$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft File: 5cd0de07-7471-4282-8298-a3a4df46d4ed.mft (raw, json) Hash identifier: 8R7aTBb5YkfjmEWjh9Vaj2FY/QgtSB6k5vr01B/ocpk= Subject key identifier: B2:DC:29:2E:4A:30:22:33:0B:7D:E1:BA:42:88:80:10:3A:FD:94:0D Authority key identifier: 81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D Certificate issuer: /CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Certificate serial: 010D0C9F4328584AF1DF263225B0A18D303BBE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft Manifest number: 010D0C9F4328584A71897A2CA2199250B42A51EF Signing time: Fri 22 Aug 2025 21:00:08 +0000 Manifest this update: Fri 22 Aug 2025 21:00:08 +0000 Manifest next update: Mon 25 Aug 2025 21:00:00 +0000 Files and hashes: 1: 5cd0de07-7471-4282-8298-a3a4df46d4ed.crl (hash: 2H+PFiU5V8P5PO00KFqk6+xXcowuq0oaC49jHF8HCZo=) 2: c5c8713f-4413-3be5-821b-fadd12f15e99.roa (hash: lxYDncx1OZqc2/201n1C6dq17VXAnHniiZYijUwLCik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:df:26:32:25:b0:a1:8d:30:3b:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Validity Not Before: Aug 22 21:00:08 2025 GMT Not After : Aug 25 21:00:00 2025 GMT Subject: CN=c652067a-d0a0-4b5e-8a70-cb9448e95686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:71:01:86:85:f6:f9:99:ce:76:38:a9:93:f1: 7e:1a:7d:1d:d8:90:39:bc:23:03:d4:b2:24:b4:b8: 26:99:2b:f2:ea:c4:a3:36:1b:20:eb:ad:ad:e5:2e: 8b:5e:57:2c:f6:22:77:dc:0e:e5:e4:5d:8e:96:e9: a7:e5:30:67:66:70:a1:2a:31:af:b8:1c:22:67:21: 01:9b:b8:4f:03:c6:30:c7:c5:af:60:34:02:4e:d1: a8:42:59:40:53:6d:ac:2f:19:e7:30:c4:3a:76:ea: 0e:4d:98:f1:80:73:0e:e3:2d:2a:71:c2:f0:14:a8: f4:bb:9c:06:06:65:f0:a9:d7:ed:f8:31:5c:1c:3e: 59:b4:8a:d0:c5:bd:25:d4:d7:4b:2d:71:69:23:45: 50:6b:48:bd:1a:79:d0:6e:32:dc:b2:67:27:a7:ec: 53:29:aa:c6:e2:4b:ab:76:65:4b:df:5c:3b:10:50: 60:bb:0d:f4:ed:03:4c:87:90:59:12:ab:e3:61:0b: 62:71:93:bf:a3:9d:eb:9a:d9:df:5a:a2:6d:d9:09: 41:44:30:a8:ec:5d:4f:8a:52:d8:4f:47:53:19:e4: 6f:f0:22:25:1f:19:0e:ee:3a:ae:7f:45:89:71:b1: d3:27:0a:04:e6:0b:9d:c8:5e:d9:73:ae:ff:1b:0b: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:29:2E:4A:30:22:33:0B:7D:E1:BA:42:88:80:10:3A:FD:94:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl X509v3 Authority Key Identifier: keyid:81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ce:aa:75:f4:b9:f7:2f:80:8c:4c:83:b5:6a:07:68:5b:ea: 