$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft File: 968bda65-4161-4dee-a348-29486c17acb2.mft (raw, json) Hash identifier: eGFfWt3eFJr4+MbFXAlBpG/5bE80AWFEuLBkkWhdSmw= Subject key identifier: 37:2B:58:C3:49:32:49:7A:DE:A8:94:91:EA:14:C5:68:35:6D:A1:2C Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584AF2EB2648F099F4D1A38E0F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft Manifest number: 010D0C9F4328584AA202387BD97139280BBB799E Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Mon 25 Aug 2025 06:00:00 +0000 Files and hashes: 1: 968bda65-4161-4dee-a348-29486c17acb2.crl (hash: P3wWepr7XzQKTEsjqgZR/GPnOZg5T0VtmlbSwMjXTLw=) 2: c1539d45-e25a-3367-9754-f7eba01827f3.roa (hash: lEIiEO54rkkCdbHqb+jgVf4IphjLIGtt5q0ng1MUFdY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:26:48:f0:99:f4:d1:a3:8e:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 25 06:00:00 2025 GMT Subject: CN=081ec3aa-5c5c-49a6-912b-51447426f8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:ee:fe:6e:31:2e:cd:b0:22:ef:2a:33:dd: 59:dc:73:6e:7b:a7:ee:ef:f8:2e:44:ad:2a:50:25: 68:9d:98:ce:e0:74:67:da:8c:02:2f:0e:f6:a5:d1: 7a:4f:95:85:2b:a2:3f:b9:d9:5b:8a:f5:d2:a7:52: 8c:1c:f9:a8:83:ac:88:36:ed:ce:54:18:00:da:2a: 91:7e:21:74:ed:3e:ae:48:d3:6c:11:f9:ee:92:87: 9e:8b:a3:95:92:2e:48:4b:b0:ab:fc:c9:d6:0e:a5: 5d:00:87:fe:00:72:7b:c1:79:fd:52:31:b0:87:33: 2e:93:38:86:e1:0f:95:a7:62:bb:e0:f7:f6:29:15: 69:8e:e9:89:3c:88:21:4d:dd:09:cf:53:54:13:e8: 9f:99:2f:45:62:a1:ce:9e:38:c3:f6:70:cc:44:a1: 32:ff:d9:23:86:c0:57:fa:4c:df:9f:27:8b:6e:c3: 7c:6e:41:19:7d:fc:55:f1:18:a1:56:16:50:2e:0a: 5c:44:41:1a:8a:b9:f7:ff:ba:09:58:18:65:04:98: f7:e0:64:19:f0:04:3a:9f:2d:ad:14:de:9f:a7:8a: 31:df:aa:ad:31:f1:eb:b0:c9:90:89:81:ac:87:d6: 3e:62:db:5c:2c:d7:2a:63:cc:36:00:75:fa:96:93: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:58:C3:49:32:49:7A:DE:A8:94:91:EA:14:C5:68:35:6D:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a2:45:18:90:4f:e0:4e:5d:7e:c0:68:84:4e:bc:56:90:62: 64:f7:f2:cf:d7:1c:9f:f0:77:e5:3d:14:ca:62:39:b7:74:7d: c9:42:19:a1:63:e0:4b:75:85:54:6e:5d:55:a4:f5:41:89:a0: 05:0e:39:14:b1:4f:64:ce:c0:89:73:0b:d7:d6:1a:28:06:82: 5c:c2:d7:1b:72:69:b7:13:98:8f:35:3d:54:3f:24:35:58:85: 3b:52:0e:b8:99:bc:4e:ae:90:13:63:f7:79:5f:ed:47:7f:16: 0a:2b:3b:65:21:53:f2:75:e5:00:94:cc:81:67:43:ab:4c:74: 26:49:82:2e:9e:fb:ed:72:e4:72:43:8e:db:7a:e9:3a:c0:3f: c8:1f:aa:69:25:fa:c0:b3:e0:cc:a5:57:86:82:88:04:da:f7: f5:8c:b6:c0:54:72:89:c7:5f:26:10:a1:53:b9:00:01:e7:29: 6c:ef:e1:57:f4:64:4c:40:d1:ec:18:d2:ca:de:76:19:1a:80: 86:d2:c9:b4:12:43:69:9d:5d:b3:6d:ee:8a:20:2a:74:fe:df: eb:d9:09:b5:38:ae:85:36:7b:4e:82:e9:b9:b3:b5:66:81:c7: 65:b2:09:53:f1:06:12:9b:ae:25:d0:78:96:fd:93:81:b7:2b: 1d:5e:c8:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yZI8Jn00aOOD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNTA2MDAwMFowLzEtMCsGA1UEAxMk MDgxZWMzYWEtNWM1Yy00OWE2LTkxMmItNTE0NDc0MjZmOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfru/m4xLs2wIu8qM91Z3HNue6fu7/guRK0q UCVonZjO4HRn2owCLw72pdF6T5WFK6I/udlbivXSp1KMHPmog6yINu3OVBgA2iqR fiF07T6uSNNsEfnukoeei6OVki5IS7Cr/MnWDqVdAIf+AHJ7wXn9UjGwhzMukziG 4Q+Vp2K74Pf2KRVpjumJPIghTd0Jz1NUE+ifmS9FYqHOnjjD9nDMRKEy/9kjhsBX +kzfnyeLbsN8bkEZffxV8RihVhZQLgpcREEairn3/7oJWBhlBJj34GQZ8AQ6ny2t FN6fp4ox36qtMfHrsMmQiYGsh9Y+YttcLNcqY8w2AHX6lpMvLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDcrWMNJMkl63qiUkeoUxWg1baEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvOTY4YmRhNjUtNDE2MS00 ZGVlLWEzNDgtMjk0ODZjMTdhY2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmokUYkE/gTl1+wGiETrxW kGJk9/LP1xyf8HflPRTKYjm3dH3JQhmhY+BLdYVUbl1VpPVBiaAFDjkUsU9kzsCJ cwvX1hooBoJcwtcbcmm3E5iPNT1UPyQ1WIU7Ug64mbxOrpATY/d5X+1HfxYKKztl IVPydeUAlMyBZ0OrTHQmSYIunvvtcuRyQ47beuk6wD/IH6ppJfrAs+DMpVeGgogE 2vf1jLbAVHKJx18mEKFTuQAB5yls7+FX9GRMQNHsGNLK3nYZGoCG0sm0EkNpnV2z be6KICp0/t/r2Qm1OK6FNntOgum5s7VmgcdlsglT8QYSm64l0HiW/ZOBtysdXsgf -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:57 2025 by rpki-client