$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: 7vdPWk42WG5Xm41hyuFLy6jR/ZYXmCrQFVh0b7XleDk= Subject key identifier: 9B:E4:7B:8E:20:80:F9:0C:62:81:EF:9A:5A:08:8C:5F:06:B6:4E:9E Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584AF2EB2694444EE425A690A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE426D Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: s27RMgOtehLFJFBtk5GxQsbOmoZE2nYKoYzsY7j6PH4=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: p3GSYkKLhYo2DPc7L4RtstzCiWzdfiHu27BRiyAVcj8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:26:94:44:4e:e4:25:a6:90:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=9af64615-d38d-4143-bc6b-9a9532219d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:c8:3f:5e:76:d5:7f:01:79:28:14:2d:1e: ee:55:3a:70:3a:15:bf:97:49:c7:fd:0b:10:dc:01: bf:c5:86:36:71:06:93:0d:1d:dc:8b:26:b0:34:ae: 8f:2a:1b:de:86:2d:14:ed:0c:71:35:b3:a6:aa:46: 8c:a1:8d:9f:bc:02:79:1c:36:17:59:dd:13:bb:4f: 6c:15:83:c1:4e:ed:ef:81:4e:69:62:b6:e8:37:72: 51:41:b9:4b:8f:a4:7d:06:fd:4f:c5:da:23:d2:74: e9:aa:57:7e:82:79:46:b9:d6:8b:a3:07:c3:05:aa: b4:07:b1:fc:39:97:2d:5b:f7:50:fa:9f:4e:1a:36: 41:37:a4:f4:6b:ce:b6:a5:9a:3b:bd:b1:8f:bc:e2: bd:20:82:d5:92:59:d0:d9:94:eb:db:52:3c:0b:c1: 4f:d9:51:c1:8d:bb:88:84:d7:f3:a1:ee:a2:ed:71: b8:56:00:1b:de:d4:c8:5c:fc:3d:17:53:b8:3b:7d: e3:79:ec:88:82:89:09:a3:50:b6:94:e5:11:6d:97: 2d:01:6e:27:97:89:9d:3c:fb:a0:4f:08:2e:df:f7: b1:8b:18:e6:0c:a3:d6:7c:3d:22:8c:11:b1:c7:e6: bc:fa:ae:99:3c:ab:9d:83:eb:47:88:86:47:b6:79: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E4:7B:8E:20:80:F9:0C:62:81:EF:9A:5A:08:8C:5F:06:B6:4E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:42:d7:45:21:59:80:91:0f:e2:9c:48:8e:01:48:5c:4e:c4: 4e:55:61:cd:ff:8e:5b:e6:4e:78:29:75:69:16:97:0e:1f:69: dd:60:13:02:da:ad:79:2b:42:36:15:e6:0c:c6:13:0c:ad:5a: 12:28:91:91:76:cb:53:0c:45:e4:99:a8:0a:f4:92:fe:fe:f2: 2f:e6:59:51:31:57:02:a8:03:aa:0b:ee:dd:f8:fe:4e:6e:ad: 8e:fe:69:73:d6:ec:92:cd:f0:b1:2f:01:63:53:5d:e2:61:95: 15:84:53:f9:a7:c6:f4:0d:82:eb:8e:91:72:1e:6a:a4:36:23: 1c:af:c6:d9:a2:a4:43:6b:01:63:6a:c0:ba:9b:4c:ed:d7:d6: ad:49:74:25:d7:62:43:60:49:ca:cd:5f:4f:a3:b2:88:a9:90: 7a:54:fd:31:a3:7f:85:a8:bb:1b:c5:af:d6:c5:1c:17:63:eb: 57:79:f3:2e:78:f7:1b:3a:8e:5f:52:f9:b7:8b:e5:be:95:98: 3b:d1:26:30:8e:4a:77:b3:d0:7f:5c:71:34:b7:20:c6:3c:7c: 48:f8:46:43:9b:3b:f9:cd:bf:59:71:9c:8d:60:26:f8:9d:c3: 15:bf:42:81:db:02:e4:d1:13:fd:77:ab:b4:4a:a0:d7:ab:6f: f7:93:9d:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yaURE7kJaaQpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk OWFmNjQ2MTUtZDM4ZC00MTQzLWJjNmItOWE5NTMyMjE5ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosvIP1521X8BeSgULR7uVTpwOhW/l0nH/QsQ 3AG/xYY2cQaTDR3ciyawNK6PKhvehi0U7QxxNbOmqkaMoY2fvAJ5HDYXWd0Tu09s FYPBTu3vgU5pYrboN3JRQblLj6R9Bv1Pxdoj0nTpqld+gnlGudaLowfDBaq0B7H8 OZctW/dQ+p9OGjZBN6T0a862pZo7vbGPvOK9IILVklnQ2ZTr21I8C8FP2VHBjbuI hNfzoe6i7XG4VgAb3tTIXPw9F1O4O33jeeyIgokJo1C2lOURbZctAW4nl4mdPPug Twgu3/exixjmDKPWfD0ijBGxx+a8+q6ZPKudg+tHiIZHtnlEJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJvke44ggPkMYoHvmloIjF8Gtk6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzQtdFIVmAkQ/inEiOAUhc TsROVWHN/45b5k54KXVpFpcOH2ndYBMC2q15K0I2FeYMxhMMrVoSKJGRdstTDEXk magK9JL+/vIv5llRMVcCqAOqC+7d+P5Obq2O/mlz1uySzfCxLwFjU13iYZUVhFP5 p8b0DYLrjpFyHmqkNiMcr8bZoqRDawFjasC6m0zt19atSXQl12JDYEnKzV9Po7KI qZB6VP0xo3+FqLsbxa/WxRwXY+tXefMuePcbOo5fUvm3i+W+lZg70SYwjkp3s9B/ XHE0tyDGPHxI+EZDmzv5zb9ZcZyNYCb4ncMVv0KB2wLk0RP9d6u0SqDXq2/3k53p -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:14 2025 by rpki-client