9d:14:13:f2:2c:cb:2a:94:b9:ef:cf:d7:09:29:54:61:66:f2: 54:6a:47:cc:fc:6b:e8:5b:34:fa:46:d1:c3:53:87:8c:51:fc: e5:c3:0c:33:97:55:06:a8:98:67:b9:01:8c:65:49:91:a0:0e: 20:be:67:a1:41:5d:72:0d:bc:77:fa:28:d7:fd:5d:11:9b:25: a4:d3:51:72:28:6d:41:d4:d3:fb:eb:95:79:f1:72:e9:13:de: e0:b7:e2:69:81:c9:7a:76:60:02:3c:9d:c6:cc:7b:05:02:33: 25:97:d9:1b:c1:3e:98:ea:01:ae:52:d7:ed:26:f9:ec:30:3b: 63:99:26:10:70:53:5a:33:f8:53:3e:35:39:83:8a:f8:06:f5: 8d:dc:17:97:b5:f9:ab:9c:8f:aa:bf:76:a4:a1:f7:8f:94:03: ee:09:9d:ae:63:56:9f:02:be:76:5b:6c:8d:11:42:f2:dd:ee: 0b:0f:81:f8:11:46:20:6b:86:58:a9:c7:2e:e6:6b:cd:5f:dd: a3:e6:d1:ee:f8:f0:38:fe:c2:c4:cb:77:66:42:4b:b1:95:9d: bb:cf:77:7f:4c:22:83:9f:7c:fa:cd:72:b0:c9:68:b0:05:d7: f3:8a:83:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx3yYyJbChjTA7vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkMGRlMDctNzQ3MS00MjgyLTgyOTgtYTNhNGRmNDZk NGVkMB4XDTI1MDgyMjIxMDAwOFoXDTI1MDgyNTIxMDAwMFowLzEtMCsGA1UEAxMk YzY1MjA2N2EtZDBhMC00YjVlLThhNzAtY2I5NDQ4ZTk1Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/3EBhoX2+ZnOdjipk/F+Gn0d2JA5vCMD1LIk tLgmmSvy6sSjNhsg662t5S6LXlcs9iJ33A7l5F2Olumn5TBnZnChKjGvuBwiZyEB m7hPA8Ywx8WvYDQCTtGoQllAU22sLxnnMMQ6duoOTZjxgHMO4y0qccLwFKj0u5wG BmXwqdft+DFcHD5ZtIrQxb0l1NdLLXFpI0VQa0i9GnnQbjLcsmcnp+xTKarG4kur dmVL31w7EFBguw307QNMh5BZEqvjYQticZO/o53rmtnfWqJt2QlBRDCo7F1PilLY T0dTGeRv8CIlHxkO7jquf0WJcbHTJwoE5gudyF7Zc67/GwuE/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLLcKS5KMCIzC33hukKIgBA6/ZQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Qw ZGUwNy03NDcxLTQyODItODI5OC1hM2E0ZGY0NmQ0ZWQvNWNkMGRlMDctNzQ3MS00 MjgyLTgyOTgtYTNhNGRmNDZkNGVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkMGRlMDctNzQ3MS00MjgyLTgy OTgtYTNhNGRmNDZkNGVkLzVjZDBkZTA3LTc0NzEtNDI4Mi04Mjk4LWEzYTRkZjQ2 ZDRlZC5jcmwwHwYDVR0jBBgwFoAUgcpsIxAMLGO+zd83VoxsKAXgdm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2QwZGUwNy03NDcxLTQyODItODI5OC1hM2E0 ZGY0NmQ0ZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmzqp19Ln3L4CMTIO1agdo W+qdFBPyLMsqlLnvz9cJKVRhZvJUakfM/GvoWzT6RtHDU4eMUfzlwwwzl1UGqJhn uQGMZUmRoA4gvmehQV1yDbx3+ijX/V0RmyWk01FyKG1B1NP765V58XLpE97gt+Jp gcl6dmACPJ3GzHsFAjMll9kbwT6Y6gGuUtftJvnsMDtjmSYQcFNaM/hTPjU5g4r4 BvWN3BeXtfmrnI+qv3akofePlAPuCZ2uY1afAr52W2yNEULy3e4LD4H4EUYga4ZY qccu5mvNX92j5tHu+PA4/sLEy3dmQkuxlZ27z3d/TCKDn3z6zXKwyWiwBdfzioMc -----END CERTIFICATE-----Generated at Sat Aug 23 20:14:44 2025 by rpki-client