk0lQowuRXI= Subject key identifier: 6F:80:7E:22:09:4B:96:49:B2:54:28:CB:C0:01:27:17:FD:FE:5C:C1 Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B Certificate issuer: /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d Certificate serial: 010D0C9F4328584AF326AAAE850B6049417A1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft Manifest number: 010D0C9F43285849454543919A61720C4440F79F Signing time: Sat 23 Aug 2025 08:00:03 +0000 Manifest this update: Sat 23 Aug 2025 08:00:03 +0000 Manifest next update: Tue 26 Aug 2025 08:00:00 +0000 Files and hashes: 1: 0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa (hash: 2yxSQTDfv8ROtVRUFR8bkDM+tguvr6IwlsYPQsflWMU=) 2: 4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa (hash: IvTzrvVjVd2jaxTiXs5/VkE7qTygREtLyzJECPBJOT0=) 3: b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl (hash: gQZLOHHd8Cy6EfLIXOgmFeEK63IpRE6BVCj3EqCFubY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:26:aa:ae:85:0b:60:49:41:7a:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d Validity Not Before: Aug 23 08:00:03 2025 GMT Not After : Aug 26 08:00:00 2025 GMT Subject: CN=15e6dfe6-efb7-4c3b-b98e-36f6ae56178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:49:a7:0f:7a:61:2b:e8:97:77:14:01:c5:02: 6f:e2:24:be:5b:d1:43:50:ca:56:db:6a:ab:13:a9: 41:d7:8d:6c:36:42:d5:8f:a7:43:bf:a0:eb:b3:b8: ec:fd:35:db:50:9c:49:c3:33:9c:b0:f0:75:e5:25: 9e:b2:ae:b7:69:a1:a3:16:f3:3e:56:ac:39:61:75: 13:0e:94:c9:d8:91:20:94:8a:5a:2f:61:d3:2e:8f: 67:af:53:65:43:8a:c3:93:80:99:51:a5:53:a6:27: 01:c6:15:91:0c:87:49:dc:d7:f0:91:eb:9e:f1:5b: b8:9e:25:d2:19:31:a8:90:a8:a9:3a:6b:a0:eb:03: fd:67:aa:00:66:c6:e9:19:d6:54:c2:5b:a3:14:6c: ae:92:d9:e0:5f:31:59:9d:90:3a:7c:2a:d0:3c:f1: 0c:36:91:bd:40:28:3e:20:08:c7:72:23:96:db:6c: a8:2e:69:09:af:3c:e0:97:54:52:85:1d:f6:50:51: 20:68:77:c7:f0:0a:a6:af:fc:8c:c9:d7:90:76:fe: 0f:6f:52:6f:20:1d:9b:89:75:f2:a6:fe:72:a9:81: b4:0a:ad:dc:e0:ee:6f:8e:35:03:eb:0f:83:9e:3a: 59:e4:9e:86:b2:fd:23:65:51:ce:11:92:b5:23:da: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:7E:22:09:4B:96:49:B2:54:28:CB:C0:01:27:17:FD:FE:5C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl X509v3 Authority Key Identifier: keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:14:6c:7a:66:ef:c9:33:7a:10:77:2e:6a:ad:0d:1a:c9:7b: 85:ba:ad:c7:f0:51:16:e6:07:16:52:8f:90:8e:3f:cd:8b:24: 57:00:fb:a1:51:f4:e3:f2:0f:ff:06:30:5f:a5:80:7c:b1:3c: 50:e4:8d:07:c0:b6:a8:25:99:9f:16:d9:c7:75:5e:44:66:e7: 90:f4:e1:b4:e0:ae:49:40:42:49:7a:17:ed:be:a6:f1:8a:b9: e5:fc:cf:10:5e:c1:dd:95:6f:ef:89:7b:5c:5d:4d:ea:b8:9a: 29:ea:90:0f:1f:1b:17:4e:62:81:f6:66:95:3c:58:6f:64:7a: 83:33:60:e0:f0:fb:13:50:b7:4a:34:58:62:ff:c9:4c:71:55: a3:1e:e5:ff:91:1b:9c:41:da:93:31:11:3c:15:39:2a:ef:61: 1b:88:7c:0c:f3:a0:45:a5:f5:6e:1d:54:fd:29:e3:8a:e8:bf: de:cd:1f:cb:d7:56:db:95:48:9c:da:82:fc:b8:74:ff:b3:ba: 8c:3f:56:a0:cc:2f:ab:5a:1f:db:46:13:15:28:16:c2:b9:9e: 65:4c:2a:2c:79:ac:50:b1:24:54:51:5d:b8:db:84:39:a2:d6: ba:52:fe:f2:79:a5:ae:4f:cc:07:62:d3:9f:44:92:4b:a7:2a: 4f:68:8e:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzJqquhQtgSUF6E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmM2E4NTQtMzQ0Yi00OGU4LWE5ZmYtN2UxMjhkYmQy NjFkMB4XDTI1MDgyMzA4MDAwM1oXDTI1MDgyNjA4MDAwMFowLzEtMCsGA1UEAxMk MTVlNmRmZTYtZWZiNy00YzNiLWI5OGUtMzZmNmFlNTYxNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0mnD3phK+iXdxQBxQJv4iS+W9FDUMpW22qr E6lB141sNkLVj6dDv6Drs7js/TXbUJxJwzOcsPB15SWesq63aaGjFvM+Vqw5YXUT DpTJ2JEglIpaL2HTLo9nr1NlQ4rDk4CZUaVTpicBxhWRDIdJ3Nfwkeue8Vu4niXS GTGokKipOmug6wP9Z6oAZsbpGdZUwlujFGyuktngXzFZnZA6fCrQPPEMNpG9QCg+ IAjHciOW22yoLmkJrzzgl1RShR32UFEgaHfH8Aqmr/yMydeQdv4Pb1JvIB2biXXy pv5yqYG0Cq3c4O5vjjUD6w+DnjpZ5J6Gsv0jZVHOEZK1I9pYtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG+AfiIJS5ZJslQoy8ABJxf9/lzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYz YTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEyOGRiZDI2MWQvYjJmM2E4NTQtMzQ0Yi00 OGU4LWE5ZmYtN2UxMjhkYmQyNjFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjJmM2E4NTQtMzQ0Yi00OGU4LWE5 ZmYtN2UxMjhkYmQyNjFkL2IyZjNhODU0LTM0NGItNDhlOC1hOWZmLTdlMTI4ZGJk MjYxZC5jcmwwHwYDVR0jBBgwFoAUmRku8d6T6pl/7GwTuk7PbwXVyXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYzYTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEy OGRiZDI2MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPFGx6Zu/JM3oQdy5qrQ0a yXuFuq3H8FEW5gcWUo+Qjj/NiyRXAPuhUfTj8g//BjBfpYB8sTxQ5I0HwLaoJZmf FtnHdV5EZueQ9OG04K5JQEJJehftvqbxirnl/M8QXsHdlW/viXtcXU3quJop6pAP HxsXTmKB9maVPFhvZHqDM2Dg8PsTULdKNFhi/8lMcVWjHuX/kRucQdqTMRE8FTkq 72EbiHwM86BFpfVuHVT9KeOK6L/ezR/L11bblUic2oL8uHT/s7qMP1agzC+rWh/b RhMVKBbCuZ5lTCoseaxQsSRUUV2424Q5ota6Uv7yeaWuT8wHYtOfRJJLpypPaI4T -----END CERTIFICATE-----Generated at Sat Aug 23 20:09:23 2025 by rpki-client