$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft File: 58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft (raw, json) Hash identifier: Gxjkuva2GRpdvj8QnoDxb3sEMJothHNV6/UbLDOtqqA= Subject key identifier: 78:3A:24:18:C3:8A:1D:21:40:AF:9B:47:F2:5A:51:1F:1A:F6:FE:41 Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 Certificate issuer: /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Certificate serial: 010D0C9F4328584AF21AB2BB0CF08CDD9B7A7A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft Manifest number: 010D0C9F4328584ACB0A0D5EAC27B2442ECB6BF6 Signing time: Fri 22 Aug 2025 23:00:08 +0000 Manifest this update: Fri 22 Aug 2025 23:00:08 +0000 Manifest next update: Mon 25 Aug 2025 23:00:00 +0000 Files and hashes: 1: 44c389eb-4417-30cf-88b8-29537b859f68.roa (hash: ec98hqXuY7s82FkKUWmBic+s008mGpnwRbml2sbZhYY=) 2: 58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl (hash: 1StkpNp30l5EhUO/3iW7rpX6NEmIN2joeEnXBLZh/d0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:1a:b2:bb:0c:f0:8c:dd:9b:7a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Validity Not Before: Aug 22 23:00:08 2025 GMT Not After : Aug 25 23:00:00 2025 GMT Subject: CN=626d9d33-f927-4b05-bc61-c6a038b901b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:ac:91:42:f5:1d:9c:15:9c:aa:a5:84:e6: 7e:5e:d9:58:9e:7a:45:22:77:4e:37:43:58:a0:44: d4:96:b3:dc:9b:c6:b1:85:0c:57:3c:88:f5:df:46: 49:4c:1e:f6:52:bd:df:cc:21:6a:2e:90:d8:a6:a9: 99:b1:4c:3b:ac:d7:62:da:ae:49:9e:32:3e:10:7b: af:22:5b:a3:54:90:cf:1c:66:e2:f7:f0:bb:56:04: d6:c5:ce:7b:ce:e3:b7:57:f0:39:a4:42:e2:63:d0: 1a:eb:e1:63:1c:fc:a5:13:74:79:22:6e:23:91:c6: b7:b9:98:aa:45:0c:8c:76:d5:ed:4d:ba:7b:ce:d0: a9:fc:6f:f0:73:17:db:f0:06:3c:b9:ce:6a:77:78: 55:b5:97:fd:8f:7d:dc:9f:40:8f:a2:a3:15:1b:91: 8e:47:45:72:5f:0e:2c:97:48:c4:ff:57:b2:df:97: e9:d4:30:c5:3c:2c:52:d7:ad:8b:b5:cd:a2:c2:6a: 7c:48:8b:02:6a:1a:d4:d5:46:89:77:39:e4:e3:cc: 5e:17:71:a2:5a:2f:22:83:7f:55:8e:b5:27:7b:94: d6:70:4a:21:8c:e5:5c:f7:05:c4:d6:a9:57:0e:11: 7f:42:4d:01:a2:2b:a9:15:65:9e:b9:09:9c:d3:b6: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:24:18:C3:8A:1D:21:40:AF:9B:47:F2:5A:51:1F:1A:F6:FE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl X509v3 Authority Key Identifier: keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c1:53:b0:d7:02:bf:25:86:26:9c:c4:df:2b:af:48:dc:51: 07:a7:3e:05:62:73:cc:06:93:35:0f:9a:1e:a7:9b:f3:e3:58: 