$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft (raw, json) Hash identifier: B2my6JU688e/eovE4itE2WN/UGfIen0PIdDkxeTNMkA= Subject key identifier: FB:5D:29:63:F2:1C:20:9E:3A:DD:B3:CF:46:20:00:E2:57:A1:A3:1D Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Certificate serial: 010D0C9F4328584AF4507D55C417608E2B53EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft Manifest number: 010D0C9F4328584A17DA3FA749DC24C8808F3011 Signing time: Sat 23 Aug 2025 18:00:08 +0000 Manifest this update: Sat 23 Aug 2025 18:00:08 +0000 Manifest next update: Mon 25 Aug 2025 18:00:00 +0000 Files and hashes: 1: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (hash: bnock/DxAIxmenno1m2eyIHPxFGcjPV124LK3B6c0Z4=) 2: c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl (hash: YREUe0GxjvDRnM04S2lcAP2cwqSKN21MarOcsRevhQk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:50:7d:55:c4:17:60:8e:2b:53:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Validity Not Before: Aug 23 18:00:08 2025 GMT Not After : Aug 25 18:00:00 2025 GMT Subject: CN=a6107f11-9974-4079-b7e1-c36cbd065c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:90:8e:4f:a6:07:48:7f:b8:62:90:43:8b: 7a:a6:5e:89:45:97:84:c2:12:b3:93:65:80:c3:c3: bc:73:56:aa:9e:c1:55:1a:d0:0c:f0:7a:48:ba:2d: bc:d7:f6:5e:fa:c8:04:d7:bf:32:23:6e:c3:ba:42: 9c:d1:92:a4:b0:4b:7e:a0:69:7b:02:05:f3:7a:8d: c7:7a:0a:ee:dd:05:aa:e7:f9:5e:48:13:ce:ba:99: f2:da:c8:ff:61:e8:5b:96:48:93:b5:4d:02:c2:a5: 8f:44:fd:4b:8e:03:8a:52:4a:60:75:da:d3:3b:c8: 0f:36:85:bd:fe:07:7f:a5:ac:96:c3:5a:4d:bb:78: b5:bb:ea:cc:1b:ea:94:ad:ad:04:21:ba:95:c2:61: 48:3c:a6:9d:76:e7:dd:c1:82:f6:d2:27:6b:ec:56: 0a:eb:cc:d6:2f:4c:b8:d1:46:3e:d3:c7:a4:97:ba: d1:b8:96:94:9c:13:66:5f:c2:6d:77:1a:b7:0c:62: fb:e5:1d:5a:21:1f:fc:f8:36:6e:b8:b2:c7:2c:47: 49:fd:b3:96:f9:11:24:8c:36:49:9f:f7:1d:f6:08: aa:14:c6:1c:28:e0:1f:eb:cc:de:68:90:27:af:7c: 1d:6b:52:e3:9c:ce:a9:d0:4e:89:cb:ed:31:ad:88: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:29:63:F2:1C:20:9E:3A:DD:B3:CF:46:20:00:E2:57:A1:A3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl X509v3 Authority Key Identifier: keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b3:42:59:2d:6e:a6:be:ee:a0:9a:61:43:0d:de:46:97:9f: c8:82:ce:14:17:8c:f7:45:76:e8:30:12:7d:53:4b:6f:df:96: 34:75:e8:cc:b5:b8:32:4d:47:83:b7:5e:f4:8b:bd:88:71:6c: 20:2a:f1:4a:b1:96:4b:34:57:5d:17:7e:df:d4:6b:d2:18:86: c0:c3:86:25:ef:91:77:a1:11:0b:b6:a5:13:81:2b:7b:74:b1: 9b:79:71:0e:38:d5:a0:be:6a:7b:6c:3b:70:1f:d6:fc:64:dc: c2:58:26:4e:74:4b:03:8f:95:06:ae:53:64:82:4e:47:c2:69: 04:5e:a3:32:60:1b:50:4f:0b:5b:2e:87:f0:2b:90:41:30:eb: 7f:f7:bc:dc:b4:33:ae:d5:bd:ec:ad:ac:38:45:e0:21:5d:d9: b4:a9:cc:0b:bc:89:85:b9:d3:88:18:b1:6f:c8:a7:04:1b:c5: 29:58:55:05:22:ad:e9:81:8e:42:ae:8e:1f:0f:32:e9:68:41: 31:4c:52:c1:87:66:b3:9d:f2:ab:7a:3d:70:4d:72:54:80:85: e4:72:dd:75:43:8c:fa:57:c3:6e:4c:63:8d:fb:fd:ba:b1:55: 92:c3:8f:f1:59:31:45:8c:29:2a:46:71:bd:13:00:e7:ab:fd: 50:d9:46:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0UH1VxBdgjitT7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0 MzVlMB4XDTI1MDgyMzE4MDAwOFoXDTI1MDgyNTE4MDAwMFowLzEtMCsGA1UEAxMk YTYxMDdmMTEtOTk3NC00MDc5LWI3ZTEtYzM2Y2JkMDY1YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH2Qjk+mB0h/uGKQQ4t6pl6JRZeEwhKzk2WA w8O8c1aqnsFVGtAM8HpIui281/Ze+sgE178yI27DukKc0ZKksEt+oGl7AgXzeo3H egru3QWq5/leSBPOupny2sj/YehblkiTtU0CwqWPRP1LjgOKUkpgddrTO8gPNoW9 /gd/payWw1pNu3i1u+rMG+qUra0EIbqVwmFIPKaddufdwYL20idr7FYK68zWL0y4 0UY+08ekl7rRuJaUnBNmX8Jtdxq3DGL75R1aIR/8+DZuuLLHLEdJ/bOW+REkjDZJ n/cd9giqFMYcKOAf68zeaJAnr3wda1LjnM6p0E6Jy+0xrYgKTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPtdKWPyHCCeOt2zz0YgAOJXoaMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jN2Fl YTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvYzdhZWE3ZTItZTM4MC00 NTU5LTlmZjMtNGZjNzEzOGM0MzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzdhZWE3ZTItZTM4MC00NTU5LTlm ZjMtNGZjNzEzOGM0MzVlL2M3YWVhN2UyLWUzODAtNDU1OS05ZmYzLTRmYzcxMzhj NDM1ZS5jcmwwHwYDVR0jBBgwFoAUAueJuYYj4tMp8jV4mdgRxdPaCpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3 MTM4YzQzNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3s0JZLW6mvu6gmmFDDd5G l5/Igs4UF4z3RXboMBJ9U0tv35Y0dejMtbgyTUeDt170i72IcWwgKvFKsZZLNFdd F37f1GvSGIbAw4Yl75F3oRELtqUTgSt7dLGbeXEOONWgvmp7bDtwH9b8ZNzCWCZO dEsDj5UGrlNkgk5HwmkEXqMyYBtQTwtbLofwK5BBMOt/97zctDOu1b3sraw4ReAh Xdm0qcwLvImFudOIGLFvyKcEG8UpWFUFIq3pgY5Cro4fDzLpaEExTFLBh2aznfKr ej1wTXJUgIXkct11Q4z6V8NuTGON+/26sVWSw4/xWTFFjCkqRnG9EwDnq/1Q2UaX -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:22 2025 by rpki-client