$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft (raw, json) Hash identifier: uPi0d2i/06Un7oddTgR0Qq8moBTK8ZhF0OJOVGEHbc0= Subject key identifier: F7:B1:74:43:98:27:C9:BA:34:3E:48:7E:AD:6F:A0:35:1F:C7:B4:51 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584AF414EF48B60C759E97FCFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft Manifest number: 010D0C9F43285847FF6DB89C0ACD762A7E013B15 Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Mon 25 Aug 2025 16:00:00 +0000 Files and hashes: 1: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl (hash: x0la4nnq6rn5vx7b+Ob7fdpQbNpZECnrjOQF4IqT+EQ=) 2: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (hash: j54xa0fhBWBRwMBhQ9HGUwL0VWBzA13FaZD5cCNyUnU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:ef:48:b6:0c:75:9e:97:fc:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 25 16:00:00 2025 GMT Subject: CN=4d2dab99-bfae-4a3f-a496-d040f9e9a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:38:62:03:6e:79:a8:a9:35:50:0b:7a:7e: ca:ac:c5:e5:87:91:4f:ab:56:8c:6f:60:13:0e:ce: 0e:ba:bb:23:78:3c:d5:14:d5:1c:c6:36:8b:3f:b8: b1:17:80:18:37:20:12:0e:9e:e5:80:49:33:cb:1f: 67:a1:99:ed:41:fd:3d:6e:84:6d:31:d3:86:63:36: 46:5e:fb:1c:52:df:35:2c:f9:7c:88:f2:8c:76:15: ae:7d:48:6c:33:bd:a4:80:a0:32:6b:46:46:64:b7: e5:0d:69:2f:54:af:f5:7a:d9:ac:1c:ff:41:4c:1b: 0e:39:60:1e:8a:0f:59:f3:81:ce:ea:bc:ca:fe:f0: 7a:a2:b5:82:99:2a:27:c6:29:98:3a:74:2b:72:af: eb:62:60:7b:77:de:95:6e:8e:cb:4c:64:6c:fb:4f: fd:be:68:51:20:b2:b6:e5:c5:d5:c8:3b:f5:ac:f9: a5:7f:67:19:ea:41:ff:2e:d6:50:66:3e:6a:d4:f1: 9b:dd:ff:bf:46:23:a4:8a:60:86:4e:1c:3f:2d:04: 77:e7:60:9d:7e:fd:d6:5c:ec:1e:c2:09:24:b7:b0: 69:69:22:75:af:a3:e4:41:a5:ef:44:a8:85:0f:a2: 2b:8c:13:06:d0:e6:fa:2a:90:a5:13:76:12:e4:15: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:74:43:98:27:C9:BA:34:3E:48:7E:AD:6F:A0:35:1F:C7:B4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:70:5d:12:60:a4:75:ce:04:82:96:3c:c7:5b:c6:07:63:75: 53:74:b2:33:a1:44:fd:f1:04:f2:00:f2:9e:3e:3d:84:d7:ea: 26:88:bb:ea:03:fa:d9:e1:6a:90:10:1a:53:e1:9c:d0:70:f9: b0:12:64:4e:bc:2e:22:db:13:56:00:b6:a8:b1:77:3e:33:b1: d7:6d:04:85:9d:95:51:f6:f1:3e:a9:92:fc:7a:d9:ed:fc:4e: 3d:b1:62:23:88:6f:7e:1c:36:7b:6f:e7:18:c3:28:ea:c7:16: 59:5d:a8:49:63:c8:19:ba:d9:a6:f2:76:19:86:26:94:3f:34: fd:8a:f4:32:0a:37:b7:44:df:ac:43:a8:f0:36:b9:f9:04:d3: 48:00:84:ba:75:ad:af:5b:2a:50:d5:c7:16:1b:77:7c:16:3b: 02:c6:0e:e7:1f:7d:bb:c1:7a:01:cc:9b:ef:72:3a:4b:03:07: 26:aa:b2:91:09:14:08:b9:c4:ce:f8:b1:04:46:c6:40:e0:b1: 77:93:fc:40:58:3d:0f:17:a4:16:33:26:1c:1c:12:f0:0f:3b: 41:5f:12:dc:16:de:bf:84:c1:7b:19:76:92:5b:69:37:6a:f8: a9:98:16:7b:02:2d:02:b1:91:12:e8:18:93:86:1f:37:48:37: 0a:ad:d7:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FO9Itgx1npf8/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNTE2MDAwMFowLzEtMCsGA1UEAxMk NGQyZGFiOTktYmZhZS00YTNmLWE0OTYtZDA0MGY5ZTlhNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ro4YgNueaipNVALen7KrMXlh5FPq1aMb2AT Ds4OursjeDzVFNUcxjaLP7ixF4AYNyASDp7lgEkzyx9noZntQf09boRtMdOGYzZG XvscUt81LPl8iPKMdhWufUhsM72kgKAya0ZGZLflDWkvVK/1etmsHP9BTBsOOWAe ig9Z84HO6rzK/vB6orWCmSonximYOnQrcq/rYmB7d96Vbo7LTGRs+0/9vmhRILK2 5cXVyDv1rPmlf2cZ6kH/LtZQZj5q1PGb3f+/RiOkimCGThw/LQR352Cdfv3WXOwe wgkkt7BpaSJ1r6PkQaXvRKiFD6IrjBMG0Ob6KpClE3YS5BXbQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPexdEOYJ8m6ND5Ifq1voDUfx7RRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvOWY3NWU4ZDctZTQ1Zi00 NzY3LTg5MzktYTJjNTM5NGMxZTdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtcF0SYKR1zgSCljzHW8YH Y3VTdLIzoUT98QTyAPKePj2E1+omiLvqA/rZ4WqQEBpT4ZzQcPmwEmROvC4i2xNW ALaosXc+M7HXbQSFnZVR9vE+qZL8etnt/E49sWIjiG9+HDZ7b+cYwyjqxxZZXahJ Y8gZutmm8nYZhiaUPzT9ivQyCje3RN+sQ6jwNrn5BNNIAIS6da2vWypQ1ccWG3d8 FjsCxg7nH327wXoBzJvvcjpLAwcmqrKRCRQIucTO+LEERsZA4LF3k/xAWD0PF6QW MyYcHBLwDztBXxLcFt6/hMF7GXaSW2k3avipmBZ7Ai0CsZES6BiThh83SDcKrdem -----END CERTIFICATE-----Generated at Sat Aug 23 18:46:34 2025 by rpki-client