$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft File: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft (raw, json) Hash identifier: nshZYqwOdNVd1Bb6sWg5hJOQ47xTs+3hFPeVjuh4uGY= Subject key identifier: 66:37:6B:53:15:47:5D:27:EC:63:35:D7:53:BF:6E:A6:29:1F:8A:0F Authority key identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 Certificate issuer: /CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Certificate serial: 010D0C9F4328584AF3F72B19AC5E5D4D0F2E22C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft Manifest number: 010D0C9F4328584A8CC4A9824E40400F2C2AA206 Signing time: Sat 23 Aug 2025 15:00:08 +0000 Manifest this update: Sat 23 Aug 2025 15:00:08 +0000 Manifest next update: Mon 25 Aug 2025 15:00:00 +0000 Files and hashes: 1: 06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa (hash: pcc+lj0wfFqHugPL5dfh2ZfWrKchKwuyOlsS1+lFM2o=) 2: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl (hash: tstxXJmRdmORJIXbhgW+gR9DLgRiMjFBU4RUPgvwGtc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:f7:2b:19:ac:5e:5d:4d:0f:2e:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Validity Not Before: Aug 23 15:00:08 2025 GMT Not After : Aug 25 15:00:00 2025 GMT Subject: CN=b543d96d-a72a-4219-9939-cc87554e932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:23:e2:ae:a5:d1:41:92:80:d6:a4:fe:85: 5e:38:5e:7b:2f:07:08:75:d0:b8:d9:f1:38:a3:2e: 30:1d:2d:af:11:5e:88:ad:f9:ed:35:d5:49:30:4c: e4:ff:d9:9e:e5:7e:a0:d8:be:ef:6c:59:d5:00:82: 04:84:ea:3c:d6:2c:22:74:f6:82:9c:7e:03:ac:05: ef:53:d0:1e:cc:2f:c4:b1:80:b0:5b:2e:92:a8:0c: 0f:75:ed:e9:9e:e7:ec:06:bd:17:bc:90:e7:cd:d8: c2:ed:94:5e:37:56:9a:bc:48:4e:da:ed:04:c7:38: 80:da:a9:14:99:dd:84:2b:b4:9b:f2:d2:25:77:96: 66:f1:fc:01:03:64:ba:07:71:81:35:42:ba:19:e9: 5f:07:6c:b3:0d:8f:93:9a:9d:c9:8a:27:9c:d5:0a: 77:68:05:8d:1a:52:2a:29:8a:03:02:4d:fc:4b:b1: 7f:c1:3a:a8:6c:1d:3d:6e:2c:af:23:fd:24:00:49: 31:3a:76:e7:11:61:58:01:b1:06:48:43:54:9b:ec: e4:14:5f:5d:28:bd:bd:1a:e6:41:be:37:d0:58:a9: 76:44:63:71:7b:d7:84:87:ba:4a:a8:9c:2e:ff:86: fd:58:fb:6d:82:24:91:f0:95:c2:70:66:70:51:7a: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:6B:53:15:47:5D:27:EC:63:35:D7:53:BF:6E:A6:29:1F:8A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl X509v3 Authority Key Identifier: keyid:0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d7:47:13:1f:ad:7d:f2:06:01:b2:cf:a6:4f:c8:a3:8c:28: 5a:6a:2f:44:53:fd:c1:23:73:48:46:8a:e4:91:55:ec:6d:0a: 61:48:a5:0c:05:40:5f:85:cd:5a:74:1e:ff:a1:a7:f6:40:06: 12:e7:7b:64:9a:91:2a:ef:cd:3d:bc:8b:cc:76:fa:e0:02:98: e6:b0:af:48:55:5c:6c:9b:49:bf:8d:05:f5:a8:e8:8f:b5:d7: 09:1e:1e:82:20:f3:52:7b:60:ee:21:62:fa:a4:eb:36:4c:a6: 34:be:9b:53:0d:51:2c:63:49:6d:98:a6:3b:63:83:68:a3:09: 2d:5b:2c:57:83:63:29:1a:ab:7d:4a:2a:d5:b8:dd:80:c5:24: da:9c:b0:45:6b:62:4d:60:27:80:f5:e1:52:64:59:b8:c5:04: b6:f9:f4:5b:27:70:fc:5f:ec:f0:9e:24:7e:7f:dc:d3:1f:30: 66:e2:44:9b:91:b2:dc:49:e1:ec:94:fa:5c:f4:c1:d5:e9:47: b3:b0:1a:5b:f3:79:75:16:3f:32:dd:f9:a9:c4:c5:8f:f1:96: 84:b1:59:44:4c:77:13:b3:f1:8d:5a:0e:18:27:06:8a:f3:cb: 96:98:1c:ee:a6:0e:94:5a:f7:45:e3:a1:52:97:54:f6:e4:b5: e1:ae:f5:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz9ysZrF5dTQ8uIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZhOTk0NTAtOTRiOC00YTBlLWJlNTMtOGNlN2Y4OGQ1 MWRiMB4XDTI1MDgyMzE1MDAwOFoXDTI1MDgyNTE1MDAwMFowLzEtMCsGA1UEAxMk YjU0M2Q5NmQtYTcyYS00MjE5LTk5MzktY2M4NzU1NGU5MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpkj4q6l0UGSgNak/oVeOF57LwcIddC42fE4 oy4wHS2vEV6IrfntNdVJMEzk/9me5X6g2L7vbFnVAIIEhOo81iwidPaCnH4DrAXv U9AezC/EsYCwWy6SqAwPde3pnufsBr0XvJDnzdjC7ZReN1aavEhO2u0ExziA2qkU md2EK7Sb8tIld5Zm8fwBA2S6B3GBNUK6GelfB2yzDY+Tmp3Jiiec1Qp3aAWNGlIq KYoDAk38S7F/wTqobB09biyvI/0kAEkxOnbnEWFYAbEGSENUm+zkFF9dKL29GuZB vjfQWKl2RGNxe9eEh7pKqJwu/4b9WPttgiSR8JXCcGZwUXq8+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGY3a1MVR10n7GM111O/bqYpH4oPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5 OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3Zjg4ZDUxZGIvMmZhOTk0NTAtOTRiOC00 YTBlLWJlNTMtOGNlN2Y4OGQ1MWRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmZhOTk0NTAtOTRiOC00YTBlLWJl NTMtOGNlN2Y4OGQ1MWRiLzJmYTk5NDUwLTk0YjgtNGEwZS1iZTUzLThjZTdmODhk NTFkYi5jcmwwHwYDVR0jBBgwFoAUDemiOjwZFwjumwlBKWaBcMviDzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZmE5OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3 Zjg4ZDUxZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs10cTH6198gYBss+mT8ij jChaai9EU/3BI3NIRorkkVXsbQphSKUMBUBfhc1adB7/oaf2QAYS53tkmpEq7809 vIvMdvrgApjmsK9IVVxsm0m/jQX1qOiPtdcJHh6CIPNSe2DuIWL6pOs2TKY0vptT DVEsY0ltmKY7Y4NoowktWyxXg2MpGqt9SirVuN2AxSTanLBFa2JNYCeA9eFSZFm4 xQS2+fRbJ3D8X+zwniR+f9zTHzBm4kSbkbLcSeHslPpc9MHV6UezsBpb83l1Fj8y 3fmpxMWP8ZaEsVlETHcTs/GNWg4YJwaK88uWmBzupg6UWvdF46FSl1T25LXhrvUs -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:26 2025 by rpki-client