6c:07:70:ce:a0:cd:55:37:bc:29:db:20:c7:0e:00:87:8f:60: ba:72:5b:09:e9:95:65:56:e6:32:c9:bf:2b:12:be:76:fa:25: 7b:a3:6b:5e:e2:22:17:8c:1a:2f:f6:18:3d:da:1c:af:05:a1: c5:0b:54:7d:36:9b:c3:09:25:f0:d2:41:b9:b0:38:e7:be:4b: c9:29:4e:a3:3a:85:3f:cb:38:79:c8:cb:76:84:de:dc:78:35: 95:7c:92:a2:0f:d3:8e:db:cb:eb:04:dd:73:01:00:6f:84:5c: 3b:a4:e9:12:c6:16:11:63:1e:d9:06:b4:3d:ee:77:ae:06:c3: 41:f6:ce:d4:f8:de:3a:42:cc:da:39:6c:61:64:6d:d4:95:50: b7:c7:f1:30:09:d7:bc:85:31:57:71:4f:4d:ec:52:67:47:66: d5:c6:cf:d2:60:d1:9a:8e:7b:28:94:e7:b8:66:52:a6:28:9f: e6:e9:2d:08:ce:06:b3:38:a7:57:1a:b4:c3:7e:a0:d5:5c:5c: 88:9a:65:c1:85:47:c8:85:15:a6:c5:85:12:d6:48:e2:d5:41: ef:4e:39:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryGrK7DPCM3Zt6eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmMmFmYTUtNWQ3YS00Zjc2LThhNTMtOTIyOWE3NWYx ZjQ1MB4XDTI1MDgyMjIzMDAwOFoXDTI1MDgyNTIzMDAwMFowLzEtMCsGA1UEAxMk NjI2ZDlkMzMtZjkyNy00YjA1LWJjNjEtYzZhMDM4YjkwMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyskUL1HZwVnKqlhOZ+XtlYnnpFIndON0NY oETUlrPcm8axhQxXPIj130ZJTB72Ur3fzCFqLpDYpqmZsUw7rNdi2q5JnjI+EHuv IlujVJDPHGbi9/C7VgTWxc57zuO3V/A5pELiY9Aa6+FjHPylE3R5Im4jkca3uZiq RQyMdtXtTbp7ztCp/G/wcxfb8AY8uc5qd3hVtZf9j33cn0CPoqMVG5GOR0VyXw4s l0jE/1ey35fp1DDFPCxS162Ltc2iwmp8SIsCahrU1UaJdznk48xeF3GiWi8ig39V jrUne5TWcEohjOVc9wXE1qlXDhF/Qk0BoiupFWWeuQmc07YUUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHg6JBjDih0hQK+bR/JaUR8a9v5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81OGYy YWZhNS01ZDdhLTRmNzYtOGE1My05MjI5YTc1ZjFmNDUvNThmMmFmYTUtNWQ3YS00 Zjc2LThhNTMtOTIyOWE3NWYxZjQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNThmMmFmYTUtNWQ3YS00Zjc2LThh NTMtOTIyOWE3NWYxZjQ1LzU4ZjJhZmE1LTVkN2EtNGY3Ni04YTUzLTkyMjlhNzVm MWY0NS5jcmwwHwYDVR0jBBgwFoAUVV0I4kt9HZpOckRH3hZ1glYHceIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81OGYyYWZhNS01ZDdhLTRmNzYtOGE1My05MjI5 YTc1ZjFmNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmwVOw1wK/JYYmnMTfK69I 3FEHpz4FYnPMBpM1D5oep5vz41hsB3DOoM1VN7wp2yDHDgCHj2C6clsJ6ZVlVuYy yb8rEr52+iV7o2te4iIXjBov9hg92hyvBaHFC1R9NpvDCSXw0kG5sDjnvkvJKU6j OoU/yzh5yMt2hN7ceDWVfJKiD9OO28vrBN1zAQBvhFw7pOkSxhYRYx7ZBrQ97neu BsNB9s7U+N46QszaOWxhZG3UlVC3x/EwCde8hTFXcU9N7FJnR2bVxs/SYNGajnso lOe4ZlKmKJ/m6S0IzgazOKdXGrTDfqDVXFyImmXBhUfIhRWmxYUS1kji1UHvTjnL -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:09 2025 by rpki-client